Zhang Y, Shi Z, Wang S, Yang W, Wang S, Xue Y. RP-PGD: Boosting Segmentation Robustness with a Region-and-Prototype Based Adversarial Attack. AAAI [Internet]. 2025Apr.11 [cited 2026Apr.29];39(10):10338-47. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/33122