{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T10:16:58Z","timestamp":1777889818476,"version":"3.51.4"},"reference-count":48,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62406309"],"award-info":[{"award-number":["62406309"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00218","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"2260-2269","source":"Crossref","is-referenced-by-count":0,"title":["NAPPure: Adversarial Purification for Robust Image Classification Under Non-Additive Perturbations"],"prefix":"10.1109","author":[{"given":"Junjie","family":"Nan","sequence":"first","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences,State Key Laboratory of AI Safety,Beijing,China,100190"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianing","family":"Li","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences,State Key Laboratory of AI Safety,Beijing,China,100190"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences,State Key Laboratory of AI Safety,Beijing,China,100190"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingkun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences,State Key Laboratory of AI Safety,Beijing,China,100190"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xueqi","family":"Cheng","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences,State Key Laboratory of AI Safety,Beijing,China,100190"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref2","article-title":"Adversarial patch","author":"Brown","year":"2017","journal-title":"arXiv preprint"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref4","article-title":"Robust classification via a single diffusion model","author":"Chen","year":"2023","journal-title":"arXiv preprint"},{"key":"ref5","article-title":"Defending adversarial patches via joint region localizing and inpainting","author":"Chen","year":"2023","journal-title":"arXiv preprint"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20071-7_4"},{"key":"ref7","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"International conference on machine learning","author":"Croce","year":"2020"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02364"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref10","article-title":"Generative adversarial nets","volume":"27","author":"Goodfellow","year":"2014","journal-title":"Advances in neural information processing systems"},{"key":"ref11","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv preprint"},{"key":"ref12","article-title":"Abba: Saliency-regularized motion-based adver-sarial blur attack","author":"Guo","year":"2020","journal-title":"arXiv preprint"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01066"},{"key":"ref14","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-024-05735-0"},{"key":"ref16","article-title":"Towards adversarial purification using denoising autoencoders","author":"Kalaria","year":"2022","journal-title":"arXiv preprint"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00467"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1926"},{"key":"ref19","article-title":"Auto-encoding variational bayes","author":"Kingma","year":"2013","journal-title":"arXiv preprint"},{"key":"ref20","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"arXiv preprint"},{"key":"ref21","author":"Krizhevsky","year":"2009","journal-title":"Learning multiple layers of features from tiny images"},{"key":"ref22","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016","journal-title":"arXiv preprint"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-43887-6_15"},{"key":"ref24","article-title":"Dpatch: An adversarial patch attack on object detectors","author":"Liu","year":"2018","journal-title":"arXiv preprint"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.10.046"},{"key":"ref27","article-title":"Diffusion models for adversarial purification","author":"Nie","year":"2022","journal-title":"arXiv preprint"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-68238-5_32"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-62460-6_51"},{"key":"ref30","article-title":"Defense-gan: protecting classifiers against adversarial attacks using generative models","author":"Samangouei","year":"2018","journal-title":"arXiv preprint"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02329"},{"key":"ref32","article-title":"Score-based generative modeling through stochastic differential equations","author":"Song","year":"2020","journal-title":"arXiv preprint"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"},{"key":"ref34","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv preprint"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3658237"},{"key":"ref36","article-title":"Guided diffusion model for adversarial purification","author":"Wang","year":"2022","journal-title":"arXiv preprint"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/694"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.738"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.728"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3217375"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref43","article-title":"Deformation-invariant neural network and its applications in distorted image restoration and analysis","author":"Zhang","year":"2023","journal-title":"arXiv preprint"},{"key":"ref44","article-title":"Causaldiff: Causality-inspired disentanglement via diffusion model for adversarial defense","author":"Zhang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.3233\/FAIA240745"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00186"},{"key":"ref47","article-title":"Adversarial training: A survey","author":"Zhao","year":"2024","journal-title":"arXiv preprint"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00129"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11445354.pdf?arnumber=11445354","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:18:28Z","timestamp":1777612708000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11445354\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00218","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}