{"id":"https://openalex.org/W4416104233","doi":"https://doi.org/10.1109/iccv51701.2025.01370","title":"IAP: Invisible Adversarial Patch Attack Through Perceptibility-Aware Localization and Perturbation Optimization","display_name":"IAP: Invisible Adversarial Patch Attack Through Perceptibility-Aware Localization and Perturbation Optimization","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W4416104233","doi":"https://doi.org/10.1109/iccv51701.2025.01370"},"language":"en","primary_location":{"id":"doi:10.1109/iccv51701.2025.01370","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.01370","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2507.06856","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Subrat Kishore Dutta","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Subrat Kishore Dutta","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100320871","display_name":"Xiao Zhang","orcid":"https://orcid.org/0000-0002-2932-5875"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Xiao Zhang","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210128801"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"14766","last_page":"14775"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11105","display_name":"Advanced Image Processing Techniques","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8942000269889832},{"id":"https://openalex.org/keywords/invisibility","display_name":"Invisibility","score":0.6158999800682068},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.46399998664855957},{"id":"https://openalex.org/keywords/optimization-problem","display_name":"Optimization problem","score":0.3935000002384186},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.33970001339912415}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8942000269889832},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7038000226020813},{"id":"https://openalex.org/C50962388","wikidata":"https://www.wikidata.org/wiki/Q762018","display_name":"Invisibility","level":2,"score":0.6158999800682068},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4715000092983246},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.46399998664855957},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.3935000002384186},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.36250001192092896},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28870001435279846},{"id":"https://openalex.org/C2987595161","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Optimization algorithm","level":2,"score":0.2648000121116638}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/iccv51701.2025.01370","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.01370","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2507.06856","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.06856","pdf_url":"https://arxiv.org/pdf/2507.06856","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2507.06856","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2507.06856","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2507.06856","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.06856","pdf_url":"https://arxiv.org/pdf/2507.06856","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Despite":[0],"modifying":[1],"only":[2],"a":[3,60,83,114,119],"small":[4],"localized":[5],"input":[6],"region,":[7],"adversarial":[8,36,68,116],"patches":[9,69],"can":[10],"drastically":[11],"change":[12],"the":[13,88,98],"prediction":[14,107],"of":[15,100],"computer":[16],"vision":[17],"models.":[18],"However,":[19],"prior":[20],"methods":[21],"either":[22],"cannot":[23],"perform":[24],"satisfactorily":[25],"under":[26],"targeted":[27,150],"attack":[28,62,146],"scenarios":[29],"or":[30],"fail":[31],"to":[32,40,86,103,158,163,167,172,176],"produce":[33],"contextually":[34],"coherent":[35],"patches,":[37],"causing":[38],"them":[39],"be":[41,173],"easily":[42],"noticeable":[43],"by":[44,90],"human":[45,109],"examiners":[46],"and":[47,74,94,108,118,137],"insufficiently":[48],"stealthy":[49,174],"against":[50],"automatic":[51],"patch":[52,89,101,155,180],"defenses.":[53],"In":[54,161],"this":[55],"paper,":[56],"we":[57],"introduce":[58],"IAP,":[59],"novel":[61],"framework":[63],"that":[64,123,141],"generates":[65],"highly":[66,165],"invisible":[67,129],"based":[70],"on":[71],"perceptibility-aware":[72],"localization":[73,93],"perturbation":[75],"optimization":[76],"schemes.":[77],"Specifically,":[78],"IAP":[79,142,169],"first":[80],"searches":[81],"for":[82,127],"proper":[84],"location":[85,102],"place":[87],"leveraging":[91],"classwise":[92],"sensitivity":[95],"maps,":[96],"balancing":[97],"susceptibility":[99],"both":[104],"victim":[105],"model":[106,138],"visual":[110],"system,":[111],"then":[112],"employs":[113],"perceptibility-regularized":[115],"loss":[117],"gradient":[120],"update":[121],"rule":[122],"prioritizes":[124],"color":[125],"constancy":[126],"optimizing":[128],"perturbations.":[130],"Comprehensive":[131],"experiments":[132],"across":[133],"various":[134],"image":[135],"benchmarks":[136],"architectures":[139],"demonstrate":[140],"consistently":[143],"achieves":[144],"competitive":[145],"success":[147],"rates":[148],"in":[149],"settings":[151],"with":[152],"significantly":[153],"improved":[154],"invisibility":[156],"compared":[157],"existing":[159],"baselines.":[160],"addition":[162],"being":[164],"imperceptible":[166],"humans,":[168],"is":[170],"shown":[171],"enough":[175],"render":[177],"several":[178],"state-of-the-art":[179],"defenses":[181],"ineffective.":[182]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}