{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T11:12:00Z","timestamp":1778238720796,"version":"3.51.4"},"reference-count":45,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2023,12,22]],"date-time":"2023-12-22T00:00:00Z","timestamp":1703203200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,22]],"date-time":"2023-12-22T00:00:00Z","timestamp":1703203200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Vis"],"published-print":{"date-parts":[[2024,6]]},"DOI":"10.1007\/s11263-023-01963-y","type":"journal-article","created":{"date-parts":[[2023,12,22]],"date-time":"2023-12-22T19:02:03Z","timestamp":1703271723000},"page":"1928-1944","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Infrared Adversarial Patches with Learnable Shapes and Locations in the Physical World"],"prefix":"10.1007","volume":"132","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0778-8377","authenticated-orcid":false,"given":"Xingxing","family":"Wei","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yao","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,12,22]]},"reference":[{"key":"1963_CR1","doi-asserted-by":"crossref","unstructured":"Abdelfattah, M., Yuan, K., Wang, Z. J., & Ward, R. (2021). Adversarial attacks on camera-lidar models for 3D car detection. In IEEE\/RSJ international conference on intelligent robots and systems (IROS) (vol. 2021, pp. 2189\u20132194).","DOI":"10.1109\/IROS51168.2021.9636638"},{"key":"1963_CR2","unstructured":"Brown, T.\u00a0B., Man\u00e9, D., Roy, A., Abadi, M., & Gilmer, J. (2017). Adversarial patch. arXiv preprint arXiv:1712.09665"},{"issue":"2","key":"1963_CR3","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1137\/16M1080173","volume":"60","author":"L Bottou","year":"2018","unstructured":"Bottou, L., Curtis, F. E., & Nocedal, J. (2018). Optimization methods for large-scale machine learning. SIAM Review, 60(2), 223\u2013311.","journal-title":"SIAM Review"},{"key":"1963_CR4","doi-asserted-by":"crossref","unstructured":"Carlini, N., & Wagner, D. (2017). Towards evaluating the robustness of neural networks. In  2017 IEEE symposium on security and privacy (sp) (pp. 39\u201357). IEEE","DOI":"10.1109\/SP.2017.49"},{"key":"1963_CR5","doi-asserted-by":"crossref","unstructured":"Chen, Z., Li, B., Wu, S., Xu, J., Ding, S., & Zhang, W. (2022). Shape matters: Deformable patch attack. In Proceedings of the 17th European conference on computer vision (ECCV), Part IV, Tel Aviv, Israel (pp. 529\u2013548). Springer.","DOI":"10.1007\/978-3-031-19772-7_31"},{"issue":"8","key":"1963_CR6","doi-asserted-by":"publisher","first-page":"1284","DOI":"10.3390\/electronics9081284","volume":"9","author":"DM Edwards","year":"2020","unstructured":"Edwards, D. M., & Rawat, D. B. (2020). Study of adversarial machine learning with infrared examples for surveillance applications. Electronics, 9(8), 1284.","journal-title":"Electronics"},{"key":"1963_CR7","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Xiao, C., Prakash, A., Kohno, T., & Song, D. (2018). Robust physical-world attacks on deep learning visual classification. In  Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 1625\u20131634).","DOI":"10.1109\/CVPR.2018.00175"},{"key":"1963_CR8","unstructured":"Goodfellow, I.\u00a0J., Shlens, J., & Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572"},{"key":"1963_CR9","doi-asserted-by":"publisher","first-page":"719","DOI":"10.1007\/s11263-019-01160-w","volume":"127","author":"G Goswami","year":"2019","unstructured":"Goswami, G., Agarwal, A., Ratha, N., Singh, R., & Vatsa, M. (2019). Detecting and mitigating adversarial perturbations for robust face recognition. International Journal of Computer Vision, 127, 719\u2013742.","journal-title":"International Journal of Computer Vision"},{"key":"1963_CR10","doi-asserted-by":"crossref","unstructured":"Hayes, J. (2018). On visible adversarial perturbations & digital watermarking. In Proceedings of the IEEE conference on computer vision and pattern recognition workshops (pp. 1597\u20131604).","DOI":"10.1109\/CVPRW.2018.00210"},{"key":"1963_CR11","doi-asserted-by":"crossref","unstructured":"Holland, P. W., & Leinhardt, S. (1971). Transitivity in structural models of small groups. Comparative Group Studies, 2(2), 107\u2013124.","DOI":"10.1177\/104649647100200201"},{"key":"1963_CR12","doi-asserted-by":"crossref","unstructured":"Jia, J., Cao, X., Wang, B., & Gong, N.\u00a0Z. (2019). Certified robustness for top-k predictions against adversarial perturbations via randomized smoothing. arXiv preprint arXiv:1912.09899","DOI":"10.1145\/3366423.3380029"},{"key":"1963_CR13","doi-asserted-by":"crossref","unstructured":"Jia, X., Zhu, C., Li, M., Tang, W., & Zhou, W. (2021). LLVIP: A visible-infrared paired dataset for low-light vision. In Proceedings of the IEEE international conference on computer vision (pp. 3496\u2013350).","DOI":"10.1109\/ICCVW54120.2021.00389"},{"issue":"1","key":"1963_CR14","doi-asserted-by":"publisher","first-page":"160","DOI":"10.1007\/s11263-022-01701-w","volume":"131","author":"E Kazemi","year":"2023","unstructured":"Kazemi, E., Kerdreux, T., & Wang, L. (2023). Minimally distorted structured adversarial attacks. International Journal of Computer Vision, 131(1), 160\u2013176.","journal-title":"International Journal of Computer Vision"},{"key":"1963_CR15","doi-asserted-by":"crossref","unstructured":"Komkov, S., & Petiushko, A. (2021). Advhat: Real-world adversarial attack on arcface face id system. In  2020 25th international conference on pattern recognition (ICPR) (pp. 819\u2013826). IEEE.","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"1963_CR16","unstructured":"Krizhevsky, A., Sutskever, I., & Hinton, G.\u00a0E. (2012). Imagenet classification with deep convolutional neural networks. Advances in Neural Information Processing Systems, 25"},{"key":"1963_CR17","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., & Porikli, F. (2019). Local gradients smoothing: Defense against localized adversarial attacks. In 2019 IEEE winter conference on applications of computer vision (WACV) (pp. 1300\u20131307). IEEE.","DOI":"10.1109\/WACV.2019.00143"},{"key":"1963_CR18","doi-asserted-by":"crossref","unstructured":"Osahor, U.\u00a0M., & Nasrabadi, N.\u00a0M. (2019). Deep adversarial attack on target detection systems. In  Artificial intelligence and machine learning for multi-domain operations applications, (vol. 11006, p. 110061Q). International Society for Optics and Photonics.","DOI":"10.1117\/12.2518970"},{"key":"1963_CR19","doi-asserted-by":"crossref","unstructured":"Pautov, M., Melnikov, G., Kaziakhmedov, E., Kireev, K., & Petiushko, A. (2019). On adversarial patches: Real-world attack on arcface-100 face recognition system. In  International multi-conference on engineering, computer and information sciences (pp. 0391\u20130396).","DOI":"10.1109\/SIBIRCON48586.2019.8958134"},{"issue":"1","key":"1963_CR20","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1016\/S0893-6080(98)00116-6","volume":"12","author":"N Qian","year":"1999","unstructured":"Qian, N. (1999). On the momentum term in gradient descent learning algorithms. Neural Networks, 12(1), 145\u2013151.","journal-title":"Neural Networks"},{"key":"1963_CR21","first-page":"7650","volume":"34","author":"Z Qin","year":"2021","unstructured":"Qin, Z., Fan, Y., Zha, H., & Baoyuan, W. (2021). Random noise defense against query-based black-box attacks. Advances in Neural Information Processing Systems, 34, 7650\u20137663.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"1963_CR22","doi-asserted-by":"publisher","first-page":"187","DOI":"10.1016\/j.jvcir.2015.11.002","volume":"34","author":"S Razakarivony","year":"2016","unstructured":"Razakarivony, S., & Jurie, F. (2016). Vehicle detection in aerial imagery: A small target detection benchmark. Journal of Visual Communication and Image Representation, 34, 187\u2013203.","journal-title":"Journal of Visual Communication and Image Representation"},{"key":"1963_CR23","unstructured":"Redmon, J., & Farhadi, A. (2018). Yolov3: An incremental improvement. arXiv preprint arXiv:1804.02767"},{"key":"1963_CR24","doi-asserted-by":"crossref","unstructured":"Sandler, M., Howard, A., Zhu, M., Zhmoginov, A., & Chen, L.-C. (2018). Mobilenetv2: Inverted residuals and linear bottlenecks. In  IEEE CVPR (pp. 4510\u20134520).","DOI":"10.1109\/CVPR.2018.00474"},{"key":"1963_CR25","doi-asserted-by":"crossref","unstructured":"Schroff, F., Kalenichenko, D., & Philbin, J. (2015). Facenet: A unified embedding for face recognition and clustering. In  IEEE CVPR (pp. 815\u2013823).","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"1963_CR26","doi-asserted-by":"crossref","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L., & Reiter, M.\u00a0K. (2016). Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition. In  Proceedings of ACM SIGSAC conference on computer and communications security (pp. 1528\u20131540).","DOI":"10.1145\/2976749.2978392"},{"key":"1963_CR27","unstructured":"Song, D., Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Tramer, F., Prakash, A., & Kohno, T. (2018). Physical adversarial examples for object detectors. In  12th USENIX workshop on offensive technologies (WOOT 18)"},{"key":"1963_CR28","doi-asserted-by":"crossref","unstructured":"Suard, F., Rakotomamonjy, A., Bensrhair, A., & Broggi, A. (2006). Pedestrian detection using infrared images and histograms of oriented gradients. In  IEEE intelligent vehicles symposium (pp. 206\u2013212).","DOI":"10.1109\/IVS.2006.1689629"},{"key":"1963_CR29","unstructured":"Tu, J., Li, H., Yan, X., Ren, M., Chen, Y., Liang, M., Bitar, E., Yumer, E., & Urtasun, R. (2021). Exploring adversarial robustness of multi-sensor perception systems in self driving. arXiv preprint arXiv:2101.06784"},{"key":"1963_CR30","doi-asserted-by":"crossref","unstructured":"Vollmer, M. (2021). Infrared thermal imaging. In Computer vision: A reference guide (pp. 666\u2013670).","DOI":"10.1007\/978-3-030-63416-2_844"},{"key":"1963_CR31","doi-asserted-by":"crossref","unstructured":"Wang, S., Wu, T., Chakrabarti, A., & Vorobeychik, Y. (2022). Adversarial robustness of deep sensor fusion models. In Proceedings of the IEEE\/CVF winter conference on applications of computer vision (pp. 2387\u20132396).","DOI":"10.1109\/WACV51458.2022.00144"},{"issue":"6684","key":"1963_CR32","doi-asserted-by":"publisher","first-page":"440","DOI":"10.1038\/30918","volume":"393","author":"DJ Watts","year":"1998","unstructured":"Watts, D. J., & Strogatz, S. H. (1998). Collective dynamics of \u2018small-world\u2019 networks. Nature, 393(6684), 440\u2013442.","journal-title":"Nature"},{"key":"1963_CR33","doi-asserted-by":"crossref","unstructured":"Wei, H., Wang, Z., Jia, X., Zheng, Y., Tang, H., Satoh, S., & Wang, Z. (2022). Hotcold block: Fooling thermal infrared detectors with a novel wearable design. arXiv preprint arXiv:2212.05709","DOI":"10.1609\/aaai.v37i12.26777"},{"key":"1963_CR34","doi-asserted-by":"crossref","unstructured":"Wei, X., Guo, Y., & Jie, Yu. (2022). Adversarial sticker: A stealthy attack method in the physical world. IEEE TPAMI, 45(3), 2711\u20132715.","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"1963_CR35","doi-asserted-by":"crossref","unstructured":"Wei, X., Guo, Y., Yu, J., & Zhang, B. (2022). Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks. IEEE Transactions on Pattern Analysis and Machine Intelligence","DOI":"10.1109\/TPAMI.2022.3231886"},{"key":"1963_CR36","unstructured":"Wei, X., Pu, B., Lu, J., & Wu, B. (2022). Physically adversarial attacks and defenses in computer vision: A survey. arXiv preprint: arXiv:2211.01671"},{"issue":"6","key":"1963_CR37","doi-asserted-by":"publisher","first-page":"1459","DOI":"10.1007\/s11263-022-01604-w","volume":"130","author":"X Wei","year":"2022","unstructured":"Wei, X., Yan, H., & Li, B. (2022). Sparse black-box video attack with reinforcement learning. International Journal of Computer Vision, 130(6), 1459\u20131473.","journal-title":"International Journal of Computer Vision"},{"key":"1963_CR38","doi-asserted-by":"crossref","unstructured":"Wei, X., Yu, J., & Huang, Y. (2023). Physically adversarial infrared patches with learnable shapes and locations. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (pp. 12334\u201312342).","DOI":"10.1109\/CVPR52729.2023.01187"},{"issue":"4","key":"1963_CR39","doi-asserted-by":"publisher","first-page":"335","DOI":"10.1016\/j.isprsjprs.2009.03.007","volume":"64","author":"Q Weng","year":"2009","unstructured":"Weng, Q. (2009). Thermal infrared remote sensing for urban climate and environmental studies: Methods, applications, and trends. ISPRS Journal of Photogrammetry and Remote Sensing, 64(4), 335\u2013344.","journal-title":"ISPRS Journal of Photogrammetry and Remote Sensing"},{"key":"1963_CR40","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.-Y., He, W., Liu, M., & Song, D. (2018). Generating adversarial examples with adversarial networks. arXiv:1801.02610","DOI":"10.24963\/ijcai.2018\/543"},{"key":"1963_CR41","doi-asserted-by":"crossref","unstructured":"Xu, W., Evans, D., & Qi, Y. (2017). Feature squeezing: Detecting adversarial examples in deep neural networks. arXiv preprint arXiv:1704.01155","DOI":"10.14722\/ndss.2018.23198"},{"key":"1963_CR42","doi-asserted-by":"crossref","unstructured":"Zhang, H., & Wang, J. (2019). Towards adversarially robust object detection In Proceedings of the IEEE international conference on computer vision (pp. 421\u2013430).","DOI":"10.1109\/ICCV.2019.00051"},{"key":"1963_CR43","doi-asserted-by":"crossref","unstructured":"Zhu, X., Hu, Z., Huang, S., Li, J., & Hu, X. (2022). Infrared invisible clothing: Hiding from infrared detectors at multiple angles in real world. arXiv preprint arXiv:2205.05909","DOI":"10.1109\/CVPR52688.2022.01296"},{"key":"1963_CR44","doi-asserted-by":"crossref","unstructured":"Zhu, X., Li, X., Li, J., Wang, Z., & Xiaolin, H. (2021). Fooling thermal infrared pedestrian detectors in real world using small bulbs. In Proceedings of the AAAI conference on artificial intelligence, (vol. 35, pp. 3616\u20133624).","DOI":"10.1609\/aaai.v35i4.16477"},{"key":"1963_CR45","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2019.106964","volume":"96","author":"Y Zhu","year":"2019","unstructured":"Zhu, Y., Ma, C., & Jun, D. (2019). Rotated cascade r-cnn: A shape robust detector with coordinate regression. Pattern Recognition, 96, 106964.","journal-title":"Pattern Recognition"}],"container-title":["International Journal of Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-023-01963-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11263-023-01963-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-023-01963-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,31]],"date-time":"2024-05-31T06:08:34Z","timestamp":1717135714000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11263-023-01963-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,22]]},"references-count":45,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2024,6]]}},"alternative-id":["1963"],"URL":"https:\/\/doi.org\/10.1007\/s11263-023-01963-y","relation":{},"ISSN":["0920-5691","1573-1405"],"issn-type":[{"value":"0920-5691","type":"print"},{"value":"1573-1405","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,22]]},"assertion":[{"value":"1 May 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 November 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 December 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}