{"id":"https://openalex.org/W2913299585","doi":null,"title":"Adversarial Initialization - when your network performs the way I want -","display_name":"Adversarial Initialization - when your network performs the way I want -","publication_year":2019,"publication_date":"2019-02-08","ids":{"openalex":"https://openalex.org/W2913299585","mag":"2913299585"},"language":"en","primary_location":{"id":"mag:2913299585","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1902.03020","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1902.03020","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018930655","display_name":"Kathrin Grosse","orcid":"https://orcid.org/0000-0002-5401-4171","observed_orcids":["https://orcid.org/0000-0002-5401-4171"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kathrin Grosse","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-5401-4171","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091056510","display_name":"Thomas Alexander Trost","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Alexander Trost","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084471503","display_name":"Marius Mosbach","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marius Mosbach","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5004014878","display_name":"Michael Backes A","orcid":"https://orcid.org/0000-0002-9326-6400","observed_orcids":["https://orcid.org/0000-0002-9326-6400","https://orcid.org/0000-0002-7130-9211"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michael Backes","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-9326-6400","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.6850000023841858},{"id":"https://openalex.org/keywords/deep-neural-network","display_name":"deep neural network","score":0.6110000014305115},{"id":"https://openalex.org/keywords/initial-weight","display_name":"initial weight","score":0.4180000126361847},{"id":"https://openalex.org/keywords/threat-model","display_name":"threat model","score":0.5590000152587891},{"id":"https://openalex.org/keywords/competitive-product-development","display_name":"competitive product development","score":0.41999998688697815},{"id":"https://openalex.org/keywords/attack-mitigation","display_name":"attack mitigation","score":0.7039999961853027},{"id":"https://openalex.org/keywords/training-duration","display_name":"training duration","score":0.37599998712539673},{"id":"https://openalex.org/keywords/mnist","display_name":"MNIST","score":0.7609999775886536}],"concepts":[{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.8127529621124268},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7991626858711243},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6600534319877625},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.613541841506958},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.5807145833969116},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5727302432060242},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.556767463684082},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5563581585884094},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5471909046173096},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5440319180488586},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4821862280368805},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.4724360406398773},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.43848979473114014},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4283289313316345},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.42739206552505493},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4058745801448822},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.12241330742835999},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08059874176979065},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2913299585","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1902.03020","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:2913299585","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1902.03020","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W104184427","https://openalex.org/W1625958017","https://openalex.org/W1677182931","https://openalex.org/W1893133781","https://openalex.org/W1904365287","https://openalex.org/W1950611080","https://openalex.org/W1997237410","https://openalex.org/W2007562169","https://openalex.org/W2013196231","https://openalex.org/W2112507308","https://openalex.org/W2112796928","https://openalex.org/W2115212595","https://openalex.org/W2178237821","https://openalex.org/W2180877453","https://openalex.org/W2293844262","https://openalex.org/W2423689290","https://openalex.org/W2535690855","https://openalex.org/W2603451662","https://openalex.org/W2750384547","https://openalex.org/W2753783305","https://openalex.org/W2771112233","https://openalex.org/W2773446523","https://openalex.org/W2776209623","https://openalex.org/W2783402179","https://openalex.org/W2963080758","https://openalex.org/W2963343288","https://openalex.org/W2964040431","https://openalex.org/W2964050767","https://openalex.org/W2964153729","https://openalex.org/W2964318098","https://openalex.org/W3118608800","https://openalex.org/W3120740533"],"related_works":["https://openalex.org/W3097209174","https://openalex.org/W3107088961","https://openalex.org/W4400876933","https://openalex.org/W7116286914","https://openalex.org/W2906501467","https://openalex.org/W4415796485","https://openalex.org/W4411245015","https://openalex.org/W7214183870","https://openalex.org/W4281667209","https://openalex.org/W7163352404"],"abstract_inverted_index":{"The":[0],"increase":[1],"in":[2,16,34],"computational":[3],"power":[4],"and":[5,28,61,73,79,100],"available":[6],"data":[7,102],"has":[8,62],"fueled":[9],"a":[10,38,42,52,56,92,113],"wide":[11],"deployment":[12],"of":[13,51,91,96,153],"deep":[14,22],"learning":[15],"production":[17],"environments.":[18],"Despite":[19],"their":[20,75],"successes,":[21],"architectures":[23],"are":[24,150],"still":[25],"poorly":[26],"understood":[27],"costly":[29],"to":[30,45,86,118,123,143],"train.":[31],"We":[32,68],"demonstrate":[33],"this":[35],"paper":[36],"how":[37],"simple":[39],"recipe":[40],"enables":[41],"market":[43],"player":[44],"harm":[46],"or":[47,131],"delay":[48],"the":[49,70,87,97,101,105,110,120,128,133,145,147,154],"development":[50],"competing":[53],"product.":[54],"Such":[55],"threat":[57],"model":[58],"is":[59,107,116],"novel":[60],"not":[63,151],"been":[64],"considered":[65],"so":[66,160],"far.":[67,161],"derive":[69],"corresponding":[71],"attacks":[72,82],"show":[74,140],"efficacy":[76],"both":[77],"formally":[78],"empirically.":[80],"These":[81],"only":[83],"require":[84],"access":[85],"initial,":[88],"untrained":[89],"weights":[90],"network.":[93],"No":[94],"knowledge":[95],"problem":[98],"domain":[99],"used":[103],"by":[104,158],"victim":[106],"needed.":[108],"On":[109],"initial":[111],"weights,":[112],"mere":[114],"permutation":[115],"sufficient":[117],"limit":[119],"achieved":[121],"accuracy":[122],"for":[124],"example":[125],"50%":[126],"on":[127],"MNIST":[129],"dataset":[130],"double":[132],"needed":[134],"training":[135],"time.":[136],"While":[137],"we":[138],"can":[139],"straightforward":[141],"ways":[142],"mitigate":[144],"attacks,":[146],"respective":[148],"steps":[149],"part":[152],"standard":[155],"procedure":[156],"taken":[157],"developers":[159]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2019-02-21T00:00:00"}