{"id":"https://openalex.org/W4403578393","doi":"https://doi.org/10.48550/arxiv.2410.12607","title":"Low-Rank Adversarial PGD Attack","display_name":"Low-Rank Adversarial PGD Attack","publication_year":2024,"publication_date":"2024-10-16","ids":{"openalex":"https://openalex.org/W4403578393","doi":"https://doi.org/10.48550/arxiv.2410.12607"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2410.12607","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.12607","pdf_url":"https://arxiv.org/pdf/2410.12607","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2410.12607","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109611618","display_name":"Dayana Savostianova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210150763","display_name":"Gran Sasso Science Institute","ror":"https://ror.org/043qcb444","country_code":"IT","type":"education","lineage":["https://openalex.org/I160013858","https://openalex.org/I4210150763"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Savostianova, Dayana","raw_affiliation_strings":["School of Mathematics Gran Sasso Science Institute L'Aquila (Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mathematics Gran Sasso Science Institute L'Aquila (Italy","institution_ids":["https://openalex.org/I4210150763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072627792","display_name":"Emanuele Zangrando","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210150763","display_name":"Gran Sasso Science Institute","ror":"https://ror.org/043qcb444","country_code":"IT","type":"education","lineage":["https://openalex.org/I160013858","https://openalex.org/I4210150763"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Zangrando, Emanuele","raw_affiliation_strings":["School of Mathematics Gran Sasso Science Institute L'Aquila (Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mathematics Gran Sasso Science Institute L'Aquila (Italy","institution_ids":["https://openalex.org/I4210150763"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043752696","display_name":"Francesco Tudisco","orcid":"https://orcid.org/0000-0002-8150-4475","observed_orcids":["https://orcid.org/0000-0002-8150-4475"]},"institutions":[{"id":"https://openalex.org/I4210150763","display_name":"Gran Sasso Science Institute","ror":"https://ror.org/043qcb444","country_code":"IT","type":"education","lineage":["https://openalex.org/I160013858","https://openalex.org/I4210150763"]},{"id":"https://openalex.org/I98677209","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90","country_code":"GB","type":"education","lineage":["https://openalex.org/I98677209"]}],"countries":["GB","IT"],"is_corresponding":false,"raw_author_name":"Tudisco, Francesco","raw_affiliation_strings":["Gran Sasso Science Institute L'Aquila ( Italy","School of Mathematics University of Edinburgh (UK )"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Gran Sasso Science Institute L'Aquila ( Italy","institution_ids":["https://openalex.org/I4210150763"]},{"raw_affiliation_string":"School of Mathematics University of Edinburgh (UK )","institution_ids":["https://openalex.org/I98677209"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.9850000143051147},{"id":"https://openalex.org/keywords/projected-gradient-descent","display_name":"projected gradient descent","score":0.9800000190734863},{"id":"https://openalex.org/keywords/low-rank-perturbation","display_name":"low-rank perturbation","score":0.9829999804496765},{"id":"https://openalex.org/keywords/singular-value-spectrum","display_name":"singular value spectrum","score":0.8529999852180481},{"id":"https://openalex.org/keywords/adversarial-training","display_name":"adversarial training","score":0.9520000219345093},{"id":"https://openalex.org/keywords/robust-neural-networks","display_name":"robust neural networks","score":0.6150000095367432}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7824624180793762},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.6380802392959595},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3636764883995056},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.35911017656326294},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3075048327445984},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19474530220031738},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.18082541227340698}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2410.12607","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.12607","pdf_url":"https://arxiv.org/pdf/2410.12607","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2410.12607","doi":"https://doi.org/10.48550/arxiv.2410.12607","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2410.12607","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2410.12607","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.12607","pdf_url":"https://arxiv.org/pdf/2410.12607","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403578393.pdf","grobid_xml":"https://content.openalex.org/works/W4403578393.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2640329709","https://openalex.org/W2796902985","https://openalex.org/W2996564870","https://openalex.org/W3091870967","https://openalex.org/W3134621603","https://openalex.org/W3215885613","https://openalex.org/W4401450512"],"related_works":["https://openalex.org/W7159660430","https://openalex.org/W3166652027","https://openalex.org/W6979259595","https://openalex.org/W7204558106","https://openalex.org/W7213262065","https://openalex.org/W3005617766","https://openalex.org/W2948833498","https://openalex.org/W2990846467","https://openalex.org/W7133214405","https://openalex.org/W4393114506"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1],"on":[2,107],"deep":[3],"neural":[4],"network":[5],"models":[6,112,117],"have":[7,119],"seen":[8],"rapid":[9],"development":[10],"and":[11,42,142,159],"are":[12,83],"extensively":[13,103],"used":[14,134],"to":[15,39,139],"study":[16],"the":[17,60,71,76,127,163],"stability":[18],"of":[19,70,75,94,110],"these":[20,81],"networks.":[21],"Among":[22],"various":[23],"adversarial":[24,49,121,136],"strategies,":[25],"Projected":[26],"Gradient":[27],"Descent":[28],"(PGD)":[29],"is":[30],"a":[31,68,92,99,108],"widely":[32],"adopted":[33],"method":[34,106],"in":[35,57,135],"computer":[36],"vision":[37],"due":[38,138],"its":[40,140],"effectiveness":[41],"quick":[43],"implementation,":[44],"making":[45],"it":[46],"suitable":[47],"for":[48],"training.":[50,122],"In":[51],"this":[52,88],"work,":[53],"we":[54,90,150],"observe":[55],"that":[56,80,96,118,126,152],"many":[58],"cases,":[59],"perturbations":[61,82],"computed":[62],"using":[63,169],"PGD":[64,95,130,154,166],"predominantly":[65],"affect":[66],"only":[67],"portion":[69],"singular":[72],"value":[73],"spectrum":[74],"original":[77],"image,":[78],"suggesting":[79],"approximately":[84],"low-rank.":[85],"Motivated":[86],"by":[87],"observation,":[89],"propose":[91],"variation":[93],"efficiently":[97],"computes":[98],"low-rank":[100,129,153],"attack.":[101],"We":[102],"validate":[104],"our":[105],"range":[109],"standard":[111],"as":[113,115],"well":[114],"robust":[116],"undergone":[120],"Our":[123],"analysis":[124],"indicates":[125],"proposed":[128],"can":[131],"be":[132],"effectively":[133],"training":[137],"straightforward":[141],"fast":[143],"implementation":[144],"coupled":[145],"with":[146],"competitive":[147],"performance.":[148],"Notably,":[149],"find":[151],"often":[155],"performs":[156],"comparably":[157],"to,":[158],"sometimes":[160],"even":[161],"outperforms,":[162],"traditional":[164],"full-rank":[165],"attack,":[167],"while":[168],"significantly":[170],"less":[171],"memory.":[172]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-10-20T00:00:00"}