{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T07:10:24Z","timestamp":1779347424313,"version":"3.51.4"},"reference-count":13,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T00:00:00Z","timestamp":1775606400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T00:00:00Z","timestamp":1775606400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,4,8]]},"DOI":"10.1109\/isbi61048.2026.11515306","type":"proceedings-article","created":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T19:48:46Z","timestamp":1779306526000},"page":"1-5","source":"Crossref","is-referenced-by-count":0,"title":["Useful Nonrobust Features are Ubiquitous in Biomedical Images"],"prefix":"10.1109","author":[{"given":"Coenraad","family":"Mouton","sequence":"first","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Randle","family":"Rabe","sequence":"additional","affiliation":[{"name":"North-West University,Faculty of Engineering,South Africa"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Niklas C","family":"Koser","sequence":"additional","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicolai","family":"Krekiehn","sequence":"additional","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christopher","family":"Hansen","sequence":"additional","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jan-Bernd","family":"Hovener","sequence":"additional","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Claus-C.","family":"Gluer","sequence":"additional","affiliation":[{"name":"University Hospital Schleswig-Holstein, Kiel University,Section Biomedical Imaging,Department of Radiology and Neuroradiology"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Adversarial examples are not bugs, they are features","author":"Ilyas","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1317"},{"key":"ref3","article-title":"Robustness may be at odds with accuracy","volume-title":"International Conference on Learning Representations","author":"Tsipras"},{"key":"ref4","article-title":"Robustbench: a standardized adversarial robustness benchmark","author":"Croce","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1038\/s41597-022-01721-8"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref8","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"International Conference on Machine Learning","author":"Zhang"},{"key":"ref9","article-title":"Overfitting in adversarially robust deep learning","volume-title":"International Conference on Machine Learning","author":"Rice"},{"key":"ref10","article-title":"Better diffusion models further improve adversarial training","volume-title":"International Conference on Machine Learning","author":"Wang"},{"key":"ref11","article-title":"Bag of tricks for adversarial training","volume-title":"International Conference on Learning Representations","author":"Pang"},{"key":"ref12","article-title":"Medmnist-c: Comprehensive benchmark and improved classifier robustness by simulating realistic image corruptions","author":"Di Salvo","year":"2024","journal-title":"arXiv preprint"},{"key":"ref13","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"International Conference on Machine Learning","author":"Croce"}],"event":{"name":"2026 IEEE 23rd International Symposium on Biomedical Imaging (ISBI)","location":"London, United Kingdom","start":{"date-parts":[[2026,4,8]]},"end":{"date-parts":[[2026,4,11]]}},"container-title":["2026 IEEE 23rd International Symposium on Biomedical Imaging (ISBI)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11515282\/11515297\/11515306.pdf?arnumber=11515306","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T06:37:03Z","timestamp":1779345423000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11515306\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,8]]},"references-count":13,"URL":"https:\/\/doi.org\/10.1109\/isbi61048.2026.11515306","relation":{},"subject":[],"published":{"date-parts":[[2026,4,8]]}}}