{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T16:22:35Z","timestamp":1786119755834,"version":"build-2736575974"},"reference-count":89,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"crossref","award":["2024JYCXJJ062"],"award-info":[{"award-number":["2024JYCXJJ062"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62506139"],"award-info":[{"award-number":["62506139"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Circuits Syst. Video Technol."],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1109\/tcsvt.2026.3679600","type":"journal-article","created":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T20:14:32Z","timestamp":1775074472000},"page":"12504-12516","source":"Crossref","is-referenced-by-count":0,"title":["Dual Adversarial Perturbations for Zero-Shot Learning"],"prefix":"10.1109","volume":"36","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-1181-4541","authenticated-orcid":false,"given":"Lei","family":"Wang","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology","place":["Wuhan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9633-3392","authenticated-orcid":false,"given":"Shiming","family":"Chen","sequence":"additional","affiliation":[{"name":"Mohamed bin Zayed University of Artificial Intelligence","place":["Abu Dhabi, United Arab Emirates"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5487-9845","authenticated-orcid":false,"given":"Guo-Sen","family":"Xie","sequence":"additional","affiliation":[{"name":"Nanjing University of Science and Technology","place":["Nanjing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8182-6570","authenticated-orcid":false,"given":"Chaojian","family":"Yu","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology","place":["Wuhan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2068-1409","authenticated-orcid":false,"given":"Xinhua","family":"You","sequence":"additional","affiliation":[{"name":"Hubei University","place":["Wuhan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4863-5681","authenticated-orcid":false,"given":"Qinmu","family":"Peng","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology","place":["Wuhan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0607-1777","authenticated-orcid":false,"given":"Xinge","family":"You","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology","place":["Wuhan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.328"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.140"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2020.2969787"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2025.3543035"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3579469"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2487986"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-017-1027-5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298911"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00680"},{"key":"ref10","article-title":"Learning structured output representation using deep conditional generative models","volume-title":"Proc. NeurIPS","volume":"28","author":"Sohn"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.575"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2025.3531697"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02112-9"},{"key":"ref14","article-title":"Efficient generalization improvement guided by random weight perturbation","author":"Li","year":"2022","journal-title":"arXiv:2211.11489"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413813"},{"key":"ref16","article-title":"Prototype-guided curriculum learning for zero-shot learning","author":"Wang","year":"2025","journal-title":"arXiv:2508.07771"},{"key":"ref17","article-title":"DeViSE: A deep visual-semantic embedding model","volume-title":"Proc. NeurIPS","author":"Frome"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00240"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00961"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3155602"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/134"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3229526"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.5555\/3295222.3295349"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02230"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-024-09724-9"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-025-02461-z"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.01888"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00844"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00859"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/BESC57393.2022.9995148"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00581"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01052"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00019"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2408354"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01905"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2025.3571142"},{"key":"ref37","first-page":"25595","article-title":"Understanding robust overfitting of adversarial training and beyond","volume-title":"Proc. ICML","author":"Yu"},{"key":"ref38","article-title":"Understanding robust overfitting from the feature generalization perspective","author":"Yu","year":"2023","journal-title":"arXiv:2310.00607"},{"key":"ref39","article-title":"AdLift: Lifting adversarial perturbations to safeguard 3D Gaussian splatting assets against instruction-driven editing","author":"Hong","year":"2025","journal-title":"arXiv:2512.07247"},{"key":"ref40","article-title":"Strength-adaptive adversarial training","author":"Yu","year":"2022","journal-title":"arXiv:2210.01288"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2572"},{"key":"ref42","article-title":"SWAT: Sliding window adversarial training for gradual domain adaptation","author":"Wang","year":"2025","journal-title":"arXiv:2501.19155"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475258"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3611823"},{"key":"ref45","first-page":"5905","article-title":"ASAM: Adaptive sharpness-aware minimization for scale-invariant learning of deep neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kwon"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02721"},{"key":"ref47","article-title":"When data-free knowledge distillation meets non-transferable teacher: Escaping out-of-distribution trap is all you need","author":"Hong","year":"2025","journal-title":"arXiv:2507.04119"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599501"},{"key":"ref49","article-title":"Sharpness-aware minimization with adaptive regularization for training deep neural networks","author":"Zou","year":"2024","journal-title":"arXiv:2412.16854"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1162"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00454"},{"key":"ref52","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2012.6247998"},{"key":"ref54","article-title":"Caltech-UCSD birds 200","author":"Welinder","year":"2010"},{"key":"ref55","article-title":"An image is worth 16\u00d716 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020","journal-title":"arXiv:2010.11929"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01405"},{"key":"ref57","first-page":"19849","article-title":"Compositional zero-shot learning via fine-grained dense feature composition","volume-title":"Proc. NeurIPS","volume":"33","author":"Huynh"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01515"},{"key":"ref59","first-page":"16622","article-title":"HSVA: Hierarchical semantic-visual adaptation for zero-shot learning","volume-title":"Proc. NeurIPS","volume":"34","author":"Chen"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3142181"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3282971"},{"key":"ref62","first-page":"4611","article-title":"Evolving semantic prototype improves generative zero-shot learning","volume-title":"Proc. ICML","author":"Chen"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/123"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00011"},{"key":"ref65","article-title":"Improving zero-shot generalization for clip with synthesized prompts","volume-title":"Proc. ICCV","author":"Wang"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i6.28381"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-025-02394-7"},{"key":"ref68","first-page":"21969","article-title":"Attribute prototype network for zero-shot learning","volume-title":"Proc. NeurIPS","volume":"33","author":"Xu"},{"key":"ref69","article-title":"Multi-head self-attention via vision transformer for zero-shot learning","author":"Alamri","year":"2021","journal-title":"arXiv:2108.00045"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-92659-5_30"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00910"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i1.19909"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3243205"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i1.25114"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3295738"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10095217"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW63382.2024.00775"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681629"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2024.3474910"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-023-4051-9"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3499377"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02262"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i5.32586"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2025.3544481"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00746"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01472"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.167"},{"key":"ref88","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"issue":"11","key":"ref89","first-page":"1","article-title":"Visualizing data using t-SNE","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."}],"container-title":["IEEE Transactions on Circuits and Systems for Video Technology"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/76\/11643439\/11460275.pdf?arnumber=11460275","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T19:04:16Z","timestamp":1786043056000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11460275\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":89,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tcsvt.2026.3679600","relation":{},"ISSN":["1051-8215","1558-2205"],"issn-type":[{"value":"1051-8215","type":"print"},{"value":"1558-2205","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8]]}}}