{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,11]],"date-time":"2025-12-11T03:24:12Z","timestamp":1765423452423,"version":"3.37.3"},"reference-count":55,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2023,9,11]],"date-time":"2023-09-11T00:00:00Z","timestamp":1694390400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,9,11]],"date-time":"2023-09-11T00:00:00Z","timestamp":1694390400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Sign Process Syst"],"published-print":{"date-parts":[[2023,12]]},"DOI":"10.1007\/s11265-023-01890-8","type":"journal-article","created":{"date-parts":[[2023,9,11]],"date-time":"2023-09-11T01:01:48Z","timestamp":1694394108000},"page":"1405-1424","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["SC-PCA: Shape Constraint Physical Camouflage Attack Against Vehicle Detection"],"prefix":"10.1007","volume":"95","author":[{"given":"Hao","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingjing","family":"Qin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yixue","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Genping","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongfeng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4713-4893","authenticated-orcid":false,"given":"Jintao","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,9,11]]},"reference":[{"issue":"3","key":"1890_CR1","first-page":"2124","volume":"17","author":"H Qiu","year":"2020","unstructured":"Qiu, H., Zheng, Q., Memmi, G., et al. (2020). Deep residual learning-based enhanced jpeg compression in the internet of things. IEEE Transactions on Industrial Informatics, 17(3), 2124\u20132133.","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"1890_CR2","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Qiu, M., & Gao, H. (2023). Communication-efficient stochastic gradient descent ascent with momentum algorithms. In: Proceedings of the 32nd International Joint Conference on Artificial Intelligence.","DOI":"10.24963\/ijcai.2023\/512"},{"key":"1890_CR3","unstructured":"Ling, C., Jiang, J., Wang, J., et\u00a0al. (2023). Deep graph representation learning and optimization for influence maximization. In: Proceedings of the 40th International Conference on Machine Learning, pp 21350\u201321361."},{"issue":"2","key":"1890_CR4","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1109\/MNET.001.1900243","volume":"34","author":"H Qiu","year":"2019","unstructured":"Qiu, H., Qiu, M., & Lu, R. (2019). Secure v2x communication network based on intelligent pki and edge computing. IEEE Network, 34(2), 172\u2013178.","journal-title":"IEEE Network"},{"key":"1890_CR5","doi-asserted-by":"crossref","unstructured":"Song, Y., Li, Y., Jia, L., & Qiu, M. (2019). Retraining strategy-based domain adaption network for intelligent fault diagnosis. IEEE Transactions on Industrial Informatics, 16(9), 6163\u20136171.","DOI":"10.1109\/TII.2019.2950667"},{"key":"1890_CR6","doi-asserted-by":"crossref","unstructured":"Huang, H., Chaturvedi, V., Quan, G., Fan, J., & Qiu, M. (2014). Throughput maximization for periodic real-time systems under the maximal temperature constraint. ACM Transactions on Embedded Computing Systems (TECS), 13(2s), 1\u201322.","DOI":"10.1145\/2544375.2544390"},{"key":"1890_CR7","unstructured":"Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572"},{"key":"1890_CR8","doi-asserted-by":"crossref","unstructured":"Carlini, N., & Wagner, D. (2017). Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy (sp), IEEE, pp 39\u201357.","DOI":"10.1109\/SP.2017.49"},{"key":"1890_CR9","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S. M., Fawzi, A., & Frossard, P. (2016). Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 2574\u20132582.","DOI":"10.1109\/CVPR.2016.282"},{"key":"1890_CR10","doi-asserted-by":"crossref","unstructured":"Qiu, H., Zeng, Y., Guo, S., et\u00a0al. (2021). Deepsweep: An evaluation framework for mitigating dnn backdoor attacks using data augmentation. In: Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security, pp 363\u2013377.","DOI":"10.1145\/3433210.3453108"},{"key":"1890_CR11","doi-asserted-by":"crossref","unstructured":"Qiu, M., & Qiu, H. (2020). Review on image processing based adversarial example defenses in computer vision. In: IEEE 6th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE, pp 94\u201399.","DOI":"10.1109\/BigDataSecurity-HPSC-IDS49724.2020.00027"},{"key":"1890_CR12","unstructured":"Madry, A., Makelov, A., Schmidt, L., et\u00a0al. (2018). Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations, pp 1\u201323."},{"issue":"3","key":"1890_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3398394","volume":"53","author":"A Serban","year":"2020","unstructured":"Serban, A., Poll, E., & Visser, J. (2020). Adversarial examples on object recognition: A comprehensive survey. ACM Computing Surveys (CSUR), 53(3), 1\u201338.","journal-title":"ACM Computing Surveys (CSUR)"},{"key":"1890_CR14","unstructured":"Athalye, A., Engstrom, L., Ilyas, A., et\u00a0al. (2018). Synthesizing robust adversarial examples. In: International Conference on Machine Learning, PMLR, pp 284\u2013293."},{"issue":"5","key":"1890_CR15","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su, J., Vargas, D. V., & Sakurai, K. (2019). One pixel attack for fooling deep neural networks. IEEE Transactions on Evolutionary Computation, 23(5), 828\u2013841.","journal-title":"IEEE Transactions on Evolutionary Computation"},{"key":"1890_CR16","doi-asserted-by":"crossref","unstructured":"Zeng, Y., Pan, M., Just, H. A., et\u00a0al. (2023). Narcissus: A practical clean-label backdoor attack with limited information. In: Proceedings of the ACM Conference on Computer and Communications Security, pp 1\u201314.","DOI":"10.1145\/3576915.3616617"},{"key":"1890_CR17","first-page":"1","volume":"25","author":"S Nie","year":"2017","unstructured":"Nie, S., Liu, L., & Du, Y. (2017). Free-fall: Hacking tesla from wireless to can bus. Briefing, Black Hat USA, 25, 1\u201316.","journal-title":"Briefing, Black Hat USA"},{"key":"1890_CR18","doi-asserted-by":"crossref","unstructured":"Nassi, B., Mirsky, Y., Nassi, D., et\u00a0al. (2020) Phantom of the adas: Securing advanced driver-assistance systems from split-second phantom attacks. In: Proceedings of the 2020 ACM SIGSAC conference on computer and communications security, pp 293\u2013308.","DOI":"10.1145\/3372297.3423359"},{"key":"1890_CR19","doi-asserted-by":"crossref","unstructured":"Xiao, Z., Gao, X., Fu, C., et\u00a0al. (2021). Improving transferability of adversarial patches on face recognition with generative models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 11845\u201311854.","DOI":"10.1109\/CVPR46437.2021.01167"},{"issue":"6433","key":"1890_CR20","doi-asserted-by":"publisher","first-page":"1287","DOI":"10.1126\/science.aaw4399","volume":"363","author":"SG Finlayson","year":"2019","unstructured":"Finlayson, S. G., Bowers, J. D., Ito, J., et al. (2019). Adversarial attacks on medical machine learning. Science, 363(6433), 1287\u20131289.","journal-title":"Science"},{"key":"1890_CR21","doi-asserted-by":"crossref","unstructured":"Hu, C., & Shi, W. (2022). Adversarial color film: Effective physical-world attack to dnns. arXiv preprint arXiv:2209.02430","DOI":"10.1016\/j.imavis.2023.104861"},{"key":"1890_CR22","doi-asserted-by":"crossref","unstructured":"Sayles, A., Hooda, A., Gupta, M., et\u00a0al. (2021). Invisible perturbations: Physical adversarial examples exploiting the rolling shutter effect. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 14666\u201314675.","DOI":"10.1109\/CVPR46437.2021.01443"},{"key":"1890_CR23","doi-asserted-by":"crossref","unstructured":"Xiao, C., Yang, D., Li, B., et\u00a0al. (2019). Meshadv: Adversarial meshes for visual recognition. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 6898\u20136907.","DOI":"10.1109\/CVPR.2019.00706"},{"key":"1890_CR24","doi-asserted-by":"crossref","unstructured":"Gnanasambandam, A., Sherman, A. M., & Chan, S. H. (2021). Optical adversarial attack. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp 92\u2013101.","DOI":"10.1109\/ICCVW54120.2021.00016"},{"key":"1890_CR25","doi-asserted-by":"crossref","unstructured":"Duan, R., Mao, X., Qin, A. K., et\u00a0al. (2021). Adversarial laser beam: Effective physical-world attack to dnns in a blink. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 16062\u201316071.","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"1890_CR26","doi-asserted-by":"crossref","unstructured":"Zhong, Y., Liu, X., Zhai, D., et\u00a0al. (2022). Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 15345\u201315354.","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"1890_CR27","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., et\u00a0al. (2018). Robust physical-world attacks on deep learning visual classification. In: Proceedings of the IEEE conference on Computer Vision And Pattern Recognition, pp 1625\u20131634.","DOI":"10.1109\/CVPR.2018.00175"},{"key":"1890_CR28","doi-asserted-by":"crossref","unstructured":"Liu, A., Liu, X., Fan, J., et\u00a0al. (2019). Perceptual-sensitive gan for generating adversarial patches. In: Proceedings of the AAAI conference on artificial intelligence, pp 1028\u20131035.","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"1890_CR29","doi-asserted-by":"crossref","unstructured":"Liu, A., Wang, J., Liu, X., et\u00a0al. (2020). Bias-based universal adversarial patch attack for automatic check-out. In: Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XIII 16, Springer, pp 395\u2013410.","DOI":"10.1007\/978-3-030-58601-0_24"},{"key":"1890_CR30","doi-asserted-by":"crossref","unstructured":"Thys, S., Van\u00a0Ranst, W., & Goedem\u00e9, T. (2019). Fooling automated surveillance cameras: adversarial patches to attack person detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition Workshops, pp 1\u20137.","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"1890_CR31","doi-asserted-by":"crossref","unstructured":"Xu, K., Zhang, G., Liu, S., et\u00a0al. (2020). Adversarial t-shirt! evading person detectors in a physical world. In: Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part V 16, Springer, pp 665\u2013681.","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"1890_CR32","doi-asserted-by":"crossref","unstructured":"Hu, Y. C. T., Kung, B. H., Tan, D. S., et\u00a0al. (2021). Naturalistic physical adversarial patch for object detectors. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp 7848\u20137857.","DOI":"10.1109\/ICCV48922.2021.00775"},{"key":"1890_CR33","unstructured":"Ritter, S., Barrett, D. G., Santoro, A., et\u00a0al. (2017). Cognitive psychology for deep neural networks: A shape bias case study. In: International Conference on Machine Learning, PMLR, pp 2940\u20132949"},{"issue":"3","key":"1890_CR34","doi-asserted-by":"publisher","first-page":"299","DOI":"10.1016\/0885-2014(88)90014-7","volume":"3","author":"B Landau","year":"1988","unstructured":"Landau, B., Smith, L. B., & Jones, S. S. (1988). The importance of shape in early lexical learning. Cognitive Development, 3(3), 299\u2013321.","journal-title":"Cognitive Development"},{"key":"1890_CR35","doi-asserted-by":"crossref","unstructured":"Wang, D., Jiang, T., Sun, J., et\u00a0al. (2022). Fca: Learning a 3d full-coverage vehicle camouflage for multi-view physical adversarial attack. In: Proceedings of the AAAI Conference on Artificial Intelligence, pp 2414\u20132422","DOI":"10.1609\/aaai.v36i2.20141"},{"key":"1890_CR36","unstructured":"Song, D., Eykholt, K., Evtimov, I., et\u00a0al. (2018). Physical adversarial examples for object detectors. In: 12th USENIX workshop on offensive technologies (WOOT 18), pp 1\u201310."},{"key":"1890_CR37","unstructured":"Brown, T. B., Man\u00e9, D., Roy, A., et\u00a0al. (2017). Adversarial patch. arXiv preprint arXiv:1712.09665"},{"key":"1890_CR38","unstructured":"Zhang, Y., Foroosh, H., David, P., et\u00a0al. (2019). Camou: Learning physical vehicle camouflages to adversarially attack detectors in the wild. In: International Conference on Learning Representations, pp 1\u201320"},{"key":"1890_CR39","doi-asserted-by":"crossref","unstructured":"Duan, R., Ma, X., Wang, Y., et\u00a0al. (2020). Adversarial camouflage: Hiding physical-world attacks with natural styles. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 1000\u20131008","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"1890_CR40","doi-asserted-by":"crossref","unstructured":"Huang, L., Gao, C., Zhou, Y., et\u00a0al. (2020). Universal physical camouflage attacks on object detectors. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 720\u2013729","DOI":"10.1109\/CVPR42600.2020.00080"},{"key":"1890_CR41","unstructured":"Wu, T., Ning, X., Li, W., et\u00a0al. (2020). Physical adversarial attack on vehicle detector in the carla simulator. arXiv preprint arXiv:2007.16118"},{"key":"1890_CR42","doi-asserted-by":"crossref","unstructured":"Wang, J., Liu, A., Yin, Z., et\u00a0al. (2021). Dual attention suppression attack: Generate adversarial camouflage in physical world. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 8565\u20138574.","DOI":"10.1109\/CVPR46437.2021.00846"},{"key":"1890_CR43","doi-asserted-by":"crossref","unstructured":"Selvaraju, R. R., Cogswell, M., Das, A., et\u00a0al. (2017). Grad-cam: Visual explanations from deep networks via gradient-based localization. In: Proceedings of the IEEE International Conference on Computer Vision, pp 618\u2013626.","DOI":"10.1109\/ICCV.2017.74"},{"key":"1890_CR44","unstructured":"Goodfellow, I., Pouget-Abadie, J., Mirza, M., et\u00a0al. (2014). Generative adversarial nets. Advances in Neural Information Processing Systems, 27."},{"key":"1890_CR45","unstructured":"Mirza, M., & Osindero, S. (2014). Conditional generative adversarial nets. arXiv preprint arXiv:1411.1784"},{"key":"1890_CR46","unstructured":"Gazzaniga, M. S. (2004). The cognitive neurosciences. MIT press."},{"key":"1890_CR47","doi-asserted-by":"crossref","unstructured":"Isola, P., Zhu, J. Y., Zhou, T., et\u00a0al. (2017). Image-to-image translation with conditional adversarial networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 1125\u20131134","DOI":"10.1109\/CVPR.2017.632"},{"issue":"1","key":"1890_CR48","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1109\/TCI.2016.2644865","volume":"3","author":"H Zhao","year":"2016","unstructured":"Zhao, H., Gallo, O., Frosio, I., et al. (2016). Loss functions for image restoration with neural networks. IEEE Transactions on Computational Imaging, 3(1), 47\u201357.","journal-title":"IEEE Transactions on Computational Imaging"},{"key":"1890_CR49","doi-asserted-by":"crossref","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L., et\u00a0al. (2016). Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition. In: Proceedings of the 2016 ACM Sigsac Conference on Computer and Communications Security, pp 1528\u20131540","DOI":"10.1145\/2976749.2978392"},{"key":"1890_CR50","doi-asserted-by":"crossref","unstructured":"Kato, H., Ushiku, Y., & Harada, T. (2018). Neural 3d mesh renderer. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 3907\u20133916.","DOI":"10.1109\/CVPR.2018.00411"},{"key":"1890_CR51","doi-asserted-by":"crossref","unstructured":"Liu, W., Anguelov, D., Erhan, D., et\u00a0al. (2016). SSD: Single shot multibox detector. In: European Conference on Computer Vision, Springer, pp 21\u201337.","DOI":"10.1007\/978-3-319-46448-0_2"},{"key":"1890_CR52","doi-asserted-by":"crossref","unstructured":"Girshick, R. (2015). Fast R-CNN. In: Proceedings of the IEEE International Conference on Computer Vision, pp 1440\u20131448.","DOI":"10.1109\/ICCV.2015.169"},{"key":"1890_CR53","unstructured":"Ge, Z., Liu, S., Wang, F., et\u00a0al. (2021). Yolox: Exceeding yolo series in 2021. arXiv preprint arXiv:2107.08430"},{"key":"1890_CR54","doi-asserted-by":"crossref","unstructured":"Wang, C. Y., Bochkovskiy, A., & Liao, H. Y. M. (2022). Yolov7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectors. arXiv preprint arXiv:2207.02696","DOI":"10.1109\/CVPR52729.2023.00721"},{"issue":"4","key":"1890_CR55","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/TIP.2003.819861","volume":"13","author":"Z Wang","year":"2004","unstructured":"Wang, Z., Bovik, A. C., Sheikh, H. R., et al. (2004). Image quality assessment: from error visibility to structural similarity. IEEE Transactions on Image Processing, 13(4), 600\u2013612.","journal-title":"IEEE Transactions on Image Processing"}],"container-title":["Journal of Signal Processing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11265-023-01890-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11265-023-01890-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11265-023-01890-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,17]],"date-time":"2024-01-17T10:10:45Z","timestamp":1705486245000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11265-023-01890-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,11]]},"references-count":55,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2023,12]]}},"alternative-id":["1890"],"URL":"https:\/\/doi.org\/10.1007\/s11265-023-01890-8","relation":{},"ISSN":["1939-8018","1939-8115"],"issn-type":[{"type":"print","value":"1939-8018"},{"type":"electronic","value":"1939-8115"}],"subject":[],"published":{"date-parts":[[2023,9,11]]},"assertion":[{"value":"18 May 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 July 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 August 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 September 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}