{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,26]],"date-time":"2026-10-26T17:48:56Z","timestamp":1793036936939,"version":"4.5.0"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2022,2]]},"DOI":"10.1109\/tai.2021.3107807","type":"journal-article","created":{"date-parts":[[2021,8,25]],"date-time":"2021-08-25T16:10:55Z","timestamp":1629907855000},"page":"20-28","source":"Crossref","is-referenced-by-count":22,"title":["Playing Against Deep-Neural-Network-Based Object Detectors: A Novel Bidirectional Adversarial Attack Approach"],"prefix":"10.1109","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1657-209X","authenticated-orcid":false,"given":"Xiang","family":"Li","sequence":"first","affiliation":[{"name":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3918-7039","authenticated-orcid":false,"given":"Yuchen","family":"Jiang","sequence":"additional","affiliation":[{"name":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chenglin","family":"Liu","sequence":"additional","affiliation":[{"name":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6933-092X","authenticated-orcid":false,"given":"Shaochong","family":"Liu","sequence":"additional","affiliation":[{"name":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2143-2438","authenticated-orcid":false,"given":"Hao","family":"Luo","sequence":"additional","affiliation":[{"name":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3802-9269","authenticated-orcid":false,"given":"Shen","family":"Yin","sequence":"additional","affiliation":[{"name":"Department of Mechanical and Industrial Engineering, Faculty of Engineering, Norwegian University of Science and Technology, Trondheim, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref2","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.2993842"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2021.3055397"},{"key":"ref5","first-page":"91","article-title":"Faster R-CNN: Towards real-time object detection with region proposal networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Ren","year":"2015"},{"key":"ref6","article-title":"YOLOv3: An incremental improvement","author":"Redmon","year":"2018"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/306"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.11208"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2019.2933524"},{"key":"ref11","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref13","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye","year":"2018"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2019.2958874"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MIE.2019.2938025"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2016.2530788"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2020.3033153"},{"key":"ref18","article-title":"DPatch: An adversarial patch attack on object detectors","author":"Liu","year":"2018"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/134"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.81"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2389824"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.106"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.650"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00644"},{"key":"ref29","article-title":"OverFeat: Integrated recognition, localization and detection using convolutional networks","author":"Sermanet","year":"2013"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.91"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.690"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.324"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2437384"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58601-0_24"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.300"},{"key":"ref38","article-title":"Robust adversarial perturbation on deep proposal-based models","author":"Li","year":"2018"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref40","article-title":"Fast is better than free: Revisiting adversarial training","author":"Wong","year":"2020"},{"key":"ref41","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref42","article-title":"Comment on ADV-BNN: Improved adversarial defense through robust Bayesian neural network","author":"Zimmermann","year":"2019"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9078688\/9687096\/09522031.pdf?arnumber=9522031","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:10:01Z","timestamp":1755911401000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9522031\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2]]},"references-count":42,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tai.2021.3107807","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,2]]}}}