{"id":"https://openalex.org/W3204936690","doi":"https://doi.org/10.1007/s13042-021-01435-0","title":"Really natural adversarial examples","display_name":"Really natural adversarial examples","publication_year":2021,"publication_date":"2021-10-05","ids":{"openalex":"https://openalex.org/W3204936690","doi":"https://doi.org/10.1007/s13042-021-01435-0","mag":"3204936690"},"language":"en","primary_location":{"id":"doi:10.1007/s13042-021-01435-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13042-021-01435-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s13042-021-01435-0.pdf","source":{"id":"https://openalex.org/S2764999920","display_name":"International Journal of Machine Learning and Cybernetics","issn_l":"1868-8071","issn":["1868-8071","1868-808X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Machine Learning and Cybernetics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s13042-021-01435-0.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068267966","display_name":"An\u00edbal Pedraza","orcid":"https://orcid.org/0000-0001-7748-6756"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anibal Pedraza","raw_affiliation_strings":["VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0000-0001-7748-6756","affiliations":[{"raw_affiliation_string":"VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040216542","display_name":"\u00d3scar D\u00e9niz","orcid":"https://orcid.org/0000-0002-0841-4131"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Oscar Deniz","raw_affiliation_strings":["VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0000-0002-0841-4131","affiliations":[{"raw_affiliation_string":"VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023438344","display_name":"Gloria Bueno","orcid":"https://orcid.org/0000-0002-7345-4869"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gloria Bueno","raw_affiliation_strings":["VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VISILAB, ETSI Industriales, Avda. Camilo Jose Cela, 3, 13071, Ciudad Real, Spain","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5040216542"],"corresponding_institution_ids":[],"apc_list":{"value":2790,"currency":"EUR","value_usd":3590},"apc_paid":{"value":2790,"currency":"EUR","value_usd":3590},"fwci":0.9554,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.8018611,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"13","issue":"4","first_page":"1065","last_page":"1077"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9617558717727661},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7487249374389648},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.637244701385498},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.586918294429779},{"id":"https://openalex.org/keywords/natural","display_name":"Natural (archaeology)","score":0.5329462289810181},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.5172055959701538},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.487078458070755},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.48451632261276245},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4596095085144043},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4442654848098755},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.42552924156188965},{"id":"https://openalex.org/keywords/computational-intelligence","display_name":"Computational intelligence","score":0.4132322669029236},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33720332384109497},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.32927483320236206},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.07183972001075745},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.07052463293075562}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9617558717727661},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7487249374389648},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.637244701385498},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.586918294429779},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.5329462289810181},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.5172055959701538},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.487078458070755},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.48451632261276245},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4596095085144043},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4442654848098755},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.42552924156188965},{"id":"https://openalex.org/C139502532","wikidata":"https://www.wikidata.org/wiki/Q1122090","display_name":"Computational intelligence","level":2,"score":0.4132322669029236},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33720332384109497},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.32927483320236206},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.07183972001075745},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.07052463293075562},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s13042-021-01435-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13042-021-01435-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s13042-021-01435-0.pdf","source":{"id":"https://openalex.org/S2764999920","display_name":"International Journal of Machine Learning and Cybernetics","issn_l":"1868-8071","issn":["1868-8071","1868-808X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Machine Learning and Cybernetics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s13042-021-01435-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13042-021-01435-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s13042-021-01435-0.pdf","source":{"id":"https://openalex.org/S2764999920","display_name":"International Journal of Machine Learning and Cybernetics","issn_l":"1868-8071","issn":["1868-8071","1868-808X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Machine Learning and Cybernetics","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4399999976158142,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G2504980689","display_name":null,"funder_award_id":"SBPLY/17/180501/000543","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G923900082","display_name":null,"funder_award_id":"FPU17/04758","funder_id":"https://openalex.org/F4320315062","funder_display_name":"Ministerio de Ciencia, Innovaci\u00f3n y Universidades"}],"funders":[{"id":"https://openalex.org/F4320315062","display_name":"Ministerio de Ciencia, Innovaci\u00f3n y Universidades","ror":null},{"id":"https://openalex.org/F4320321837","display_name":"Ministerio de Econom\u00eda y Competitividad","ror":"https://ror.org/034900433"},{"id":"https://openalex.org/F4320324466","display_name":"Universidad de Castilla-La Mancha","ror":"https://ror.org/05r78ng12"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3204936690.pdf","grobid_xml":"https://content.openalex.org/works/W3204936690.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2046119925","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2142884912","https://openalex.org/W2153777140","https://openalex.org/W2158564760","https://openalex.org/W2171349048","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2531409750","https://openalex.org/W2570343428","https://openalex.org/W2608583225","https://openalex.org/W2787708942","https://openalex.org/W2885183727","https://openalex.org/W2919234133","https://openalex.org/W2955127209","https://openalex.org/W2963037989","https://openalex.org/W2963207607","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2980222335","https://openalex.org/W2981446616","https://openalex.org/W3011434189","https://openalex.org/W3015625436","https://openalex.org/W3177096435","https://openalex.org/W6600103761","https://openalex.org/W6600159499","https://openalex.org/W6600558321","https://openalex.org/W6603807645","https://openalex.org/W6765940776","https://openalex.org/W6810371145","https://openalex.org/W6821127250"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298","https://openalex.org/W4298079292"],"abstract_inverted_index":{"Abstract":[0],"The":[1,18],"phenomenon":[2],"of":[3,9,173],"Adversarial":[4],"Examples":[5],"has":[6,39],"become":[7],"one":[8],"the":[10,23,34,83,100,127,137,155,167,171],"most":[11],"intriguing":[12],"topics":[13],"associated":[14],"to":[15,25,57,65,119],"deep":[16,27],"learning.":[17],"so-called":[19],"adversarial":[20,67,95,140,157,176],"attacks":[21],"have":[22,61],"ability":[24],"fool":[26,82],"neural":[28],"networks":[29],"with":[30,126],"inappreciable":[31],"perturbations.":[32],"While":[33],"effect":[35],"is":[36,142],"striking,":[37],"it":[38],"been":[40],"suggested":[41],"that":[42,78,91,94,154,169],"such":[43],"carefully":[44],"selected":[45,107],"injected":[46],"noise":[47,68,108],"does":[48],"not":[49],"necessarily":[50],"appear":[51,98],"in":[52,69,99,160,170],"real-world":[53,101],"scenarios.":[54],"In":[55,85],"contrast":[56],"this,":[58],"some":[59],"authors":[60],"looked":[62],"for":[63],"ways":[64],"generate":[66],"physical":[70],"scenarios":[71],"(traffic":[72],"signs,":[73],"shirts,":[74],"etc.),":[75],"thus":[76],"showing":[77],"attackers":[79],"can":[80],"indeed":[81],"networks.":[84],"this":[86,112],"paper":[87],"we":[88],"go":[89],"beyond":[90],"and":[92,121,136,147],"show":[93,111,153],"examples":[96,141,158],"also":[97,122,152],"without":[102],"any":[103],"attacker":[104],"or":[105],"maliciously":[106],"involved.":[109],"We":[110,151],"by":[113],"using":[114,144],"images":[115],"from":[116,166],"tasks":[117],"related":[118],"microscopy":[120],"general":[123],"object":[124],"recognition":[125],"well-known":[128],"ImageNet":[129],"dataset.":[130],"A":[131],"comparison":[132],"between":[133],"these":[134],"natural":[135,156],"artificially":[138,174],"generated":[139,175],"performed":[143],"distance":[145,165],"metrics":[146],"image":[148],"quality":[149],"metrics.":[150],"are":[159],"fact":[161],"at":[162],"a":[163],"higher":[164],"originals":[168],"case":[172],"examples.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3},{"year":2022,"cited_by_count":4}],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2025-10-10T00:00:00"}
