{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T10:17:14Z","timestamp":1777889834195,"version":"3.51.4"},"reference-count":55,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.01370","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"14766-14775","source":"Crossref","is-referenced-by-count":0,"title":["IAP: Invisible Adversarial Patch Attack Through Perceptibility-Aware Localization and Perturbation Optimization"],"prefix":"10.1109","author":[{"given":"Subrat Kishore","family":"Dutta","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiao","family":"Zhang","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3124815"},{"key":"ref2","article-title":"Adversarial patch","author":"Tom","year":"2017","journal-title":"arXiv preprint"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.338"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3582816"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00482"},{"key":"ref7","first-page":"8780","article-title":"Diffusion models beat gans on image synthesis","volume":"34","author":"Dhariwal","year":"2021","journal-title":"Advances in neural information processing systems"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/S0165-1684(98)00124-8"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/wacv61041.2025.00643"},{"key":"ref11","article-title":"Wichmann, and Wieland Brendel","author":"Geirhos","year":"2022","journal-title":"Imagenet-trained cnns are biased towards texture; increasing shape bias improves accuracy and robustness"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"Ian","year":"2014","journal-title":"arXiv preprint"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.12341"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00210"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.595"},{"key":"ref17","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/wsc57314.2022.10015376"},{"key":"ref19","author":"Ilyas","year":"2018","journal-title":"Black-box adversarial attacks with limited queries and information"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72943-0_8"},{"key":"ref21","first-page":"2507","article-title":"Lavan: Localized and visible adversarial noise","volume-title":"International Conference on Machine Learning","author":"Karmon","year":"2018"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.isprsjprs.2018.09.018"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.5244\/C.35.142"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2010.2087432"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11499"},{"key":"ref30","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv preprint"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref32","article-title":"Face recognition as a method of authentication in a web-based system","author":"Wycliff Mugalu","year":"2021","journal-title":"arXiv preprint"},{"key":"ref33","author":"Nie","year":"2022","journal-title":"Diffusion models for adversarial purification"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.5244\/C.29.41"},{"key":"ref35","article-title":"Visually imperceptible adversarial patch attacks on digital images","author":"Qian","journal-title":"arXiv preprint"},{"key":"ref36","article-title":"Berg, and Li Fei-Fei","author":"Russakovsky","year":"2015","journal-title":"Imagenet large scale visual recognition challenge"},{"key":"ref37","author":"Samangouei","journal-title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"ref41","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv preprint"},{"key":"ref42","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv preprint"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00398"},{"key":"ref44","article-title":"Guided diffusion model for adversarial purification","author":"Wang","year":"2022","journal-title":"arXiv preprint"},{"key":"ref45","article-title":"Generating visually realistic adversarial patch","author":"Wang","year":"2023","journal-title":"arXiv preprint"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/97.995823"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00794"},{"key":"ref49","author":"Xiang","journal-title":"Patchguard++: Efficient provable attack detection against adversarial patches, 2021"},{"key":"ref50","article-title":"Densepure: Understanding diffusion models for adversarial robustness","volume-title":"The Eleventh International Conference on Learning Representations","author":"Xiao","year":"2023"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00461"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01498"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-26409-2_19"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11446290.pdf?arnumber=11446290","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:21:14Z","timestamp":1777612874000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11446290\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.01370","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}