{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T02:25:42Z","timestamp":1775096742760,"version":"3.50.1"},"reference-count":36,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100004955","name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004955","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100018774","name":"Bundesministerium f\u00fcr Klimaschutz, Umwelt, Energie, Mobilit\u00e4t, Innovation und Technologie","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100018774","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012416","name":"Bundesministerium f\u00fcr Digitalisierung und Wirtschaftsstandort","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012416","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015401","name":"Key Research and Development Projects of Shaanxi Province","doi-asserted-by":"publisher","award":["2021GY-004"],"award-info":[{"award-number":["2021GY-004"]}],"id":[{"id":"10.13039\/501100015401","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015401","name":"Key Research and Development Projects of Shaanxi Province","doi-asserted-by":"publisher","award":["2021ZDLGY09-04"],"award-info":[{"award-number":["2021ZDLGY09-04"]}],"id":[{"id":"10.13039\/501100015401","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015401","name":"Key Research and Development Projects of Shaanxi Province","doi-asserted-by":"publisher","award":["2021ZDLGY15-01"],"award-info":[{"award-number":["2021ZDLGY15-01"]}],"id":[{"id":"10.13039\/501100015401","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015401","name":"Key Research and Development Projects of Shaanxi Province","doi-asserted-by":"publisher","award":["2022ZDLGY06-07"],"award-info":[{"award-number":["2022ZDLGY06-07"]}],"id":[{"id":"10.13039\/501100015401","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772419"],"award-info":[{"award-number":["61772419"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100024370","name":"Ministero dell'Istruzione dell'Universita e della Ricerca","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100024370","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002855","name":"Ministry of Science and Technology of the People's Republic of China","doi-asserted-by":"publisher","award":["CUP I53C22000720001"],"award-info":[{"award-number":["CUP I53C22000720001"]}],"id":[{"id":"10.13039\/501100002855","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003407","name":"Ministero dell\u2019Istruzione, dell\u2019Universit\u00e0 e della Ricerca","doi-asserted-by":"publisher","award":["2017TWNMH2"],"award-info":[{"award-number":["2017TWNMH2"]}],"id":[{"id":"10.13039\/501100003407","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Sciences"],"published-print":{"date-parts":[[2023,12]]},"DOI":"10.1016\/j.ins.2023.119701","type":"journal-article","created":{"date-parts":[[2023,9,18]],"date-time":"2023-09-18T11:40:46Z","timestamp":1695037246000},"page":"119701","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":5,"special_numbering":"C","title":["Hardening RGB-D object recognition systems against adversarial patch attacks"],"prefix":"10.1016","volume":"651","author":[{"given":"Yang","family":"Zheng","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luca","family":"Demetrio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3807-6417","authenticated-orcid":false,"given":"Antonio Emanuele","family":"Cin\u00e0","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyi","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhaoqiang","family":"Xia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyue","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9318-6913","authenticated-orcid":false,"given":"Ambra","family":"Demontis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7752-509X","authenticated-orcid":false,"given":"Battista","family":"Biggio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4103-9190","authenticated-orcid":false,"given":"Fabio","family":"Roli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"3","key":"10.1016\/j.ins.2023.119701_br0010","doi-asserted-by":"crossref","first-page":"2878","DOI":"10.1109\/LRA.2019.2921506","article-title":"Recurrent convolutional fusion for rgb-d object recognition","volume":"4","author":"Loghmani","year":"2019","journal-title":"IEEE Robot. Autom. Lett."},{"key":"10.1016\/j.ins.2023.119701_br0020","series-title":"7th International Conference on Learning Representations, ICLR 2019, New Orleans, LA, USA, May 6-9, 2019","article-title":"Imagenet-trained cnns are biased towards texture; increasing shape bias improves accuracy and robustness","author":"Geirhos","year":"2019"},{"key":"10.1016\/j.ins.2023.119701_br0030","series-title":"2021 IEEE\/RSJ International Conference on Intelligent Robots and Systems (IROS)","first-page":"2189","article-title":"Adversarial attacks on camera-lidar models for 3d car detection","author":"Abdelfattah","year":"2021"},{"key":"10.1016\/j.ins.2023.119701_br0040","author":"Yu"},{"key":"10.1016\/j.ins.2023.119701_br0050","series-title":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","first-page":"387","article-title":"Evasion attacks against machine learning at test time","author":"Biggio","year":"2013"},{"key":"10.1016\/j.ins.2023.119701_br0060","series-title":"2nd International Conference on Learning Representations","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014"},{"key":"10.1016\/j.ins.2023.119701_br0070","author":"Brown"},{"key":"10.1016\/j.ins.2023.119701_br0080","series-title":"Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision","first-page":"2387","article-title":"Adversarial robustness of deep sensor fusion models","author":"Wang","year":"2022"},{"key":"10.1016\/j.ins.2023.119701_br0090","article-title":"Convolutional-recursive deep learning for 3d object classification","volume":"25","author":"Socher","year":"2012","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.ins.2023.119701_br0100","series-title":"2015 IEEE\/RSJ International Conference on Intelligent Robots and Systems (IROS)","first-page":"681","article-title":"Multimodal deep learning for robust rgb-d object recognition","author":"Eitel","year":"2015"},{"key":"10.1016\/j.ins.2023.119701_br0110","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.ins.2023.119701_br0120","author":"Cin\u00e0"},{"key":"10.1016\/j.ins.2023.119701_br0130","author":"Cin\u00e0"},{"key":"10.1016\/j.ins.2023.119701_br0140","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1016\/j.patcog.2018.07.023","article-title":"Wild patterns: ten years after the rise of adversarial machine learning","volume":"84","author":"Biggio","year":"2018","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.ins.2023.119701_br0150","series-title":"2nd International Conference on Learning Representations, ICLR 2014, Banff, AB, Canada, April 14-16, 2014, Conference Track Proceedings","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014"},{"key":"10.1016\/j.ins.2023.119701_br0160","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2021.108306","article-title":"A black-box adversarial attack for poisoning clustering","volume":"122","author":"Cin\u00e0","year":"2022","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.ins.2023.119701_br0170","series-title":"Proceedings of the 25th International Conference on Machine Learning, ICML'08","first-page":"272","article-title":"Efficient projections onto the l1-ball for learning in high dimensions","author":"Duchi","year":"2008"},{"key":"10.1016\/j.ins.2023.119701_br0180","series-title":"International Conference on Machine Learning","first-page":"2507","article-title":"Localized and visible adversarial noise","author":"Karmon","year":"2018"},{"key":"10.1016\/j.ins.2023.119701_br0190","series-title":"5th Annual Conference on Robot Learning","article-title":"Exploring adversarial robustness of multi-sensor perception systems in self driving","author":"Tu","year":"2021"},{"key":"10.1016\/j.ins.2023.119701_br0200","series-title":"International Conference on Machine Learning","first-page":"3519","article-title":"Similarity of neural network representations revisited","author":"Kornblith","year":"2019"},{"key":"10.1016\/j.ins.2023.119701_br0210","series-title":"International Conference on Algorithmic Learning Theory","first-page":"63","article-title":"Measuring statistical dependence with hilbert-schmidt norms","author":"Gretton","year":"2005"},{"key":"10.1016\/j.ins.2023.119701_br0220","series-title":"International Conference on Learning Representations","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.ins.2023.119701_br0230","first-page":"1","article-title":"Deep neural rejection against adversarial examples","volume":"2020","author":"Sotgiu","year":"2020","journal-title":"EURASIP J. Inf. Secur."},{"key":"10.1016\/j.ins.2023.119701_br0240","series-title":"ICCVW Vision in Practice on Autonomous Robots (ViPAR)","first-page":"751","article-title":"Is deep learning safe for robot vision? Adversarial examples against the iCub humanoid","author":"Melis","year":"2017"},{"key":"10.1016\/j.ins.2023.119701_br0250","series-title":"IEEE International Conference on Robotics and Automation, ICRA 2011, Shanghai, China, 9\u201313 May 2011","first-page":"1817","article-title":"A large-scale hierarchical multi-view RGB-D object dataset","author":"Lai","year":"2011"},{"key":"10.1016\/j.ins.2023.119701_br0260","series-title":"International Conference on Robotics and Automation, ICRA 2019, Montreal, QC, Canada, May 20-24, 2019","first-page":"6678","article-title":"Easylabel: a semi-automatic pixel-wise object annotation tool for creating robotic RGB-D datasets","author":"Suchi","year":"2019"},{"key":"10.1016\/j.ins.2023.119701_br0270","series-title":"International Joint Conference on Computational Intelligence","article-title":"Depth value pre-processing for accurate transfer learning based rgb-d object recognition","author":"Aakerberg","year":"2017"},{"key":"10.1016\/j.ins.2023.119701_br0280","author":"Bucci"},{"key":"10.1016\/j.ins.2023.119701_br0290","article-title":"Imagenet classification with deep convolutional neural networks","volume":"25","author":"Krizhevsky","year":"2012","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.ins.2023.119701_br0300","series-title":"2009 IEEE Conference on Computer Vision and Pattern Recognition","first-page":"248","article-title":"Imagenet: a large-scale hierarchical image database","author":"Deng","year":"2009"},{"key":"10.1016\/j.ins.2023.119701_br0310","series-title":"2021 International Joint Conference on Neural Networks (IJCNN)","first-page":"1","article-title":"The hammer and the nut: is bilevel optimization really needed to poison linear classifiers?","author":"Cin\u00e0","year":"2021"},{"key":"10.1016\/j.ins.2023.119701_br0320","author":"Nguyen"},{"key":"10.1016\/j.ins.2023.119701_br0330","series-title":"5th Annual Conference on Robot Learning","article-title":"Exploring adversarial robustness of multi-sensor perception systems in self driving","author":"Tu","year":"2021"},{"key":"10.1016\/j.ins.2023.119701_br0340","author":"Xie"},{"key":"10.1016\/j.ins.2023.119701_br0350","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1016\/j.neucom.2021.10.082","article-title":"Fast adversarial example rejection","volume":"470","author":"Crecchi","year":"2022","journal-title":"Neurocomputing"},{"key":"10.1016\/j.ins.2023.119701_br0360","series-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","first-page":"135","article-title":"Magnet: a two-pronged defense against adversarial examples","author":"Meng","year":"2017"}],"container-title":["Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025523012860?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025523012860?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,11,3]],"date-time":"2025-11-03T14:03:17Z","timestamp":1762178597000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0020025523012860"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12]]},"references-count":36,"alternative-id":["S0020025523012860"],"URL":"https:\/\/doi.org\/10.1016\/j.ins.2023.119701","relation":{},"ISSN":["0020-0255"],"issn-type":[{"value":"0020-0255","type":"print"}],"subject":[],"published":{"date-parts":[[2023,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Hardening RGB-D object recognition systems against adversarial patch attacks","name":"articletitle","label":"Article Title"},{"value":"Information Sciences","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.ins.2023.119701","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2023 Elsevier Inc. All rights reserved.","name":"copyright","label":"Copyright"}],"article-number":"119701"}}