{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T21:01:07Z","timestamp":1775682067225,"version":"3.50.1"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Ministry of Education (MoE) for providing the fellowship through the Ph.D. Program and the Ministry of Electronics and Information Technology under the Project ISEA Phase-III"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3680319","type":"journal-article","created":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T19:51:30Z","timestamp":1775159490000},"page":"51294-51307","source":"Crossref","is-referenced-by-count":0,"title":["\u201cJust a Patch\u201d: Imperceptible Image Patch Generation for Adversarial Inference"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-1455-6375","authenticated-orcid":false,"given":"Debasmita","family":"Manna","sequence":"first","affiliation":[{"name":"Indian Institute of Technology Patna, Patna, Bihar, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6964-2648","authenticated-orcid":false,"given":"Somanath","family":"Tripathy","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Patna, Patna, Bihar, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bruhadeshwar","family":"Bezawada","sequence":"additional","affiliation":[{"name":"Southern Arkansas University, Magnolia, AR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0714-7676","authenticated-orcid":false,"given":"Indrakshi","family":"Ray","sequence":"additional","affiliation":[{"name":"Colorado State University, Fort Collins, CO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1093\/bib\/bbx044"},{"key":"ref2","first-page":"41.1","article-title":"Deep face recognition","volume-title":"Proc. Brit. Mach. Vis. Conf.","author":"Parkhi"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.312"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.91"},{"key":"ref5","volume-title":"Technical Report: Tesla Crash Preliminary Evaluation Report","year":"2016"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"issue":"3","key":"ref9","doi-asserted-by":"crossref","first-page":"1562","DOI":"10.1109\/TDSC.2020.3028448","article-title":"One-to-N & N-to-one: Two advanced backdoor attacks against deep learning models","volume":"19","author":"Xue","year":"2022","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417253"},{"key":"ref12","first-page":"13195","article-title":"TBT: Targeted neural network attack with bit trojan","volume-title":"Proc. IEEE\/CVF Conf. Comput. Vis. Pattern Recognit. (CVPR)","author":"Rakin"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3412130"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3164073"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2023.3349269"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-191411"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3324265"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2016.282"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2024.103750"},{"key":"ref21","volume-title":"Jaguar Land Rover Hack Cost U.K. Economy \u00a32.5 Billion","year":"2025"},{"key":"ref22","volume-title":"Former Employees Behind Tesla Data Breach","year":"2026"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-04083-2_2"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/LED.2020.3016119"},{"issue":"3","key":"ref25","doi-asserted-by":"crossref","first-page":"405","DOI":"10.1016\/S0957-4174(98)00041-4","article-title":"Ranking importance of input parameters of neural networks","volume":"15","author":"Sung","year":"1998","journal-title":"Expert Syst. Appl."},{"key":"ref26","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref27","first-page":"6103","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Shafahi"},{"key":"ref28","article-title":"Don\u2019t trigger me! A triggerless backdoor attack against deep neural networks","author":"Salem","year":"2020","journal-title":"arXiv:2010.03282"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228656"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"issue":"3","key":"ref31","doi-asserted-by":"crossref","first-page":"1142","DOI":"10.3390\/app15031142","article-title":"Reversible adversarial examples with minimalist evolution for recognition control in computer vision","volume":"15","author":"Yang","year":"2025","journal-title":"Appl. Sci."},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-8565-4_20"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i5.32571"},{"key":"ref34","first-page":"39898","article-title":"TinyMIG: Transferring generalization from vision foundation models to single-domain medical imaging","volume-title":"Proc. 42nd Int. Conf. Mach. Learn.","volume":"267","author":"Liu"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354209"},{"key":"ref36","first-page":"1523","article-title":"Graph backdoor","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Xi"},{"key":"ref37","first-page":"1487","article-title":"Explanation-guided backdoor poisoning attacks against malware classifiers","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Severi"},{"key":"ref38","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423362"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467405"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref42","volume-title":"Cifar-10 Dataset","author":"Krizhevsky","year":"2009"},{"key":"ref43","volume-title":"The Cifar-100 Dataset","year":"2009"},{"key":"ref44","volume-title":"German Traffic Sign Recognition Benchmark (GTSRB)","author":"Stallkamp","year":"2011"},{"issue":"7553","key":"ref45","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"Lecun","year":"2015","journal-title":"Nature"},{"key":"ref46","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref47","volume-title":"Microsoft AI Researchers Accidentally Exposed Terabytes of Internal Sensitive Data","year":"2023"},{"key":"ref48","volume-title":"Letter Regarding Meta LLaMA Model Leak","author":"Blumenthal","year":"2023"},{"key":"ref49","volume-title":"Tesla Data Breach","year":"2023"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765070"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11471748.pdf?arnumber=11471748","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T20:07:33Z","timestamp":1775678853000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11471748\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3680319","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}