{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,20]],"date-time":"2026-10-20T16:42:00Z","timestamp":1792514520914,"version":"4.5.0"},"reference-count":23,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,10,8]],"date-time":"2023-10-08T00:00:00Z","timestamp":1696723200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,10,8]],"date-time":"2023-10-08T00:00:00Z","timestamp":1696723200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,10,8]]},"DOI":"10.1109\/icip49359.2023.10223158","type":"proceedings-article","created":{"date-parts":[[2023,9,11]],"date-time":"2023-09-11T17:58:31Z","timestamp":1694455111000},"page":"3110-3114","source":"Crossref","is-referenced-by-count":11,"title":["GNP Attack: Transferable Adversarial Examples Via Gradient Norm Penalty"],"prefix":"10.1109","author":[{"given":"Tao","family":"Wu","sequence":"first","affiliation":[{"name":"Missouri University of Science and Technology,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tie","family":"Luo","sequence":"additional","affiliation":[{"name":"Missouri University of Science and Technology,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Donald C.","family":"Wunsch","sequence":"additional","affiliation":[{"name":"Missouri University of Science and Technology,Department of Electrical and Computer Engineering"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00124"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref4","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"International Conference on Learning Representations","author":"Liu"},{"key":"ref5","article-title":"Sharpness-aware minimization for efficiently improving generalization","volume-title":"International Conference on Learning Representations","author":"Foret"},{"key":"ref6","article-title":"Explaining and harnessing adversarial examples","volume-title":"International Conference on Learning Representations","author":"Goodfellow"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref9","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2015","journal-title":"ICLR"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.634"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01246-5_2"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00293"},{"key":"ref18","article-title":"Yet another intermediate-leve attack","author":"Li","year":"2020","journal-title":"ECCV"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref20","article-title":"Countering adversarial images using input transformations","volume-title":"International Conference on Learning Representations","author":"Guo"},{"key":"ref21","article-title":"Mitigating adversarial effects through randomization","volume-title":"International Conference on Learning Representations","author":"Xie"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00034"},{"key":"ref23","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"International Conference on Learning Representations","author":"Tram\u00e8r"}],"event":{"name":"2023 IEEE International Conference on Image Processing (ICIP)","location":"Kuala Lumpur, Malaysia","start":{"date-parts":[[2023,10,8]]},"end":{"date-parts":[[2023,10,11]]}},"container-title":["2023 IEEE International Conference on Image Processing (ICIP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10221937\/10221892\/10223158.pdf?arnumber=10223158","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T20:39:13Z","timestamp":1710362353000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10223158\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,8]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/icip49359.2023.10223158","relation":{},"subject":[],"published":{"date-parts":[[2023,10,8]]}}}