{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T23:58:59Z","timestamp":1780444739382,"version":"3.54.1"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3027372","type":"journal-article","created":{"date-parts":[[2020,9,29]],"date-time":"2020-09-29T22:47:11Z","timestamp":1601419631000},"page":"179094-179104","source":"Crossref","is-referenced-by-count":39,"title":["Adversarial Patch Attacks on Monocular Depth Estimation Networks"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7940-6035","authenticated-orcid":false,"given":"Koichiro","family":"Yamanaka","sequence":"first","affiliation":[{"name":"Graduate School of Engineering, Nagoya University, Nagoya, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5085-8879","authenticated-orcid":false,"given":"Ryutaroh","family":"Matsumoto","sequence":"additional","affiliation":[{"name":"Department of Information and Communications Engineering, Tokyo Institute of Technology, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9429-5273","authenticated-orcid":false,"given":"Keita","family":"Takahashi","sequence":"additional","affiliation":[{"name":"Graduate School of Engineering, Nagoya University, Nagoya, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3440-5132","authenticated-orcid":false,"given":"Toshiaki","family":"Fujii","sequence":"additional","affiliation":[{"name":"Graduate School of Engineering, Nagoya University, Nagoya, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1119","article-title":"Depth and surface normal estimation from monocular images using regression on deep features and hierarchical CRFs","author":"li","year":"2015","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit (CVPR)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2014.2316835"},{"key":"ref33","first-page":"1161","article-title":"Learning depth from single monocular images","author":"saxena","year":"2006","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref32","first-page":"2366","article-title":"Depth map prediction from a single image using a multi-scale deep network","author":"eigen","year":"2014","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref31","article-title":"NO need to worry about adversarial examples in object detection in autonomous vehicles","author":"lu","year":"2017","journal-title":"arXiv 1707 03501"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.19"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298652"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2505283"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2008.132"},{"key":"ref28","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2017","journal-title":"Int Conf Learn Represent (ICLR)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00249"},{"key":"ref29","first-page":"284","article-title":"Synthesizing robust adversarial examples","author":"athalye","year":"2018","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46487-9_31"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.445"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.300"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/134"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"ref24","article-title":"Adversarial patch","author":"brown","year":"2017","journal-title":"arXiv 1712 09665"},{"key":"ref23","article-title":"Adversarial attacks on monocular depth estimation","author":"zhang","year":"2020","journal-title":"arXiv 2003 10315"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref25","article-title":"AdvHat: Real-world adversarial attack on ArcFace face ID system","author":"komkov","year":"2019","journal-title":"arXiv 1908 08705"},{"key":"ref50","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2015","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref57","first-page":"8024","article-title":"PyTorch: An imperative style, high-performance deep learning library","author":"paszke","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1177\/0278364913491297"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/3DV.2017.00012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2699184"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7299155"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00907"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00465"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2017.2740321"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00227"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref14","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref15","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Int Conf Learn Represent (ICLR)"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref19","article-title":"Robust synthesis of adversarial visual examples using a deep image prior","author":"gittings","year":"2019","journal-title":"Proc Brit Mach Vis Conf (BMVC)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00567"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2515615"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00214"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.699"},{"key":"ref8","article-title":"From big to small: Multi-scale local planar guidance for monocular depth estimation","author":"han lee","year":"2019","journal-title":"arXiv 1907 10326"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01252-6_30"},{"key":"ref49","first-page":"9","article-title":"Distilling the knowledge in a neural network","volume":"1050","author":"hinton","year":"2015","journal-title":"Stat"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.440"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.316"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46484-8_45"},{"key":"ref48","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2015","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref47","first-page":"2017","article-title":"Spatial transformer networks","author":"jaderberg","year":"2015","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.238"},{"key":"ref41","first-page":"730","article-title":"Single-image depth perception in the wild","author":"chen","year":"2016","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1117\/12.524762"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_51"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09207958.pdf?arnumber=9207958","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,8]],"date-time":"2022-09-08T20:11:27Z","timestamp":1662667887000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9207958\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3027372","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}