{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T14:53:12Z","timestamp":1784904792306,"version":"3.55.0"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"IARPA TrojAI","award":["W911NF-19-S-0012"],"award-info":[{"award-number":["W911NF-19-S-0012"]}]},{"name":"NSF","award":["1901242"],"award-info":[{"award-number":["1901242"]}]},{"name":"NSF","award":["1910300"],"award-info":[{"award-number":["1910300"]}]},{"name":"NSF","award":["2242243"],"award-info":[{"award-number":["2242243"]}]},{"DOI":"10.13039\/100000006","name":"ONR","doi-asserted-by":"publisher","award":["N000141712045"],"award-info":[{"award-number":["N000141712045"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000006","name":"ONR","doi-asserted-by":"publisher","award":["N000141410468"],"award-info":[{"award-number":["N000141410468"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000006","name":"ONR","doi-asserted-by":"publisher","award":["N000141712947"],"award-info":[{"award-number":["N000141712947"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1109\/tpami.2024.3412632","type":"journal-article","created":{"date-parts":[[2024,6,17]],"date-time":"2024-06-17T18:12:40Z","timestamp":1718647960000},"page":"9084-9101","source":"Crossref","is-referenced-by-count":17,"title":["Self-Supervised Adversarial Training of Monocular Depth Estimation Against Physical-World Attacks"],"prefix":"10.1109","volume":"46","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7280-6079","authenticated-orcid":false,"given":"Zhiyuan","family":"Cheng","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6641-8077","authenticated-orcid":false,"given":"Cheng","family":"Han","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8145-3436","authenticated-orcid":false,"given":"James","family":"Liang","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7570-5756","authenticated-orcid":false,"given":"Qifan","family":"Wang","sequence":"additional","affiliation":[{"name":"Meta AI, Menlo Park, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9544-2500","authenticated-orcid":false,"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6995-4775","authenticated-orcid":false,"given":"Dongfang","family":"Liu","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"crossref","DOI":"10.1109\/TPAMI.2024.3412632","article-title":"Adversarial training of self-supervised monocular depth estimation against physical-world attacks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Cheng"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.12.089"},{"key":"ref3","article-title":"Tesla use per-pixel depth estimation with self-supervised learning","author":"Karpathy","year":"2020"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00605"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/3DV50981.2020.00107"},{"key":"ref6","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref7","article-title":"Fusion is not enough: Single modal attack on fusion models for 3 d object detection","volume-title":"Proc. 12th Int. Conf. Learn. Representations","author":"Cheng"},{"key":"ref8","article-title":"Adversarial attacks on monocular depth estimation","author":"Zhang","year":"2020"},{"key":"ref9","first-page":"8486","article-title":"Targeted adversarial perturbations for monocular depth prediction","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wong"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19839-7_30"},{"key":"ref11","first-page":"17081","article-title":"Contrastive learning with adversarial examples","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ho"},{"key":"ref12","first-page":"2983","article-title":"Adversarial self-supervised contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Kim"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref14","article-title":"Stereoscopy"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.700"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46484-8_45"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.699"},{"key":"ref18","article-title":"Unsupervised scale-consistent depth and ego-motion learning from monocular video","volume-title":"Proc. Adv. Neural Inf. Process. Syst","author":"Bian"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00216"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00212"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01094"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00136"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00570"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58568-6_42"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58621-8_26"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00122"},{"key":"ref27","first-page":"3827","article-title":"Digging into self-supervised monocular depth prediction","volume-title":"Proc. IEEE Int. Conf. Comput. Vis.","author":"Godard"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00225"},{"key":"ref29","article-title":"Monocular depth estimators: Vulnerabilities and attacks","author":"Mathew","year":"2020"},{"key":"ref30","article-title":"Analysis of deep networks for monocular depth estimation through adversarial attacks with proposal of a defense method","author":"Hu","year":"2019"},{"key":"ref31","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref35","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Tram\u00e8r"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00051"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01635"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01028"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00739"},{"key":"ref40","article-title":"Adversarial learning for semi-supervised semantic segmentation","author":"Hung","year":"2018"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00099"},{"key":"ref42","article-title":"Unlabeled data improves adversarial robustness","volume-title":"Proc. Adv. Neural Inf. Process. Syst","author":"Carmon"},{"key":"ref43","article-title":"Are labels required for improving adversarial robustness?","volume-title":"Proc. Adv. Neural Inf. Process. Syst","author":"Alayrac"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01373"},{"key":"ref45","first-page":"1013","article-title":"Exploring adversarial robustness of multi-sensor perception systems in self driving","volume-title":"Proc. 5th Annu. Conf. Robot Learn.","author":"Tu"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"ref48","article-title":"Camera Resectioning"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1177\/0278364913491297"},{"key":"ref50","article-title":"Adversarial patch","author":"Brown","year":"2017"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01301"},{"key":"ref52","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.5555\/3524938.3525087"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00975"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00393"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58621-8_45"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00637"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00674"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01549"},{"key":"ref60","first-page":"896","article-title":"Pseudo-label: The simple and efficient semi-supervised learning method for deep neural networks","volume-title":"Proc. ICML Workshop","author":"Lee"},{"key":"ref61","first-page":"25179","article-title":"Adversarial training helps transfer learning via better representations","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Deng"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00163"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58589-1_3"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"ref65","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.21105\/joss.02607"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00135"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01527"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19842-7_8"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/34\/10746266\/10559903-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/34\/10746266\/10559903.pdf?arnumber=10559903","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T00:26:56Z","timestamp":1732667216000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10559903\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12]]},"references-count":71,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2024.3412632","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12]]}}}