{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T20:21:37Z","timestamp":1792786897269,"version":"4.5.0"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Research Foundation of Korea","id":[{"id":"https:\/\/ror.org\/013aysd81","id-type":"ROR","asserted-by":"crossref"}]},{"name":"Institute of Information & communications Technology Planning & Evaluation","id":[{"id":"https:\/\/ror.org\/01g0hqq23","id-type":"ROR","asserted-by":"crossref"}]},{"name":"Korea government"},{"name":"National Natural Science Foundation of China","award":["62602589"],"award-info":[{"award-number":["62602589"]}],"id":[{"id":"https:\/\/ror.org\/01h0zpd94","id-type":"ROR","asserted-by":"crossref"}]},{"name":"Scientific Research Start-up Foundation of Zhejiang Sci-Tech University","award":["26222270-Y"],"award-info":[{"award-number":["26222270-Y"]}],"id":[{"id":"https:\/\/ror.org\/03893we55","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1109\/tpami.2026.3698837","type":"journal-article","created":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T20:05:59Z","timestamp":1780430759000},"page":"12082-12099","source":"Crossref","is-referenced-by-count":0,"title":["Robustness of SAM: Segment Anything Under Corruptions and Beyond"],"prefix":"10.1109","volume":"48","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4045-8473","authenticated-orcid":false,"given":"Yu","family":"Qiao","sequence":"first","affiliation":[{"name":"Zhejiang Sci-Tech University","place":["Hangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3484-7333","authenticated-orcid":false,"given":"Choong Seon","family":"Hong","sequence":"additional","affiliation":[{"name":"Kyung Hee University","place":["Yongin-si, South Korea"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-9869-2393","authenticated-orcid":false,"given":"Taegoo","family":"Kang","sequence":"additional","affiliation":[{"name":"Kyung Hee University","place":["Yongin-si, South Korea"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Donghoon","family":"Kim","sequence":"additional","affiliation":[{"name":"Kyung Hee University","place":["Yongin-si, South Korea"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chenshuang","family":"Zhang","sequence":"additional","affiliation":[{"name":"KAIST","place":["Daejeon, South Korea"],"department":["Department of Electrical Engineering"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2677-3186","authenticated-orcid":false,"given":"Sung-Ho","family":"Bae","sequence":"additional","affiliation":[{"name":"Kyung Hee University","place":["Yongin-si, South Korea"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6007-6099","authenticated-orcid":false,"given":"Chaoning","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China","place":["Chengdu, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-024-02443-6"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/n19-1423"},{"key":"ref3","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Radford"},{"key":"ref4","article-title":"Attack-SAM: Towards evaluating adversarial robustness of segment anything model","author":"Zhang","year":"2023"},{"key":"ref5","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI Blog"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00371"},{"key":"ref7","article-title":"Segment anything with clip","author":"Park","year":"2023"},{"key":"ref8","article-title":"Understanding segment anything model: SAM is biased towards texture rather than shape","author":"Zhang","year":"2023"},{"key":"ref9","first-page":"1","article-title":"Benchmarking neural network robustness to common corruptions and perturbations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Hendrycks"},{"key":"ref10","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00391"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW63382.2024.00185"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i6.32616"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.167"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/tvcg.2012.160"},{"key":"ref17","first-page":"1","article-title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Geirhos"},{"key":"ref18","first-page":"4033","article-title":"NoisyMix: Boosting model robustness to common corruptions","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Erichson"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00105"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2021.101977"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.5244\/c.35.68"},{"key":"ref22","first-page":"6115","article-title":"On success and simplicity: A second look at transferable targeted attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhao"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/tmm.2024.3521769"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02293"},{"key":"ref25","article-title":"Representation learning with contrastive predictive coding","author":"Oord","year":"2018"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46604-0_57"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00054"},{"key":"ref28","article-title":"On the robustness of segment anything","author":"Huang","year":"2023"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.110685"},{"key":"ref30","article-title":"Faster segment anything: Towards lightweight sam for mobile applications","author":"Zhang","year":"2023"},{"key":"ref31","article-title":"EdgeSAM: Prompt-in-the-loop distillation for on-device deployment of SAM","author":"Zhou","year":"2023"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i19.34255"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01839"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01420"},{"key":"ref35","article-title":"Adversarial patch","author":"Brown","year":"2017"},{"key":"ref36","first-page":"1","article-title":"Adam: A method for stochastic optimization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kingma"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3326871"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19775-8_24"},{"key":"ref39","article-title":"Insects semantic segmentation dataset","year":"2024"},{"key":"ref40","article-title":"A large annotated medical image dataset for the development and evaluation of segmentation algorithms","author":"Simpson","year":"2019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref42","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ilyas"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00393"},{"key":"ref44","article-title":"mixup: Beyond empirical risk minimization","author":"Zhang","year":"2017"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_28"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1425"},{"key":"ref48","article-title":"RepViT-SAM: Towards real-time segmenting anything","author":"Wang","year":"2023"},{"key":"ref49","first-page":"13276","article-title":"A fourier perspective on model robustness in computer vision","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Yin"},{"key":"ref50","article-title":"Adversarial defense by suppressing high-frequency components","author":"Zhang","year":"2019"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2024.3360514"},{"key":"ref52","article-title":"A study of the effect of JPG compression on adversarial images","author":"Dziugaite","year":"2016"},{"key":"ref53","first-page":"1","article-title":"Mitigating adversarial effects through randomization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie"},{"key":"ref54","first-page":"1275","article-title":"Detection as regression: Certified object detection with median smoothing","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chiang"},{"key":"ref55","article-title":"Trust, but verify: A survey of randomized smoothing techniques","author":"Kumari","year":"2023"},{"key":"ref56","first-page":"1","article-title":"On the robustness of the CVPR 2018 white-box adversarial example defenses","volume-title":"Proc. Bright Dark Sides Comput. Vision: Challenges Opportunities Privacy Secur.","author":"Athalye"},{"key":"ref57","first-page":"1","article-title":"Decoupled weight decay regularization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Loshchilov"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/3DV.2016.79"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s10479-005-5724-z"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/34\/11674301\/11547821.pdf?arnumber=11547821","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T04:21:23Z","timestamp":1791260483000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11547821\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":59,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2026.3698837","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10]]}}}