{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T07:29:53Z","timestamp":1769585393757,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":74,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Research Foundation, Singapore and DSO National Laboratories under its AI Singapore Programme","award":["AISG2-GC-2023-008"],"award-info":[{"award-number":["AISG2-GC-2023-008"]}]},{"name":"Nanyang Technological University (NTU)-DESAY SV Research Program under Grant 2018-0980"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670296","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"1864-1878","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["VisionGuard: Secure and Robust Visual Perception of Autonomous Vehicles in Practice"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2756-2228","authenticated-orcid":false,"given":"Xingshuo","family":"Han","sequence":"first","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7591-5315","authenticated-orcid":false,"given":"Haozhao","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0389-0905","authenticated-orcid":false,"given":"Kangqiao","family":"Zhao","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0046-6674","authenticated-orcid":false,"given":"Gelei","family":"Deng","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3711-7216","authenticated-orcid":false,"given":"Yuan","family":"Xu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4392-2254","authenticated-orcid":false,"given":"Hangcheng","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2678-8070","authenticated-orcid":false,"given":"Han","family":"Qiu","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"99","volume-title":"Adversarial examples in the physical world,' in Artificial intelligence safety and security","author":"Kurakin A.","year":"2018","unstructured":"A. Kurakin, I. J. Goodfellow, and S. Bengio, 'Adversarial examples in the physical world,' in Artificial intelligence safety and security. Chapman and Hall\/CRC, 2018, pp. 99--112."},{"key":"e_1_3_2_1_2_1","volume-title":"Physical adversarial examples for object detectors,' in 12th USENIX workshop on offensive technologies (WOOT 18)","author":"Song D.","year":"2018","unstructured":"D. Song, K. Eykholt, I. Evtimov, E. Fernandes, B. Li, A. Rahmati, F. Tramer, A. Prakash, and T. Kohno, 'Physical adversarial examples for object detectors,' in 12th USENIX workshop on offensive technologies (WOOT 18), 2018."},{"key":"e_1_3_2_1_3_1","first-page":"1000","article-title":"Adversarial camouflage: Hiding physical-world attacks with natural styles","author":"Duan R.","year":"2020","unstructured":"R. Duan, X. Ma, Y.Wang, J. Bailey, A. K. Qin, and Y. Yang, 'Adversarial camouflage: Hiding physical-world attacks with natural styles,' in Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, 2020, pp. 1000--1008.","journal-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_4_1","first-page":"52","volume-title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector,' in Joint European Conference on Machine Learning and Knowledge Discovery in Databases","author":"Chen S.-T.","year":"2019","unstructured":"S.-T. Chen, C. Cornelius, J. Martin, and D. H. P. Chau, 'Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector,' in Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer, 2019, pp. 52--68."},{"key":"e_1_3_2_1_5_1","first-page":"1865","volume-title":"{SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,' in 30th USENIX Security Symposium (USENIX Security 21)","author":"Lovisotto G.","year":"2021","unstructured":"G. Lovisotto, H. Turner, I. Sluganovic, M. Strohmeier, and I. Martinovic, '{SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,' in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 1865--1882."},{"key":"e_1_3_2_1_6_1","first-page":"1945","volume-title":"Can we use arbitrary objects to attack lidar perception in autonomous driving'\" in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","author":"Zhu Y.","year":"2021","unstructured":"Y. Zhu, C. Miao, T. Zheng, F. Hajiaghajani, L. Su, and C. Qiao, 'Can we use arbitrary objects to attack lidar perception in autonomous driving'\" in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021, pp. 1945--1960."},{"key":"e_1_3_2_1_7_1","first-page":"716","article-title":"Physically realizable adversarial examples for lidar object detection","author":"Tu J.","year":"2020","unstructured":"J. Tu, M. Ren, S. Manivasagam, M. Liang, B. Yang, R. Du, F. Cheng, and R. Urtasun, 'Physically realizable adversarial examples for lidar object detection,' in Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 13 716--13 725.","journal-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition"},{"key":"e_1_3_2_1_8_1","first-page":"3592","volume-title":"IEEE","author":"Abdelfattah M.","year":"2021","unstructured":"M. Abdelfattah, K. Yuan, Z. J. Wang, and R. Ward, 'Towards universal physical attacks on cascaded camera-lidar 3d object detection models,' in 2021 IEEE International Conference on Image Processing (ICIP). IEEE, 2021, pp. 3592--3596."},{"key":"e_1_3_2_1_9_1","volume-title":"Invisible for both camera and lidar: Security of multi-sensor fusion based perception in autonomous driving under physical-world attacks,' in SP","author":"Cao Y.","year":"2021","unstructured":"Y. Cao, N. Wang, C. Xiao, D. Yang, J. Fang, R. Yang, Q. A. Chen, M. Liu, and B. Li, 'Invisible for both camera and lidar: Security of multi-sensor fusion based perception in autonomous driving under physical-world attacks,' in SP, 2021."},{"key":"e_1_3_2_1_10_1","first-page":"1989","volume-title":"Seeing isn't believing: Towards more robust adversarial attack against real world object detectors,' in Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","author":"Zhao Y.","year":"2019","unstructured":"Y. Zhao, H. Zhu, R. Liang, Q. Shen, S. Zhang, and K. Chen, 'Seeing isn't believing: Towards more robust adversarial attack against real world object detectors,' in Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019, pp. 1989--2004."},{"key":"e_1_3_2_1_11_1","volume-title":"Adversarial sensor attack on lidar-based perception in autonomous driving,' in CCS","author":"Cao Y.","year":"2019","unstructured":"Y. Cao, C. Xiao, B. Cyr, Y. Zhou, W. Park, S. Rampazzi, Q. A. Chen, K. Fu, and Z. M. Mao, 'Adversarial sensor attack on lidar-based perception in autonomous driving,' in CCS, 2019."},{"key":"e_1_3_2_1_12_1","volume-title":"Towards robust {LiDAR-based} perception in autonomous driving: General black-box adversarial sensor attack and countermeasures,' in USENIX Security","author":"Sun J.","year":"2020","unstructured":"J. Sun, Y. Cao, Q. A. Chen, and Z. M. Mao, 'Towards robust {LiDAR-based} perception in autonomous driving: General black-box adversarial sensor attack and countermeasures,' in USENIX Security, 2020."},{"key":"e_1_3_2_1_13_1","first-page":"1","volume-title":"Adversarial examples: attacks and defenses in the physical world,' International Journal of Machine Learning and Cybernetics","author":"Ren H.","year":"2021","unstructured":"H. Ren, T. Huang, and H. Yan, 'Adversarial examples: attacks and defenses in the physical world,' International Journal of Machine Learning and Cybernetics, pp. 1--12, 2021."},{"key":"e_1_3_2_1_14_1","volume-title":"Kolter et al., 'Certified robustness against physically-realizable patch attack via randomized cropping","author":"Lin W.-Y.","year":"2021","unstructured":"W.-Y. Lin, F. Sheikholeslami, L. Rice, J. Z. Kolter et al., 'Certified robustness against physically-realizable patch attack via randomized cropping,' 2021."},{"key":"e_1_3_2_1_15_1","volume-title":"Certified defenses for adversarial patches,' arXiv preprint arXiv:2003.06693","author":"Chiang P.-y.","year":"2020","unstructured":"P.-y. Chiang, R. Ni, A. Abdelkader, C. Zhu, C. Studer, and T. Goldstein, 'Certified defenses for adversarial patches,' arXiv preprint arXiv:2003.06693, 2020."},{"key":"e_1_3_2_1_16_1","first-page":"6465","article-title":"(de) randomized smoothing for certifiable defense against patch attacks","volume":"33","author":"Levine A.","year":"2020","unstructured":"A. Levine and S. Feizi, '(de) randomized smoothing for certifiable defense against patch attacks, Advances in Neural Information Processing Systems, vol. 33, pp. 6465--6475, 2020.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_17_1","first-page":"2237","volume-title":"USENIX Security Symposium","author":"Xiang C.","year":"2021","unstructured":"C. Xiang, A. N. Bhagoji, V. Sehwag, and P. Mittal, Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking. in USENIX Security Symposium, 2021, pp. 2237--2254."},{"key":"e_1_3_2_1_18_1","volume-title":"Patchguard: Efficient provable attack detection against adversarial patches, arXiv preprint arXiv:2104.12609","author":"Xiang C.","year":"2021","unstructured":"C. Xiang and P. Mittal, Patchguard: Efficient provable attack detection against adversarial patches, arXiv preprint arXiv:2104.12609, 2021."},{"key":"e_1_3_2_1_19_1","volume-title":"Efficient certified defenses against patch attacks on image classifiers, arXiv preprint arXiv:2102.04154","author":"Metzen J. H.","year":"2021","unstructured":"J. H. Metzen and M. Yatsura, Efficient certified defenses against patch attacks on image classifiers, arXiv preprint arXiv:2102.04154, 2021."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484757"},{"key":"e_1_3_2_1_21_1","volume-title":"USENIX Security Symposium","author":"Man Y.","year":"2023","unstructured":"Y. Man, R. Muller, M. Li, Z. B. Celik, and R. Gerdes, That person moves like a car: Misclassification attack detection for autonomous systems using spatiotemporal consistency, in USENIX Security Symposium, 2023."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00407"},{"key":"e_1_3_2_1_23_1","first-page":"396","volume-title":"Proceedings, Part XXIII 16","author":"Li S.","year":"2020","unstructured":"S. Li, S. Zhu, S. Paul, A. Roy-Chowdhury, C. Song, S. Krishnamurthy, A. Swami, and K. S. Chan, Connecting the dots: Detecting adversarial perturbations using context inconsistency, in Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XXIII 16. Springer, 2020, pp. 396--413."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00776"},{"key":"e_1_3_2_1_25_1","first-page":"3976","volume-title":"International Conference on Machine Learning. PMLR","author":"G\u00fcrel N. M.","year":"2021","unstructured":"N. M. G\u00fcrel, X. Qi, L. Rimanic, C. Zhang, and B. Li, Knowledge enhanced machine learning pipeline against diverse adversarial attacks, in International Conference on Machine Learning. PMLR, 2021, pp. 3976--3987."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3011690"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3122906"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISPA-BDCloud-SocialCom-SustainCom52081.2021.00119"},{"key":"e_1_3_2_1_29_1","first-page":"284","volume-title":"International conference on machine learning. PMLR","author":"Athalye A.","year":"2018","unstructured":"A. Athalye, L. Engstrom, A. Ilyas, and K. Kwok, Synthesizing robust adversarial examples, in International conference on machine learning. PMLR, 2018, pp. 284--293."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00428"},{"key":"e_1_3_2_1_31_1","volume-title":"No need to worry about adversarial examples in object detection in autonomous vehicles, arXiv preprint arXiv:1707.03501","author":"Lu J.","year":"2017","unstructured":"J. Lu, H. Sibai, E. Fabry, and D. Forsyth, No need to worry about adversarial examples in object detection in autonomous vehicles, arXiv preprint arXiv:1707.03501, 2017."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3560830.3563733"},{"key":"e_1_3_2_1_33_1","volume-title":"Lgsvl simulator: A high fidelity simulator for autonomous driving, arXiv preprint arXiv:2005.03778","author":"Rong G.","year":"2020","unstructured":"G. Rong, B. H. Shin, H. Tabatabaee, Q. Lu, S. Lemke, M. Moeiko, E. Boise, G. Uhm, M. Gerow, S. Mehta et al., Lgsvl simulator: A high fidelity simulator for autonomous driving, arXiv preprint arXiv:2005.03778, 2020."},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 1st Annual Conference on Robot Learning","author":"Dosovitskiy A.","year":"2017","unstructured":"A. Dosovitskiy, G. Ros, F. Codevilla, A. Lopez, and V. Koltun, CARLA: An open urban driving simulator, in Proceedings of the 1st Annual Conference on Robot Learning, 2017."},{"key":"e_1_3_2_1_35_1","unstructured":"Tesla Autopilot https:\/\/www.tesla.com\/autopilot."},{"key":"e_1_3_2_1_36_1","unstructured":"Intel Mobileye https:\/\/www.mobileye.com\/."},{"key":"e_1_3_2_1_37_1","unstructured":"Baidu Apollo https:\/\/github.com\/ApolloAuto\/apollo."},{"key":"e_1_3_2_1_38_1","unstructured":"Google Waymo https:\/\/waymo.com\/."},{"key":"e_1_3_2_1_39_1","volume-title":"Cryptology ePrint Archive","author":"Nassi B.","year":"2020","unstructured":"B. Nassi, D. Nassi, R. Ben-Netanel, Y. Mirsky, O. Drokin, and Y. Elovici, Phantom of the adas: Phantom attacks on driver-assistance systems, Cryptology ePrint Archive, 2020."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01498"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00091"},{"key":"e_1_3_2_1_45_1","unstructured":"W. Zhu X. Ji Y. Cheng S. Zhang and W. Xu Tpatch: A triggered physical adversarial patch."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01482"},{"key":"e_1_3_2_1_47_1","volume-title":"Exorcisingwraith: Protecting lidar-based object detector in automated driving system from appearing attacks, arXiv preprint arXiv:2303.09731","author":"Xiao Q.","year":"2023","unstructured":"Q. Xiao, X. Pan, Y. Lu, M. Zhang, J. Dai, and M. Yang, Exorcisingwraith: Protecting lidar-based object detector in automated driving system from appearing attacks, arXiv preprint arXiv:2303.09731, 2023."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/PHM.2017.8079160"},{"key":"e_1_3_2_1_49_1","volume-title":"CCS","author":"Choi H.","year":"2018","unstructured":"H. Choi,W.-C. Lee, Y. Aafer, F. Fei, Z. Tu, X. Zhang, D. Xu, and X. Deng, Detecting attacks against robotic vehicles: A control invariant approach, in CCS, 2018."},{"key":"e_1_3_2_1_50_1","volume-title":"Usenix Security","author":"Quinonez R.","year":"2020","unstructured":"R. Quinonez, J. Giraldo, L. Salazar, E. Bauman, A. Cardenas, and Z. Lin, Savior: Securing autonomous vehicles with robust physical invariants, in Usenix Security, 2020."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219845"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599508"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599391"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599295"},{"key":"e_1_3_2_1_55_1","first-page":"931","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Shen J.","year":"2020","unstructured":"J. Shen, J. Y. Won, Z. Chen, and Q. A. Chen, Drift with devil: Security of {Multi-Sensor} fusion based localization in {High-Level} autonomous driving under {GPS} spoofing, in 29th USENIX Security Symposium (USENIX Security 20), 2020, pp. 931--948."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3299290"},{"key":"e_1_3_2_1_57_1","volume-title":"Fooling the eyes of autonomous vehicles: Robust physical adversarial examples against traffic sign recognition systems, arXiv preprint arXiv:2201.06192","author":"Jia W.","year":"2022","unstructured":"W. Jia, Z. Lu, H. Zhang, Z. Liu, J. Wang, and G. Qu, Fooling the eyes of autonomous vehicles: Robust physical adversarial examples against traffic sign recognition systems, arXiv preprint arXiv:2201.06192, 2022."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00407"},{"key":"e_1_3_2_1_59_1","volume-title":"Bayesian segnet: Model uncertainty in deep convolutional encoder-decoder architectures for scene understanding, arXiv preprint arXiv:1511.02680","author":"Kendall A.","year":"2015","unstructured":"A. Kendall, V. Badrinarayanan, and R. Cipolla, Bayesian segnet: Model uncertainty in deep convolutional encoder-decoder architectures for scene understanding, arXiv preprint arXiv:1511.02680, 2015."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01514"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-68799-1_26"},{"key":"e_1_3_2_1_62_1","volume-title":"Vos: Learning what you dont know by virtual outlier synthesis, arXiv preprint arXiv:2202.01197","author":"Du X.","year":"2022","unstructured":"X. Du, Z.Wang, M. Cai, and Y. Li, Vos: Learning what you dont know by virtual outlier synthesis, arXiv preprint arXiv:2202.01197, 2022."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/IROS51168.2021.9636694"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00612"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1115\/1.3662552"},{"key":"e_1_3_2_1_66_1","unstructured":"lgsvl Pythonapi https:\/\/github.com\/lgsvl\/PythonAPI."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00317"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00571"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01713"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00239"},{"key":"e_1_3_2_1_72_1","volume-title":"CVPR","author":"Wang Y.","year":"2023","unstructured":"Y.Wang, C. Ma, and J. Liu, Smartassign: Learning a smart knowledge assignment strategy for deraining and desnowing, in CVPR, 2023."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02083"},{"key":"e_1_3_2_1_74_1","first-page":"1440","volume-title":"Proceedings of the IEEE international conference on computer vision","author":"Girshick R.","year":"2015","unstructured":"R. Girshick, Fast r-cnn, in Proceedings of the IEEE international conference on computer vision, 2015, pp. 1440--1448."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670296","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670296","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:04:35Z","timestamp":1755842675000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670296"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":74,"alternative-id":["10.1145\/3658644.3670296","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670296","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}