{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T11:43:56Z","timestamp":1783597436273,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,10,10]],"date-time":"2022-10-10T00:00:00Z","timestamp":1665360000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Guangdong ?Pearl River Talent Recruitment Program?","award":["2019ZT08X603"],"award-info":[{"award-number":["2019ZT08X603"]}]},{"name":"Shenzhen Technology R&D Fund","award":["202008121558110"],"award-info":[{"award-number":["202008121558110"]}]},{"name":"Natural Science Foundation of China","award":["61772348"],"award-info":[{"award-number":["61772348"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,10,14]]},"DOI":"10.1145\/3552469.3555715","type":"proceedings-article","created":{"date-parts":[[2022,9,27]],"date-time":"2022-09-27T22:10:03Z","timestamp":1664316603000},"page":"3-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Adversarial Attacks Against Blind Image Quality Assessment Models"],"prefix":"10.1145","author":[{"given":"Jari","family":"Korhonen","sequence":"first","affiliation":[{"name":"Shenzhen University, Shenzhen , China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junyong","family":"You","sequence":"additional","affiliation":[{"name":"Norwegian Research Centre, Bergen, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,10,10]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Proc. CVPR'18","author":"Akhtar N.","unstructured":"N. Akhtar , J. Liu , and A. Mian . 2018. Defense against universal adversarial perturbations . In Proc. CVPR'18 . 3389--3398. N. Akhtar, J. Liu, and A. Mian. 2018. Defense against universal adversarial perturbations. In Proc. CVPR'18. 3389--3398."},{"key":"e_1_3_2_2_2_1","volume-title":"Proc. ICCST'18","author":"Akhtar Z.","unstructured":"Z. Akhtar , J. Monteiro , and T. Falk . 2018. Adversarial examples detection using no-reference image quality features . In Proc. ICCST'18 . Z. Akhtar, J. Monteiro, and T. Falk. 2018. Adversarial examples detection using no-reference image quality features. In Proc. ICCST'18."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11760-017-1166-8"},{"key":"e_1_3_2_2_4_1","volume-title":"Proc. MediaEval'20","author":"Bonnet B.","unstructured":"B. Bonnet , T. Furon , and P. Bas . 2020. Fooling an automatic image quality estimator . In Proc. MediaEval'20 . B. Bonnet, T. Furon, and P. Bas. 2020. Fooling an automatic image quality estimator. In Proc. MediaEval'20."},{"key":"e_1_3_2_2_5_1","volume-title":"Proc. ICIP'16","author":"Bosse S.","year":"2016","unstructured":"S. Bosse , D. Maniry , T. Wiegand , and W. Samek . 2016. A deep neural network for image quality assessment . In Proc. ICIP'16 . 3773--3777. https:\/\/doi.org\/10.1109\/ ICIP. 2016 .7533065 S. Bosse, D. Maniry, T. Wiegand, and W. Samek. 2016. A deep neural network for image quality assessment. In Proc. ICIP'16. 3773--3777. https:\/\/doi.org\/10.1109\/ ICIP.2016.7533065"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/83.862633"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.2990342"},{"key":"e_1_3_2_2_8_1","volume-title":"Proc. ACCV'20","author":"Chen E.-C.","year":"2020","unstructured":"E.-C. Chen and C.-R. Lee . 2020 . Towards fast and robust adversarial training for image classification . In Proc. ACCV'20 . E.-C. Chen and C.-R. Lee. 2020. Towards fast and robust adversarial training for image classification. In Proc. ACCV'20."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2018.8553127"},{"key":"e_1_3_2_2_10_1","volume-title":"Proc. CVPR'20","author":"Fang Y.","unstructured":"Y. Fang , H. Zhu , Y. Zeng , K. Ma , and Z. Wang . 2020. Perceptual quality assessment of smartphone photography . In Proc. CVPR'20 . 3677--3686. Y. Fang, H. Zhu, Y. Zeng, K. Ma, and Z. Wang. 2020. Perceptual quality assessment of smartphone photography. In Proc. CVPR'20. 3677--3686."},{"key":"e_1_3_2_2_11_1","volume-title":"Proc. QoMEX'19","author":"Fezza S.","unstructured":"S. Fezza , Y. Bakhti , W. Hamidouche , and O. Deforges . 2019. Perceptual evaluation of adversarial attacks for CNN-based image classification . In Proc. QoMEX'19 . S. Fezza, Y. Bakhti, W. Hamidouche, and O. Deforges. 2019. Perceptual evaluation of adversarial attacks for CNN-based image classification. In Proc. QoMEX'19."},{"key":"e_1_3_2_2_12_1","volume-title":"Proc. CVPR'16","author":"Gatys L.","unstructured":"L. Gatys , A. Ecker , and M. Bethge . 2016. Image style transfer using convolutional neural networks . In Proc. CVPR'16 . 2414--2423. L. Gatys, A. Ecker, and M. Bethge. 2016. Image style transfer using convolutional neural networks. In Proc. CVPR'16. 2414--2423."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2015.2500021"},{"key":"e_1_3_2_2_14_1","volume-title":"Proc. ECCV'20","author":"Gu J.","unstructured":"J. Gu , H. Cai , H. Chen , X. Ye , J. Ren , and C. Dong . 2020. PIPAL: a large-scale image quality assessment dataset for perceptual image restoration . In Proc. ECCV'20 . 633--651. J. Gu, H. Cai, H. Chen, X. Ye, J. Ren, and C. Dong. 2020. PIPAL: a large-scale image quality assessment dataset for perceptual image restoration. In Proc. ECCV'20. 633--651."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.2967829"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-017-5070-6"},{"key":"e_1_3_2_2_17_1","volume-title":"Proc. CVPR'14","author":"Kang L.","year":"2014","unstructured":"L. Kang , P. Ye , Y. Li , and D. Doermann . 2014. Convolutional neural networks for no-reference image quality assessment . In Proc. CVPR'14 . 1733--1740. https: \/\/doi.org\/10.1109\/CVPR. 2014 .224 10.1109\/CVPR.2014.224 L. Kang, P. Ye, Y. Li, and D. Doermann. 2014. Convolutional neural networks for no-reference image quality assessment. In Proc. CVPR'14. 1733--1740. https: \/\/doi.org\/10.1109\/CVPR.2014.224"},{"key":"e_1_3_2_2_18_1","volume-title":"Proc. NIPS'12","author":"Krizhevsky A.","unstructured":"A. Krizhevsky , I Sutskever , and G. E. Hinton . 2012. Imagenet classification with deep convolutional neural networks . In Proc. NIPS'12 . Lake Tahoe, NV, USA. A. Krizhevsky, I Sutskever, and G. E. Hinton. 2012. Imagenet classification with deep convolutional neural networks. In Proc. NIPS'12. Lake Tahoe, NV, USA."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2685941"},{"key":"e_1_3_2_2_20_1","volume-title":"Proc. ICLR'17","author":"Kurakin A.","unstructured":"A. Kurakin , I. Goodfellow , and S. Bengio . 2017. Adversarial examples in the physical world . In Proc. ICLR'17 . A. Kurakin, I. Goodfellow, and S. Bengio. 2017. Adversarial examples in the physical world. In Proc. ICLR'17."},{"key":"e_1_3_2_2_21_1","volume-title":"Proc. ICLR'17","author":"Kurakin A.","unstructured":"A. Kurakin , I. Goodfellow , and S. Bengio . 2017. Adversarial machine learning at scale . In Proc. ICLR'17 . A. Kurakin, I. Goodfellow, and S. Bengio. 2017. Adversarial machine learning at scale. In Proc. ICLR'17."},{"key":"e_1_3_2_2_22_1","volume-title":"Proc. ACM MM'20","author":"Li D.","unstructured":"D. Li , T. Jiang , and M. Jiang . 2020. Norm-in-Norm Loss with Faster Convergence and Better Performance for Image Quality Assessment . In Proc. ACM MM'20 . New York, NY, USA, 789--797. D. Li, T. Jiang, and M. Jiang. 2020. Norm-in-Norm Loss with Faster Convergence and Better Performance for Image Quality Assessment. In Proc. ACM MM'20. New York, NY, USA, 789--797."},{"key":"e_1_3_2_2_23_1","volume-title":"Proc. QoMEX'19","author":"Lin H.","unstructured":"H. Lin , V. Hosu , and D. Saupe . 2019. KADID-10k: A large-scale artificially distorted IQA database . In Proc. QoMEX'19 . H. Lin, V. Hosu, and D. Saupe. 2019. KADID-10k: A large-scale artificially distorted IQA database. In Proc. QoMEX'19."},{"key":"e_1_3_2_2_24_1","volume-title":"Proc. ICLR'18","author":"Madry A.","unstructured":"A. Madry , A. Makelov , L. Schmidt , D. Tsipras , and A. Vladu . 2018. Towards deep learning models resistant to adversarial attacks . In Proc. ICLR'18 . A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu. 2018. Towards deep learning models resistant to adversarial attacks. In Proc. ICLR'18."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2012.2214050"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2012.2227726"},{"key":"e_1_3_2_2_27_1","volume-title":"Proc. CVPR'19","author":"Modas A.","year":"2019","unstructured":"A. Modas , S.-M. Moosavi-Dezfooli , and P. Frossard . 2019. SparseFool: a few pixels make a big difference . In Proc. CVPR'19 . Long Beach, California, USA , June 2019 . A. Modas, S.-M. Moosavi-Dezfooli, and P. Frossard. 2019. SparseFool: a few pixels make a big difference. In Proc. CVPR'19. Long Beach, California, USA, June 2019."},{"key":"e_1_3_2_2_28_1","volume-title":"Proc. CVPR'16","author":"Moosavi-Dezfooli S.-M.","unstructured":"S.-M. Moosavi-Dezfooli , A. Fawzi , and P. Frossard . 2016. DeepFool: a simple and accurate method to fool deep neural networks . In Proc. CVPR'16 . Las Vegas, Nevada, USA. S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard. 2016. DeepFool: a simple and accurate method to fool deep neural networks. In Proc. CVPR'16. Las Vegas, Nevada, USA."},{"key":"e_1_3_2_2_29_1","volume-title":"Proc. CVPR'15","author":"Nguyen A.","unstructured":"A. Nguyen , J. Yosinski , and J. Clune . 2015. Deep neural networks are easily fooled: High confidence predictions for unrecognizable images . In Proc. CVPR'15 . 427--436. A. Nguyen, J. Yosinski, and J. Clune. 2015. Deep neural networks are easily fooled: High confidence predictions for unrecognizable images. In Proc. CVPR'15. 427--436."},{"key":"e_1_3_2_2_30_1","volume-title":"Proc. CVPR'18","author":"Prakash A.","unstructured":"A. Prakash , N. Moran , S. Garber , A. DiLillo , and J. Storer . 2018. Deflecting adversarial attacks with pixel deflection . In Proc. CVPR'18 . 8571--8580. A. Prakash, N. Moran, S. Garber, A. DiLillo, and J. Storer. 2018. Deflecting adversarial attacks with pixel deflection. In Proc. CVPR'18. 8571--8580."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"e_1_3_2_2_32_1","volume-title":"Proc. CVPR'20","author":"Su S.","year":"2020","unstructured":"S. Su , Q. Yan , Y. Zhu , C. Zhang , X. Ge , J. Sun , and Y. Zhang . 2020. Blindly Assess Image Quality in the Wild Guided by a Self-Adaptive Hyper Network . In Proc. CVPR'20 . 3664--3673. https:\/\/doi.org\/10.1109\/CVPR42600. 2020 .00372 10.1109\/CVPR42600.2020.00372 S. Su, Q. Yan, Y. Zhu, C. Zhang, X. Ge, J. Sun, and Y. Zhang. 2020. Blindly Assess Image Quality in the Wild Guided by a Self-Adaptive Hyper Network. In Proc. CVPR'20. 3664--3673. https:\/\/doi.org\/10.1109\/CVPR42600.2020.00372"},{"key":"e_1_3_2_2_33_1","volume-title":"Proc. ICIP'20","author":"Su Y.","year":"2020","unstructured":"Y. Su and J. Korhonen . 2020. Blind natural image quality prediction using convolutional neural networks and weighted spatial pooling . In Proc. ICIP'20 . 191--195. https:\/\/doi.org\/10.1109\/ICIP40778. 2020 .9190789 10.1109\/ICIP40778.2020.9190789 Y. Su and J. Korhonen. 2020. Blind natural image quality prediction using convolutional neural networks and weighted spatial pooling. In Proc. ICIP'20. 191--195. https:\/\/doi.org\/10.1109\/ICIP40778.2020.9190789"},{"key":"e_1_3_2_2_34_1","unstructured":"C. Szegedy W. Zaremba I. Sutskever J. Bruna D. Erhan I. Goodfellow and R. Fergus. 2013. Intriguing properties of neural networks. arXiv:arXiv:1312.6199 arXiv:1312.6199.  C. Szegedy W. Zaremba I. Sutskever J. Bruna D. Erhan I. Goodfellow and R. Fergus. 2013. Intriguing properties of neural networks. arXiv:arXiv:1312.6199 arXiv:1312.6199."},{"key":"e_1_3_2_2_35_1","volume-title":"Proc. ICCV'98","author":"Tomasi C.","unstructured":"C. Tomasi and R. Manduchi . 1998. Bilateral filtering for gray and color images . In Proc. ICCV'98 . 836--846. C. Tomasi and R. Manduchi. 1998. Bilateral filtering for gray and color images. In Proc. ICCV'98. 836--846."},{"key":"e_1_3_2_2_36_1","volume-title":"Proc. ICME'18","author":"Varga D.","unstructured":"D. Varga , D. Saupe , and T. Szir\u00e1nyi . 2018. DeepRN: A content preserving deep architecture for blind image quality assessment . In Proc. ICME'18 . San Diego, CA, USA. D. Varga, D. Saupe, and T. Szir\u00e1nyi. 2018. DeepRN: A content preserving deep architecture for blind image quality assessment. In Proc. ICME'18. San Diego, CA, USA."},{"key":"e_1_3_2_2_37_1","volume-title":"Proc. ICASSP'95","author":"Westen S.","unstructured":"S. Westen , R. Lagendijk , and J. Biemond . 1995. Perceptual image quality based on a multiple channel HVS model . In Proc. ICASSP'95 . 2351--2354. S. Westen, R. Lagendijk, and J. Biemond. 1995. Perceptual image quality based on a multiple channel HVS model. In Proc. ICASSP'95. 2351--2354."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/tip.2020.3002478"},{"key":"e_1_3_2_2_39_1","volume-title":"Proc. NDSS'18","author":"Xu W.","unstructured":"W. Xu , D. Evans , and Y. Qi . 2018. Feature squeezing: detecting adversarial examples in deep neural networks . In Proc. NDSS'18 . W. Xu, D. Evans, and Y. Qi. 2018. Feature squeezing: detecting adversarial examples in deep neural networks. In Proc. NDSS'18."},{"key":"e_1_3_2_2_40_1","volume-title":"Proc. CVPR'20","author":"Ying Z.","unstructured":"Z. Ying , H. Niu , P. Gupta , D. Mahajan , D. Ghadiyaram , and A. C. Bovik . 2020. From patches to pictures (PaQ-2-PiQ): Mapping the perceptual space of picture quality . In Proc. CVPR'20 . Z. Ying, H. Niu, P. Gupta, D. Mahajan, D. Ghadiyaram, and A. C. Bovik. 2020. From patches to pictures (PaQ-2-PiQ): Mapping the perceptual space of picture quality. In Proc. CVPR'20."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475368"},{"key":"e_1_3_2_2_42_1","volume-title":"Proc. ICIP'21","author":"You J.","unstructured":"J. You and J. Korhonen . 2021. Transformer for image quality assessment . In Proc. ICIP'21 . 1389--1393. J. You and J. Korhonen. 2021. Transformer for image quality assessment. In Proc. ICIP'21. 1389--1393."},{"key":"e_1_3_2_2_43_1","volume-title":"Proc. MediaEval'20","author":"Zhao Z.","year":"2020","unstructured":"Z. Zhao . 2020 . Fooling blind image quality assessment by optimizing a humanunderstandable color filter . In Proc. MediaEval'20 . Z. Zhao. 2020. Fooling blind image quality assessment by optimizing a humanunderstandable color filter. In Proc. MediaEval'20."},{"key":"e_1_3_2_2_44_1","volume-title":"Proc. IJCNN'19","author":"Zheng S.","unstructured":"S. Zheng , J. Chen , and L. Wang . 2019. Targeted black-box adversarial attack method for image classification models . In Proc. IJCNN'19 . S. Zheng, J. Chen, and L. Wang. 2019. Targeted black-box adversarial attack method for image classification models. In Proc. IJCNN'19."},{"key":"e_1_3_2_2_45_1","unstructured":"W. Zhou X. Hou Y. Chen M. Tang X. Huang X. Gan and Y. Yang. 2018. Trans  W. Zhou X. Hou Y. Chen M. Tang X. Huang X. Gan and Y. Yang. 2018. Trans"}],"event":{"name":"MM '22: The 30th ACM International Conference on Multimedia","location":"Lisboa Portugal","acronym":"MM '22","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2nd Workshop on Quality of Experience in Visual Multimedia Applications"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3552469.3555715","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3552469.3555715","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:25Z","timestamp":1750182565000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3552469.3555715"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,10]]},"references-count":45,"alternative-id":["10.1145\/3552469.3555715","10.1145\/3552469"],"URL":"https:\/\/doi.org\/10.1145\/3552469.3555715","relation":{},"subject":[],"published":{"date-parts":[[2022,10,10]]},"assertion":[{"value":"2022-10-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}