{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T17:10:33Z","timestamp":1774631433016,"version":"3.50.1"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Circuits Syst. Video Technol."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1109\/tcsvt.2025.3540881","type":"journal-article","created":{"date-parts":[[2025,2,13]],"date-time":"2025-02-13T18:47:42Z","timestamp":1739472462000},"page":"7129-7142","source":"Crossref","is-referenced-by-count":1,"title":["Universal Multi-View Black-Box Attack Against Object Detectors via Layout Optimization"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4685-8232","authenticated-orcid":false,"given":"Donghua","family":"Wang","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5224-9834","authenticated-orcid":false,"given":"Wen","family":"Yao","sequence":"additional","affiliation":[{"name":"Defense Innovation Institute, Chinese Academy of Military Science, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1637-2928","authenticated-orcid":false,"given":"Tingsong","family":"Jiang","sequence":"additional","affiliation":[{"name":"Defense Innovation Institute, Chinese Academy of Military Science, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2391-7319","authenticated-orcid":false,"given":"Chao","family":"Li","sequence":"additional","affiliation":[{"name":"School of Automation and Electrical Engineering, Zhongyuan University of Technology, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9255-3371","authenticated-orcid":false,"given":"Xiaoqian","family":"Chen","sequence":"additional","affiliation":[{"name":"Defense Innovation Institute, Chinese Academy of Military Science, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. 2nd Int. Conf. Learn. Represent. (ICLR)","author":"Szegedy"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3151373"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108979"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00411"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3276442"},{"key":"ref6","article-title":"Towards deep learning models resistant to adversarial attacks","volume-title":"Proc. 6th Int. Conf. Learn. Represent. (ICLR)","author":"M\u0105dry"},{"key":"ref7","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016","journal-title":"arXiv:1611.01236"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3341170"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3234266"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2024.3351680"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/tgrs.2023.3315053"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3307150"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2861800"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3345136"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00080"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00846"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i2.20141"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/125"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01487"},{"key":"ref22","article-title":"Physical adversarial attack on vehicle detector in the Carla simulator","author":"Wu","year":"2020","journal-title":"arXiv:2007.16118"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3198857"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10925-7_4"},{"key":"ref27","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref29","article-title":"Improving the transferability of adversarial examples with new iteration framework and input dropout","author":"Xie","year":"2021","journal-title":"arXiv:2106.01617"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3321707.3321749"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110767"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2948146"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58574-7_41"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.319"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.5244\/C.31.30"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01240-3_2"},{"key":"ref38","article-title":"ViewFool: Evaluating the robustness of visual recognition to adversarial viewpoints","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Dong"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108279"},{"key":"ref40","article-title":"A survey on physical adversarial attack in computer vision","author":"Wang","year":"2022","journal-title":"arXiv:2209.14262"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475653"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00775"},{"key":"ref43","article-title":"Camou: Learning a vehicle camouflage for physical adversarial attack on object detections in the wild","volume-title":"Proc. ICLR","author":"Zhang"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02098-4"},{"key":"ref45","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Tram\u00e8r"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00461"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02310"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02300"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.110038"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00191"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00059"},{"key":"ref52","article-title":"Countering adversarial images using input transformations","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Guo"},{"key":"ref53","article-title":"Mitigating adversarial effects through randomization","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Xie"},{"key":"ref54","volume-title":"Ultralytics\/YOLOv5: V6.0\u2014YOLOv5n \u2019nano\u2019 models, Roboflow integration, TensorFlow export, OpenCV DNN support","author":"Jocher"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.324"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58452-8_13"},{"key":"ref57","first-page":"91","article-title":"Faster R-CNN: Towards real-time object detection with region proposal networks","volume-title":"Proc. Int. Conf. Adv. Neural Inf. Process. Syst.","volume":"28","author":"Ren"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.5555\/3454287.3455008"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2012.2209421"},{"key":"ref63","article-title":"Open3D: A modern library for 3D data processing","author":"Zhou","year":"2018","journal-title":"arXiv:1801.09847"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"}],"container-title":["IEEE Transactions on Circuits and Systems for Video Technology"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/76\/11071401\/10884559.pdf?arnumber=10884559","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,5]],"date-time":"2025-07-05T04:31:44Z","timestamp":1751689904000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10884559\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":64,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tcsvt.2025.3540881","relation":{},"ISSN":["1051-8215","1558-2205"],"issn-type":[{"value":"1051-8215","type":"print"},{"value":"1558-2205","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}