{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T06:07:23Z","timestamp":1775110043112,"version":"3.50.1"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2341228"],"award-info":[{"award-number":["U2341228"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE\/CAA J. Autom. Sinica"],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/jas.2025.125438","type":"journal-article","created":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T20:13:58Z","timestamp":1775074438000},"page":"620-632","source":"Crossref","is-referenced-by-count":0,"title":["Crafting Physical Adversarial Examples by Combining Differentiable and Physically Based Renders"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-5708-4467","authenticated-orcid":false,"given":"Yuqiu","family":"Liu","sequence":"first","affiliation":[{"name":"School of Technology, Beijing Forestry University,Beijing,China,100083"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9444-3165","authenticated-orcid":false,"given":"Huanqian","family":"Yan","sequence":"additional","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China,100084"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8971-6475","authenticated-orcid":false,"given":"Xiaopei","family":"Zhu","sequence":"additional","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China,100084"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4907-7354","authenticated-orcid":false,"given":"Xiaolin","family":"Hu","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology (BNRist), DG\/McGovern Institute for Brain Research, Tsinghua University,Tsinghua Laboratory of Brain and Intelligence (THBI),Department of Computer Science and Technology,Beijing,China,100084"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2012-5367","authenticated-orcid":false,"given":"Liang","family":"Tang","sequence":"additional","affiliation":[{"name":"School of Technology, Beijing Forestry University,Beijing,China,100083"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8294-6315","authenticated-orcid":false,"given":"Hang","family":"Su","sequence":"additional","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China,100084"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6897-4512","authenticated-orcid":false,"given":"Chen","family":"Lv","sequence":"additional","affiliation":[{"name":"School of Mechanical and Aerospace Engineering, Nanyang Technological University,Singapore,Singapore,119077"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. 3rd Int. Conf. Learning Representations","author":"Goodfellow"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref5","first-page":"27353","article-title":"Modeling adversarial noise for adversarial training","volume-title":"Proc. 39th Int. Conf. Machine Learning","author":"Zhou"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00080"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01295"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref10","article-title":"Naturalistic-aware adversarial texture black-box attack for 3D objects against object detection in the physical world","author":"Wang","year":"2023","journal-title":"SSRN preprint SSRN: 4545326"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.03.041"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01296"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16477"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i12.26777"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0259"},{"key":"ref16","article-title":"Physical adversarial attack on vehicle detector in the Carla simulator","author":"Wu","year":"2020","journal-title":"arXiv preprint"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01628"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00846"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i2.20141"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109435"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/125"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01487"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00397"},{"key":"ref24","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. 2nd Int. Conf. Learning Representations","author":"Szegedy","year":"2013"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref28","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. 35th Int. Conf. Machine Learning","author":"Athalye"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref30","first-page":"3896","article-title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","volume-title":"Proc. 36th Int. Conf. Machine Learning","author":"Li"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10925-7_4"},{"key":"ref33","first-page":"1","article-title":"CAMOU: Learning a vehicle camouflage for physical adversarial attack on object detectors in the wild","volume-title":"Proc. 7th Int. Conf. Learning Representations","author":"Zhang"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1201\/9781315382555"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00411"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3415263.3419160"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA52953.2021.00009"},{"key":"ref38","volume-title":"Introducing Autodesk MAYA 2013","author":"Derakhshani","year":"2012"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1405.0312"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref42","first-page":"1","article-title":"CARLA: An open urban driving simulator","volume-title":"Proc. 1st Annu. Conf. Robot Learning","author":"Dosovitskiy"},{"key":"ref43","first-page":"91","article-title":"Faster R-CNN: Towards real-time object detection with region proposal networks","volume-title":"Proc. 29th Int. Conf. Neural Information Processing Systems","author":"Ren"},{"key":"ref44","article-title":"YOLOv3: An incremental improvement","author":"Redmon","year":"2018","journal-title":"arXiv preprint"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46448-0_2"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58452-8_13"},{"key":"ref47","first-page":"1","article-title":"DINO: DETR with improved DeNoising anchor boxes for end-to-end object detection","volume-title":"Proc. 11th Int. Conf. Learning Representations","author":"Zhang"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00708"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01612"},{"key":"ref51","article-title":"Improved regularization of convolutional neural networks with cutout","author":"DeVries","year":"2017","journal-title":"arXiv preprint"}],"container-title":["IEEE\/CAA Journal of Automatica Sinica"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6570654\/11459966\/11460109.pdf?arnumber=11460109","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T04:53:28Z","timestamp":1775105608000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11460109\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":51,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/jas.2025.125438","relation":{},"ISSN":["2329-9266","2329-9274"],"issn-type":[{"value":"2329-9266","type":"print"},{"value":"2329-9274","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3]]}}}