{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T20:46:38Z","timestamp":1757623598313,"version":"3.44.0"},"reference-count":51,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2025,5,12]],"date-time":"2025-05-12T00:00:00Z","timestamp":1747008000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,5,12]],"date-time":"2025-05-12T00:00:00Z","timestamp":1747008000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62088102","0187"],"award-info":[{"award-number":["62088102","0187"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Vis"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1007\/s11263-025-02458-8","type":"journal-article","created":{"date-parts":[[2025,5,12]],"date-time":"2025-05-12T10:58:00Z","timestamp":1747047480000},"page":"5883-5897","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Norm Regularization Training Strategy for Robust Image Quality Assessment Models"],"prefix":"10.1007","volume":"133","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7356-3937","authenticated-orcid":false,"given":"Yujia","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chenxi","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dingquan","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tingting","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tiejun","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,5,12]]},"reference":[{"key":"2458_CR1","doi-asserted-by":"publisher","first-page":"1458","DOI":"10.1109\/TIP.2023.3244662","volume":"32","author":"I Bakurov","year":"2023","unstructured":"Bakurov, I., Buzzelli, M., Schettini, R., et al. (2023). Full-reference image quality expression via genetic programming. IEEE TIP, 32, 1458\u20131473. https:\/\/doi.org\/10.1109\/TIP.2023.3244662","journal-title":"IEEE TIP"},{"issue":"1","key":"2458_CR2","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1109\/TIP.2017.2760518","volume":"27","author":"S Bosse","year":"2018","unstructured":"Bosse, S., Maniry, D., M\u00fcller, K. R., et al. (2018). Deep neural networks for no-reference and full-reference image quality assessment. IEEE TIP, 27(1), 206\u2013219. https:\/\/doi.org\/10.1109\/TIP.2017.2760518","journal-title":"IEEE TIP"},{"issue":"4","key":"2458_CR3","doi-asserted-by":"publisher","first-page":"1258","DOI":"10.1007\/s11263-020-01419-7","volume":"129","author":"K Ding","year":"2021","unstructured":"Ding, K., Ma, K., Wang, S., et al. (2021). Comparison of full-reference image quality models for optimization of image processing systems. IJCV, 129(4), 1258\u20131281. https:\/\/doi.org\/10.1007\/s11263-020-01419-7","journal-title":"IJCV"},{"issue":"5","key":"2458_CR4","doi-asserted-by":"publisher","first-page":"2567","DOI":"10.1109\/TPAMI.2020.3045810","volume":"44","author":"K Ding","year":"2022","unstructured":"Ding, K., Ma, K., Wang, S., et al. (2022). Image quality assessment: Unifying structure and texture similarity. IEEE TPAMI, 44(5), 2567\u20132581. https:\/\/doi.org\/10.1109\/TPAMI.2020.3045810","journal-title":"IEEE TPAMI"},{"unstructured":"Dosovitskiy A, Beyer L, Kolesnikov A, et\u00a0al (2020) An image is worth $$16\\times 16$$ words: Transformers for image recognition at scale. arXiv preprint arXiv:2010.11929","key":"2458_CR5"},{"key":"2458_CR6","doi-asserted-by":"publisher","DOI":"10.1016\/j.mlwa.2020.100017","volume":"3","author":"C Finlay","year":"2021","unstructured":"Finlay, C., & Oberman, A. M. (2021). Scaleable input gradient regularization for adversarial robustness. Machine Learning with Applications, 3, Article 100017. https:\/\/doi.org\/10.1016\/j.mlwa.2020.100017","journal-title":"Machine Learning with Applications"},{"issue":"8","key":"2458_CR7","doi-asserted-by":"publisher","first-page":"4309","DOI":"10.1109\/TCSVT.2023.3237274","volume":"33","author":"H Fu","year":"2023","unstructured":"Fu, H., Liang, F., Liang, J., et al. (2023). Asymmetric learned image compression with multi-scale residual block, importance scaling, and post-quantization filtering. IEEE TCSVT, 33(8), 4309\u20134321. https:\/\/doi.org\/10.1109\/TCSVT.2023.3237274","journal-title":"IEEE TCSVT"},{"key":"2458_CR8","doi-asserted-by":"publisher","first-page":"372","DOI":"10.1109\/TIP.2015.2500021","volume":"25","author":"D Ghadiyaram","year":"2016","unstructured":"Ghadiyaram, D., & Bovik, A. C. (2016). Massive online crowdsourced study of subjective and objective picture quality. IEEE TIP, 25, 372\u2013387. https:\/\/doi.org\/10.1109\/TIP.2015.2500021","journal-title":"IEEE TIP"},{"unstructured":"Ghazanfari S, Garg S, Krishnamurthy P, et\u00a0al (2023) R-LPIPS: An adversarially robust perceptual similarity metric. arXiv preprint arXiv:2307.15157","key":"2458_CR9"},{"unstructured":"Ghildyal A, Liu F (2023) Attacking perceptual similarity metrics. Transactions on Machine Learning Research pp 1\u201323","key":"2458_CR10"},{"unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In: ICLR, pp 1\u201311","key":"2458_CR11"},{"doi-asserted-by":"publisher","unstructured":"He K, Zhang X, Ren S, et\u00a0al (2016) Deep residual learning for image recognition. In: CVPR, pp 770\u2013778, https:\/\/doi.org\/10.1109\/CVPR.2016.90","key":"2458_CR12","DOI":"10.1109\/CVPR.2016.90"},{"unstructured":"Hemachandran K, Rodriguez RV (2023) Artificial Intelligence for Business: An Implementation Guide Containing Practical and Industry-Specific Case Studies (1st ed.). CRC Press","key":"2458_CR13"},{"unstructured":"Ilyas A, Engstrom L, Madry A (2019) Prior convictions: Black-box adversarial attacks with bandits and priors. In: ICLR, pp 1\u201323","key":"2458_CR14"},{"issue":"11\u201312","key":"2458_CR15","doi-asserted-by":"publisher","first-page":"1751","DOI":"10.1007\/s11263-018-1132-0","volume":"127","author":"M Isogawa","year":"2019","unstructured":"Isogawa, M., Mikami, D., Takahashi, K., et al. (2019). Which is the better inpainted image? Training data generation without any manual operations. IJCV, 127(11\u201312), 1751\u20131766. https:\/\/doi.org\/10.1007\/s11263-018-1132-0","journal-title":"IJCV"},{"doi-asserted-by":"crossref","unstructured":"Ke J, Wang Q, Wang Y, et\u00a0al (2021) MUSIQ: Multi-scale image quality transformer. In: ICCV, pp 5148\u20135157","key":"2458_CR16","DOI":"10.1109\/ICCV48922.2021.00510"},{"unstructured":"Kettunen M, H\u00e4rk\u00f6nen E, Lehtinen J (2019) E-LPIPS: Robust perceptual image similarity via random transformation ensembles. arXiv preprint arXiv:1906.03973","key":"2458_CR17"},{"doi-asserted-by":"crossref","unstructured":"Kim J, Lee S (2017) Deep learning of human visual sensitivity in image quality assessment framework. In: CVPR, pp 1969\u20131977","key":"2458_CR18","DOI":"10.1109\/CVPR.2017.213"},{"doi-asserted-by":"crossref","unstructured":"Korhonen J, You J (2022) Adversarial attacks against blind image quality assessment models. In: QoMEX Workshops, pp 3\u201311","key":"2458_CR19","DOI":"10.1145\/3552469.3555715"},{"doi-asserted-by":"crossref","unstructured":"Lao S, Gong Y, Shi S, et\u00a0al (2022) Attentions help CNNs see better: Attention-based hybrid image quality assessment network. In: CVPR Workshops. IEEE, pp 1139\u20131148","key":"2458_CR20","DOI":"10.1109\/CVPRW56347.2022.00123"},{"doi-asserted-by":"crossref","unstructured":"Li D, Jiang T, Jiang M (2020) Norm-in-norm loss with faster convergence and better performance for image quality assessment. In: ACM MM, pp 789\u2013797","key":"2458_CR21","DOI":"10.1145\/3394171.3413804"},{"issue":"4","key":"2458_CR22","doi-asserted-by":"publisher","first-page":"1238","DOI":"10.1007\/s11263-020-01408-w","volume":"129","author":"D Li","year":"2021","unstructured":"Li, D., Jiang, T., & Jiang, M. (2021). Unified quality assessment of in-the-wild videos with mixed datasets training. IJCV, 129(4), 1238\u20131257. https:\/\/doi.org\/10.1007\/s11263-020-01408-w","journal-title":"IJCV"},{"issue":"1","key":"2458_CR23","doi-asserted-by":"publisher","first-page":"647","DOI":"10.1109\/TCSVT.2023.3285416","volume":"34","author":"Y Li","year":"2024","unstructured":"Li, Y., Liu, K., Liu, S., et al. (2024). Involving distinguished temporal graph convolutional networks for skeleton-based temporal action segmentation. IEEE TCSVT, 34(1), 647\u2013660. https:\/\/doi.org\/10.1109\/TCSVT.2023.3285416","journal-title":"IEEE TCSVT"},{"doi-asserted-by":"crossref","unstructured":"Liu Y, Yang C, Li D, et\u00a0al (2024) Defense against adversarial attacks on no-reference image quality models with gradient norm regularization. arXiv preprint arXiv:2403.11397","key":"2458_CR24","DOI":"10.1109\/CVPR52733.2024.02414"},{"unstructured":"Madry A, Makelov A, Schmidt L, et\u00a0al (2018) Towards deep learning models resistant to adversarial attacks. In: ICLR, pp 1\u201328","key":"2458_CR25"},{"doi-asserted-by":"publisher","unstructured":"Mishra S, Dash A, Jena L (2021) Use of deep learning for disease detection and diagnosis. In: Bio-inspired Neurocomputing. Springer, p 181\u2013201, https:\/\/doi.org\/10.1007\/978-981-15-5495-7_10","key":"2458_CR26","DOI":"10.1007\/978-981-15-5495-7_10"},{"issue":"12","key":"2458_CR27","doi-asserted-by":"publisher","first-page":"4695","DOI":"10.1109\/TIP.2012.2214050","volume":"21","author":"A Mittal","year":"2012","unstructured":"Mittal, A., Moorthy, A. K., & Bovik, A. C. (2012). No-reference image quality assessment in the spatial domain. IEEE TIP, 21(12), 4695\u20134708. https:\/\/doi.org\/10.1109\/TIP.2012.2214050","journal-title":"IEEE TIP"},{"issue":"3","key":"2458_CR28","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1109\/LSP.2012.2227726","volume":"20","author":"A Mittal","year":"2012","unstructured":"Mittal, A., Soundararajan, R., & Bovik, A. C. (2012). Making a \u201ccompletely blind\u2019\u2019 image quality analyzer. SPL, 20(3), 209\u2013212. https:\/\/doi.org\/10.1109\/LSP.2012.2227726","journal-title":"SPL"},{"doi-asserted-by":"publisher","unstructured":"Naeem MF, Xian Y, Gool LV, et\u00a0al (2024) I2DFormer+: Learning image to document summary attention for zero-shot image classification. IJCV pp 1\u201317. https:\/\/doi.org\/10.1007\/s11263-024-02053-3","key":"2458_CR29","DOI":"10.1007\/s11263-024-02053-3"},{"doi-asserted-by":"crossref","unstructured":"Ronneberger O, Fischer P, Brox T (2015) U-Net: Convolutional networks for biomedical image segmentation. In: MICCAI, pp 234\u2013241","key":"2458_CR30","DOI":"10.1007\/978-3-319-24574-4_28"},{"issue":"11","key":"2458_CR31","doi-asserted-by":"publisher","first-page":"2385","DOI":"10.1109\/TIP.2009.2025923","volume":"18","author":"MP Sampat","year":"2009","unstructured":"Sampat, M. P., Wang, Z., Gupta, S., et al. (2009). Complex wavelet structural similarity: A new image similarity index. IEEE TIP, 18(11), 2385\u20132401. https:\/\/doi.org\/10.1109\/TIP.2009.2025923","journal-title":"IEEE TIP"},{"issue":"11","key":"2458_CR32","doi-asserted-by":"publisher","first-page":"3440","DOI":"10.1109\/TIP.2006.881959","volume":"15","author":"HR Sheikh","year":"2006","unstructured":"Sheikh, H. R., Sabir, M. F., & Bovik, A. C. (2006). A statistical evaluation of recent full reference image quality assessment algorithms. IEEE TIP, 15(11), 3440\u20133451. https:\/\/doi.org\/10.1109\/TIP.2006.881959","journal-title":"IEEE TIP"},{"unstructured":"Shumitskaya E, Antsiferova A, Vatolin DS (2022) Universal perturbation attack on differentiable no-reference image- and video-quality metrics. In: BMVC, pp 1\u201312","key":"2458_CR33"},{"doi-asserted-by":"crossref","unstructured":"Shumitskaya E, Antsiferova A, Vatolin DS (2023) Fast adversarial CNN-based perturbation attack on No-Reference image-and video-quality metrics. In: ICLR Workshops, pp 1\u20134","key":"2458_CR34","DOI":"10.1016\/j.cviu.2023.103913"},{"doi-asserted-by":"crossref","unstructured":"Su S, Yan Q, Zhu Y, et\u00a0al (2020) Blindly assess image quality in the wild guided by a self-adaptive hyper network. In: CVPR, pp 3664\u20133673","key":"2458_CR35","DOI":"10.1109\/CVPR42600.2020.00372"},{"unstructured":"Szegedy C, Zaremba W, Sutskever I, et\u00a0al (2014) Intriguing properties of neural networks. In: ICLR, pp 1\u201310","key":"2458_CR36"},{"unstructured":"Tram\u00e8r F, Kurakin A, Papernot N, et\u00a0al (2018) Ensemble adversarial training: Attacks and defenses. In: ICLR, pp 1\u201322","key":"2458_CR37"},{"issue":"11","key":"2458_CR38","doi-asserted-by":"publisher","first-page":"3074","DOI":"10.1007\/s11263-023-01851-5","volume":"131","author":"J Wang","year":"2023","unstructured":"Wang, J., Chen, Z., Yuan, C., et al. (2023). Hierarchical curriculum learning for no-reference image quality assessment. IJCV, 131(11), 3074\u20133093. https:\/\/doi.org\/10.1007\/s11263-023-01851-5","journal-title":"IJCV"},{"issue":"8","key":"2458_CR39","doi-asserted-by":"publisher","first-page":"2122","DOI":"10.1007\/s11263-023-01784-z","volume":"131","author":"Y Wang","year":"2023","unstructured":"Wang, Y., Mao, Q., Zhu, H., et al. (2023). Multi-modal 3d object detection in autonomous driving: a survey. IJCV, 131(8), 2122\u20132152. https:\/\/doi.org\/10.1007\/s11263-023-01784-z","journal-title":"IJCV"},{"issue":"4","key":"2458_CR40","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/TIP.2003.819861","volume":"13","author":"Z Wang","year":"2004","unstructured":"Wang, Z., Bovik, A. C., Sheikh, H. R., et al. (2004). Image quality assessment: From error visibility to structural similarity. IEEE TIP, 13(4), 600\u201312. https:\/\/doi.org\/10.1109\/TIP.2003.819861","journal-title":"IEEE TIP"},{"doi-asserted-by":"crossref","unstructured":"Wilmott P, Howison S, Dewynne J (1995) The Mathematics of Financial Derivatives: A Student Introduction. Cambridge University Press","key":"2458_CR41","DOI":"10.1017\/CBO9780511812545"},{"unstructured":"Xiao C, Zhu J, Li B, et\u00a0al (2018) Spatially transformed adversarial examples. In: ICLR, pp 1\u201330","key":"2458_CR42"},{"doi-asserted-by":"crossref","unstructured":"Yang S, Wu T, Shi S, et\u00a0al (2022) MANIQA: Multi-dimension attention network for no-reference image quality assessment. In: CVPR Workshops, pp 1190\u20131199","key":"2458_CR43","DOI":"10.1109\/CVPRW56347.2022.00126"},{"doi-asserted-by":"crossref","unstructured":"Ye P, Kumar J, Kang L, et\u00a0al (2012) Unsupervised feature learning framework for no-reference image quality assessment. In: CVPR, pp 1098\u20131105","key":"2458_CR44","DOI":"10.1109\/CVPR.2012.6247789"},{"unstructured":"Zhang D, Zhang T, Lu Y, et\u00a0al (2019) You only propagate once: Accelerating adversarial training via maximal principle. In: NeurIPS, pp 227\u2013238","key":"2458_CR45"},{"issue":"8","key":"2458_CR46","doi-asserted-by":"publisher","first-page":"2378","DOI":"10.1109\/TIP.2011.2109730","volume":"20","author":"L Zhang","year":"2011","unstructured":"Zhang, L., Zhang, L., Mou, X., et al. (2011). FSIM: A feature similarity index for image quality assessment. IEEE TIP, 20(8), 2378\u20132386. https:\/\/doi.org\/10.1109\/TIP.2011.2109730","journal-title":"IEEE TIP"},{"doi-asserted-by":"crossref","unstructured":"Zhang R, Isola P, Efros AA, et\u00a0al (2018) The unreasonable effectiveness of deep features as a perceptual metric. In: CVPR, pp 586\u2013595","key":"2458_CR47","DOI":"10.1109\/CVPR.2018.00068"},{"issue":"1","key":"2458_CR48","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1109\/TCSVT.2018.2886771","volume":"30","author":"W Zhang","year":"2020","unstructured":"Zhang, W., Ma, K., Yan, J., et al. (2020). Blind image quality assessment using a deep bilinear convolutional neural network. IEEE TCSVT, 30(1), 36\u201347. https:\/\/doi.org\/10.1109\/TCSVT.2018.2886771","journal-title":"IEEE TCSVT"},{"unstructured":"Zhang W, Li D, Min X, et\u00a0al (2022) Perceptual attacks of no-reference image quality models with human-in-the-loop. In: NeurIPS, pp 2916\u20132929","key":"2458_CR49"},{"key":"2458_CR50","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1109\/TIP.2022.3224877","volume":"32","author":"Z Zhou","year":"2023","unstructured":"Zhou, Z., Ding, C., Li, J., et al. (2023). Sequential order-aware coding-based robust subspace clustering for human action recognition in untrimmed videos. IEEE TIP, 32, 13\u201328. https:\/\/doi.org\/10.1109\/TIP.2022.3224877","journal-title":"IEEE TIP"},{"unstructured":"Zhu C, Cheng Y, Gan Z, et\u00a0al (2020) FreeLB: Enhanced adversarial training for natural language understanding. In: ICLR, pp 1\u201314","key":"2458_CR51"}],"container-title":["International Journal of Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02458-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11263-025-02458-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02458-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T08:01:13Z","timestamp":1757404873000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11263-025-02458-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,12]]},"references-count":51,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["2458"],"URL":"https:\/\/doi.org\/10.1007\/s11263-025-02458-8","relation":{},"ISSN":["0920-5691","1573-1405"],"issn-type":[{"type":"print","value":"0920-5691"},{"type":"electronic","value":"1573-1405"}],"subject":[],"published":{"date-parts":[[2025,5,12]]},"assertion":[{"value":"14 October 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 April 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 May 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"The code is available at .","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Code Availability"}}]}}