{"id":"https://openalex.org/W3200499278","doi":null,"title":"KATANA: Simple Post-Training Robustness Using Test Time Augmentations.","display_name":"KATANA: Simple Post-Training Robustness Using Test Time Augmentations.","publication_year":2021,"publication_date":"2021-09-16","ids":{"openalex":"https://openalex.org/W3200499278","mag":"3200499278"},"language":"en","primary_location":{"id":"mag:3200499278","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2109.08191","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2109.08191","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Guy Cohen","orcid":"https://orcid.org/0000-0002-6352-3859","observed_orcids":["https://orcid.org/0000-0002-6352-3859"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guy Cohen","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-6352-3859","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5072571599","display_name":"Raja Giryes","orcid":"https://orcid.org/0000-0002-2830-0297","observed_orcids":["https://orcid.org/0000-0002-2830-0297"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Raja Giryes","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-2830-0297","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.9470000267028809},{"id":"https://openalex.org/keywords/test-time-augmentation","display_name":"test-time augmentation","score":0.8629999756813049},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.796999990940094},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.7200000286102295},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.6000000238418579},{"id":"https://openalex.org/keywords/adversarial-training","display_name":"adversarial training","score":0.6370000243186951}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8128318786621094},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.80706787109375},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7749261856079102},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.6136761903762817},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5887815356254578},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5634948015213013},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44855839014053345},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4143350124359131},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.36609625816345215},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3200499278","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2109.08191","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:3200499278","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2109.08191","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W769612788","https://openalex.org/W2095577883","https://openalex.org/W2174868984","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2269778407","https://openalex.org/W2516574342","https://openalex.org/W2543927648","https://openalex.org/W2558893580","https://openalex.org/W2607219512","https://openalex.org/W2610190180","https://openalex.org/W2620038827","https://openalex.org/W2765407302","https://openalex.org/W2783692467","https://openalex.org/W2786118190","https://openalex.org/W2787496614","https://openalex.org/W2787708942","https://openalex.org/W2787733970","https://openalex.org/W2791122243","https://openalex.org/W2791953061","https://openalex.org/W2867167548","https://openalex.org/W2902031012","https://openalex.org/W2913266441","https://openalex.org/W2914897181","https://openalex.org/W2920241157","https://openalex.org/W2934927394","https://openalex.org/W2947099774","https://openalex.org/W2947294642","https://openalex.org/W2962872506","https://openalex.org/W2963178695","https://openalex.org/W2963207607","https://openalex.org/W2963564844","https://openalex.org/W2963612069","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2970317235","https://openalex.org/W2970971581","https://openalex.org/W2996564870","https://openalex.org/W3005680577","https://openalex.org/W3007305010","https://openalex.org/W3010028534","https://openalex.org/W3035106315","https://openalex.org/W3038628659","https://openalex.org/W3091886042","https://openalex.org/W3104620392","https://openalex.org/W3107978053","https://openalex.org/W3118608800","https://openalex.org/W3135970545"],"related_works":["https://openalex.org/W3217020476","https://openalex.org/W2963566318","https://openalex.org/W3209700302","https://openalex.org/W2793518327","https://openalex.org/W4391326543","https://openalex.org/W3129228539","https://openalex.org/W2945526055","https://openalex.org/W4376619754","https://openalex.org/W4414129227","https://openalex.org/W3189865072"],"abstract_inverted_index":{"Although":[0],"Deep":[1],"Neural":[2],"Networks":[3],"(DNNs)":[4],"achieve":[5],"excellent":[6,152],"performance":[7],"on":[8,129,135],"many":[9],"real-world":[10],"tasks,":[11],"they":[12],"are":[13],"highly":[14],"vulnerable":[15],"to":[16,36,39,46,110,117],"adversarial":[17,26,40,44,127,157],"attacks.":[18],"A":[19],"leading":[20],"defense":[21],"against":[22,144],"such":[23],"attacks":[24,41,131,148],"is":[25,34,51,160],"training,":[27],"a":[28,32,66,112],"technique":[29],"in":[30,162],"which":[31],"DNN":[33,78],"trained":[35],"be":[37,55],"robust":[38],"by":[42,94],"introducing":[43],"noise":[45],"its":[47,81],"input.":[48],"This":[49],"procedure":[50],"effective":[52],"but":[53],"must":[54],"done":[56],"during":[57],"the":[58,106,119,136],"training":[59],"phase.":[60],"In":[61],"this":[62,163],"work,":[63],"we":[64,86,104],"propose":[65],"new":[67],"simple":[68,113],"and":[69,100,149],"easy-to-use":[70],"technique,":[71],"KATANA,":[72],"for":[73],"robustifying":[74],"an":[75],"existing":[76],"pretrained":[77],"without":[79],"modifying":[80],"weights.":[82],"For":[83],"every":[84],"image,":[85],"generate":[87],"N":[88],"randomized":[89],"Test":[90],"Time":[91],"Augmentations":[92],"(TTAs)":[93],"applying":[95],"diverse":[96,130],"color,":[97],"blur,":[98],"noise,":[99],"geometric":[101],"transforms.":[102],"Next,":[103],"utilize":[105],"DNN's":[107],"logits":[108],"output":[109],"train":[111],"random":[114],"forest":[115],"classifier":[116],"predict":[118],"real":[120],"class":[121],"label.":[122],"Our":[123],"strategy":[124],"achieves":[125],"state-of-the-art":[126],"robustness":[128],"with":[132,156],"minimal":[133],"compromise":[134],"natural":[137],"images'":[138],"classification.":[139],"We":[140],"test":[141],"KATANA":[142],"also":[143],"two":[145],"adaptive":[146],"white-box":[147],"it":[150],"shows":[151],"results":[153],"when":[154],"combined":[155],"training.":[158],"Code":[159],"available":[161],"https":[164],"URL.":[165]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2021-09-27T00:00:00"}