{"id":"https://openalex.org/W3101645536","doi":null,"title":"Adversarial attacks hidden in plain sight","display_name":"Adversarial attacks hidden in plain sight","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W3101645536","mag":"3101645536"},"language":"en","primary_location":{"id":"pmh:oai:pub.uni-bielefeld.de:2934181","doi":null,"is_oa":false,"landing_page_url":"https://pub.uni-bielefeld.de/record/2934181","pdf_url":null,"source":{"id":"https://openalex.org/S4306401671","display_name":"PUB \u2013 Publications at Bielefeld University (Bielefeld University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I20121455","host_organization_name":"Bielefeld University","host_organization_lineage":["https://openalex.org/I20121455"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"G\u00f6pfert JP, Wersing H, Hammer B. Adversarial attacks hidden in plain sight. 2019.","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058420080","display_name":"Jan Philip G\u00f6pfert","orcid":"https://orcid.org/0000-0003-1982-9399","observed_orcids":["https://orcid.org/0000-0003-1982-9399"]},"institutions":[{"id":"https://openalex.org/I20121455","display_name":"Bielefeld University","ror":"https://ror.org/02hpadn98","country_code":"DE","type":"education","lineage":["https://openalex.org/I20121455"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"G\u00f6pfert, Jan Philip","raw_affiliation_strings":["Bielefeld University, Bielefeld, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bielefeld University, Bielefeld, Germany","institution_ids":["https://openalex.org/I20121455"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004229948","display_name":"Heiko Wersing","orcid":"https://orcid.org/0000-0001-8481-2396","observed_orcids":["https://orcid.org/0000-0001-8481-2396"]},"institutions":[{"id":"https://openalex.org/I20121455","display_name":"Bielefeld University","ror":"https://ror.org/02hpadn98","country_code":"DE","type":"education","lineage":["https://openalex.org/I20121455"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wersing, Heiko","raw_affiliation_strings":["Bielefeld University, Bielefeld, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bielefeld University, Bielefeld, Germany","institution_ids":["https://openalex.org/I20121455"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091180862","display_name":"Barbara Hammer","orcid":"https://orcid.org/0000-0002-0935-5591","observed_orcids":["https://orcid.org/0000-0002-0935-5591"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hammer, Barbara","raw_affiliation_strings":["Honda Research Institute Europe GmbH, Offenbach, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Honda Research Institute Europe GmbH, Offenbach, Germany","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5058420080"],"corresponding_institution_ids":["https://openalex.org/I20121455"],"apc_list":null,"apc_paid":null,"fwci":0.9015,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.77057458,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8389999866485596},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.9980000257492065},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.7009999752044678},{"id":"https://openalex.org/keywords/imperceptible-perturbations","display_name":"imperceptible perturbations","score":0.7139999866485596},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.7730000019073486},{"id":"https://openalex.org/keywords/interpretability","display_name":"interpretability","score":0.7279999852180481},{"id":"https://openalex.org/keywords/neural-network-security","display_name":"neural network security","score":0.46399998664855957}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8453221321105957},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8267143964767456},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7929040193557739},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6350650787353516},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6160571575164795},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.606698751449585},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5956765413284302},{"id":"https://openalex.org/C1517167","wikidata":"https://www.wikidata.org/wiki/Q1134322","display_name":"Sight","level":2,"score":0.502615213394165},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48263484239578247},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4288368821144104},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.35613542795181274},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3200523257255554},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:pub.uni-bielefeld.de:2934181","doi":null,"is_oa":false,"landing_page_url":"https://pub.uni-bielefeld.de/record/2934181","pdf_url":null,"source":{"id":"https://openalex.org/S4306401671","display_name":"PUB \u2013 Publications at Bielefeld University (Bielefeld University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I20121455","host_organization_name":"Bielefeld University","host_organization_lineage":["https://openalex.org/I20121455"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"G\u00f6pfert JP, Wersing H, Hammer B. Adversarial attacks hidden in plain sight. 2019.","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1556779599","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2112845172","https://openalex.org/W2117539524","https://openalex.org/W2139573938","https://openalex.org/W2160535976","https://openalex.org/W2163605009","https://openalex.org/W2169710839","https://openalex.org/W2174868984","https://openalex.org/W2183341477","https://openalex.org/W2217248474","https://openalex.org/W2243397390","https://openalex.org/W2274405424","https://openalex.org/W2274565976","https://openalex.org/W2460937040","https://openalex.org/W2463740373","https://openalex.org/W2516574342","https://openalex.org/W2552767274","https://openalex.org/W2590523583","https://openalex.org/W2593892853","https://openalex.org/W2594867206","https://openalex.org/W2603766943","https://openalex.org/W2610190180","https://openalex.org/W2640329709","https://openalex.org/W2735607295","https://openalex.org/W2751777443","https://openalex.org/W2765424254","https://openalex.org/W2787708942","https://openalex.org/W2804342109","https://openalex.org/W2885407017","https://openalex.org/W2897355816","https://openalex.org/W2907518016","https://openalex.org/W2942630857","https://openalex.org/W2951506741","https://openalex.org/W2964253222","https://openalex.org/W2964294232","https://openalex.org/W2970115835","https://openalex.org/W3135970545","https://openalex.org/W3147600416","https://openalex.org/W7055921390"],"related_works":["https://openalex.org/W2994470734","https://openalex.org/W3083537594","https://openalex.org/W2988020477","https://openalex.org/W2603311132","https://openalex.org/W2802246800","https://openalex.org/W6904220041","https://openalex.org/W3004846245","https://openalex.org/W7162563441","https://openalex.org/W3108360118","https://openalex.org/W7212408660"],"abstract_inverted_index":{"Convolutional":[0],"neural":[1,29],"networks":[2],"have":[3],"been":[4],"used":[5],"to":[6,26,52,67],"achieve":[7],"a":[8,20,49],"string":[9],"of":[10,17,44,59],"successes\\nduring":[11],"recent":[12],"years,":[13],"but":[14],"their":[15],"lack":[16],"interpretability":[18],"remains":[19],"serious\\nissue.":[21],"Adversarial":[22],"examples":[23],"are":[24,64],"designed":[25],"deliberately":[27],"fool":[28],"networks\\ninto":[30],"making":[31],"any":[32],"desired":[33],"incorrect":[34],"classification,":[35],"potentially":[36],"with":[37],"very":[38],"high\\ncertainty.":[39],"We":[40],"underline":[41],"the":[42,45],"severity":[43],"issue":[46],"by":[47],"presenting":[48],"technique\\nthat":[50],"allows":[51],"hide":[53],"such":[54],"adversarial":[55],"attacks":[56],"in":[57],"regions":[58],"high":[60],"complexity,\\nsuch":[61],"that":[62],"they":[63],"imperceptible":[65],"even":[66],"an":[68],"astute":[69],"observer.":[70]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2020-11-23T00:00:00"}