{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T00:19:56Z","timestamp":1787012396450,"version":"build-2736575974"},"reference-count":67,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"22","license":[{"start":{"date-parts":[[2022,11,15]],"date-time":"2022-11-15T00:00:00Z","timestamp":1668470400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,11,15]],"date-time":"2022-11-15T00:00:00Z","timestamp":1668470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,11,15]],"date-time":"2022-11-15T00:00:00Z","timestamp":1668470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902426"],"award-info":[{"award-number":["61902426"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62101560"],"award-info":[{"award-number":["62101560"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100007085","name":"National University of Defense Technology Research Fund","doi-asserted-by":"publisher","award":["ZK21-44"],"award-info":[{"award-number":["ZK21-44"]}],"id":[{"id":"10.13039\/501100007085","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2022,11,15]]},"DOI":"10.1109\/jiot.2021.3111024","type":"journal-article","created":{"date-parts":[[2021,9,8]],"date-time":"2021-09-08T16:25:05Z","timestamp":1631118305000},"page":"22399-22409","source":"Crossref","is-referenced-by-count":178,"title":["Adversarial Attacks and Defenses for Deep-Learning-Based Unmanned Aerial Vehicles"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1485-7465","authenticated-orcid":false,"given":"Jiwei","family":"Tian","sequence":"first","affiliation":[{"name":"ATC Navigation College, Air Force Engineering University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7425-0502","authenticated-orcid":false,"given":"Buhong","family":"Wang","sequence":"additional","affiliation":[{"name":"Information and Navigation College, Air Force Engineering University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rongxiao","family":"Guo","sequence":"additional","affiliation":[{"name":"Information and Navigation College, Air Force Engineering University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5765-0827","authenticated-orcid":false,"given":"Zhen","family":"Wang","sequence":"additional","affiliation":[{"name":"Information and Navigation College, Air Force Engineering University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6021-8798","authenticated-orcid":false,"given":"Kunrui","family":"Cao","sequence":"additional","affiliation":[{"name":"School of Information and Communications, National University of Defense Technology, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaodong","family":"Wang","sequence":"additional","affiliation":[{"name":"Tan Kan Kee College, Xiamen University, Zhangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2018.2795643"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2019.8909713"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaw4399"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3026543"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1900006"},{"key":"ref37","author":"boloor","year":"2019","journal-title":"Attacking Vision-based Perception in End-to-End Autonomous Driving Models"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2018.8587547"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2020.2977378"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2019.2948775"},{"key":"ref60","author":"hinton","year":"2015","journal-title":"Distilling the knowledge in a neural network"},{"key":"ref62","author":"szegedy","year":"2013","journal-title":"Intriguing properties of neural networks"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00673"},{"key":"ref27","author":"zhang","year":"2019","journal-title":"Adversarial Attacks on Deep Learning Models in Natural Language Processing A Survey"},{"key":"ref64","author":"zhang","year":"2019","journal-title":"Defense against adversarial attacks using feature scattering-based adversarial training"},{"key":"ref65","author":"shafahi","year":"2019","journal-title":"Adversarial training for free!"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196539"},{"key":"ref66","author":"wong","year":"2020","journal-title":"Fast is better than free Revisiting adversarial training"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3004827"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1080\/01691864.2019.1586760"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909530"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00500"},{"key":"ref23","author":"wang","year":"2019","journal-title":"Daedalus Breaking non-maximum suppression in object detection via adversarial examples"},{"key":"ref26","first-page":"1474","article-title":"Invisible adversarial attack against deep neural networks: An adaptive penalization approach","volume":"18","author":"wang","year":"2021","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33012253"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795496"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502939"},{"key":"ref59","author":"huang","year":"2015","journal-title":"Learning with a strong adversary"},{"key":"ref58","author":"tram\u00e8r","year":"2017","journal-title":"Ensemble adversarial training Attacks and defenses"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref54","author":"tabacof","year":"2016","journal-title":"Adversarial images for variational autoencoders"},{"key":"ref53","author":"wang","year":"2018","journal-title":"Survey on Unmanned Aerial Vehicle Networks A Cyber Physical System Perspective"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/UVS.2019.8658279"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3024643"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2021.3071405"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2019.2943232"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/PerCom45495.2020.9127389"},{"key":"ref13","author":"madry","year":"2017","journal-title":"Towards deep learning models resistant to adversarial attacks"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3008232"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3005688"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2975654"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3004498"},{"key":"ref18","author":"goodfellow","year":"2014","journal-title":"Explaining and Harnessing Adversarial Examples"},{"key":"ref19","author":"kurakin","year":"2016","journal-title":"Adversarial examples in the physical world"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2907873"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2953903"},{"key":"ref6","author":"wong","year":"2020","journal-title":"Stereopagnosia Fooling stereo networks with adversarial perturbations"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/3296874"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3016145"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3400302.3415758"},{"key":"ref49","first-page":"23","article-title":"Wi-Fi security: A literature review of security in wireless network","volume":"3","author":"bhatnagar","year":"2015","journal-title":"Int J Res Eng Technol"},{"key":"ref9","first-page":"877","article-title":"Towards robust LiDAR-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures","author":"sun","year":"2020","journal-title":"Proc 29th USENIX Security Symp"},{"key":"ref46","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Advances in neural information processing systems"},{"key":"ref45","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"srivastava","year":"2014","journal-title":"J Mach Learn Res"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2015.2400443"},{"key":"ref47","author":"papernot","year":"2016","journal-title":"Transferability in machine learning from phenomena to black-box attacks using adversarial samples"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2018.2888779"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/AIPR50011.2020.9425190"},{"key":"ref44","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00783"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/9939125\/09530723.pdf?arnumber=9530723","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T18:02:30Z","timestamp":1670263350000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9530723\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,15]]},"references-count":67,"journal-issue":{"issue":"22"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2021.3111024","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,11,15]]}}}