{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T04:06:45Z","timestamp":1778904405505,"version":"3.51.4"},"reference-count":76,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tdsc.2026.3660107","type":"journal-article","created":{"date-parts":[[2026,2,3]],"date-time":"2026-02-03T20:57:25Z","timestamp":1770152245000},"page":"6005-6018","source":"Crossref","is-referenced-by-count":0,"title":["Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7148-6699","authenticated-orcid":false,"given":"Samra","family":"Irshad","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, Kyung Hee University, Yongin, South Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9721-4093","authenticated-orcid":false,"given":"Seungkyu","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Kyung Hee University, Yongin, South Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6032-5611","authenticated-orcid":false,"given":"Nassir","family":"Navab","sequence":"additional","affiliation":[{"name":"Technical University of Munich, München, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6626-5683","authenticated-orcid":false,"given":"Hong Joo","family":"Lee","sequence":"additional","affiliation":[{"name":"Technical University of Munich, München, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2132-6021","authenticated-orcid":false,"given":"Seong Tae","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Kyung Hee University, Seoul, South Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"End to end learning for self-driving cars","author":"Bojarski","year":"2016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-023-10558-5"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/nature14236"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01426"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00016"},{"key":"ref8","article-title":"Adversarial patch","author":"Brown","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref10","article-title":"Shadows aren\u2019t so dangerous after all: A fast and robust defense against shadow-based adversarial attacks","author":"Wang","year":"2022"},{"key":"ref11","article-title":"Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking","author":"Xiang","year":"2021","journal-title":"USENIX Security Symposium (USENIX Security)"},{"key":"ref12","article-title":"Defense-GAN: Protecting classifiers against adversarial attacks using generative models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Samangouei","year":"2018"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"ref14","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Szegedy","year":"2014"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref18","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow","year":"2015"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"ref22","first-page":"8322","article-title":"Constructing unrestricted adversarial examples with generative models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Song","year":"2018"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr42600.2020.00821"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.167"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01064"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01219-9_11"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref29","first-page":"2237","article-title":"PatchGuard: A provably robust defense against adversarial patches via small receptive fields and masking","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Xiang","year":"2021"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr46437.2021.01443"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00411"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref36","article-title":"Benchmarking neural network robustness to common corruptions and perturbations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Madry","year":"2019"},{"key":"ref37","first-page":"618","article-title":"Grad-CAM: Visual explanations from deep networks via gradient-based localization","volume-title":"Proc. IEEE Int. Conf. Comput. Vis.","author":"Madry","year":"2017"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.265"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3186918"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3529197"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01443"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2023.103877"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108985"},{"key":"ref44","article-title":"Countering adversarial images using input transformations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Guo","year":"2018"},{"key":"ref45","article-title":"Mitigating adversarial effects through randomization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie","year":"2018"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref49","first-page":"6105","article-title":"Efficientnet: Rethinking model scaling for convolutional neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Huang","year":"2019"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1704.04861"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2010.11929"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref53","first-page":"459","article-title":"Maxvit: Multi-axis vision transformer","volume-title":"Proc. Eur. Conf. Comput. Vis.","author":"Huang","year":"2022"},{"key":"ref54","article-title":"Adam: A method for stochastic optimization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kingma","year":"2015"},{"key":"ref55","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02354"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/310"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00821"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2253"},{"key":"ref61","first-page":"3723","article-title":"Query complexity of adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"G\u0142uch","year":"2021"},{"key":"ref62","article-title":"Progressive growing of GANs for improved quality, stability, and variation","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Karras","year":"2018"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.123"},{"key":"ref64","first-page":"7546","article-title":"Natural color fool: Towards boosting black-box unrestricted attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Yuan","year":"2022"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-44127-1_13"},{"key":"ref66","first-page":"8188","article-title":"GANs trained by a two time-scale update rule converge to a local nash equilibrium","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Choi","year":"2017"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16441"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00113"},{"key":"ref71","first-page":"16805","article-title":"Diffusion models for adversarial purification","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Nie","year":"2022"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1730"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref74","first-page":"19730","article-title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Li","year":"2023"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref76","first-page":"13276","article-title":"A fourier perspective on model robustness in computer vision","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Yin","year":"2019"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11517592\/11370500.pdf?arnumber=11370500","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:09:48Z","timestamp":1778900988000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11370500\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":76,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3660107","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}