{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:42:53Z","timestamp":1763192573148,"version":"3.45.0"},"reference-count":38,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11227422","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-10","source":"Crossref","is-referenced-by-count":0,"title":["Detecting and Removing Adversarial Patches using Frequency Signatures"],"prefix":"10.1109","author":[{"given":"Dominic","family":"Simon","sequence":"first","affiliation":[{"name":"University of Florida,ECE Department,Gainesville,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chase","family":"Walker","sequence":"additional","affiliation":[{"name":"University of Florida,ECE Department,Gainesville,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sumit","family":"Jha","sequence":"additional","affiliation":[{"name":"Florida International University,School of Computing and Information Sciences,Miami,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rickard","family":"Ewetz","sequence":"additional","affiliation":[{"name":"University of Florida,ECE Department,Gainesville,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"article-title":"Intriguing properties of neural networks","year":"2014","author":"Szegedy","key":"ref1"},{"article-title":"Adversarial patch","year":"2018","author":"Brown","key":"ref2"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58574-7_41"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"article-title":"Keeping the bad guys out: Protecting and vaccinating deep learning with JPEG compression","year":"2017","author":"Das","key":"ref5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/wacv.2019.00143"},{"article-title":"(de)randomized smoothing for certifiable defense against patch attacks","year":"2020","author":"Levine","key":"ref7"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-61638-0_31"},{"article-title":"Patchcleanser: Certifiably robust defense against adversarial patches for any image classifier","volume-title":"31st USENIX Security Symposium (USENIX Security)","author":"Xiang","key":"ref9"},{"article-title":"Scalecert: Scalable certified defense against adversarial patches with sparse superficial layers","year":"2021","author":"Han","key":"ref10"},{"article-title":"Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking","volume-title":"30th USENIX Security Symposium (USENIX Security)","author":"Xiang","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00398"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00775"},{"article-title":"Lavan: Localized and visible adversarial noise","year":"2018","author":"Karmon","key":"ref15"},{"article-title":"Dpatch: An adversarial patch attack on object detectors","year":"2019","author":"Liu","key":"ref16"},{"article-title":"Adversarial defense by suppressing high-frequency components","year":"2019","author":"Zhang","key":"ref17"},{"year":"2019","key":"ref18","article-title":"Alibaba adversarial ai challenge"},{"article-title":"Towards deep learning models resistant to adversarial attacks","year":"2017","author":"Madry","key":"ref19"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/sp46215.2023.10179319"},{"article-title":"Thwarting adversarial examples: An l0-robustsparse fourier transform","year":"2018","author":"Bafna","key":"ref21"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.1967.5217220"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.1979.4310076"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2001.990497"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"article-title":"xview: Objects in context in overhead imagery","year":"2018","author":"Lam","key":"ref26"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2005.177"},{"article-title":"Pytorch: An imperative style, high-performance deep learning library","year":"2019","author":"Paszke","key":"ref28"},{"article-title":"Deep residual learning for image recognition","year":"2015","author":"He","key":"ref29"},{"year":"2023","key":"ref30","article-title":"Armory"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2016.2577031"},{"article-title":"Darknet: Open source neural networks in c","year":"2013","author":"Redmon","key":"ref32"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01283"},{"article-title":"Adversarial robustness toolbox v1.2.0","year":"2018","author":"Nicolae","key":"ref34"},{"year":"2022","key":"ref35","article-title":"Patchcleanser"},{"article-title":"Naturalistc patch","year":"2021","author":"Kung","key":"ref36"},{"article-title":"Segment and complete","year":"2021","author":"Liu","key":"ref37"},{"year":"2020","key":"ref38","article-title":"Local gradient smoothing"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11227422.pdf?arnumber=11227422","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:38:33Z","timestamp":1763192313000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11227422\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11227422","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}