{"id":"https://openalex.org/W2612372205","doi":"https://doi.org/10.48550/arxiv.1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","display_name":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","publication_year":2017,"publication_date":"2017-05-08","ids":{"openalex":"https://openalex.org/W2612372205","doi":"https://doi.org/10.48550/arxiv.1705.02900","mag":"2612372205"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:1705.02900","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1705.02900","pdf_url":"https://arxiv.org/pdf/1705.02900","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1705.02900","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036502813","display_name":"Nilaksh Das","orcid":"https://orcid.org/0000-0002-5281-5549","observed_orcids":["https://orcid.org/0000-0002-5281-5549"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Das, Nilaksh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021062067","display_name":"Madhuri Shanbhogue","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shanbhogue, Madhuri","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079496618","display_name":"Shang-Tse Chen","orcid":"https://orcid.org/0000-0003-3441-3471","observed_orcids":["https://orcid.org/0000-0003-3441-3471"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Shang-Tse","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034842879","display_name":"Fred Hohman","orcid":"https://orcid.org/0000-0002-4164-844X","observed_orcids":["https://orcid.org/0000-0002-4164-844X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hohman, Fred","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100379250","display_name":"Li Chen","orcid":"https://orcid.org/0000-0002-4761-5913","observed_orcids":["https://orcid.org/0000-0002-4761-5913"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063555801","display_name":"Michael E. Kounavis","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kounavis, Michael E.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5020153026","display_name":"Duen Horng Chau","orcid":"https://orcid.org/0000-0001-9824-3323","observed_orcids":["https://orcid.org/0000-0001-9824-3323"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chau, Duen Horng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":241,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8019999861717224},{"id":"https://openalex.org/keywords/jpeg-compression","display_name":"JPEG compression","score":0.7960000038146973},{"id":"https://openalex.org/keywords/deep-neural-network-robustness","display_name":"deep neural network robustness","score":0.6930000185966492},{"id":"https://openalex.org/keywords/adversarial-perturbations","display_name":"adversarial perturbations","score":0.8299999833106995},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.6470000147819519},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"ensemble learning","score":0.5569999814033508},{"id":"https://openalex.org/keywords/fgsm","display_name":"FGSM","score":0.8149999976158142},{"id":"https://openalex.org/keywords/deepfool","display_name":"DeepFool","score":0.9860000014305115},{"id":"https://openalex.org/keywords/image-preprocessing","display_name":"image preprocessing","score":0.35499998927116394},{"id":"https://openalex.org/keywords/model-protection","display_name":"model protection","score":0.3089999854564667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7857539653778076},{"id":"https://openalex.org/C198751489","wikidata":"https://www.wikidata.org/wiki/Q2195","display_name":"JPEG","level":3,"score":0.7823277711868286},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.6491334438323975},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6110234260559082},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5684890151023865},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.545140266418457},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.49980998039245605},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4468907117843628},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4161968231201172},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.38623136281967163},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3805811107158661},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.36686503887176514},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:1705.02900","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1705.02900","pdf_url":"https://arxiv.org/pdf/1705.02900","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.1705.02900","doi":"https://doi.org/10.48550/arxiv.1705.02900","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1705.02900","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1705.02900","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1705.02900","pdf_url":"https://arxiv.org/pdf/1705.02900","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1883420340","https://openalex.org/W1945616565","https://openalex.org/W2174868984","https://openalex.org/W2217248474","https://openalex.org/W2243397390","https://openalex.org/W2344365922","https://openalex.org/W2432142698","https://openalex.org/W2460937040","https://openalex.org/W2503523779","https://openalex.org/W2543927648","https://openalex.org/W2584321260","https://openalex.org/W2586751528","https://openalex.org/W2593892853","https://openalex.org/W2594867206","https://openalex.org/W2603766943","https://openalex.org/W2747237166","https://openalex.org/W2949117887","https://openalex.org/W2949152835","https://openalex.org/W2952603690","https://openalex.org/W2964153729","https://openalex.org/W3118608800","https://openalex.org/W4320147968"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"have":[4],"achieved":[5],"great":[6],"success":[7],"in":[8,18,104],"solving":[9],"a":[10,171,188],"variety":[11],"of":[12,21,126,141,152,193],"machine":[13],"learning":[14],"(ML)":[15],"problems,":[16],"especially":[17],"the":[19,67,80,105,153,200],"domain":[20],"image":[22],"recognition.":[23],"However,":[24],"recent":[25],"research":[26],"showed":[27],"that":[28,165,182],"DNNs":[29,74],"can":[30,97,166,186],"be":[31,167],"highly":[32],"vulnerable":[33],"to":[34,42,58,66,78,108,132,149],"adversarially":[35],"generated":[36],"instances,":[37],"which":[38],"look":[39],"seemingly":[40],"normal":[41],"human":[43,68],"observers,":[44],"but":[45],"completely":[46],"confuse":[47],"DNNs.":[48],"These":[49],"adversarial":[50,110,194],"samples":[51],"are":[52,70],"crafted":[53],"by":[54,73],"adding":[55],"small":[56],"perturbations":[57],"normal,":[59],"benign":[60],"images.":[61],"Such":[62,144],"perturbations,":[63],"while":[64],"imperceptible":[65],"eye,":[69],"picked":[71],"up":[72],"and":[75,91,112,175],"cause":[76],"them":[77],"misclassify":[79],"manipulated":[81],"instances":[82],"with":[83],"high":[84,134],"confidence.":[85],"In":[86],"this":[87],"work,":[88],"we":[89,160],"explore":[90],"demonstrate":[92],"how":[93,178],"systematic":[94],"JPEG":[95,127,184],"compression":[96,128,185],"work":[98],"as":[99],"an":[100,142,145,162,180],"effective":[101],"pre-processing":[102],"step":[103],"classification":[106],"pipeline":[107],"counter":[109],"attacks":[111],"dramatically":[113],"reduce":[114],"their":[115],"effects":[116],"(e.g.,":[117],"Fast":[118],"Gradient":[119],"Sign":[120],"Method,":[121],"DeepFool).":[122],"An":[123],"important":[124],"component":[125],"is":[129,147],"its":[130],"ability":[131],"remove":[133,156],"frequency":[135],"signal":[136],"components,":[137],"inside":[138],"square":[139],"blocks":[140],"image.":[143],"operation":[146],"equivalent":[148],"selective":[150],"blurring":[151],"image,":[154],"helping":[155],"additive":[157],"perturbations.":[158],"Further,":[159],"propose":[161],"ensemble-based":[163],"technique":[164],"constructed":[168],"quickly":[169],"from":[170,190],"given":[172],"well-performing":[173],"DNN,":[174],"empirically":[176],"show":[177],"such":[179],"ensemble":[181],"leverages":[183],"protect":[187],"model":[189],"multiple":[191],"types":[192],"attacks,":[195],"without":[196],"requiring":[197],"knowledge":[198],"about":[199],"model.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":26},{"year":2022,"cited_by_count":41},{"year":2021,"cited_by_count":45},{"year":2020,"cited_by_count":37},{"year":2019,"cited_by_count":26},{"year":2018,"cited_by_count":30},{"year":2017,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2017-05-19T00:00:00"}