{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T20:30:32Z","timestamp":1779913832712,"version":"3.53.1"},"reference-count":59,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2020,8,2]],"date-time":"2020-08-02T00:00:00Z","timestamp":1596326400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,8,2]],"date-time":"2020-08-02T00:00:00Z","timestamp":1596326400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["No.61602487"],"award-info":[{"award-number":["No.61602487"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Geoinformatica"],"published-print":{"date-parts":[[2022,4]]},"DOI":"10.1007\/s10707-020-00418-7","type":"journal-article","created":{"date-parts":[[2020,8,2]],"date-time":"2020-08-02T08:02:41Z","timestamp":1596355361000},"page":"347-377","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["AP-GAN: Adversarial patch attack on content-based image retrieval systems"],"prefix":"10.1007","volume":"26","author":[{"given":"Guoping","family":"Zhao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingyu","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiajun","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yaxian","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ji-Rong","family":"Wen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,8,2]]},"reference":[{"key":"418_CR1","doi-asserted-by":"crossref","unstructured":"Akhtar N, Liu J, Mian A (2018) Defense against universal adversarial perturbations. In: CVPR, pp 3389\u20133398","DOI":"10.1109\/CVPR.2018.00357"},{"key":"418_CR2","unstructured":"Babenko A, Lempitsky V (2015) Aggregating local deep features for image retrieval. In: ICCV, pp 1269\u20131277"},{"key":"418_CR3","unstructured":"Brown TB, Man\u00e9 D, Roy A, Abadi M, Gilmer J (2017) Adversarial patch. CoRR 1712.09665"},{"key":"418_CR4","doi-asserted-by":"crossref","unstructured":"Chen C, Seff A, Kornhauser A, Xiao J (2015) Deepdriving: Learning affordance for direct perception in autonomous driving. In: ICCV, pp 2722\u20132730","DOI":"10.1109\/ICCV.2015.312"},{"key":"418_CR5","doi-asserted-by":"crossref","unstructured":"Chen L, Shang S (2019) Region-based message exploration over spatio-temporal data streams. AAAI, vol 33, pp 873\u2013880","DOI":"10.1609\/aaai.v33i01.3301873"},{"key":"418_CR6","doi-asserted-by":"crossref","unstructured":"Cheng D, Gong Y, Zhou S, Wang J, Zheng N (2016) Person re-identification by multi-channel parts-based cnn with improved triplet loss function. In: CVPR, pp 1335\u20131344","DOI":"10.1109\/CVPR.2016.149"},{"key":"418_CR7","doi-asserted-by":"crossref","unstructured":"Eykholt K, Evtimov I, Fernandes E, Li B, Rahmati A, Xiao C, Prakash A, Kohno T, Song D (2018) Robust physical-world attacks on deep learning visual classification. In: CVPR, pp 1625\u20131634","DOI":"10.1109\/CVPR.2018.00175"},{"key":"418_CR8","unstructured":"Goodfellow I, Pouget-Abadie J, Mirza M, Xu B, Warde-Farley D, Ozair S, Courville A, Bengio Y (2014) Generative adversarial nets. In: NIPS, pp 2672\u20132680"},{"key":"418_CR9","unstructured":"Goodfellow I, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In: ICLR"},{"issue":"2","key":"418_CR10","doi-asserted-by":"publisher","first-page":"237","DOI":"10.1007\/s11263-017-1016-8","volume":"124","author":"A Gordo","year":"2017","unstructured":"Gordo A, Almazan J, Revaud J, Larlus D (2017) End-to-end learning of deep visual representations for image retrieval. IJCV 124(2):237\u2013254","journal-title":"IJCV"},{"key":"418_CR11","doi-asserted-by":"crossref","unstructured":"Han P, Yang P, Zhao P, Shang S, Liu Y, Zhou J, Gao X, Kalnis P (2019) Gcn-mf: Disease-gene association identification by graph convolutional networks and matrix factorization. In: SIGKDD, pp 705\u2013713","DOI":"10.1145\/3292500.3330912"},{"key":"418_CR12","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Identity mappings in deep residual networks. In: ECCV, pp 630\u2013645","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"418_CR13","doi-asserted-by":"crossref","unstructured":"Huang R, Zhang S, Li T, He R (2017) Beyond face rotation: Global and local perception gan for photorealistic and identity preserving frontal view synthesis. In: ICCV, pp 2439\u20132448","DOI":"10.1109\/ICCV.2017.267"},{"key":"418_CR14","doi-asserted-by":"crossref","unstructured":"Kalantidis Y, Mellina C, Osindero S (2016) Cross-dimensional weighting for aggregated deep convolutional features. In: ECCV, pp 685\u2013701","DOI":"10.1007\/978-3-319-46604-0_48"},{"key":"418_CR15","doi-asserted-by":"crossref","unstructured":"Kupyn O, Budzan V, Mykhailych M, Mishkin D, Matas J (2018) Deblurgan: Blind motion deblurring using conditional adversarial networks. In: CVPR","DOI":"10.1109\/CVPR.2018.00854"},{"key":"418_CR16","unstructured":"Kurakin A, Goodfellow I, Bengio S (2017) Adversarial machine learning at scale. In: ICLR"},{"key":"418_CR17","doi-asserted-by":"crossref","unstructured":"Ledig C, Theis L, Husz\u00e1r F, Caballero J, Cunningham A, Acosta A, Aitken A, Tejani A, Totz J, Wang Z et al (2017) Photo-realistic single image super-resolution using a generative adversarial network. In: CVPR, pp 4681\u20134690","DOI":"10.1109\/CVPR.2017.19"},{"key":"418_CR18","doi-asserted-by":"crossref","unstructured":"Li J, Ji R, Liu H, Hong X, Gao Y, Tian Q (2019) Universal perturbation attack against image retrieval. In: ICCV, pp 4899\u20134908","DOI":"10.1109\/ICCV.2019.00500"},{"key":"418_CR19","doi-asserted-by":"crossref","unstructured":"Liu A, Liu X, Fan J, Ma Y, Zhang A, Xie H, Tao D (2019a) Perceptual-sensitive gan for generating adversarial patches. In: AAAI, vol 33, pp 1028\u20131035","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"418_CR20","doi-asserted-by":"crossref","unstructured":"Liu X, Liu W, Ma H, Fu H (2016) Large-scale vehicle re-identification in urban surveillance videos. In: ICME. IEEE, pp 1\u20136","DOI":"10.1109\/ICME.2016.7553002"},{"key":"418_CR21","unstructured":"Liu X, Yang H, Liu Z, Song L, Chen Y, Li H (2019b) DPATCH: an adversarial patch attack on object detectors. In: Workshop AAAI, vol 2301"},{"key":"418_CR22","doi-asserted-by":"crossref","unstructured":"Liu Z, Zhao Z, Larson M (2019c) Who\u2019s afraid of adversarial queries?: The impact of image modifications on content-based image retrieval. In: ICMR. ACM, pp 306\u2013314","DOI":"10.1145\/3323873.3325052"},{"key":"418_CR23","doi-asserted-by":"crossref","unstructured":"Mao X, Li Q, Xie H, Lau RY, Wang Z, Paul Smolley S (2017) Least squares generative adversarial networks. In: ICCV, pp 2794\u20132802","DOI":"10.1109\/ICCV.2017.304"},{"key":"418_CR24","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: CVPR, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"418_CR25","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Fawzi O, Frossard P (2017) Universal adversarial perturbations. In: CVPR, pp 1765\u20131773","DOI":"10.1109\/CVPR.2017.17"},{"key":"418_CR26","doi-asserted-by":"crossref","unstructured":"Noh H, Araujo A, Sim J, Weyand T, Han B (2017) Large-scale image retrieval with attentive deep local features. In: ICCV, pp 3456\u20133465","DOI":"10.1109\/ICCV.2017.374"},{"key":"418_CR27","doi-asserted-by":"crossref","unstructured":"Philbin J, Chum O, Isard M, Sivic J, Zisserman A (2007) Object retrieval with large vocabularies and fast spatial matching. In: CVPR, pp 1\u20138","DOI":"10.1109\/CVPR.2007.383172"},{"key":"418_CR28","doi-asserted-by":"crossref","unstructured":"Philbin J, Chum O, Isard M, Sivic J, Zisserman A (2008) Lost in quantization: Improving particular object retrieval in large scale image databases. In: CVPR","DOI":"10.1109\/CVPR.2008.4587635"},{"key":"418_CR29","doi-asserted-by":"crossref","unstructured":"Radenovi\u0107 F, Tolias G, Chum O (2016) Cnn image retrieval learns from bow: Unsupervised fine-tuning with hard examples. In: ECCV, pp 3\u201320","DOI":"10.1007\/978-3-319-46448-0_1"},{"issue":"7","key":"418_CR30","doi-asserted-by":"publisher","first-page":"1655","DOI":"10.1109\/TPAMI.2018.2846566","volume":"41","author":"F Radenovi\u0107","year":"2018","unstructured":"Radenovi\u0107 F, Tolias G, Chum O (2018) Fine-tuning cnn image retrieval with no human annotation. TPAMI 41(7):1655\u20131668","journal-title":"TPAMI"},{"key":"418_CR31","unstructured":"Radford A, Metz L, Chintala S (2016) Unsupervised representation learning with deep convolutional generative adversarial networks. In: ICLR"},{"key":"418_CR32","unstructured":"Ren S, He K, Girshick R, Sun J (2015) Faster r-cnn: Towards real-time object detection with region proposal networks. In: NIPS, pp 91\u201399"},{"key":"418_CR33","doi-asserted-by":"crossref","unstructured":"Schroff F, Kalenichenko D, Philbin J (2015) Facenet: A unified embedding for face recognition and clustering. In: CVPR, pp 815\u2013823","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"418_CR34","doi-asserted-by":"crossref","unstructured":"Selvaraju RR, Cogswell M, Das A, Vedantam R, Parikh D, Batra D (2017) Grad-cam: Visual explanations from deep networks via gradient-based localization. In: ICCV, pp 618\u2013626","DOI":"10.1109\/ICCV.2017.74"},{"issue":"5","key":"418_CR35","first-page":"1135","volume":"20","author":"S Shang","year":"2017","unstructured":"Shang S, Zhu S, Guo D, Lu M (2017) Discovery of probabilistic nearest neighbors in traffic-aware spatial networks. WWW 20(5):1135\u20131151","journal-title":"WWW"},{"key":"418_CR36","doi-asserted-by":"crossref","unstructured":"Simo-Serra E, Trulls E, Ferraz L, Kokkinos I, Fua P, Moreno-Noguer F (2015) Discriminative learning of deep convolutional feature point descriptors. In: ICCV, pp 118\u2013126","DOI":"10.1109\/ICCV.2015.22"},{"key":"418_CR37","unstructured":"Simonyan K, Zisserman A (2015) Very deep convolutional networks for large-scale image recognition. ICLR"},{"key":"418_CR38","doi-asserted-by":"crossref","unstructured":"Subramanya A, Pillai V, Pirsiavash H (2019) Fooling network interpretation in image classification. In: ICCV, pp 2020\u20132029","DOI":"10.1109\/ICCV.2019.00211"},{"key":"418_CR39","doi-asserted-by":"crossref","unstructured":"Sun Y, Zheng L, Yang Y, Tian Q, Wang S (2018) Beyond part models: Person retrieval with refined part pooling (and a strong convolutional baseline). In: ECCV, pp 480\u2013496","DOI":"10.1007\/978-3-030-01225-0_30"},{"key":"418_CR40","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus R (2014) Intriguing properties of neural networks. In: ICLR"},{"key":"418_CR41","doi-asserted-by":"crossref","unstructured":"Thys S, Van Ranst W, Goedem\u00e9 T (2019) Fooling automated surveillance cameras: adversarial patches to attack person detection. In: CVPR Workshops, pp 0\u20130","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"418_CR42","unstructured":"Tolias G, Sicre R, J\u00e9gou H (2016) Particular object retrieval with integral max-pooling of cnn activations. ICLR"},{"key":"418_CR43","doi-asserted-by":"crossref","unstructured":"Tolias G, Radenovic F, Chum O (2019) Targeted mismatch adversarial attack: Query with a flower to retrieve the tower. In: Proceedings of the IEEE International Conference on Computer Vision, pp 5037\u20135046","DOI":"10.1109\/ICCV.2019.00514"},{"key":"418_CR44","doi-asserted-by":"crossref","unstructured":"Wang G, Yuan Y, Chen X, Li J, Zhou X (2018a) Learning discriminative features with multiple granularities for person re-identification. In: MM. ACM, pp 274\u2013282","DOI":"10.1145\/3240508.3240552"},{"key":"418_CR45","doi-asserted-by":"crossref","unstructured":"Wang H, Yang Y Y, Pan Y, Han P, Li Z X, Huang HG, Zhu SZ (2020) Detecting thoracic diseases via representation learning with adaptive sampling. Neurocomputing","DOI":"10.1016\/j.neucom.2019.06.113"},{"key":"418_CR46","doi-asserted-by":"crossref","unstructured":"Wang J, Song Y, Leung T, Rosenberg C, Wang J, Philbin J, Chen B, Wu Y (2014) Learning fine-grained image similarity with deep ranking. In: CVPR","DOI":"10.1109\/CVPR.2014.180"},{"key":"418_CR47","doi-asserted-by":"crossref","unstructured":"Wang Y, Chen Z, Wu F, Wang G (2018b) Person re-identification with cascaded pairwise convolutions. In: CVPR, pp 1470\u20131478","DOI":"10.1109\/CVPR.2018.00159"},{"key":"418_CR48","doi-asserted-by":"crossref","unstructured":"Wei L, Zhang S, Gao W, Tian Q (2018) Person transfer gan to bridge domain gap for person re-identification. In: CVPR, pp 79\u201388","DOI":"10.1109\/CVPR.2018.00016"},{"key":"418_CR49","doi-asserted-by":"crossref","unstructured":"Xiao C, Li B, yan Zhu J, He W, Liu M, Song D (2018) Generating adversarial examples with adversarial networks. In: IJCAI-18, pp 3905\u20133911","DOI":"10.24963\/ijcai.2018\/543"},{"key":"418_CR50","doi-asserted-by":"crossref","unstructured":"Xie C, Wang J, Zhang Z, Zhou Y, Xie L, Yuille A (2017) Adversarial examples for semantic segmentation and object detection. In: ICCV, pp 1369\u20131378","DOI":"10.1109\/ICCV.2017.153"},{"key":"418_CR51","doi-asserted-by":"crossref","unstructured":"Xu Y, Wu B, Shen F, Fan Y, Zhang Y, Shen HT, Liu W (2019) Exact adversarial attack to image captioning via structured output learning with latent variables. In: CVPR, pp 4135\u20134144","DOI":"10.1109\/CVPR.2019.00426"},{"issue":"9","key":"418_CR52","doi-asserted-by":"publisher","first-page":"2805","DOI":"10.1109\/TNNLS.2018.2886017","volume":"30","author":"X Yuan","year":"2019","unstructured":"Yuan X, He P, Zhu Q, Li X (2019) Adversarial examples: Attacks and defenses for deep learning. IEEE Trans Neural Netw Learn Syst 30 (9):2805\u20132824","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"issue":"1","key":"418_CR53","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1109\/MCOM.2017.1600267CM","volume":"55","author":"K Zhang","year":"2017","unstructured":"Zhang K, Ni J, Yang K, Liang X, Ren J, Shen X S (2017) Security and privacy in smart city applications: Challenges and solutions. IEEE Commun Mag 55(1):122\u2013129","journal-title":"IEEE Commun Mag"},{"key":"418_CR54","doi-asserted-by":"crossref","unstructured":"Zhang Y, Zhou D, Chen S, Gao S, Ma Y (2016) Single-image crowd counting via multi-column convolutional neural network. In: CVPR, pp 589\u2013597","DOI":"10.1109\/CVPR.2016.70"},{"key":"418_CR55","unstructured":"Zhang Y, Foroosh H, David P, Gong B (2019) CAMOU: Learning Physical vehicle camouflages to adversarially attack detectors in the wild. In: ICLR"},{"key":"418_CR56","doi-asserted-by":"crossref","unstructured":"Zheng L, Shen L, Tian L, Wang S, Wang J, Tian Q (2015) Scalable person re-identification: a benchmark. In: ICCV","DOI":"10.1109\/ICCV.2015.133"},{"key":"418_CR57","doi-asserted-by":"crossref","unstructured":"Zheng L, Zhang H, Sun S, Chandraker M, Yang Y, Tian Q (2017a) Person re-identification in the wild. In: CVPR, pp 1367\u20131376","DOI":"10.1109\/CVPR.2017.357"},{"issue":"3","key":"418_CR58","first-page":"1","volume":"5","author":"Y Zheng","year":"2014","unstructured":"Zheng Y, Capra L, Wolfson O, Yang H (2014) Urban computing: concepts, methodologies, and applications. ACM Trans Intell Syst Technol (TIST) 5(3):1\u201355","journal-title":"ACM Trans Intell Syst Technol (TIST)"},{"key":"418_CR59","doi-asserted-by":"crossref","unstructured":"Zheng Z, Zheng L, Yang Y (2017b) Unlabeled samples generated by gan improve the person re-identification baseline in vitro. In: ICCV. IEEE","DOI":"10.1109\/ICCV.2017.405"}],"container-title":["GeoInformatica"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10707-020-00418-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10707-020-00418-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10707-020-00418-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,26]],"date-time":"2022-04-26T04:30:59Z","timestamp":1650947459000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10707-020-00418-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,2]]},"references-count":59,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,4]]}},"alternative-id":["418"],"URL":"https:\/\/doi.org\/10.1007\/s10707-020-00418-7","relation":{},"ISSN":["1384-6175","1573-7624"],"issn-type":[{"value":"1384-6175","type":"print"},{"value":"1573-7624","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,8,2]]},"assertion":[{"value":"14 May 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 June 2020","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 July 2020","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 August 2020","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}