{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T17:41:07Z","timestamp":1772905267618,"version":"3.50.1"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"publisher","award":["62202190"],"award-info":[{"award-number":["62202190"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"publisher","award":["U22B2017"],"award-info":[{"award-number":["U22B2017"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100019035","name":"Hubei NSF","doi-asserted-by":"publisher","award":["2023AFB237"],"award-info":[{"award-number":["2023AFB237"]}],"id":[{"id":"10.13039\/501100019035","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Knowledge Innovation Program of Wuhan-Shuguang"},{"DOI":"10.13039\/100000183","name":"NSF, ARO","doi-asserted-by":"publisher","award":["77191"],"award-info":[{"award-number":["77191"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"name":"NYU Abu Dhabi CAIR"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2024,6]]},"DOI":"10.1109\/tai.2023.3340982","type":"journal-article","created":{"date-parts":[[2023,12,11]],"date-time":"2023-12-11T15:05:20Z","timestamp":1702307120000},"page":"3083-3097","source":"Crossref","is-referenced-by-count":9,"title":["Manipulation Attacks on Learned Image Compression"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7231-8315","authenticated-orcid":false,"given":"Kang","family":"Liu","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5912-6683","authenticated-orcid":false,"given":"Di","family":"Wu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-0859-7464","authenticated-orcid":false,"given":"Yangyu","family":"Wu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5385-7813","authenticated-orcid":false,"given":"Yiru","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4674-6006","authenticated-orcid":false,"given":"Dan","family":"Feng","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7642-3638","authenticated-orcid":false,"given":"Benjamin","family":"Tan","sequence":"additional","affiliation":[{"name":"University of Calgary, Calgary, AB, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6158-9512","authenticated-orcid":false,"given":"Siddharth","family":"Garg","sequence":"additional","affiliation":[{"name":"New York University, Brooklyn, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2012.2221191"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S0923-5965(01)00024-8"},{"key":"ref3","article-title":"End-to-end optimized image compression","author":"Ball\u00e9","year":"2016"},{"key":"ref4","article-title":"Variational image compression with a scale hyperprior","author":"Ball\u00e9","year":"2018"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00796"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00031"},{"key":"ref7","first-page":"10794","article-title":"Joint autoregressive and hierarchical priors for learned image compression","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Minnen","year":"2018"},{"key":"ref8","first-page":"1","article-title":"Variable rate image compression with recurrent neural networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Toderici","year":"2016"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref11","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3408288"},{"key":"ref13","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00040"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/79.952802"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6736"},{"key":"ref17","article-title":"Context-adaptive entropy model for end-to-end optimized image compression","author":"Lee","year":"2018"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00462"},{"key":"ref19","article-title":"Kodak lossless true color image suite (PhotoCD PCD0992)","volume":"6","author":"Kodak","year":"1993"},{"key":"ref20","article-title":"CompressAI: A PyTorch library and evaluation platform for end-to-end compression research","author":"B\u00e9gaint","year":"2020"},{"key":"ref21","first-page":"1","article-title":"Residual non-local attention networks for image restoration","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zhang","year":"2019"},{"key":"ref22","article-title":"Non-local attention optimized deep image compression","author":"Liu","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3594869"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00950"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01009"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3572843"},{"key":"ref27","first-page":"11913","article-title":"High-fidelity generative image compression","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Mentzer","year":"2020"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02138"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01383"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01697"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.577"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00461"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3026003"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00324"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01709"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01453"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"issue":"1\u20139","key":"ref38","first-page":"16","article-title":"Exploiting machine learning to subvert your spam filter","volume":"8","author":"Nelson","year":"2008","journal-title":"LEET"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00024"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3276442"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01179"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23165"},{"key":"ref45","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Tram\u00e8r","year":"2018"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00624"},{"key":"ref48","article-title":"Countering adversarial images using input transformations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Guo","year":"2018"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00894"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3264699"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/833"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9078688\/10571778\/10352982.pdf?arnumber=10352982","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:09:08Z","timestamp":1755911348000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10352982\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6]]},"references-count":53,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tai.2023.3340982","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,6]]}}}