[1] 99Firms. Facebook video statistics. https://99firms.com/blog/facebook-video-statistics/.
[2] Y. Mao, M. Wang, S. Wang, and S. Kwong, "High efficiency rate control for versatile video coding based on composite cauchy distribution," IEEE Transactions on Circuits and Systems for Video Technology, vol. 32, no. 4, pp. 2371-2384, 2021.
[3] N. Carlini and D. Wagner, "Towards evaluating the robustness of neural networks," in IEEE Symposium on Security and Privacy, pp. 39-57, 2017.
[4] C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. J. Goodfellow, and R. Fergus, "Intriguing properties of neural networks," arXiv preprint arXiv:1312.6199, 2013.
[5] S. M. Moosavi-Dezfooli, A. Fawzi, O. Fawzi, and P. Frossard, “Universal adversarial perturbations,” in IEEE Conference on Computer Vision and Pattern Recognition, pp. 1765-1773, 2017.
[6] A. Athalye, L. Engstrom, A. Ilyas, and K. Kwok, "Synthesizing robust adversarial examples," in International Conference on Machine Learning, pp. 284-293, 2018.
[7] C. Laidlaw and S. Feizi, “Functional adversarial attacks,” in Advances in Neural Information Processing Systems, pp. 10408-10418, 2019.
[8] K. Mahmood, R. Mahmood, and M. V. Dijk, "On the robustness of vision transformers to adversarial examples," in International Conference on Computer Vision, pp. 7838-7847, 2021.
[9] Z. Wei, J. Chen, M. Goldblum, Z. Wu, T. Goldstein, and Y.-G. Jiang, "Towards transferable adversarial attacks on vision transformers," in AAAI Conference on Artificial Intelligence, vol. 36, pp. 2668-2676, 2022.
[10] X. Yang, W.S. Ling, Z.K. Lu, E.P. Ong, and S.S. Yao, "Just noticeable distortion model and its applications in video coding," Signal Processing: Image Communication, vol. 20, no. 7, pp. 662-680, 2005.
[11] X. Dong and J. Wen, "A pixel-based outlier-free motion estimation algorithm for scalable video quality enhancement." Frontiers of Computer Science, vol. 9 pp. 729-740, 2015.
[12] J. Rony, L. G. Hafemann, L. S. Oliveira, I. B. Ayed, R. Sabourin, and E. Granger, "Decoupling direction and norm for efficient gradient-based  $L_{2}$  adversarial attacks and defenses," in IEEE Conference on Computer Vision and Pattern Recognition, pp. 4322-4330, 2019.
[13] R. Pinot, R. Ettedgui, G. Rizk, Y. Chevaleyre, and J. Atif, "Randomization matters how to defend against strong adversarial attacks," in International Conference on Machine Learning, pp. 7717-7727, 2020.
[14] F. Croce and M. Hein, "Minimally distorted adversarial examples with a fast adaptive boundary attack," in International Conference on Machine Learning, pp. 2196-2205, 2020.
[15] Z. Sinno and A. C. Bovik, "Large-scale study of perceptual video quality," IEEE Transactions on Image Processing, vol. 28, no. 2, pp. 612-627, 2019.
[16] I. J. Goodfellow, J. Shlens, and C. Szegedy, "Explaining and harnessing adversarial examples," in International Conference on Learning Representations, pp. 1-11, 2014.
[17] A. Kurakin, I. J. Goodfellow, and S. Bengio, “Adversarial examples in the physical world,” in International Conference on Learning Representations, pp. 1-11, 2017.
[18] N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, "The limitations of deep learning in adversarial settings," in IEEE European Symposium on Security and Privacy, pp. 372-387, 2016.
[19] N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, "Distillation as a defense to adversarial perturbations against deep neural networks," in IEEE Symposium on Security and Privacy, pp. 582-597, 2016.