{"id":"https://openalex.org/W3203892337","doi":null,"title":"One Thing to Fool them All: Generating Interpretable, Universal, and Physically-Realizable Adversarial Features.","display_name":"One Thing to Fool them All: Generating Interpretable, Universal, and Physically-Realizable Adversarial Features.","publication_year":2021,"publication_date":"2021-10-07","ids":{"openalex":"https://openalex.org/W3203892337","mag":"3203892337"},"language":"en","primary_location":{"id":"mag:3203892337","doi":null,"is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2110.03605","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://export.arxiv.org/pdf/2110.03605","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Stephen T. Casper","orcid":"https://orcid.org/0000-0003-2915-8592","observed_orcids":["https://orcid.org/0000-0003-2915-8592"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stephen T. Casper","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-2915-8592","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074918225","display_name":"Max Nadeau","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Max Nadeau","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5081541767","display_name":"Gabriel Kreiman","orcid":"https://orcid.org/0000-0003-3505-8475","observed_orcids":["https://orcid.org/0000-0003-3505-8475"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gabriel Kreiman","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-3505-8475","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-perturbations","display_name":"adversarial perturbations","score":0.9039999842643738},{"id":"https://openalex.org/keywords/universal-adversarial-perturbations","display_name":"universal adversarial perturbations","score":0.8299999833106995},{"id":"https://openalex.org/keywords/imagenet","display_name":"ImageNet","score":0.7070000171661377},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.7239999771118164}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9135116338729858},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.7717965841293335},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.6976827383041382},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.695020318031311},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.682602047920227},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.6353834867477417},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.605362594127655},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.4860697090625763},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4455717206001282},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.418517529964447},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33062779903411865},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.06806111335754395},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3203892337","doi":null,"is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2110.03605","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:3203892337","doi":null,"is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2110.03605","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W1479903351","https://openalex.org/W1686810756","https://openalex.org/W1834627138","https://openalex.org/W2108982845","https://openalex.org/W2117539524","https://openalex.org/W2158533467","https://openalex.org/W2163605009","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2303515964","https://openalex.org/W2335728318","https://openalex.org/W2408141691","https://openalex.org/W2460937040","https://openalex.org/W2535873859","https://openalex.org/W2610018085","https://openalex.org/W2745742138","https://openalex.org/W2771909967","https://openalex.org/W2775424324","https://openalex.org/W2781758978","https://openalex.org/W2798302089","https://openalex.org/W2799352588","https://openalex.org/W2885039223","https://openalex.org/W2892080902","https://openalex.org/W2893749619","https://openalex.org/W2905423756","https://openalex.org/W2910850389","https://openalex.org/W2925709178","https://openalex.org/W2937527502","https://openalex.org/W2952610664","https://openalex.org/W2962785568","https://openalex.org/W2963207607","https://openalex.org/W2963446712","https://openalex.org/W2963448658","https://openalex.org/W2963557656","https://openalex.org/W2964153729","https://openalex.org/W2964238361","https://openalex.org/W2969664989","https://openalex.org/W2976501124","https://openalex.org/W2995404272","https://openalex.org/W3035524670","https://openalex.org/W3043057662","https://openalex.org/W3094502228","https://openalex.org/W3095708085","https://openalex.org/W3098018961","https://openalex.org/W3098680936","https://openalex.org/W3103272223","https://openalex.org/W4385731908","https://openalex.org/W7133194819"],"related_works":["https://openalex.org/W7133193781","https://openalex.org/W2995671390","https://openalex.org/W3176041926","https://openalex.org/W2990438113","https://openalex.org/W2901958720","https://openalex.org/W2953047670","https://openalex.org/W3019605839","https://openalex.org/W2950159395","https://openalex.org/W3195153428","https://openalex.org/W3164425124"],"abstract_inverted_index":{"It":[0],"is":[1,122],"well":[2],"understood":[3],"that":[4,21,70,86],"modern":[5],"deep":[6,55],"networks":[7,40],"are":[8,22,72,87],"vulnerable":[9],"to":[10,17,24,77,91,110,126],"adversarial":[11,19,52],"attacks.":[12,67],"However,":[13],"conventional":[14],"methods":[15],"fail":[16],"produce":[18],"perturbations":[20,53],"intelligible":[23],"humans,":[25],"and":[26,41,58,74,95,106],"they":[27,47,71],"pose":[28],"limited":[29],"threats":[30,46],"in":[31,39,117],"the":[32,44,83,112],"physical":[33],"world.":[34],"To":[35],"study":[36],"feature-class":[37],"associations":[38],"better":[42],"understand":[43],"real-world":[45],"face,":[48],"we":[49,107],"develop":[50],"feature-level":[51,80],"using":[54],"image":[56,121],"generators":[57],"a":[59,128],"novel":[60],"optimization":[61],"objective.":[62],"We":[63,68],"term":[64],"these":[65],"feature-fool":[66],"show":[69],"versatile":[73],"use":[75,108],"them":[76,109],"generate":[78],"targeted":[79,129],"attacks":[81,98],"at":[82],"ImageNet":[84],"scale":[85],"simultaneously":[88],"interpretable,":[89],"universal":[90],"any":[92],"source":[93],"image,":[94],"physically-realizable.":[96],"These":[97],"can":[99],"also":[100],"reveal":[101],"spurious,":[102],"semantically-describable":[103],"feature/class":[104],"associations,":[105],"guide":[111],"design":[113],"of":[114],"copy/paste":[115],"adversaries":[116],"which":[118],"one":[119],"natural":[120],"pasted":[123],"into":[124],"another":[125],"cause":[127],"misclassification.":[130]},"counts_by_year":[{"year":2021,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2021-10-11T00:00:00"}