{"id":"https://openalex.org/W3133309250","doi":"https://doi.org/10.1007/s10994-022-06216-6","title":"On the robustness of randomized classifiers to adversarial examples","display_name":"On the robustness of randomized classifiers to adversarial examples","publication_year":2022,"publication_date":"2022-08-02","ids":{"openalex":"https://openalex.org/W3133309250","doi":"https://doi.org/10.1007/s10994-022-06216-6","mag":"3133309250"},"language":"en","primary_location":{"id":"doi:10.1007/s10994-022-06216-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-022-06216-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-022-06216-6.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10994-022-06216-6.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033087851","display_name":"Rafa\u00ebl Pinot","orcid":"https://orcid.org/0000-0001-5372-8300"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Rafael Pinot","raw_affiliation_strings":["EPFL, 1015, Lausanne, Switzerland","EPFL - Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne (CH-1015 Lausanne, Switzerland - Switzerland)"],"raw_orcid":"https://orcid.org/0000-0001-5372-8300","affiliations":[{"raw_affiliation_string":"EPFL, 1015, Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]},{"raw_affiliation_string":"EPFL - Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne (CH-1015 Lausanne, Switzerland - Switzerland)","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113635602","display_name":"Laurent Meunier","orcid":"https://orcid.org/0000-0003-2571-8265"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I190752583","display_name":"ParisTech","ror":"https://ror.org/05c2qg481","country_code":"FR","type":"education","lineage":["https://openalex.org/I190752583"]},{"id":"https://openalex.org/I4210137929","display_name":"Lamsade","ror":"https://ror.org/03pnp1a74","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I2746051580","https://openalex.org/I4210137929","https://openalex.org/I4210159245","https://openalex.org/I56435720"]},{"id":"https://openalex.org/I56435720","display_name":"Universit\u00e9 Paris Dauphine-PSL","ror":"https://ror.org/052bz7812","country_code":"FR","type":"education","lineage":["https://openalex.org/I2746051580","https://openalex.org/I56435720"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Laurent Meunier","raw_affiliation_strings":["LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","Meta AI Research, 75002, Paris, France","LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I56435720"]},{"raw_affiliation_string":"Meta AI Research, 75002, Paris, France","institution_ids":["https://openalex.org/I190752583"]},{"raw_affiliation_string":"LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)","institution_ids":["https://openalex.org/I4210137929"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030318966","display_name":"Florian Yger","orcid":"https://orcid.org/0000-0002-7182-8062"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210137929","display_name":"Lamsade","ror":"https://ror.org/03pnp1a74","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I2746051580","https://openalex.org/I4210137929","https://openalex.org/I4210159245","https://openalex.org/I56435720"]},{"id":"https://openalex.org/I56435720","display_name":"Universit\u00e9 Paris Dauphine-PSL","ror":"https://ror.org/052bz7812","country_code":"FR","type":"education","lineage":["https://openalex.org/I2746051580","https://openalex.org/I56435720"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Florian Yger","raw_affiliation_strings":["LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I56435720"]},{"raw_affiliation_string":"LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)","institution_ids":["https://openalex.org/I4210137929"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059969352","display_name":"C\u00e9dric Gouy\u2010Pailler","orcid":"https://orcid.org/0000-0003-1298-7845"},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"C\u00e9dric Gouy-Pailler","raw_affiliation_strings":["CEA, List, Universit\u00e9 Paris-Saclay, 91120, Palaiseau, France","LI3A (CEA, LIST) - Intelligence Artificielle et Apprentissage Automatique (CEA, LIST) (Artificial Intelligence and Automatic Learning (LI3A)\r\n91191 - Gif sur Yvette cedex\r\nanciennement Laboratoire Analyse des Donn\u00e9es et Intelligence des Syst\u00e8mes (LADIS), Laboratoire Information Mod\u00e8les et Apprentissage (LIMA), Laboratoire Intelligence Multi-capteurs et Apprentissage (LIMA) - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CEA, List, Universit\u00e9 Paris-Saclay, 91120, Palaiseau, France","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861"]},{"raw_affiliation_string":"LI3A (CEA, LIST) - Intelligence Artificielle et Apprentissage Automatique (CEA, LIST) (Artificial Intelligence and Automatic Learning (LI3A)\r\n91191 - Gif sur Yvette cedex\r\nanciennement Laboratoire Analyse des Donn\u00e9es et Intelligence des Syst\u00e8mes (LADIS), Laboratoire Information Mod\u00e8les et Apprentissage (LIMA), Laboratoire Intelligence Multi-capteurs et Apprentissage (LIMA) - France)","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I4210085861"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081034810","display_name":"Yann Chevaleyre","orcid":"https://orcid.org/0000-0002-6609-5562"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210137929","display_name":"Lamsade","ror":"https://ror.org/03pnp1a74","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I2746051580","https://openalex.org/I4210137929","https://openalex.org/I4210159245","https://openalex.org/I56435720"]},{"id":"https://openalex.org/I56435720","display_name":"Universit\u00e9 Paris Dauphine-PSL","ror":"https://ror.org/052bz7812","country_code":"FR","type":"education","lineage":["https://openalex.org/I2746051580","https://openalex.org/I56435720"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yann Chevaleyre","raw_affiliation_strings":["LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)","MILES - Machine Intelligence and Learning Systems (France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I56435720"]},{"raw_affiliation_string":"LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)","institution_ids":["https://openalex.org/I4210137929"]},{"raw_affiliation_string":"MILES - Machine Intelligence and Learning Systems (France)","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026104258","display_name":"Jamal Atif","orcid":"https://orcid.org/0000-0001-9618-5684"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210137929","display_name":"Lamsade","ror":"https://ror.org/03pnp1a74","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I2746051580","https://openalex.org/I4210137929","https://openalex.org/I4210159245","https://openalex.org/I56435720"]},{"id":"https://openalex.org/I56435720","display_name":"Universit\u00e9 Paris Dauphine-PSL","ror":"https://ror.org/052bz7812","country_code":"FR","type":"education","lineage":["https://openalex.org/I2746051580","https://openalex.org/I56435720"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Jamal Atif","raw_affiliation_strings":["LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAMSADE, CNRS, Universit\u00e9 Paris-Dauphine, PSL Research University, 75016, Paris, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I56435720"]},{"raw_affiliation_string":"LAMSADE - Laboratoire d'analyse et mod\u00e9lisation de syst\u00e8mes pour l'aide \u00e0 la d\u00e9cision (Place de Lattre de Tassigny 75775 PARIS CEDEX 16 - France)","institution_ids":["https://openalex.org/I4210137929"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5033087851","https://openalex.org/A5113635602"],"corresponding_institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I190752583","https://openalex.org/I4210137929","https://openalex.org/I5124864","https://openalex.org/I56435720"],"apc_list":{"value":3290,"currency":"USD","value_usd":3290},"apc_paid":{"value":3290,"currency":"USD","value_usd":3290},"fwci":0.9338,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.78371177,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":"111","issue":"9","first_page":"3425","last_page":"3457"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9387000203132629,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9197999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7311879396438599},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6953808665275574},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6506012678146362},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6450666189193726},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5476235151290894},{"id":"https://openalex.org/keywords/randomized-algorithm","display_name":"Randomized algorithm","score":0.5050705075263977},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.4311996102333069},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.43016767501831055},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.42583397030830383},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2719271183013916}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7311879396438599},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6953808665275574},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6506012678146362},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6450666189193726},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5476235151290894},{"id":"https://openalex.org/C128669082","wikidata":"https://www.wikidata.org/wiki/Q583461","display_name":"Randomized algorithm","level":2,"score":0.5050705075263977},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.4311996102333069},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.43016767501831055},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.42583397030830383},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2719271183013916},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1007/s10994-022-06216-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-022-06216-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-022-06216-6.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},{"id":"pmh:oai:basepub.dauphine.psl.eu:123456789/24755","is_oa":true,"landing_page_url":"https://basepub.dauphine.psl.eu/handle/123456789/24755","pdf_url":"https://hal.science/hal-03916842/document","source":{"id":"https://openalex.org/S4306401007","display_name":"Base Institutionnelle de Recherche de l'universit\u00e9 Paris-Dauphine (BIRD) (University Paris-Dauphine)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I102197404","host_organization_name":"Universit\u00e9 Paris-Sud","host_organization_lineage":["https://openalex.org/I102197404"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article accept\u00e9 pour publication ou publi\u00e9"},{"id":"pmh:oai:HAL:hal-03916842v1","is_oa":true,"landing_page_url":"https://hal.science/hal-03916842","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://link.springer.com/article/10.1007/s10994-022-06216-6","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:infoscience.epfl.ch:296171","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/190394","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5124864","host_organization_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","host_organization_lineage":["https://openalex.org/I5124864"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"WoS","raw_type":"research article"}],"best_oa_location":{"id":"doi:10.1007/s10994-022-06216-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-022-06216-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-022-06216-6.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3133309250.pdf","grobid_xml":"https://content.openalex.org/works/W3133309250.grobid-xml"},"referenced_works_count":88,"referenced_works":["https://openalex.org/W1944672","https://openalex.org/W9657784","https://openalex.org/W130353434","https://openalex.org/W607505555","https://openalex.org/W1460189015","https://openalex.org/W1556911442","https://openalex.org/W1585160083","https://openalex.org/W1598928703","https://openalex.org/W1892947258","https://openalex.org/W1945616565","https://openalex.org/W1964929969","https://openalex.org/W1968998685","https://openalex.org/W2017326891","https://openalex.org/W2026653933","https://openalex.org/W2032916024","https://openalex.org/W2073946873","https://openalex.org/W2097752919","https://openalex.org/W2099111195","https://openalex.org/W2112939491","https://openalex.org/W2114296159","https://openalex.org/W2122882636","https://openalex.org/W2166397251","https://openalex.org/W2293768274","https://openalex.org/W2296452361","https://openalex.org/W2401231614","https://openalex.org/W2535873859","https://openalex.org/W2579923771","https://openalex.org/W2612960549","https://openalex.org/W2619479788","https://openalex.org/W2640329709","https://openalex.org/W2767962654","https://openalex.org/W2775795276","https://openalex.org/W2787708942","https://openalex.org/W2787733970","https://openalex.org/W2788820894","https://openalex.org/W2799032899","https://openalex.org/W2887603965","https://openalex.org/W2897355816","https://openalex.org/W2898193427","https://openalex.org/W2906989593","https://openalex.org/W2911634294","https://openalex.org/W2913266441","https://openalex.org/W2943912735","https://openalex.org/W2946457369","https://openalex.org/W2949979904","https://openalex.org/W2950073527","https://openalex.org/W2950468330","https://openalex.org/W2951735139","https://openalex.org/W2962710014","https://openalex.org/W2963207607","https://openalex.org/W2963431851","https://openalex.org/W2963485691","https://openalex.org/W2963564844","https://openalex.org/W2963612069","https://openalex.org/W2963952467","https://openalex.org/W2964082701","https://openalex.org/W2964137095","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2970504098","https://openalex.org/W2971109239","https://openalex.org/W2971180473","https://openalex.org/W2980829995","https://openalex.org/W2989696285","https://openalex.org/W2990138404","https://openalex.org/W3005103346","https://openalex.org/W3007305010","https://openalex.org/W3009542902","https://openalex.org/W3023282690","https://openalex.org/W3039256091","https://openalex.org/W3046518446","https://openalex.org/W3103836116","https://openalex.org/W3118608800","https://openalex.org/W3123857276","https://openalex.org/W4206471589","https://openalex.org/W4236362309","https://openalex.org/W4251616545","https://openalex.org/W6600089797","https://openalex.org/W6637162671","https://openalex.org/W6645668653","https://openalex.org/W6658570928","https://openalex.org/W6674851815","https://openalex.org/W6734787559","https://openalex.org/W6755310938","https://openalex.org/W6769353967","https://openalex.org/W6774549192","https://openalex.org/W6774685073","https://openalex.org/W6803261938"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W2041927040"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"paper":[2],"investigates":[3],"the":[4,31,79,92,96,100,103,106],"theory":[5,36],"of":[6,27,33,48,83,111,142],"robustness":[7,49],"against":[8,196],"adversarial":[9,80,97],"attacks.":[10],"We":[11,131,149],"focus":[12],"on":[13,78,91,161,187,205],"randomized":[14,51,84,112,129],"classifiers":[15,17],"(i.e.":[16],"that":[18,133,178],"output":[19],"random":[20],"variables)":[21],"and":[22,37,95,105,167,189],"provide":[23],"a":[24,45,74,118,139],"thorough":[25],"analysis":[26],"their":[28],"behavior":[29],"through":[30],"lens":[32],"statistical":[34],"learning":[35,144],"information":[38],"theory.":[39],"To":[40],"this":[41,61],"aim,":[42],"we":[43,63,88,172],"introduce":[44],"new":[46,66,75],"notion":[47],"for":[50],"classifiers,":[52],"enforcing":[53],"local":[54],"Lipschitzness":[55],"using":[56,157],"probability":[57],"metrics.":[58],"Equipped":[59],"with":[60,154,202],"definition,":[62],"make":[64],"two":[65],"contributions.":[67],"The":[68,114],"first":[69],"one":[70],"consists":[71],"in":[72],"devising":[73],"upper":[76],"bound":[77],"generalization":[81,93],"gap":[82,94,98,101],"classifiers.":[85,113,130],"More":[86],"precisely,":[87],"devise":[89],"bounds":[90,194],"i.e.":[99],"between":[102],"risk":[104,108],"worst-case":[107],"under":[109,146],"attack)":[110],"second":[115],"contribution":[116],"presents":[117],"yet":[119],"simple":[120],"but":[121],"efficient":[122],"noise":[123],"injection":[124],"method":[125],"to":[126,138,174],"design":[127,175],"robust":[128,176,192],"show":[132],"our":[134,152],"results":[135,156],"are":[136],"applicable":[137],"wide":[140],"range":[141],"machine":[143],"models":[145,177],"mild":[147],"hypotheses.":[148],"further":[150],"corroborate":[151],"findings":[153],"experimental":[155],"deep":[158],"neural":[159],"networks":[160],"standard":[162],"image":[163],"datasets,":[164],"namely":[165],"CIFAR-10":[166],"CIFAR-100.":[168],"On":[169],"these":[170],"tasks,":[171],"manage":[173],"simultaneously":[179],"achieve":[180],"state-of-the-art":[181],"accuracy":[182,186,193],"(over":[183],"0.82":[184],"clean":[185],"CIFAR-10)":[188],"enjoy":[190],"guaranteed":[191],"(0.45":[195],"$$\\ell":[197],"_{2}$$":[198],"\u2113":[199],"2":[200],"adversaries":[201],"magnitude":[203],"0.5":[204],"CIFAR-10).":[206]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-27T14:10:00.468798","created_date":"2025-10-10T00:00:00"}