{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T10:32:03Z","timestamp":1784802723849,"version":"3.55.0"},"reference-count":78,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62121002"],"award-info":[{"award-number":["62121002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20B2047"],"award-info":[{"award-number":["U20B2047"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2336206"],"award-info":[{"award-number":["U2336206"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372423"],"award-info":[{"award-number":["62372423"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102386"],"award-info":[{"award-number":["62102386"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Image Process."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tip.2024.3372456","type":"journal-article","created":{"date-parts":[[2024,3,7]],"date-time":"2024-03-07T19:28:27Z","timestamp":1709839707000},"page":"2183-2196","source":"Crossref","is-referenced-by-count":25,"title":["PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition"],"prefix":"10.1109","volume":"33","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2702-8516","authenticated-orcid":false,"given":"Qidong","family":"Huang","sequence":"first","affiliation":[{"name":"Anhui Province Key Laboratory of Digital Security, School of Cyber Science and Security, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4654-835X","authenticated-orcid":false,"given":"Xiaoyi","family":"Dong","sequence":"additional","affiliation":[{"name":"Department of Information Engineering, The Chinese University of Hong Kong, Pokfulam, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4642-4373","authenticated-orcid":false,"given":"Dongdong","family":"Chen","sequence":"additional","affiliation":[{"name":"Microsoft Research, Redmond, WA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7860-8452","authenticated-orcid":false,"given":"Hang","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5576-6108","authenticated-orcid":false,"given":"Weiming","family":"Zhang","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of Digital Security, School of Cyber Science and Security, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kui","family":"Zhang","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of Digital Security, School of Cyber Science and Security, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9522-6157","authenticated-orcid":false,"given":"Gang","family":"Hua","sequence":"additional","affiliation":[{"name":"Wormpex AI Research LLC, Bellevue, WA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yueqiang","family":"Cheng","sequence":"additional","affiliation":[{"name":"NIO Security Research, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4417-9316","authenticated-orcid":false,"given":"Nenghai","family":"Yu","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of Digital Security, School of Cyber Science and Security, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00095"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298801"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3092818"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3136714"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3042088"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3072214"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3031371"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3180210"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3078109"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3044712"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00935"},{"key":"ref12","first-page":"877","article-title":"Towards robust LiDAR-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures","volume-title":"Proc. 29th USENIX Security Symp.","author":"Sun"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"ref14","first-page":"1633","article-title":"On adaptive attacks to adversarial example defenses","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Tram\u00e8r"},{"key":"ref15","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref20","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Goodfellow"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00205"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01153"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref24","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Zhang"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01543"},{"issue":"11","key":"ref26","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"van der Maaten","year":"2008","journal-title":"J. Mach. Learn. Res. (JMLR)"},{"key":"ref27","first-page":"1","article-title":"On mutual information maximization for representation learning","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Tschannen"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.5555\/3524938.3525087"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00950"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.5555\/3495724.3497510"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01549"},{"key":"ref32","first-page":"18661","article-title":"Supervised contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Khosla"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58598-3_6"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3184255"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.16"},{"key":"ref36","first-page":"1","article-title":"PointNet++: Deep hierarchical feature learning on point sets in a metric space","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Qi"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref38","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Croce"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24031-7_20"},{"key":"ref40","first-page":"3809","article-title":"Revisiting point cloud shape classification with a simple and effective baseline","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Goyal"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00319"},{"key":"ref42","first-page":"1","article-title":"Rethinking network design and local geometry in point cloud: A simple residual MLP framework","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Ma"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01837"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3149225"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01047"},{"key":"ref46","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Tramer"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3082317"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3190209"},{"key":"ref49","first-page":"16199","article-title":"Robust pre-training by adversarial contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Jiang"},{"key":"ref50","first-page":"2983","article-title":"Adversarial self-supervised contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Kim"},{"key":"ref51","first-page":"1","article-title":"Self-supervised adversarial robustness for the low-label, high-data regime","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Gowal"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16254"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00154"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01037"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58610-2_15"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01490"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3193449"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"ref59","first-page":"15498","article-title":"Adversarially robust 3D point cloud recognition using self-supervisions","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Sun"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"ref61","first-page":"9912","article-title":"Unsupervised learning of visual features by contrasting cluster assignments","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Caron"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_9"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00283"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00483"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01488"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00768"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2980179.2980238"},{"key":"ref70","article-title":"Benchmarking robustness of 3D point cloud recognition against common corruptions","author":"Sun","year":"2022","journal-title":"arXiv:2201.12296"},{"key":"ref71","first-page":"1","article-title":"Towards deep neural network architectures robust to adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Gu"},{"key":"ref72","first-page":"3866","article-title":"NATTACK: Learning the distributions of adversarial examples for an improved black-box attack on deep neural networks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Li"},{"key":"ref73","first-page":"5025","article-title":"Adversarial risk and the dangers of evaluating against weak attacks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Uesato"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413727"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00295"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58580-8_20"},{"key":"ref77","first-page":"11539","article-title":"Improving robustness against common corruptions by covariate shift adaptation","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Schneider"},{"key":"ref78","first-page":"1","article-title":"Tent: Fully test-time adaptation by entropy minimization","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Wang"}],"container-title":["IEEE Transactions on Image Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/83\/10346232\/10462947.pdf?arnumber=10462947","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T04:01:08Z","timestamp":1725163268000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10462947\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":78,"URL":"https:\/\/doi.org\/10.1109\/tip.2024.3372456","relation":{},"ISSN":["1057-7149","1941-0042"],"issn-type":[{"value":"1057-7149","type":"print"},{"value":"1941-0042","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}