{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T20:24:48Z","timestamp":1772828688351,"version":"3.50.1"},"reference-count":66,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["61831015"],"award-info":[{"award-number":["61831015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["U1908210"],"award-info":[{"award-number":["U1908210"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Image Process."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tip.2021.3050303","type":"journal-article","created":{"date-parts":[[2021,1,14]],"date-time":"2021-01-14T22:11:42Z","timestamp":1610662302000},"page":"1973-1988","source":"Crossref","is-referenced-by-count":23,"title":["Adversarial Attack Against Deep Saliency Models Powered by Non-Redundant Priors"],"prefix":"10.1109","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7323-4348","authenticated-orcid":false,"given":"Zhaohui","family":"Che","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8198-0335","authenticated-orcid":false,"given":"Ali","family":"Borji","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8165-9322","authenticated-orcid":false,"given":"Guangtao","family":"Zhai","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5306-9189","authenticated-orcid":false,"given":"Suiyi","family":"Ling","sequence":"additional","affiliation":[]},{"given":"Jing","family":"Li","sequence":"additional","affiliation":[]},{"given":"Yuan","family":"Tian","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9583-0055","authenticated-orcid":false,"given":"Guodong","family":"Guo","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2143-7063","authenticated-orcid":false,"given":"Patrick","family":"Le Callet","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","first-page":"1","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"Proc Workshop Int Conf Learn Represent"},{"key":"ref38","first-page":"1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref33","author":"spall","year":"2005","journal-title":"Introduction to Stochastic Search and Optimization Estimation Simulation and Control"},{"key":"ref32","article-title":"Improving black-box adversarial attacks with a transfer-based prior","author":"cheng","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref30","first-page":"3825","article-title":"Subspace attack: Exploiting promising subspaces for query-efficient black-box attacks","author":"yan","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref37","first-page":"1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/BF01589116"},{"key":"ref35","first-page":"1","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2015","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511804441"},{"key":"ref60","article-title":"CAT2000: A large scale fixation dataset for boosting saliency research","author":"borji","year":"2015","journal-title":"arXiv 1505 03581"},{"key":"ref62","article-title":"Benchmarking neural network robustness to common corruptions and surface variations","author":"hendrycks","year":"2018","journal-title":"arXiv 1807 01697"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00514"},{"key":"ref63","first-page":"1","article-title":"Mitigating adversarial effects through randomization","author":"xie","year":"2018","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00624"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00191"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01171"},{"key":"ref29","first-page":"1","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","author":"ilyas","year":"2019","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref2","first-page":"1","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref1","article-title":"SalGAN: Visual saliency prediction with generative adversarial networks","author":"pan","year":"2018","journal-title":"arXiv 1701 01081"},{"key":"ref20","first-page":"1","article-title":"LaVAN: Localized and visible adversarial noise","author":"karmon","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref22","first-page":"1","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2017","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref26","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","author":"ilyas","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref50","first-page":"1","article-title":"Generating natural adversarial examples","author":"zhao","year":"2018","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2861800"},{"key":"ref59","article-title":"What do different evaluation metrics tell us about saliency models?","author":"bylinskii","year":"2016","journal-title":"arXiv 1604 03605"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00917"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.513"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2787612"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2009.5459462"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.visres.2005.03.019"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298710"},{"key":"ref52","author":"bylinskii","year":"2019","journal-title":"MIT Saliency Benchmark"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2013.118"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2003.1246946"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref12","author":"frintrop","year":"2005","journal-title":"VOCUS A visual attention system for object detection and goal directed search"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2009.5459254"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2016.2612175"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2016.14"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94042-7_11"},{"key":"ref17","first-page":"35","article-title":"Sparse adversarial attack via perturbation factorization","author":"fan","year":"2020","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref18","first-page":"1","article-title":"Structured adversarial attack: Towards general implementation and better interpretability","author":"xu","year":"2019","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.38"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2016.7900174"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2018.2851672"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.71"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2012.89"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2945857"},{"key":"ref49","first-page":"1","article-title":"Adversarial manipulation of deep representations","author":"sabour","year":"2016","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2012.2210727"},{"key":"ref46","article-title":"Evolution strategies as a scalable alternative to reinforcement learning","author":"salimans","year":"2017","journal-title":"arXiv 1703 03864"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5743"},{"key":"ref48","first-page":"484","article-title":"Finite difference methods","author":"forsythe","year":"1960","journal-title":"Proc Partial Differ"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3343031.3351088"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/S0893-6080(98)00116-6"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/134"},{"key":"ref43","first-page":"1","article-title":"Skip connections matter: On the transferability of adversarial examples generated with resnets","author":"wu","year":"2020","journal-title":"Proc Int Conf Learn Represent"}],"container-title":["IEEE Transactions on Image Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/83\/9263394\/09325048.pdf?arnumber=9325048","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:50:13Z","timestamp":1652194213000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9325048\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":66,"URL":"https:\/\/doi.org\/10.1109\/tip.2021.3050303","relation":{},"ISSN":["1057-7149","1941-0042"],"issn-type":[{"value":"1057-7149","type":"print"},{"value":"1941-0042","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}