{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T16:29:05Z","timestamp":1783700945519,"version":"3.55.0"},"reference-count":76,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T00:00:00Z","timestamp":1766361600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T00:00:00Z","timestamp":1766361600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Vis"],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1007\/s11263-025-02614-0","type":"journal-article","created":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T20:38:54Z","timestamp":1766435934000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Unsupervised Robust Domain Adaptation: Paradigm, Theory and Algorithm"],"prefix":"10.1007","volume":"134","author":[{"given":"Fuxiang","family":"Huang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaowei","family":"Fu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shiyu","family":"Ye","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lina","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wen","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinbo","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5305-8543","authenticated-orcid":false,"given":"Lei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,12,22]]},"reference":[{"key":"2614_CR1","doi-asserted-by":"crossref","unstructured":"Andriushchenko, M., Croce, F., Flammarion, N., & Hein, M. (2020) Square attack: a query-efficient black-box adversarial attack via random search. In ECCV, pages 484\u2013501","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"2614_CR2","doi-asserted-by":"crossref","unstructured":"Augustin, M., Meinke, A., & Hein, M. (2020) Adversarial robustness on in-and out-distribution improves explainability. In ECCV, pages 228\u2013245","DOI":"10.1007\/978-3-030-58574-7_14"},{"key":"2614_CR3","doi-asserted-by":"crossref","unstructured":"Awais, M., Zhou, F., Xu, H., Hong, L., Luo, P., Bae, S. H., & Li, Z. (2021). Adversarial robustness for unsupervised domain adaptation. In ICCV","DOI":"10.1109\/ICCV48922.2021.00845"},{"key":"2614_CR4","doi-asserted-by":"crossref","unstructured":"Ben-David, S., Blitzer, J., Crammer, K., & Pereira, F. (2006). Analysis of representations for domain adaptation. Advances in neural information processing systems, 19","DOI":"10.7551\/mitpress\/7503.003.0022"},{"issue":"1","key":"2614_CR5","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s10994-009-5152-4","volume":"79","author":"S Ben-David","year":"2010","unstructured":"Ben-David, S., Blitzer, J., Crammer, K., Kulesza, A., Pereira, F., & Vaughan, J. W. (2010). A theory of learning from different domains. Machine learning, 79(1), 151\u2013175.","journal-title":"Machine learning"},{"key":"2614_CR6","unstructured":"Blitzer, J., Dredze, M., & Pereira, F. (2007). Biographies, bollywood, boom-boxes and blenders: Domain adaptation for sentiment classification. In Proceedings of the 45th annual meeting of the association of computational linguistics, pages 440\u2013447"},{"key":"2614_CR7","doi-asserted-by":"crossref","unstructured":"Carlini, N., & Wagner, D. (2017) Towards evaluating the robustness of neural networks. In symposium on security and privacy (sp), pages 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"2614_CR8","doi-asserted-by":"crossref","unstructured":"Chen, S., Hong, Z., You, X., & Shao, L. (2025). Semantics-conditioned generative zero-shot learning via feature refinement. International Journal of Computer Vision, pages 1\u201318","DOI":"10.1007\/s11263-025-02394-7"},{"issue":"3","key":"2614_CR9","doi-asserted-by":"publisher","first-page":"582","DOI":"10.1109\/TEVC.2023.3307245","volume":"28","author":"S Chen","year":"2023","unstructured":"Chen, S., Chen, S., Hou, W., Ding, W., & You, X. (2023). Egans: Evolutionary generative adversarial network search for zero-shot learning. IEEE Transactions on Evolutionary Computation, 28(3), 582\u2013596.","journal-title":"IEEE Transactions on Evolutionary Computation"},{"issue":"11","key":"2614_CR10","first-page":"12844","volume":"45","author":"S Chen","year":"2022","unstructured":"Chen, S., Hong, Z., Hou, W., Xie, G.-S., Song, Y., Zhao, J., You, X., Yan, S., & Shao, L. (2022). Transzero++: Cross attribute-guided transformer for zero-shot learning. IEEE transactions on pattern analysis and machine intelligence, 45(11), 12844\u201312861.","journal-title":"IEEE transactions on pattern analysis and machine intelligence"},{"key":"2614_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2023.127190","volume":"575","author":"X Chen","year":"2024","unstructured":"Chen, X., Yang, H., Zhang, H., Yao, H., & Zhu, X. (2024). Uncertainty-aware pseudo-label filtering for source-free unsupervised domain adaptation. Neurocomputing, 575, Article 127190.","journal-title":"Neurocomputing"},{"key":"2614_CR12","unstructured":"Croce, F., & Hein, M. (2020) Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In ICML, pages 2206\u20132216"},{"key":"2614_CR13","doi-asserted-by":"crossref","unstructured":"Cui, S., Wang, S., Zhuo, J., Li, L., Huang, Q., & Tian, Q. (2020). Towards discriminability and diversity: Batch nuclear-norm maximization under label insufficient situations. In CVPR, pages 3941\u20133950","DOI":"10.1109\/CVPR42600.2020.00400"},{"key":"2614_CR14","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Xiao, C., & Song, D. (2018). Robust physical-world attacks on deep learning visual classification. In CVPR, pages 1625\u20131634","DOI":"10.1109\/CVPR.2018.00175"},{"key":"2614_CR15","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106230","volume":"174","author":"Y Fang","year":"2024","unstructured":"Fang, Y., Yap, P.-T., Lin, W., Zhu, H., & Liu, M. (2024). Source-free unsupervised domain adaptation: A survey. Neural Networks, 174, Article 106230.","journal-title":"Neural Networks"},{"key":"2614_CR16","unstructured":"Ganin, Y., & Lempitsky, V. (2015) Unsupervised domain adaptation by backpropagation. In International conference on machine learning, pages 1180\u20131189"},{"key":"2614_CR17","doi-asserted-by":"crossref","unstructured":"Gao, Z., Huang, K., Zhang, R., Liu, D., & Ma, J. (2023). Towards better robustness against common corruptions for unsupervised domain adaptation. In Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), pages 18882\u201318893","DOI":"10.1109\/ICCV51070.2023.01731"},{"key":"2614_CR18","doi-asserted-by":"crossref","unstructured":"Gao, Z., Zhang, S., Huang, K., Wang, Q., & Zhong, C. (2021). Gradient distribution alignment certificates better adversarial domain adaptation. In ICCV, pages 8937\u20138946","DOI":"10.1109\/ICCV48922.2021.00881"},{"key":"2614_CR19","first-page":"3996","volume":"34","author":"M Goldblum","year":"2020","unstructured":"Goldblum, M., Fowl, L., Feizi, S., & Goldstein, T. (2020). Adversarially robust distillation. In AAAI, 34, 3996\u20134003.","journal-title":"Adversarially robust distillation. In AAAI"},{"key":"2614_CR20","unstructured":"Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572"},{"key":"2614_CR21","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., & Sun, J. (2016) Deep residual learning for image recognition. In CVPR, pages 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"2614_CR22","doi-asserted-by":"crossref","unstructured":"Huang, B., Chen, M., Wang, Y., Lu, J., Cheng, M., & Wang, W. (2023). Boosting accuracy and robustness of student models via adaptive adversarial distillation. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 24668\u201324677","DOI":"10.1109\/CVPR52729.2023.02363"},{"key":"2614_CR23","doi-asserted-by":"crossref","unstructured":"Jin, Y., Wang, X., Long, M., & Wang, J. (2020) Minimum class confusion for versatile domain adaptation. In ECCV","DOI":"10.1007\/978-3-030-58589-1_28"},{"key":"2614_CR24","doi-asserted-by":"crossref","unstructured":"Jung, J., Jang, H., Song, J., & Lee, J. (2024). Peeraid: Improving adversarial distillation from a specialized peer tutor. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 24482\u201324491","DOI":"10.1109\/CVPR52733.2024.02311"},{"key":"2614_CR25","doi-asserted-by":"crossref","unstructured":"Kim, W. J., Cho, Y., Jung, J., & Yoon, S. E. (2023). Feature separation and recalibration for adversarial robustness. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 8183\u20138192","DOI":"10.1109\/CVPR52729.2023.00791"},{"key":"2614_CR26","doi-asserted-by":"publisher","first-page":"18399","DOI":"10.1609\/aaai.v38i16.29800","volume":"38","author":"F Kong","year":"2024","unstructured":"Kong, F., Zhang, R., Wang, Z., & Mao, Y. (2024). On unsupervised domain adaptation: Pseudo label guided mixup for adversarial prompt tuning. In Proceedings of the AAAI Conference on Artificial Intelligence, 38, 18399\u201318407.","journal-title":"In Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"2614_CR27","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I. J., & Bengio, S. (2018). Adversarial examples in the physical world. In Artificial intelligence safety and security, pages 99\u2013112","DOI":"10.1201\/9781351251389-8"},{"key":"2614_CR28","doi-asserted-by":"crossref","unstructured":"Li, F., Li, K., Wu, H., Tian, J., & Zhou, J. (2024). Dat: Improving adversarial robustness via generative amplitude mix-up in frequency domain. In NeurIPS","DOI":"10.52202\/079017-4036"},{"key":"2614_CR29","doi-asserted-by":"crossref","unstructured":"Li, S., Liu, C. H., Xie, B., Su, L., Ding, Z., & Huang, G. (2019) Joint adversarial domain adaptation. In ACM MM, pages 729\u2013737","DOI":"10.1145\/3343031.3351070"},{"key":"2614_CR30","doi-asserted-by":"crossref","unstructured":"Li, Z., Yu, D., Wei, L., Jin, C., Zhang, Y., & Chan, S. (2024). Soften to defend: Towards adversarial robustness via self-guided label refinement. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 24776\u201324785","DOI":"10.1109\/CVPR52733.2024.02340"},{"key":"2614_CR31","doi-asserted-by":"crossref","unstructured":"Li, M., Zhai, Y. M., Luo, Y. W., Ge, P. F., & Ren, C. X. (2020). Enhanced transport distance for unsupervised domain adaptation. In CVPR, pages 13936\u201313944","DOI":"10.1109\/CVPR42600.2020.01395"},{"key":"2614_CR32","volume-title":"Chi Harold Liu, Qiuxia Lin, Qi Wen, Limin Su, Gao Huang, and Zhengming Ding","author":"S Li","year":"2020","unstructured":"Li, S. (2020). Chi Harold Liu, Qiuxia Lin, Qi Wen, Limin Su, Gao Huang, and Zhengming Ding. IEEE transactions on pattern analysis and machine intelligence: Deep residual correction network for partial domain adaptation."},{"issue":"15","key":"2614_CR33","doi-asserted-by":"publisher","first-page":"3325","DOI":"10.3390\/electronics12153325","volume":"12","author":"Y Li","year":"2023","unstructured":"Li, Y., Guo, L., & Ge, Y. (2023). Pseudo labels for unsupervised domain adaptation: A review. Electronics, 12(15), 3325.","journal-title":"Electronics"},{"key":"2614_CR34","volume-title":"Chi Harold Liu, Jian Liang, and Chen Qin","author":"S Li","year":"2021","unstructured":"Li, S., Lv, F., & Xie, B. (2021). Chi Harold Liu, Jian Liang, and Chen Qin. In AAAI: Bi-classifier determinacy maximization for unsupervised domain adaptation."},{"key":"2614_CR35","doi-asserted-by":"crossref","unstructured":"Liu, Z., Xu, Y., Ji, X., & Chan, A. B. (2023). Twins: A fine-tuning framework for improved transferability of adversarial robustness and generalization. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 16436\u201316446","DOI":"10.1109\/CVPR52729.2023.01577"},{"key":"2614_CR36","doi-asserted-by":"crossref","unstructured":"Lo, S. Y., & Patel, V. (2022). Exploring adversarially robust training for unsupervised domain adaptation. In Proceedings of the Asian Conference on Computer Vision (ACCV), pages 4093\u20134109","DOI":"10.1007\/978-3-031-26351-4_34"},{"key":"2614_CR37","unstructured":"Long, M., Cao, Y., Wang, J., & Jordan, M. (2015) Learning transferable features with deep adaptation networks. In ICML, pages 97\u2013105"},{"key":"2614_CR38","unstructured":"Long, M., Cao, Z., Wang, J., & Jordan, M. I. (2018) Conditional adversarial domain adaptation. In NeurIPS, volume\u00a031"},{"key":"2614_CR39","unstructured":"Long, M., Zhu, H., Wang, J., & Jordan, M. I. (2017) Deep transfer learning with joint adaptation networks. In ICML, pages 2208\u20132217"},{"key":"2614_CR40","unstructured":"Maaten, L. V. D., & Hinton, G. (2008). Visualizing data using t-sne. Journal of machine learning research, 9(11)"},{"key":"2614_CR41","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. (2017). Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083"},{"key":"2614_CR42","doi-asserted-by":"crossref","unstructured":"Na, J., Jung, H., Chang, H. J., & Hwang, W. (2025) Fixbi: Bridging domain spaces for unsupervised domain adaptation. In CVPR, pages 1094\u20131103","DOI":"10.1109\/CVPR46437.2021.00115"},{"key":"2614_CR43","doi-asserted-by":"crossref","unstructured":"Pan, Y., Yao, T., Li, Y., Wang, Y., Ngo, C. W., & Mei, T. (2019). Transferrable prototypical networks for unsupervised domain adaptation. In CVPR, pages 2239\u20132247","DOI":"10.1109\/CVPR.2019.00234"},{"key":"2614_CR44","doi-asserted-by":"crossref","unstructured":"Peng, X., Bai, Q., Xia, X., Huang, Z., Saenko, K., & Wang, B. (2019). Moment matching for multi-source domain adaptation. In ICCV","DOI":"10.1109\/ICCV.2019.00149"},{"key":"2614_CR45","volume-title":"and Kate Saenko","author":"X Peng","year":"2017","unstructured":"Peng, X., Usman, B., Kaushik, N., Hoffman, J., & Wang, D. (2017). and Kate Saenko. Visda: The visual domain adaptation challenge."},{"key":"2614_CR46","doi-asserted-by":"crossref","unstructured":"Rony, J., Hafemann, L. G., Oliveira, L. S., Ayed, I. B., Sabourin, R., & Granger, E. (2019). Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses. In CVPR, pages 4322\u20134330","DOI":"10.1109\/CVPR.2019.00445"},{"key":"2614_CR47","doi-asserted-by":"crossref","unstructured":"Saenko, K., Kulis, B., Fritz, M., & Darrell, T. (2010) Adapting visual category models to new domains. In ECCV, pages 213\u2013226","DOI":"10.1007\/978-3-642-15561-1_16"},{"key":"2614_CR48","doi-asserted-by":"crossref","unstructured":"Saito, K., Watanabe, K., Ushiku, Y., & Harada, T. (2018). Maximum classifier discrepancy for unsupervised domain adaptation. In CVPR, pages 3723\u20133732","DOI":"10.1109\/CVPR.2018.00392"},{"key":"2614_CR49","volume-title":"Amin Ghiasi","author":"A Shafahi","year":"2020","unstructured":"Shafahi, A., Saadatpanah, P., & Zhu, C. (2020). Amin Ghiasi. Christoph Studer: David Jacobs, and Tom Goldstein. Adversarially robust transfer learning. In ICLR."},{"key":"2614_CR50","doi-asserted-by":"publisher","first-page":"6987","DOI":"10.1609\/aaai.v39i7.32750","volume":"39","author":"A Soni","year":"2025","unstructured":"Soni, A., & Dutta, T. (2025). Toward improving robustness and accuracy in unsupervised domain adaptation. In Proceedings of the AAAI Conference on Artificial Intelligence, 39, 6987\u20136995.","journal-title":"In Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"2614_CR51","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R. (2013). Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199"},{"key":"2614_CR52","doi-asserted-by":"crossref","unstructured":"Venkateswara, H., Eusebio, J., Chakraborty, S., & Panchanathan, S. (2017). Deep hashing network for unsupervised domain adaptation. In CVPR, pages 5018\u20135027","DOI":"10.1109\/CVPR.2017.572"},{"key":"2614_CR53","doi-asserted-by":"crossref","unstructured":"Wang, Y., Hazimeh, H., Ponomareva, N., Kurakin, A., Hammoud, I., & Arora, R. (2025) Dart: A principled approach to adversarially robust unsupervised domain adaptation. In 2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML), pages 773\u2013796. IEEE","DOI":"10.1109\/SaTML64287.2025.00048"},{"key":"2614_CR54","unstructured":"Wang, Y., Zou, D., Yi, J., Bailey, J., Ma, X., & Gu, Q. (2019) Improving adversarial robustness requires revisiting misclassified examples. In ICLR"},{"key":"2614_CR55","doi-asserted-by":"crossref","unstructured":"Wei, G., Lan, C., Zeng, W., & Chen, Z. (2021). Metaalign: Coordinating domain alignment and classification for unsupervised domain adaptation. In CVPR, pages 16643\u201316653","DOI":"10.1109\/CVPR46437.2021.01637"},{"issue":"5","key":"2614_CR56","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3400066","volume":"11","author":"G Wilson","year":"2020","unstructured":"Wilson, G., & Cook, D. J. (2020). A survey of unsupervised deep domain adaptation. ACM Transactions on Intelligent Systems and Technology (TIST), 11(5), 1\u201346.","journal-title":"ACM Transactions on Intelligent Systems and Technology (TIST)"},{"key":"2614_CR57","unstructured":"Wiyatno, R., & Xu, A. (2018). Maximal jacobian-based saliency map attack. arXiv preprint arXiv:1808.07945"},{"key":"2614_CR58","unstructured":"Wu, K., Wang, A., & Yu, Y. (2020) Stronger and faster wasserstein adversarial attacks. In ICML, pages 10377\u201310387"},{"key":"2614_CR59","doi-asserted-by":"crossref","unstructured":"Xiao, N., & Zhang, L. (2021). Dynamic weighted learning for unsupervised domain adaptation. In CVPR, pages 15242\u201315251","DOI":"10.1109\/CVPR46437.2021.01499"},{"key":"2614_CR60","doi-asserted-by":"crossref","unstructured":"Xiao, Y., Wei, P., Liu, C., & Lin, L. (2023) Adversarially robust source-free domain adaptation with relaxed adversarial training. In 2023 IEEE International Conference on Multimedia and Expo (ICME), pages 2681\u20132686. IEEE","DOI":"10.1109\/ICME55011.2023.00456"},{"key":"2614_CR61","unstructured":"Xiao, C., Zhu, J. Y., Li, B., He, W., Liu, M., & Song, D. (2018). Spatially transformed adversarial examples. arXiv preprint arXiv:1801.02612"},{"key":"2614_CR62","unstructured":"Xu, T., Chen, W., Wang, P., Wang, F., Li, H., & Jin, R. (2021). Cdtrans: Cross-domain transformer for unsupervised domain adaptation. arXiv preprint arXiv:2109.06165"},{"key":"2614_CR63","doi-asserted-by":"crossref","unstructured":"Yang, J., Li, C., An, W., Ma, H., Guo, Y., Rong, Y., & Huang, J. (2021). Exploring robustness of unsupervised domain adaptation in semantic segmentation. In ICCV, pages 9194\u20139203","DOI":"10.1109\/ICCV48922.2021.00906"},{"key":"2614_CR64","doi-asserted-by":"crossref","unstructured":"Yin, X., & Ruan, W. (2024). Boosting adversarial training via fisher-rao norm-based regularization. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 24544\u201324553","DOI":"10.1109\/CVPR52733.2024.02317"},{"key":"2614_CR65","unstructured":"Yin, J. L., Zheng, H., & Liu, X. (2024). Towards trustworthy unsupervised domain adaptation: A representation learning perspective for enhancing robustness, discrimination, and generalization. arXiv preprint arXiv:2406.13180"},{"key":"2614_CR66","doi-asserted-by":"crossref","unstructured":"Yu, Y., Zhai, Y., & Zhang, Y. (2022) Align and adapt: a two-stage adaptation framework for unsupervised domain adaptation. In Proceedings of the 30th ACM International Conference on Multimedia, pages 4723\u20134732","DOI":"10.1145\/3503161.3547973"},{"key":"2614_CR67","doi-asserted-by":"crossref","unstructured":"Yue, X., Mou, N., Wang, Q., & Zhao, L. (2024). Revisiting adversarial training under long-tailed distributions. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pages 24492\u201324501","DOI":"10.1109\/CVPR52733.2024.02312"},{"key":"2614_CR68","unstructured":"Zhang, J., Chao, H., & Yan, P. (2020). Robustified domain adaptation. arXiv preprint arXiv:2011.09563, 2020."},{"key":"2614_CR69","unstructured":"Zhang, Y., Liu, T., Long, M., & Jordan, M. (2019) Bridging theory and algorithm for domain adaptation. In ICML, pages 7404\u20137413"},{"key":"2614_CR70","unstructured":"Zhang, H., Yu, Y., Jiao, J., Xing, E., El Ghaoui, L., & Jordan, M. (2019) Theoretically principled trade-off between robustness and accuracy. In ICML, pages 7472\u20137482"},{"key":"2614_CR71","doi-asserted-by":"publisher","first-page":"1272","DOI":"10.1109\/TIP.2023.3242141","volume":"32","author":"J Zhang","year":"2023","unstructured":"Zhang, J., Chao, H., & Yan, P. (2023). Toward adversarial robustness in unlabeled target domains. IEEE Transactions on Image Processing, 32, 1272\u20131284.","journal-title":"IEEE Transactions on Image Processing"},{"issue":"12","key":"2614_CR72","doi-asserted-by":"publisher","first-page":"8302","DOI":"10.1109\/TPAMI.2024.3400988","volume":"46","author":"L Zhang","year":"2024","unstructured":"Zhang, L., Yang, N., Sun, Y., & Philip, S. Y. (2024). Provable unrestricted adversarial training without compromise with generalizability. IEEE Transactions on Pattern Analysis and Machine Intelligence, 46(12), 8302\u20138319.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"2614_CR73","doi-asserted-by":"crossref","unstructured":"Zhu, J., Bai, H., & Wang, L. (2023). Patch-mix transformer for unsupervised domain adaptation: A game perspective. In CVPR, pages 3561\u20133571","DOI":"10.1109\/CVPR52729.2023.00347"},{"key":"2614_CR74","unstructured":"Zhu, J., Yao, J., Han, B., Zhang, J., Liu, T., Niu, G., & Yang, H. (2021) Reliable adversarial distillation with unreliable teachers. arXiv preprint arXiv:2106.04928"},{"key":"2614_CR75","volume-title":"and Ximeng Liu","author":"W Zhu","year":"2023","unstructured":"Zhu, W., Yin, J.-L., & Chen, B.-H. (2023). and Ximeng Liu. Srouda: Meta self-training for robust unsupervised domain adaptation. In AAAI."},{"key":"2614_CR76","doi-asserted-by":"crossref","unstructured":"Zi, B., Zhao, S., Ma, X., & Jiang, Y. G. (2021). Revisiting adversarial robustness distillation: Robust soft labels make student better. In ICCV, pages 16443\u201316452","DOI":"10.1109\/ICCV48922.2021.01613"}],"container-title":["International Journal of Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02614-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11263-025-02614-0","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02614-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,20]],"date-time":"2026-02-20T15:42:36Z","timestamp":1771602156000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11263-025-02614-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,22]]},"references-count":76,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2026,1]]}},"alternative-id":["2614"],"URL":"https:\/\/doi.org\/10.1007\/s11263-025-02614-0","relation":{},"ISSN":["0920-5691","1573-1405"],"issn-type":[{"value":"0920-5691","type":"print"},{"value":"1573-1405","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,22]]},"assertion":[{"value":"15 December 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 November 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 December 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"5"}}