{"id":"https://openalex.org/W2805692235","doi":null,"title":"Idealised Bayesian Neural Networks Cannot Have Adversarial Examples: Theoretical and Empirical Study.","display_name":"Idealised Bayesian Neural Networks Cannot Have Adversarial Examples: Theoretical and Empirical Study.","publication_year":2018,"publication_date":"2018-06-02","ids":{"openalex":"https://openalex.org/W2805692235","mag":"2805692235"},"language":"en","primary_location":{"id":"mag:2805692235","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1806.00667v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/abs/1806.00667v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029186201","display_name":"Yarin Gal","orcid":"https://orcid.org/0000-0002-2733-2078","observed_orcids":["https://orcid.org/0000-0002-2733-2078"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yarin Gal","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-2733-2078","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5103811636","display_name":"Lewis Smith","orcid":"https://orcid.org/0000-0001-6632-8162","observed_orcids":["https://orcid.org/0000-0001-6632-8162"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lewis Smith","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.9160000085830688},{"id":"https://openalex.org/keywords/epistemic-uncertainty","display_name":"epistemic uncertainty","score":0.8669999837875366},{"id":"https://openalex.org/keywords/hamiltonian-monte-carlo","display_name":"Hamiltonian Monte Carlo","score":0.7390000224113464},{"id":"https://openalex.org/keywords/monte-carlo-dropout","display_name":"Monte Carlo dropout","score":0.7900000214576721},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.6740000247955322},{"id":"https://openalex.org/keywords/image-manifolds","display_name":"image manifolds","score":0.6790000200271606},{"id":"https://openalex.org/keywords/image-density","display_name":"image density","score":0.527999997138977},{"id":"https://openalex.org/keywords/mnist","display_name":"MNIST","score":0.6859999895095825}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8092736005783081},{"id":"https://openalex.org/C2776145597","wikidata":"https://www.wikidata.org/wiki/Q25339462","display_name":"Dropout (neural networks)","level":2,"score":0.7730566263198853},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6965222358703613},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6310418248176575},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.626923680305481},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.6111281514167786},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.5481014251708984},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5478092432022095},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5420980453491211},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.531974732875824},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.5271113514900208},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5216929316520691},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5185657143592834},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.44007983803749084},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.12582612037658691},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11136743426322937},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2805692235","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1806.00667v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:2805692235","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1806.00667v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1567512734","https://openalex.org/W1678450113","https://openalex.org/W1686810756","https://openalex.org/W1897171481","https://openalex.org/W1932198206","https://openalex.org/W2111051539","https://openalex.org/W2112796928","https://openalex.org/W2156749117","https://openalex.org/W2600383743","https://openalex.org/W2753141617","https://openalex.org/W2785626633","https://openalex.org/W2963207607","https://openalex.org/W2964153729"],"related_works":["https://openalex.org/W2810382146","https://openalex.org/W4396633242","https://openalex.org/W2936699798","https://openalex.org/W3117254930","https://openalex.org/W2770864858","https://openalex.org/W3161511200","https://openalex.org/W4226003794","https://openalex.org/W3004627164","https://openalex.org/W2895033754","https://openalex.org/W4210609551"],"abstract_inverted_index":{"We":[0,14,32,47,113],"prove,":[1],"under":[2,73],"two":[3],"sufficient":[4],"conditions,":[5,21],"that":[6,24,66,77],"idealised":[7,17,25],"models":[8,18,128],"can":[9,93],"have":[10],"no":[11],"adversarial":[12,78,109],"examples.":[13],"discuss":[15],"which":[16,58,92],"satisfy":[19,30],"our":[20,85],"and":[22,76,129],"show":[23],"Bayesian":[26],"neural":[27],"networks":[28],"(BNNs)":[29],"these.":[31],"continue":[33],"by":[34],"studying":[35],"near-idealised":[36],"BNNs":[37,118],"using":[38],"HMC":[39,50],"inference,":[40,99],"demonstrating":[41],"the":[42,61,82,138],"theoretical":[43],"ideas":[44],"in":[45,84,111],"practice.":[46],"experiment":[48],"with":[49,146],"on":[51,120,140],"synthetic":[52],"data":[53],"derived":[54],"from":[55],"MNIST":[56],"for":[57,126],"we":[59,136],"know":[60],"ground-truth":[62],"image":[63,74,143],"density,":[64],"showing":[65],"near-perfect":[67],"epistemic":[68],"uncertainty":[69],"correlates":[70],"to":[71,103],"density":[72],"manifold,":[75],"images":[79],"lie":[80],"off":[81],"manifold":[83],"setting.":[86],"This":[87],"suggests":[88],"why":[89],"MC":[90],"dropout,":[91,121],"be":[94,104],"seen":[95],"as":[96,133],"performing":[97],"approximate":[98],"has":[100],"been":[101],"observed":[102],"an":[105],"effective":[106],"defence":[107,132,139],"against":[108],"examples":[110],"practice;":[112],"highlight":[114],"failure-cases":[115],"of":[116],"non-idealised":[117],"relying":[119],"suggesting":[122],"a":[123,130,141,147],"new":[124,131],"attack":[125],"dropout":[127],"well.":[134],"Lastly,":[135],"demonstrate":[137],"cats-vs-dogs":[142],"classification":[144],"task":[145],"VGG13":[148],"variant.":[149]},"counts_by_year":[{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2018-06-13T00:00:00"}