{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T12:19:10Z","timestamp":1778156350296,"version":"3.51.4"},"reference-count":39,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,7,5]],"date-time":"2021-07-05T00:00:00Z","timestamp":1625443200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2021,7,5]],"date-time":"2021-07-05T00:00:00Z","timestamp":1625443200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,7,5]]},"DOI":"10.1109\/icme51207.2021.9428437","type":"proceedings-article","created":{"date-parts":[[2021,6,9]],"date-time":"2021-06-09T21:14:21Z","timestamp":1623273261000},"page":"1-6","source":"Crossref","is-referenced-by-count":20,"title":["Bias Field Poses a Threat to DNN-Based X-Ray Recognition"],"prefix":"10.1109","author":[{"given":"Binyu","family":"Tian","sequence":"first","affiliation":[{"name":"Tianjin University,College of Intelligence and Computing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qing","family":"Guo","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Felix","family":"Juefei-Xu","sequence":"additional","affiliation":[{"name":"Alibaba Group,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wen Le","family":"Chan","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yupeng","family":"Cheng","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaohong","family":"Li","sequence":"additional","affiliation":[{"name":"Tianjin University,College of Intelligence and Computing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaofei","family":"Xie","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shengchao","family":"Qin","sequence":"additional","affiliation":[{"name":"Teesside University,UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Deep-Gauge: Multi-Granularity Testing Criteria for Deep Learning Systems","author":"ma","year":"2018","journal-title":"IEEE\/ACM Int Conference on Automated Software Engineering (ASE)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338954"},{"key":"ref33","article-title":"Making Images Undiscoverable from Co-Saliency Detection","author":"gao","year":"2020"},{"key":"ref32","article-title":"Countering malicious deepfakes: Survey, battleground, and horizon","author":"juefei-xu","year":"2021"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413732"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7952496"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2018.00021"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330579"},{"key":"ref35","article-title":"It's Raining Cats or Dogs? Adversarial Rain Attack on DNN Perception","author":"zhai","year":"2020"},{"key":"ref34","article-title":"Adversarial Exposure Attack on Diabetic Retinopathy Imagery","author":"cheng","year":"2020"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-32390-2_64"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45087-0_13"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1002\/mrm.20482"},{"key":"ref13","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref17","article-title":"Abba: Saliency-regularized motion-based adversarial blur attack","author":"guo","year":"2020"},{"key":"ref18","article-title":"Spark: Spatial-aware online incremental attack against visual tracking","author":"guo","year":"2020","journal-title":"Proceedings of the European Conference on Computer Vision (ECCV)"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413544"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2955292"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2010.5540205"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7952270"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.371"},{"key":"ref6","article-title":"Learning to diagnose from scratch by exploiting dependencies among labels","author":"yao","year":"2017","journal-title":"CoRR"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2745205"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.369"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-020-76550-z"},{"key":"ref7","article-title":"Diagnose like a radiologist: Attention guided convolutional neural network for thorax disease classification","author":"guan","year":"2018","journal-title":"CoRR"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/42.996338"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2006.891486"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2020.09.010"},{"key":"ref20","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2016"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32245-8_34"},{"key":"ref21","article-title":"Adversarial attacks against medical deep learning systems","author":"finlayson","year":"2018"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2012.2214050"},{"key":"ref26","article-title":"Foolbox: A python toolbox to benchmark the robustness of machine learning models","author":"rauber","year":"2017"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"}],"event":{"name":"2021 IEEE International Conference on Multimedia and Expo (ICME)","location":"Shenzhen, China","start":{"date-parts":[[2021,7,5]]},"end":{"date-parts":[[2021,7,9]]}},"container-title":["2021 IEEE International Conference on Multimedia and Expo (ICME)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9428049\/9428068\/09428437.pdf?arnumber=9428437","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T21:28:38Z","timestamp":1656365318000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9428437\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,5]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/icme51207.2021.9428437","relation":{},"subject":[],"published":{"date-parts":[[2021,7,5]]}}}