{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,21]],"date-time":"2026-06-21T08:48:21Z","timestamp":1782031701028,"version":"3.54.5"},"reference-count":55,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Pattern Recognition"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.patcog.2025.113036","type":"journal-article","created":{"date-parts":[[2026,1,3]],"date-time":"2026-01-03T16:19:14Z","timestamp":1767457154000},"page":"113036","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["AI3D: Multimodal verification system against projective attacks for deep learning classifiers"],"prefix":"10.1016","volume":"175","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6542-2413","authenticated-orcid":false,"given":"Imen","family":"Smati","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2459-9356","authenticated-orcid":false,"given":"Rania","family":"Khalsi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6364-1089","authenticated-orcid":false,"given":"Faouzi","family":"Ghorbel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8324-0891","authenticated-orcid":false,"given":"Mallek","family":"Mziou-Sallami","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.patcog.2025.113036_bib0001","article-title":"Deep neural networks for object detection","volume":"26","author":"Szegedy","year":"2013","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"10","key":"10.1016\/j.patcog.2025.113036_bib0002","doi-asserted-by":"crossref","DOI":"10.3390\/electronics14101942","article-title":"Deep learning in image processing and pattern recognition","volume":"14","author":"Wang","year":"2025","journal-title":"Electronics"},{"key":"10.1016\/j.patcog.2025.113036_bib0003","doi-asserted-by":"crossref","DOI":"10.37965\/jait.2025.0695","article-title":"A novel hybrid deep learning algorithm for object and lane detection in autonomous driving","author":"Ahmed","year":"2025","journal-title":"J. Artif. Intell. Technol."},{"issue":"8","key":"10.1016\/j.patcog.2025.113036_bib0004","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3672461","article-title":"Efficient management of containers for software defined vehicles","volume":"33","author":"Ghammam","year":"2024","journal-title":"ACM Trans. Softw. Eng. Method."},{"key":"10.1016\/j.patcog.2025.113036_bib0005","series-title":"ICAART (2)","first-page":"1105","article-title":"Improving decision-making-process for robot navigation under uncertainty","author":"Khedher","year":"2021"},{"issue":"1","key":"10.1016\/j.patcog.2025.113036_bib0006","doi-asserted-by":"crossref","first-page":"23","DOI":"10.3390\/a18010023","article-title":"A review on inverse kinematics, control and planning for robotic manipulators with and without obstacles via deep neural networks","volume":"18","author":"Calzada-Garcia","year":"2025","journal-title":"Algorithms"},{"key":"10.1016\/j.patcog.2025.113036_bib0007","series-title":"2016 IEEE\/AIAA 35th Digital Avionics Systems Conference (DASC)","first-page":"1","article-title":"Policy compression for aircraft collision avoidance systems","author":"Julian","year":"2016"},{"issue":"4","key":"10.1016\/j.patcog.2025.113036_bib0008","doi-asserted-by":"crossref","first-page":"122","DOI":"10.1007\/s10462-024-11049-x","article-title":"Advanced hybridization and optimization of DNNs for medical imaging: a survey on disease detection techniques","volume":"58","author":"Bohmrah","year":"2025","journal-title":"Artif. Intell. Rev."},{"key":"10.1016\/j.patcog.2025.113036_bib0009","series-title":"IGARSS 2024-2024 IEEE International Geoscience and Remote Sensing Symposium","first-page":"7844","article-title":"Object detection models sensitivity & robustness to satellite-based adversarial attacks","author":"Guisiano","year":"2024"},{"key":"10.1016\/j.patcog.2025.113036_bib0010","series-title":"2020 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","first-page":"150","article-title":"Quantifying DNN model robustness to the real-world threats","author":"Zhong","year":"2020"},{"issue":"POPL","key":"10.1016\/j.patcog.2025.113036_bib0011","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3290354","article-title":"An abstract domain for certifying neural networks","volume":"3","author":"Singh","year":"2019","journal-title":"Proc. ACM Programm. Lang."},{"key":"10.1016\/j.patcog.2025.113036_bib0012","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"11418","article-title":"Robustness verification of classification deep neural networks via linear programming","author":"Lin","year":"2019"},{"key":"10.1016\/j.patcog.2025.113036_bib0013","series-title":"Proceedings of the Eighteenth ACM International Conference on Web Search and Data Mining","first-page":"281","article-title":"Robustness verification of deep graph neural networks tightened by linear approximation","author":"Zeng","year":"2025"},{"key":"10.1016\/j.patcog.2025.113036_bib0014","first-page":"29909","article-title":"Beta-crown: efficient bound propagation with per-neuron split constraints for neural network robustness verification","volume":"34","author":"Wang","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"133","key":"10.1016\/j.patcog.2025.113036_bib0015","first-page":"1","article-title":"Premap: a unifying preimage approximation framework for neural networks","volume":"26","author":"Zhang","year":"2025","journal-title":"J. Mach. Learn. Res."},{"key":"10.1016\/j.patcog.2025.113036_bib0016","series-title":"2018\u202fIEEE Symposium on Security and Privacy (SP)","first-page":"3","article-title":"AI2: safety and robustness certification of neural networks with abstract interpretation","author":"Gehr","year":"2018"},{"key":"10.1016\/j.patcog.2025.113036_bib0017","article-title":"Fast and effective robustness certification","volume":"31","author":"Singh","year":"2018","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2025.113036_bib0018","series-title":"International Conference on Neural Information Processing","first-page":"274","article-title":"Safety and robustness of deep neural networks object recognition under generic attacks","author":"Sallami","year":"2019"},{"key":"10.1016\/j.patcog.2025.113036_bib0019","series-title":"ICAART (2)","first-page":"419","article-title":"Towards a certification of deep image classifiers against convolutional attacks","author":"Mziou-Sallami","year":"2022"},{"key":"10.1016\/j.patcog.2025.113036_bib0020","first-page":"2613","article-title":"Measuring neural net robustness with constraints","volume":"29","author":"Bastani","year":"2016","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2025.113036_bib0021","series-title":"International Symposium on Automated Technology for Verification and Analysis","first-page":"269","article-title":"Formal verification of piece-wise linear feed-forward neural networks","author":"Ehlers","year":"2017"},{"key":"10.1016\/j.patcog.2025.113036_bib0022","series-title":"International Conference on Computer Aided Verification","first-page":"97","article-title":"Reluplex: an efficient SMT solver for verifying deep neural networks","author":"Katz","year":"2017"},{"key":"10.1016\/j.patcog.2025.113036_bib0023","series-title":"ECAI 2020","first-page":"2513","article-title":"Efficient neural network verification via adaptive refinement and adversarial search","author":"Henriksen","year":"2020"},{"key":"10.1016\/j.patcog.2025.113036_bib0024","article-title":"Efficient neural network robustness certification with general activation functions","volume":"31","author":"Zhang","year":"2018","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2025.113036_bib0025","first-page":"1129","article-title":"Automatic perturbation analysis for scalable certified robustness and beyond","volume":"33","author":"Xu","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2025.113036_bib0026","series-title":"International Conference on Machine Learning","first-page":"3468","article-title":"POPQORN: quantifying robustness of recurrent neural networks","author":"Ko","year":"2019"},{"key":"10.1016\/j.patcog.2025.113036_bib0027","series-title":"International Symposium on Automated Technology for Verification and Analysis","first-page":"57","article-title":"Verifying recurrent neural networks using invariant inference","author":"Jacoby","year":"2020"},{"key":"10.1016\/j.patcog.2025.113036_bib0028","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"311","article-title":"Robustness guarantees for deep neural networks on videos","author":"Wu","year":"2020"},{"key":"10.1016\/j.patcog.2025.113036_bib0029","series-title":"International Conference on Computer Aided Verification","first-page":"225","article-title":"Scalable polyhedral verification of recurrent neural networks","author":"Ryou","year":"2021"},{"key":"10.1016\/j.patcog.2025.113036_bib0030","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"15074","article-title":"BppAttack: stealthy and efficient trojan attacks against deep neural networks via image quantization and contrastive adversarial learning","author":"Wang","year":"2022"},{"key":"10.1016\/j.patcog.2025.113036_bib0031","series-title":"Computer Safety, Reliability, and Security: 40th International Conference, SAFECOMP 2021, York, UK, September 8\u201310, 2021, Proceedings 40","first-page":"3","article-title":"DeepCert: verification of contextually relevant robustness for neural network image classifiers","author":"Paterson","year":"2021"},{"key":"10.1016\/j.patcog.2025.113036_bib0032","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2021.102220","article-title":"FineFool: a novel DNN object contour attack on image recognition based on the attention perturbation adversarial technique","volume":"104","author":"Chen","year":"2021","journal-title":"Comput. Secur."},{"key":"10.1016\/j.patcog.2025.113036_bib0033","series-title":"Proceedings of the 14th International Conference on Agents and Artificial Intelligence","first-page":"1003","article-title":"ContourVerifier: a novel system for the robustness evaluation of deep contour classifiers","volume":"vol. 3","author":"Khalsi","year":"2022"},{"key":"10.1016\/j.patcog.2025.113036_bib0034","series-title":"2022\u202fIEEE International Conference on Image Processing (ICIP)","first-page":"3561","article-title":"A novel system for deep contour classifiers certification under filtering attacks","author":"Khalsi","year":"2022"},{"key":"10.1016\/j.patcog.2025.113036_bib0035","series-title":"Agents and Artificial Intelligence: 14th International Conference, ICAART 2022, Virtual Event, February 3\u20135, 2022, Revised Selected Papers","first-page":"99","article-title":"Integrative system of deep classifiers certification: case of convolutional attacks","author":"Smati","year":"2023"},{"key":"10.1016\/j.patcog.2025.113036_bib0036","series-title":"2021 International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME)","first-page":"1","article-title":"ContourCNN: convolutional neural network for contour data classification","author":"Droby","year":"2021"},{"key":"10.1016\/j.patcog.2025.113036_bib0037","series-title":"A New Deep Convolutional Neural Network for 2D Contour Classification","author":"Mhedhbi","year":"2022"},{"issue":"24","key":"10.1016\/j.patcog.2025.113036_bib0038","doi-asserted-by":"crossref","first-page":"17689","DOI":"10.1007\/s00521-023-08639-1","article-title":"DeepGCSS: a robust and explainable contour classifier providing generalized curvature scale space features","volume":"35","author":"Mziou-Sallami","year":"2023","journal-title":"Neural Comput. Appl."},{"key":"10.1016\/j.patcog.2025.113036_bib0039","series-title":"Advanced Fiber Laser Conference (AFL2022)","first-page":"303","article-title":"Fourier contour embedding deep learning for arbitrary-shaped target detection","volume":"12595","author":"Wang","year":"2023"},{"issue":"1","key":"10.1016\/j.patcog.2025.113036_bib0040","doi-asserted-by":"crossref","first-page":"230","DOI":"10.1109\/TITS.2017.2749964","article-title":"Embedding structured contour and location prior in siamesed fully convolutional networks for road detection","volume":"19","author":"Wang","year":"2017","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"issue":"3","key":"10.1016\/j.patcog.2025.113036_bib0041","doi-asserted-by":"crossref","first-page":"238","DOI":"10.1007\/s11760-025-03824-2","article-title":"A novel integral and SE (3)-invariant description for 3D face recognition","volume":"19","author":"Jribi","year":"2025","journal-title":"Signal Image Video Process."},{"issue":"1","key":"10.1016\/j.patcog.2025.113036_bib0042","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1007\/s13735-021-00224-3","article-title":"A fast and robust affine-invariant method for shape registration under partial occlusion","volume":"11","author":"Elghoul","year":"2022","journal-title":"Int. J. Multimed. Inf. Retr."},{"issue":"12","key":"10.1016\/j.patcog.2025.113036_bib0043","doi-asserted-by":"crossref","first-page":"2033","DOI":"10.1016\/S0031-3203(99)00196-X","article-title":"Projective Fourier analysis for patterns","volume":"33","author":"Turski","year":"2000","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2025.113036_bib0044","doi-asserted-by":"crossref","first-page":"1662","DOI":"10.1016\/j.procs.2025.04.121","article-title":"Evaluating feature-based image registration techniques for aeroplane and brain MRI images using projective transformation","volume":"259","author":"Nair","year":"2025","journal-title":"Procedia Comput. Sci."},{"key":"10.1016\/j.patcog.2025.113036_bib0045","series-title":"Informatics: 10 Years Back, 10 Years Ahead","first-page":"138","article-title":"Abstract interpretation based formal methods and future challenges","author":"Cousot","year":"2001"},{"issue":"3\u20134","key":"10.1016\/j.patcog.2025.113036_bib0046","doi-asserted-by":"crossref","first-page":"250","DOI":"10.1561\/2500000062","article-title":"Safety and trust in artificial intelligence with abstract interpretation","volume":"8","author":"Singh","year":"2025","journal-title":"Found. Trends\u00ae Programm. Lang."},{"key":"10.1016\/j.patcog.2025.113036_bib0047","article-title":"Provably bounding neural network preimages","volume":"36","author":"Kotha","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2025.113036_bib0048","article-title":"Gaussian loss smoothing enables certified training with tight convex relaxations","author":"Balauca","year":"2024","journal-title":"Trans. Mach. Learn. Res."},{"key":"10.1016\/j.patcog.2025.113036_bib0049","series-title":"Proceedings of Informing Science & IT Education Conference (InSITE)","first-page":"97","article-title":"A descriptive algorithm for sobel image edge detection","volume":"40","author":"Vincent","year":"2009"},{"issue":"2","key":"10.1016\/j.patcog.2025.113036_bib0050","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1007\/BF00123164","article-title":"Using Canny\u2019s criteria to derive a recursively implemented optimal edge detector","volume":"1","author":"Deriche","year":"1987","journal-title":"Int. J. Comput. Vis."},{"key":"10.1016\/j.patcog.2025.113036_bib0051","series-title":"Deep Neural Networks for 2D Contour Classification: Architecture and Robustness","author":"Khalsi","year":"2023"},{"issue":"3\u20134","key":"10.1016\/j.patcog.2025.113036_bib0052","doi-asserted-by":"crossref","first-page":"319","DOI":"10.1016\/0031-3203(90)90019-H","article-title":"Automatic control of lamellibranch larva growth using contour invariant feature extraction","volume":"23","author":"Ghorbel","year":"1990","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2025.113036_bib0053","series-title":"Image Analysis and Processing-ICIAP 2015: 18th International Conference, Genoa, Italy, September 7\u201311, 2015, Proceedings, Part II 18","first-page":"494","article-title":"A new multi-resolution affine invariant planar contour descriptor","author":"Faidi","year":"2015"},{"key":"10.1016\/j.patcog.2025.113036_bib0054","series-title":"Vision Geometry VI","first-page":"124","article-title":"Projective Fourier analysis in computer vision: theory and computer simulations","volume":"3168","author":"Turski","year":"1997"},{"key":"10.1016\/j.patcog.2025.113036_bib0055","unstructured":"Y. LeCun, The MNIST database of handwritten digits, http:\/\/yann.lecun.com\/exdb\/mnist\/(1998)."}],"container-title":["Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320325016991?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320325016991?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,21]],"date-time":"2026-06-21T08:29:10Z","timestamp":1782030550000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0031320325016991"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":55,"alternative-id":["S0031320325016991"],"URL":"https:\/\/doi.org\/10.1016\/j.patcog.2025.113036","relation":{},"ISSN":["0031-3203"],"issn-type":[{"value":"0031-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"AI3D: Multimodal verification system against projective attacks for deep learning classifiers","name":"articletitle","label":"Article Title"},{"value":"Pattern Recognition","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.patcog.2025.113036","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"113036"}}