{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T08:05:21Z","timestamp":1784534721902,"version":"3.55.0"},"reference-count":71,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62466045"],"award-info":[{"award-number":["62466045"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004763","name":"Natural Science Foundation of Inner Mongolia Autonomous Region","doi-asserted-by":"publisher","award":["2025LHMS06023"],"award-info":[{"award-number":["2025LHMS06023"]}],"id":[{"id":"10.13039\/501100004763","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004763","name":"Natural Science Foundation of Inner Mongolia Autonomous Region","doi-asserted-by":"publisher","award":["2025MS06018"],"award-info":[{"award-number":["2025MS06018"]}],"id":[{"id":"10.13039\/501100004763","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004763","name":"Natural Science Foundation of Inner Mongolia Autonomous Region","doi-asserted-by":"publisher","award":["2024LHMS06014"],"award-info":[{"award-number":["2024LHMS06014"]}],"id":[{"id":"10.13039\/501100004763","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Visual Communication and Image Representation"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1016\/j.jvcir.2026.104843","type":"journal-article","created":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T16:35:04Z","timestamp":1779899704000},"page":"104843","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["AdvDPDiff: A diffusion model adversarial attacks strategy combining multi-model ensemble and dynamic input transformation"],"prefix":"10.1016","volume":"119","author":[{"given":"DaPeng","family":"Men","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"XiaoLin","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingyu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lixin","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"YongPing","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"LiSha","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"MengMeng","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"ZheYi","family":"Jia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.jvcir.2026.104843_b1","doi-asserted-by":"crossref","unstructured":"K. He, X. Zhang, S. Ren, J. Sun, Deep residual learning for image recognition, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2016, pp. 770\u2013778.","DOI":"10.1109\/CVPR.2016.90"},{"key":"10.1016\/j.jvcir.2026.104843_b2","doi-asserted-by":"crossref","unstructured":"S. Xie, R. Girshick, P. Doll\u00e1r, Z. Tu, K. He, Aggregated residual transformations for deep neural networks, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2017, pp. 1492\u20131500.","DOI":"10.1109\/CVPR.2017.634"},{"key":"10.1016\/j.jvcir.2026.104843_b3","doi-asserted-by":"crossref","unstructured":"H. Caesar, V. Bankiti, A.H. Lang, S. Vora, V.E. Liong, Q. Xu, A. Krishnan, Y. Pan, G. Baldan, O. Beijbom, nuscenes: A multimodal dataset for autonomous driving, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 11621\u201311631.","DOI":"10.1109\/CVPR42600.2020.01164"},{"key":"10.1016\/j.jvcir.2026.104843_b4","series-title":"Domain Generalization for Medical Image Analysis: A Review","author":"Yoon","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b5","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.110424","article-title":"Federated learning for medical image analysis: A survey","volume":"151","author":"Guan","year":"2024","journal-title":"Pattern Recognit."},{"issue":"13","key":"10.1016\/j.jvcir.2026.104843_b6","doi-asserted-by":"crossref","first-page":"5399","DOI":"10.3390\/su16135399","article-title":"Use of drone remote sensing to identify increased marine macro-litter contamination following the reopening of Salgar Beach (Colombian Caribbean) during pandemic restrictions","volume":"16","author":"Manzolli","year":"2024","journal-title":"Sustainability"},{"issue":"7","key":"10.1016\/j.jvcir.2026.104843_b7","doi-asserted-by":"crossref","first-page":"7963","DOI":"10.1109\/TITS.2024.3379210","article-title":"Text-enriched air traffic flow modeling and prediction using transformers","volume":"25","author":"Ma","year":"2024","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"4","key":"10.1016\/j.jvcir.2026.104843_b8","doi-asserted-by":"crossref","first-page":"813","DOI":"10.1097\/JS9.0000000000000317","article-title":"Deep-learning-based semantic segmentation of autonomic nerves from laparoscopic images of colorectal surgery: an experimental pilot study","volume":"109","author":"Kojima","year":"2023","journal-title":"Int. J. Surg."},{"key":"10.1016\/j.jvcir.2026.104843_b9","doi-asserted-by":"crossref","unstructured":"S.A. Shafian, D Hu, Integrating Machine Learning and Remote Sensing in Disaster Management: A Decadal Review of Post-Disaster Building Damage Assessment, Buildings 14 (8) 2024.","DOI":"10.3390\/buildings14082344"},{"issue":"1","key":"10.1016\/j.jvcir.2026.104843_b10","doi-asserted-by":"crossref","first-page":"11","DOI":"10.3390\/asi7010011","article-title":"Deep learning for automated visual inspection in manufacturing and maintenance: a survey of open-access papers","volume":"7","author":"H\u00fctten","year":"2024","journal-title":"Appl. Syst. Innov."},{"issue":"7","key":"10.1016\/j.jvcir.2026.104843_b11","doi-asserted-by":"crossref","DOI":"10.1371\/journal.pone.0301908","article-title":"Computationally intelligent real-time security surveillance system in the education sector using deep learning","volume":"19","author":"Abid","year":"2024","journal-title":"PloS One"},{"key":"10.1016\/j.jvcir.2026.104843_b12","doi-asserted-by":"crossref","first-page":"26474","DOI":"10.1109\/ACCESS.2024.3366693","article-title":"PublicVision: A secure smart surveillance system for crowd behavior recognition","volume":"12","author":"Qaraqe","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.jvcir.2026.104843_b13","series-title":"Advances in Neural Information Processing Systems","first-page":"2894","article-title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability","volume":"Vol. 36","author":"Xue","year":"2023"},{"key":"10.1016\/j.jvcir.2026.104843_b14","article-title":"Efficient generation of targeted and transferable adversarial examples for vision-language models via diffusion models","author":"Guo","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.jvcir.2026.104843_b15","series-title":"European Conference on Computer Vision","first-page":"93","article-title":"Advdiff: Generating unrestricted adversarial examples using diffusion models","author":"Dai","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b16","series-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence","article-title":"Diffusion models for imperceptible and transferable adversarial attack","author":"Chen","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b17","doi-asserted-by":"crossref","unstructured":"X. Wang, Z. Zhang, J. Zhang, Structure invariant transformation for better adversarial transferability, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2023, pp. 4607\u20134619.","DOI":"10.1109\/ICCV51070.2023.00425"},{"key":"10.1016\/j.jvcir.2026.104843_b18","series-title":"Transform-dependent adversarial attacks","author":"Tan","year":"2024"},{"issue":"1","key":"10.1016\/j.jvcir.2026.104843_b19","doi-asserted-by":"crossref","DOI":"10.1049\/cvi2.70034","article-title":"GRVT: Improving the transferability of adversarial attacks through gradient related variance and input transformation","volume":"19","author":"Wei","year":"2025","journal-title":"IET Comput. Vis."},{"key":"10.1016\/j.jvcir.2026.104843_b20","series-title":"International Conference on Algorithms and Architectures for Parallel Processing","first-page":"274","article-title":"A data augmentation-based defense method against adversarial attacks in neural networks","author":"Zeng","year":"2020"},{"key":"10.1016\/j.jvcir.2026.104843_b21","series-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","author":"Lin","year":"2019"},{"issue":"2","key":"10.1016\/j.jvcir.2026.104843_b22","doi-asserted-by":"crossref","first-page":"342","DOI":"10.1287\/opre.1080.0570","article-title":"Goal-driven optimization","volume":"57","author":"Chen","year":"2009","journal-title":"Oper. Res."},{"key":"10.1016\/j.jvcir.2026.104843_b23","series-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"10.1016\/j.jvcir.2026.104843_b24","series-title":"Advances in Neural Information Processing Systems","article-title":"Generative adversarial nets","volume":"Vol. 27","author":"Goodfellow","year":"2014"},{"key":"10.1016\/j.jvcir.2026.104843_b25","series-title":"2016 IEEE European Symposium on Security and Privacy","first-page":"372","article-title":"The limitations of deep learning in adversarial settings","author":"Papernot","year":"2016"},{"key":"10.1016\/j.jvcir.2026.104843_b26","series-title":"International Conference on Machine Learning","first-page":"5558","article-title":"White-box vs black-box: Bayes optimal strategies for membership inference","author":"Sablayrolles","year":"2019"},{"key":"10.1016\/j.jvcir.2026.104843_b27","doi-asserted-by":"crossref","unstructured":"N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z.B. Celik, A. Swami, Practical black-box attacks against machine learning, in: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017, pp. 506\u2013519.","DOI":"10.1145\/3052973.3053009"},{"key":"10.1016\/j.jvcir.2026.104843_b28","series-title":"Robustness may be at odds with accuracy","author":"Tsipras","year":"2018"},{"key":"10.1016\/j.jvcir.2026.104843_b29","series-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"10.1016\/j.jvcir.2026.104843_b30","series-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017"},{"key":"10.1016\/j.jvcir.2026.104843_b31","doi-asserted-by":"crossref","unstructured":"H. Li, X. Xu, X. Zhang, S. Yang, B. Li, Qeba: Query-efficient boundary-based blackbox attack, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 1221\u20131230.","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"10.1016\/j.jvcir.2026.104843_b32","doi-asserted-by":"crossref","unstructured":"W. Wu, Y. Su, X. Chen, S. Zhao, I. King, M.R. Lyu, Y.W. Tai, Boosting the transferability of adversarial samples via attention, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 1161\u20131170.","DOI":"10.1109\/CVPR42600.2020.00124"},{"key":"10.1016\/j.jvcir.2026.104843_b33","doi-asserted-by":"crossref","unstructured":"N. Inkawhich, W. Wen, H.H. Li, Y. Chen, Feature space perturbations yield more transferable adversarial examples, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2019, pp. 7066\u20137074.","DOI":"10.1109\/CVPR.2019.00723"},{"key":"10.1016\/j.jvcir.2026.104843_b34","series-title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016"},{"key":"10.1016\/j.jvcir.2026.104843_b35","article-title":"Modality-specific interactive attack for vision-language pre-training models","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.jvcir.2026.104843_b36","article-title":"Rethinking the trigger of backdoor attacks: Towards physical backdoor threats","author":"Li","year":"2026","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.jvcir.2026.104843_b37","series-title":"Improving adversarial transferability of vision-language pre-training models through collaborative multimodal interaction","author":"Fu","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b38","doi-asserted-by":"crossref","first-page":"126","DOI":"10.1016\/j.ins.2023.03.139","article-title":"Improving the invisibility of adversarial examples with perceptually adaptive perturbation","volume":"635","author":"Zhang","year":"2023","journal-title":"Inform. Sci."},{"key":"10.1016\/j.jvcir.2026.104843_b39","series-title":"ECAI 2023","first-page":"2483","article-title":"LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations","author":"Wang","year":"2023"},{"key":"10.1016\/j.jvcir.2026.104843_b40","doi-asserted-by":"crossref","unstructured":"Y. Xiong, J. Lin, M. Zhang, J.E. Hopcroft, K. He, Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2022, pp. 14983\u201314992.","DOI":"10.1109\/CVPR52688.2022.01456"},{"key":"10.1016\/j.jvcir.2026.104843_b41","doi-asserted-by":"crossref","unstructured":"X. Wang, K. He, Enhancing the transferability of adversarial attacks through variance tuning, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2021, pp. 1924\u20131933.","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"10.1016\/j.jvcir.2026.104843_b42","series-title":"European Conference on Computer Vision","first-page":"549","article-title":"Frequency domain model augmentation for adversarial attack","author":"Long","year":"2022"},{"key":"10.1016\/j.jvcir.2026.104843_b43","series-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2017"},{"key":"10.1016\/j.jvcir.2026.104843_b44","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"4312","article-title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","author":"Dong","year":"2019"},{"key":"10.1016\/j.jvcir.2026.104843_b45","series-title":"International Conference on Machine Learning","first-page":"2256","article-title":"Deep unsupervised learning using nonequilibrium thermodynamics","author":"Sohl-Dickstein","year":"2015"},{"key":"10.1016\/j.jvcir.2026.104843_b46","series-title":"Advances in Neural Information Processing Systems","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"Vol. 33","author":"Ho","year":"2020"},{"key":"10.1016\/j.jvcir.2026.104843_b47","series-title":"Advances in Neural Information Processing Systems","first-page":"36479","article-title":"Photorealistic text-to-image diffusion models with deep language understanding","volume":"Vol. 35","author":"Saharia","year":"2022"},{"key":"10.1016\/j.jvcir.2026.104843_b48","unstructured":"A. Ramesh, P. Dhariwal, A. Nichol, C. Chu, M. Chen, Hierarchical text-conditional image generation with clip latents 1 (2) (2022) 3. arXiv preprint arXiv:2204.06125."},{"key":"10.1016\/j.jvcir.2026.104843_b49","doi-asserted-by":"crossref","unstructured":"R. Rombach, A. Blattmann, D. Lorenz, P. Esser, B. Ommer, High-resolution image synthesis with latent diffusion models, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2022, pp. 10684\u201310695.","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"10.1016\/j.jvcir.2026.104843_b50","series-title":"Advances in Neural Information Processing Systems","first-page":"30554","article-title":"Prefpaint: Aligning image inpainting diffusion model with human preference","volume":"Vol. 37","author":"Liu","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b51","doi-asserted-by":"crossref","unstructured":"Y. Wang, W. Yang, X. Chen, Y. Wang, L. Guo, L.-P. Chau, Z. Liu, Y. Qiao, A.C. Kot, B. Wen, Sinsr: diffusion-based image super-resolution in a single step, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2024, pp. 25796\u201325805.","DOI":"10.1109\/CVPR52733.2024.02437"},{"key":"10.1016\/j.jvcir.2026.104843_b52","doi-asserted-by":"crossref","unstructured":"R. Mokady, A. Hertz, K. Aberman, Y. Pritch, D. Cohen-Or, Null-text inversion for editing real images using guided diffusion models, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2023, pp. 6038\u20136047.","DOI":"10.1109\/CVPR52729.2023.00585"},{"key":"10.1016\/j.jvcir.2026.104843_b53","series-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence","article-title":"Stimulating diffusion model for image denoising via adaptive embedding and ensembling","author":"Li","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b54","series-title":"Advances in Neural Information Processing Systems","first-page":"93849","article-title":"Constrained diffusion with trust sampling","volume":"Vol. 37","author":"Huang","year":"2024"},{"key":"10.1016\/j.jvcir.2026.104843_b55","series-title":"Advances in Neural Information Processing Systems","first-page":"7546","article-title":"Natural color fool: Towards boosting black-box unrestricted attacks","volume":"Vol. 35","author":"Yuan","year":"2022"},{"key":"10.1016\/j.jvcir.2026.104843_b56","doi-asserted-by":"crossref","DOI":"10.1016\/j.compbiomed.2023.106712","article-title":"Tformer: A throughout fusion transformer for multi-modal skin lesion diagnosis","volume":"157","author":"Zhang","year":"2023","journal-title":"Comput. Biol. Med."},{"key":"10.1016\/j.jvcir.2026.104843_b57","doi-asserted-by":"crossref","unstructured":"Z. Liu, H. Mao, C.-Y. Wu, C. Feichtenhofer, T. Darrell, S. Xie, A convnet for the 2020s, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2022, pp. 11976\u201311986.","DOI":"10.1109\/CVPR52688.2022.01167"},{"key":"10.1016\/j.jvcir.2026.104843_b58","series-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"10.1016\/j.jvcir.2026.104843_b59","doi-asserted-by":"crossref","unstructured":"C. Szegedy, V. Vanhoucke, S. Ioffe, J. Shlens, Z. Wojna, Rethinking the inception architecture for computer vision, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2016, pp. 2818\u20132826.","DOI":"10.1109\/CVPR.2016.308"},{"key":"10.1016\/j.jvcir.2026.104843_b60","doi-asserted-by":"crossref","unstructured":"M. Sandler, A. Howard, M. Zhu, A. Zhmoginov, L. C. Chen, Mobilenetv2: Inverted residuals and linear bottlenecks, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 4510\u20134520.","DOI":"10.1109\/CVPR.2018.00474"},{"key":"10.1016\/j.jvcir.2026.104843_b61","series-title":"An image is worth 16x16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020"},{"key":"10.1016\/j.jvcir.2026.104843_b62","doi-asserted-by":"crossref","unstructured":"Z. Liu, Y. Lin, Y. Cao, H. Hu, Y. Wei, Z. Zhang, S. Lin, B. Guo, Swin transformer: Hierarchical vision transformer using shifted windows, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2021, pp. 10012\u201310022.","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"10.1016\/j.jvcir.2026.104843_b63","series-title":"International Conference on Machine Learning","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","author":"Touvron","year":"2021"},{"key":"10.1016\/j.jvcir.2026.104843_b64","series-title":"Advances in Neural Information Processing Systems","first-page":"24261","article-title":"Mlp-mixer: An all-mlp architecture for vision","volume":"Vol. 34","author":"Tolstikhin","year":"2021"},{"key":"10.1016\/j.jvcir.2026.104843_b65","doi-asserted-by":"crossref","unstructured":"M. Naseer, S. Khan, M. Hayat, F.S. Khan, F. Porikli, A self-supervised approach for adversarial robustness, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 262\u2013271.","DOI":"10.1109\/CVPR42600.2020.00034"},{"key":"10.1016\/j.jvcir.2026.104843_b66","series-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016"},{"key":"10.1016\/j.jvcir.2026.104843_b67","series-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017"},{"key":"10.1016\/j.jvcir.2026.104843_b68","doi-asserted-by":"crossref","unstructured":"Y. Dong, F. Liao, T. Pang, H. Su, J. Zhu, X. Hu, J. Li, Boosting adversarial attacks with momentum, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 9185\u20139193.","DOI":"10.1109\/CVPR.2018.00957"},{"key":"10.1016\/j.jvcir.2026.104843_b69","doi-asserted-by":"crossref","unstructured":"C. Xie, Z. Zhang, Y. Zhou, S. Bai, J. Wang, Z. Ren, A.L. Yuille, Improving transferability of adversarial examples with input diversity, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2019, pp. 2730\u20132739.","DOI":"10.1109\/CVPR.2019.00284"},{"key":"10.1016\/j.jvcir.2026.104843_b70","series-title":"European Conference on Computer Vision","first-page":"307","article-title":"Patch-wise attack for fooling deep neural network","author":"Gao","year":"2020"},{"key":"10.1016\/j.jvcir.2026.104843_b71","doi-asserted-by":"crossref","unstructured":"Z. Zhao, Z. Liu, M. Larson, Towards large yet imperceptible adversarial image perturbations with perceptual color distance, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 1039\u20131048.","DOI":"10.1109\/CVPR42600.2020.00112"}],"container-title":["Journal of Visual Communication and Image Representation"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1047320326001380?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1047320326001380?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T07:29:41Z","timestamp":1784532581000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1047320326001380"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":71,"alternative-id":["S1047320326001380"],"URL":"https:\/\/doi.org\/10.1016\/j.jvcir.2026.104843","relation":{},"ISSN":["1047-3203"],"issn-type":[{"value":"1047-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,8]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"AdvDPDiff: A diffusion model adversarial attacks strategy combining multi-model ensemble and dynamic input transformation","name":"articletitle","label":"Article Title"},{"value":"Journal of Visual Communication and Image Representation","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.jvcir.2026.104843","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Inc. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104843"}}