{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T06:24:33Z","timestamp":1780640673650,"version":"3.54.1"},"reference-count":90,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2022YFB3103500"],"award-info":[{"award-number":["2022YFB3103500"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62020106013"],"award-info":[{"award-number":["62020106013"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62502075"],"award-info":[{"award-number":["62502075"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2024ZHCG0188"],"award-info":[{"award-number":["2024ZHCG0188"]}]},{"name":"Chengdu Science and Technology Program","award":["2023-XT00-00002-GX"],"award-info":[{"award-number":["2023-XT00-00002-GX"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1109\/tdsc.2025.3603988","type":"journal-article","created":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T18:11:55Z","timestamp":1756404715000},"page":"17-33","source":"Crossref","is-referenced-by-count":1,"title":["No Trespassing: Ground-View Adversarial Patches for Privacy-Aware Management in COTS Robot Vacuum Cleaner"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-6575-5101","authenticated-orcid":false,"given":"Shuai","family":"Yuan","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1961-7946","authenticated-orcid":false,"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1200-2588","authenticated-orcid":false,"given":"Rui","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0957-8576","authenticated-orcid":false,"given":"Hangcheng","family":"Cao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong SAR, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3247-6516","authenticated-orcid":false,"given":"Xinyuan","family":"Qian","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0671-3020","authenticated-orcid":false,"given":"Tao","family":"Ni","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong SAR, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-2846","authenticated-orcid":false,"given":"Qingchuan","family":"Zhao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong SAR, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1079-3871","authenticated-orcid":false,"given":"Yuguang","family":"Fang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong SAR, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Robotic vacuum cleaner market size","author":"Insights","year":"2024"},{"key":"ref2","article-title":"These robot vacuums have built-in cameras. Here\u2019s what they can do","author":"Bradford","year":"2024"},{"key":"ref3","article-title":"Honest, objective, lab-tested reviews","year":"2024"},{"key":"ref4","article-title":"Worldwide quarterly smart home device tracker","year":"2024"},{"key":"ref5","article-title":"Idc: Global sweeping robot market shipment growth continues in q3, rolling with momentum","year":"2024"},{"key":"ref6","article-title":"Roborock official website","year":"2024"},{"key":"ref7","article-title":"A roomba recorded a woman on the toilet. How did screenshots end up on facebook","author":"Guo","year":"2022"},{"key":"ref8","article-title":"This sucks: Intimate photos taken by robot vacuums were leaked online","year":"2023"},{"key":"ref9","article-title":"Hackers take control of robot vacuums in multiple cities, yell racial slurs","author":"News","year":"2024"},{"key":"ref10","article-title":"We hacked a robot vacuum and could watch live through its camera","author":"News","year":"2024"},{"key":"ref11","first-page":"4507","article-title":"InstaHide: Instance-hiding schemes for private distributed learning","volume-title":"Proc. 37th Int. Conf. Mach. Learn.","author":"Huang","year":"2020"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00165"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2024.3383337"},{"key":"ref15","article-title":"Robot vacuum boundary strips: Set up cleaning boundaries in your home","year":"2022"},{"key":"ref16","article-title":"The differences between virtual boundary, no-go zone, and no-mop zone","year":"2024"},{"key":"ref17","article-title":"How robot vacuums avoid certain areas","year":"2024"},{"key":"ref18","article-title":"How to block robot vacuum","year":"2024"},{"key":"ref19","article-title":"Roomba owners can now set keep out zones for their robot vacuums","author":"Allison","year":"2019"},{"key":"ref20","article-title":"What are keep-out zones","year":"2021"},{"key":"ref21","article-title":"Magnetic strip invisible wall for t10","year":"2024"},{"key":"ref22","article-title":"Dual mode virtual wall barrier","year":"2024"},{"key":"ref23","article-title":"How to choose a robot vacuum with no-go zone","year":"2024"},{"key":"ref24","article-title":"Roborock s6 no-go zones and virtual walls tutorial","year":"2024"},{"key":"ref25","article-title":"Robot vacuum magnetic boundary strip","year":"2024"},{"key":"ref26","article-title":"Magnetic boundary strips","year":"2024"},{"key":"ref27","article-title":"Dual model virtual wall barrier","year":"2024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1038\/s41418-020-00720-9"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354259"},{"key":"ref31","first-page":"1865","article-title":"SLAP: Improving physical adversarial examples with short-lived adversarial perturbations","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Lovisotto","year":"2021"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00411"},{"key":"ref33","first-page":"7321","article-title":"Physical-world adversarial attack on monocular depth estimation with perspective hijacking","volume-title":"Proc. USENIX Secur","author":"Zheng","year":"2024"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1080\/02522667.2009.10699865"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.robot.2013.09.014"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.2174\/1872212118666230727102033"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.aej.2018.07.005"},{"issue":"2","key":"ref38","first-page":"1","article-title":"An empirical evaluation framework for autonomous vacuum cleaners in industrial and commercial settings: A multi-metric approach","volume":"13","author":"Khanna","year":"2023","journal-title":"Empirical Quests Manage. Essences"},{"key":"ref39","article-title":"How do i use dual mode virtual wall barrier","year":"2023"},{"key":"ref40","article-title":"Using the magnetic tape for all roborock robot vacuums","year":"2019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.l007\/978-3-319-46448-0_2"},{"key":"ref43","article-title":"YOLOv3: An incremental improvement","author":"Redmon","year":"2018"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00721"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2577031"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00644"},{"key":"ref48","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref49","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01498"},{"key":"ref51","article-title":"Adversarial color film: Effective physical-world attack to DNNs","author":"Hu","year":"2022"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3430860"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00443"},{"key":"ref56","first-page":"2507","article-title":"LaVAN: Localized and visible adversarial noise","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","author":"Karmon","year":"2018"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1177\/1729881419857432"},{"key":"ref59","first-page":"2065","article-title":"PatchCleanser: Certifiably robust defense against adversarial patches for any image classifier","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Xiang","year":"2022"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3330769"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00775"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICMEW46912.2020.9105983"},{"key":"ref64","article-title":"Dynamic adversarial patch for evading object detection models","author":"Hoory","year":"2020"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00461"},{"key":"ref66","article-title":"Robot vacuum cleaners hacked to spy on, insult owners","author":"Arntz","year":"2024"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3384419.3430781"},{"key":"ref68","article-title":"Ecovacs home robots can be hacked to spy on their owners, researchers say","author":"Franceschi-Bicchierai","year":"2024"},{"key":"ref69","article-title":"Not all iot devices are created equal: Reverse engineering of xiaomi\u2019s iot ecosystem","author":"Giese","year":"2018"},{"key":"ref70","article-title":"Privacy leaks in smart devices: Extracting data from used smart home devices","author":"Giese","year":"2019"},{"key":"ref71","article-title":"Robots With Lasers and Cameras but no security Liberating your vacuum from the cloud","author":"Giese","year":"2021"},{"key":"ref72","article-title":"Reverse engineering and hacking ecovacs robots - the bad and the really bad","author":"Giese","year":"2024"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639144"},{"key":"ref74","first-page":"416","article-title":"CosPGD: A unified white-box adversarial attack for pixel-wise prediction tasks","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Agnihotri","year":"2024"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3315414"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01466"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i6.25896"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3194988"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3574432"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-34372-9"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1911.08287"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01575"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2023.3302838"},{"key":"ref86","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","author":"Athalye","year":"2018"},{"key":"ref87","article-title":"The narwal freo z ultra robot vacuum","author":"Narwal","year":"2024"},{"key":"ref88","article-title":"Robot cleaner computer vision project","author":"Moon","year":"2023"},{"key":"ref89","article-title":"gbgs computer vision project","year":"2023"},{"key":"ref90","first-page":"2980","article-title":"Focal loss for dense object detection","volume-title":"Proc. IEEE Conf. Comput. Vis. Pattern Recognit.","author":"Ross","year":"2017"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11354469\/11143951.pdf?arnumber=11143951","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T23:23:26Z","timestamp":1768951406000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11143951\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1]]},"references-count":90,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3603988","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1]]}}}