{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,9]],"date-time":"2025-12-09T08:27:00Z","timestamp":1765268820676,"version":"3.38.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100013114","name":"China National Key Research and Development Program","doi-asserted-by":"publisher","award":["2016YFC0802904"],"award-info":[{"award-number":["2016YFC0802904"]}],"id":[{"id":"10.13039\/501100013114","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2022.3181197","type":"journal-article","created":{"date-parts":[[2022,6,8]],"date-time":"2022-06-08T19:40:10Z","timestamp":1654717210000},"page":"36601-36610","source":"Crossref","is-referenced-by-count":3,"title":["Light Attack: A Physical World Real-Time Attack Against Object Classifiers"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4891-9820","authenticated-orcid":false,"given":"Ruizhe","family":"Hu","sequence":"first","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2949-5874","authenticated-orcid":false,"given":"Ting","family":"Rui","sequence":"additional","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4481-9662","authenticated-orcid":false,"given":"Yan","family":"Ouyang","sequence":"additional","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8866-6744","authenticated-orcid":false,"given":"Jinkang","family":"Wang","sequence":"additional","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]},{"given":"Qunyan","family":"Jiang","sequence":"additional","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]},{"given":"Yinan","family":"Du","sequence":"additional","affiliation":[{"name":"Department of Mechanical Engineering, College of Field Engineering, Army Engineering University of PLA, Nanjing, China"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","volume":"25","author":"Krizhevsky"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00533"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2016.2582924"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1390156.1390177"},{"key":"ref5","article-title":"End to end learning for self-driving cars","author":"Bojarski","year":"2016","journal-title":"arXiv:1604.07316"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cmpb.2018.04.005"},{"key":"ref7","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref8","article-title":"Sparse adversarial attack to object detection","author":"Bao","year":"2020","journal-title":"arXiv:2012.13692"},{"key":"ref9","article-title":"Robust physical-world attacks on deep learning models","author":"Eykholt","year":"2017","journal-title":"arXiv:1707.08945"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"ref11","article-title":"DPatch: An adversarial patch attack on object detectors","author":"Liu","year":"2018","journal-title":"arXiv:1806.02299"},{"key":"ref12","article-title":"Object hider: Adversarial patch attack against object detectors","author":"Zhao","year":"2020","journal-title":"arXiv:2010.14974"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58601-0_24"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref15","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref16","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref19","article-title":"One pixel attack for fooling deep neural networks","author":"Su","year":"2017","journal-title":"arXiv:1710.08864"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref22","article-title":"UPSET and ANGRI: Breaking high performance image classifiers","author":"Sarkar","year":"2017","journal-title":"arXiv:1707.01159"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00212"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00492"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"ref28","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2016","journal-title":"Artificial Intelligence Safety and Security"},{"key":"ref29","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye"},{"key":"ref30","article-title":"Adversarial patch","author":"Brown","year":"2017","journal-title":"arXiv:1712.09665"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.319"},{"key":"ref34","article-title":"DPatch: An adversarial patch attack on object detectors","author":"Liu","year":"2018","journal-title":"arXiv:1806.02299"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICIEVicIVPR48672.2020.9306675"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413976"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10820123\/09791340.pdf?arnumber=9791340","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,3]],"date-time":"2025-03-03T18:35:27Z","timestamp":1741026927000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9791340\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":36,"URL":"https:\/\/doi.org\/10.1109\/access.2022.3181197","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2025]]}}}