% Key papers for Physical adversarial patches and camouflage (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2020_adversarial_15127,
  title = {{Adversarial Camouflage: Hiding Physical-World Attacks With Natural Styles}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2020_universal_16407,
  title = {{Universal Physical Camouflage Attacks on Object Detectors}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2022_shadows_19862,
  title = {{Shadows Can Be Dangerous: Stealthy and Effective Physical-World Adversarial Attack by Natural Phenomenon}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2022_adversarial_18271,
  title = {{Adversarial Texture for Fooling Person Detectors in the Physical World}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{aaai2022_fca_2077,
  title = {{FCA: Learning a 3D Full-Coverage Vehicle Camouflage for Multi-View Physical Adversarial Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2022},
  url = {https://aaai.org/papers/02414-fca-learning-a-3d-full-coverage-vehicle-camouflage-for-multi-view-physical-adversarial-attack/},
}

@inproceedings{cvpr2022_segment_19810,
  title = {{Segment and Complete: Defending Object Detectors Against Adversarial Patch Attacks With Robust Patch Detection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2022_exploring_18801,
  title = {{Exploring Frequency Adversarial Attacks for Face Forgery Detection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{icml2019_adversarial_37144,
  title = {{Adversarial camera stickers: A physical camera-based attack on deep learning systems}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2019},
  url = {https://icml.cc/virtual/2019/poster/4262},
}

@inproceedings{cvpr2022_dta_18587,
  title = {{DTA: Physical Camouflage Attacks Using Differentiable Transformation Network}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{iclr2020_certified_29543,
  title = {{Certified Defenses for Adversarial Patches}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2020},
  url = {https://openreview.net/forum?id=HyeaSkrYPH},
}

@inproceedings{cvpr2022_infrared_19078,
  title = {{Infrared Invisible Clothing: Hiding From Infrared Detectors at Multiple Angles in Real World}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2021_invisible_17208,
  title = {{Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{cvpr2024_physical_24462,
  title = {{Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30885},
}

@inproceedings{cvpr2023_physically_21862,
  title = {{Physically Adversarial Infrared Patches With Learnable Shapes and Locations}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21950},
}

@inproceedings{cvpr2023_jedi_21289,
  title = {{Jedi: Entropy-Based Localization and Removal of Adversarial Patches}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21062},
}

@inproceedings{aaai2023_hotcold_3814,
  title = {{HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/26777},
}

@inproceedings{cvpr2024_pad_24393,
  title = {{PAD: Patch-Agnostic Defense against Adversarial Patch Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31046},
}

@inproceedings{cvpr2023_physical_21861,
  title = {{Physical-World Optical Adversarial Attacks on 3D Face Recognition}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21680},
}

@inproceedings{cvpr2024_dap_23078,
  title = {{DAP: A Dynamic Adversarial Patch for Evading Person Detectors}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29718},
}

@inproceedings{cvpr2023_ensemble_20921,
  title = {{Ensemble-Based Blackbox Attacks on Dense Prediction}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21780},
}

@inproceedings{cvpr2024_infrared_23800,
  title = {{Infrared Adversarial Car Stickers}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30901},
}

@inproceedings{cvpr2025_seeing_27609,
  title = {{Seeing is Not Believing: Adversarial Natural Object Optimization for Hard-Label 3D Scene Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34132},
}

@inproceedings{aaai2025_adversarial_8059,
  title = {{Adversarial Attacks on Event-Based Pedestrian Detectors: A Physical Approach}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32555},
}

@inproceedings{cvpr2025_a_25378,
  title = {{A Unified, Resilient, and Explainable Adversarial Patch Detector}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34620},
}

@inproceedings{cvpr2025_projattacker_27313,
  title = {{ProjAttacker: A Configurable Physical Adversarial Attack for Face Recognition via Projector}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/35232},
}

@inproceedings{aaai2025_phycamo_10296,
  title = {{PhyCamo: A Robust Physical Camouflage via Contrastive Learning for Multi-View Physical Adversarial Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/33110},
}

@inproceedings{neurips2024_revisiting_70264,
  title = {{Revisiting Adversarial Patches for Designing Camera-Agnostic Attacks against Person Detection}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/96825},
}

@inproceedings{neurips2024_cnca_72855,
  title = {{CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/94545},
}

@inproceedings{cvpr2024_glow_23550,
  title = {{GLOW: Global Layout Aware Attacks on Object Detection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29696},
}

@inproceedings{icml2024_rauca_45400,
  title = {{RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2024},
  url = {https://icml.cc/virtual/2024/poster/33051},
}

@inproceedings{neurips2025_the_77355,
  title = {{The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2025},
  url = {https://openreview.net/forum?id=Sv1b20eCnL},
}

@inproceedings{aaai2025_advdisplay_8048,
  title = {{AdvDisplay: Adversarial Display Assembled by Thermoelectric Cooler for Fooling Thermal Infrared Detectors}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34011},
}

@inproceedings{iclr2024_embodied_35503,
  title = {{Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/17570},
}

@inproceedings{icml2026_unleashing_50674,
  title = {{Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detection}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2026},
  url = {https://openreview.net/forum?id=Eio2pEtbg4},
}

@inproceedings{neurips2024_full_73668,
  title = {{Full-Distance Evasion of Pedestrian Detectors in the Physical World}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93824},
}

@inproceedings{neurips2025_anglerocl_78033,
  title = {{AngleRoCL: Angle-Robust Concept Learning for Physically View-Invariant Adversarial Patches}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2025},
  url = {https://openreview.net/forum?id=aPLc1nWWIU},
}

@inproceedings{neurips2025_depthvanish_78397,
  title = {{DepthVanish: Optimizing Adversarial Interval Structures for Stereo-Depth-Invisible Patches}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2025},
  url = {https://openreview.net/forum?id=eD1VyYURiq},
}