Y. Zhang, Z. Shi, S. Wang, W. Yang, S. Wang, and Y. Xue, “RP-PGD: Boosting Segmentation Robustness with a Region-and-Prototype Based Adversarial Attack”, AAAI, vol. 39, no. 10, pp. 10338-10347, Apr. 2025.