{"id":"https://openalex.org/W4381805003","doi":"https://doi.org/10.1007/s10462-023-10521-4","title":"Safety-critical computer vision: an empirical survey of adversarial evasion attacks and defenses on computer vision systems","display_name":"Safety-critical computer vision: an empirical survey of adversarial evasion attacks and defenses on computer vision systems","publication_year":2023,"publication_date":"2023-06-23","ids":{"openalex":"https://openalex.org/W4381805003","doi":"https://doi.org/10.1007/s10462-023-10521-4"},"language":"en","primary_location":{"id":"doi:10.1007/s10462-023-10521-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10462-023-10521-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10462-023-10521-4.pdf","source":{"id":"https://openalex.org/S122814990","display_name":"Artificial Intelligence Review","issn_l":"0269-2821","issn":["0269-2821","1573-7462"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Artificial Intelligence Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10462-023-10521-4.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109399343","display_name":"Charles J. Meyers","orcid":null},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Charles Meyers","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035857033","display_name":"Tommy L\u00f6fstedt","orcid":"https://orcid.org/0000-0001-7119-7646"},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Tommy L\u00f6fstedt","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070862414","display_name":"Erik Elmroth","orcid":"https://orcid.org/0000-0002-2633-6798"},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Erik Elmroth","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5109399343"],"corresponding_institution_ids":["https://openalex.org/I90267481"],"apc_list":{"value":3090,"currency":"USD","value_usd":3090},"apc_paid":{"value":3090,"currency":"USD","value_usd":3090},"fwci":1.9729,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.878577,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"56","issue":"S1","first_page":"217","last_page":"251"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8044244050979614},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7593770027160645},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5900593996047974},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5396744012832642},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5295280814170837},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48997870087623596},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.4822586178779602},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.45844483375549316},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.42033815383911133},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4132586121559143},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3431209623813629}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8044244050979614},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7593770027160645},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5900593996047974},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5396744012832642},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5295280814170837},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48997870087623596},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.4822586178779602},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.45844483375549316},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.42033815383911133},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4132586121559143},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3431209623813629},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10462-023-10521-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10462-023-10521-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10462-023-10521-4.pdf","source":{"id":"https://openalex.org/S122814990","display_name":"Artificial Intelligence Review","issn_l":"0269-2821","issn":["0269-2821","1573-7462"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Artificial Intelligence Review","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:umu-211212","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-211212","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s10462-023-10521-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10462-023-10521-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10462-023-10521-4.pdf","source":{"id":"https://openalex.org/S122814990","display_name":"Artificial Intelligence Review","issn_l":"0269-2821","issn":["0269-2821","1573-7462"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Artificial Intelligence Review","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6470703989","display_name":null,"funder_award_id":"2019.0352","funder_id":"https://openalex.org/F4320322327","funder_display_name":"Knut och Alice Wallenbergs Stiftelse"}],"funders":[{"id":"https://openalex.org/F4320322327","display_name":"Knut och Alice Wallenbergs Stiftelse","ror":"https://ror.org/004hzzk67"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4381805003.pdf"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W849075951","https://openalex.org/W1481028942","https://openalex.org/W1519425523","https://openalex.org/W1603565383","https://openalex.org/W1988887228","https://openalex.org/W1998255116","https://openalex.org/W2037889871","https://openalex.org/W2051267297","https://openalex.org/W2061774960","https://openalex.org/W2100183523","https://openalex.org/W2100790053","https://openalex.org/W2103559027","https://openalex.org/W2128835097","https://openalex.org/W2154952480","https://openalex.org/W2156562940","https://openalex.org/W2157535873","https://openalex.org/W2194775991","https://openalex.org/W2238732480","https://openalex.org/W2243397390","https://openalex.org/W2346834216","https://openalex.org/W2535690855","https://openalex.org/W2607219512","https://openalex.org/W2688991239","https://openalex.org/W2724665124","https://openalex.org/W2740520864","https://openalex.org/W2768346313","https://openalex.org/W2775952356","https://openalex.org/W2898197178","https://openalex.org/W2898696280","https://openalex.org/W2915389836","https://openalex.org/W2930249865","https://openalex.org/W2951934944","https://openalex.org/W2962821226","https://openalex.org/W2963217995","https://openalex.org/W2963626858","https://openalex.org/W2963679616","https://openalex.org/W2963857521","https://openalex.org/W2963952467","https://openalex.org/W2973414778","https://openalex.org/W2979417040","https://openalex.org/W2981207549","https://openalex.org/W3007264885","https://openalex.org/W3015625436","https://openalex.org/W3034856597","https://openalex.org/W3102720581","https://openalex.org/W3103836116","https://openalex.org/W3128232076","https://openalex.org/W3134111902","https://openalex.org/W3179647175","https://openalex.org/W4220974656","https://openalex.org/W4243281803","https://openalex.org/W4253747132","https://openalex.org/W4280519765","https://openalex.org/W4320060435","https://openalex.org/W6600466347","https://openalex.org/W6634079652"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W4303645823","https://openalex.org/W4285263558","https://openalex.org/W2900159906","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W4283221438","https://openalex.org/W2899811703"],"abstract_inverted_index":{"Abstract":[0],"Considering":[1],"the":[2,9,32,54,139,143,156,178],"growing":[3],"prominence":[4],"of":[5,11,114,142,155,165,177,204],"production-level":[6],"AI":[7],"and":[8,34,59,65,83,101,116,118,122,181,198,206,210],"threat":[10],"adversarial":[12,135],"attacks":[13,115,182,205],"that":[14,151,219],"can":[15],"poison":[16],"a":[17,22,111,120,131,188,202,231],"machine":[18,45],"learning":[19,46],"model":[20,33,105],"against":[21,183],"certain":[23],"label,":[24],"evade":[25],"classification,":[26],"or":[27],"reveal":[28],"sensitive":[29],"data":[30,36],"about":[31],"training":[35],"to":[37,44,103,137,160,225],"an":[38],"attacker,":[39],"adversaries":[40],"pose":[41],"fundamental":[42],"problems":[43,62],"systems.":[47],"Furthermore,":[48],"much":[49],"research":[50],"has":[51],"focused":[52],"on":[53,169,190],"inverse":[55],"relationship":[56],"between":[57],"robustness":[58],"accuracy,":[60],"raising":[61],"for":[63,125],"real-time":[64],"safety-critical":[66,132,191,228],"systems":[67,186],"particularly":[68],"since":[69],"they":[70,96],"are":[71,97],"governed":[72],"by":[73,230],"legal":[74],"constraints":[75],"in":[76,193],"which":[77],"software":[78],"changes":[79],"must":[80,86],"be":[81,87],"explainable":[82],"every":[84],"change":[85],"thoroughly":[88],"tested.":[89],"While":[90],"many":[91],"defenses":[92,117,180],"have":[93,108],"been":[94],"proposed,":[95],"often":[98],"computationally":[99],"expensive":[100],"tend":[102],"reduce":[104],"accuracy.":[106],"We":[107,174],"therefore":[109],"conducted":[110],"large":[112],"survey":[113],"present":[119],"simple":[121],"practical":[123],"framework":[124],"analyzing":[126],"any":[127,162],"machine-learning":[128],"system":[129],"from":[130],"perspective":[133],"using":[134],"noise":[136],"find":[138],"upper":[140],"bound":[141],"failure":[144],"rate.":[145],"Using":[146],"this":[147],"method,":[148],"we":[149,214],"conclude":[150],"all":[152],"tested":[153,168],"configurations":[154],"ResNet":[157],"architecture":[158],"fail":[159,224],"meet":[161,226],"reasonable":[163],"definition":[164],"\u2018safety-critical\u2019":[166],"when":[167],"even":[170],"small-scale":[171],"benchmark":[172],"data.":[173],"examine":[175],"state":[176],"art":[179],"computer":[184],"vision":[185],"with":[187],"focus":[189],"applications":[192],"autonomous":[194],"driving,":[195],"industrial":[196],"control,":[197],"healthcare.":[199],"By":[200],"testing":[201],"combination":[203],"defenses,":[207],"their":[208,211],"efficacy,":[209],"run-time":[212],"requirements,":[213],"provide":[215],"substantial":[216],"empirical":[217],"evidence":[218],"modern":[220],"neural":[221],"networks":[222],"consistently":[223],"established":[227],"standards":[229],"wide":[232],"margin.":[233]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}