{"id":"https://openalex.org/W4297094602","doi":"https://doi.org/10.1109/access.2022.3209243","title":"ASK: Adversarial Soft k-Nearest Neighbor Attack and Defense","display_name":"ASK: Adversarial Soft k-Nearest Neighbor Attack and Defense","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4297094602","doi":"https://doi.org/10.1109/access.2022.3209243"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3209243","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3209243","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09902964.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09902964.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100339138","display_name":"Ren Wang","orcid":"https://orcid.org/0000-0002-6366-8898"},"institutions":[{"id":"https://openalex.org/I180949307","display_name":"Illinois Institute of Technology","ror":"https://ror.org/037t3ry66","country_code":"US","type":"education","lineage":["https://openalex.org/I180949307"]},{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ren Wang","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA","Department of Electrical and Computer Engineering, Illinois Institute of Technology, Chicago, IL, USA"],"raw_orcid":"https://orcid.org/0000-0002-6366-8898","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA","institution_ids":["https://openalex.org/I27837315"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Illinois Institute of Technology, Chicago, IL, USA","institution_ids":["https://openalex.org/I180949307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068878215","display_name":"Tianqi Chen","orcid":"https://orcid.org/0000-0003-3604-3048"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tianqi Chen","raw_affiliation_strings":["Department of Statistics, University of Michigan, Ann Arbor, MI, USA"],"raw_orcid":"https://orcid.org/0000-0003-3604-3048","affiliations":[{"raw_affiliation_string":"Department of Statistics, University of Michigan, Ann Arbor, MI, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014144360","display_name":"Philip Yao","orcid":null},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Philip Yao","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100321843","display_name":"Sijia Liu","orcid":"https://orcid.org/0000-0003-2817-6991"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sijia Liu","raw_affiliation_strings":["Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030273254","display_name":"Indika Rajapakse","orcid":null},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Indika Rajapakse","raw_affiliation_strings":["Department of Computational Medicine and Bioinformatics, University of Michigan, Ann Arbor, MI, USA"],"raw_orcid":"https://orcid.org/0000-0001-6160-9168","affiliations":[{"raw_affiliation_string":"Department of Computational Medicine and Bioinformatics, University of Michigan, Ann Arbor, MI, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077692655","display_name":"Alfred O. Hero","orcid":"https://orcid.org/0000-0002-2531-9670"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alfred O. Hero","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA"],"raw_orcid":"https://orcid.org/0000-0002-2531-9670","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA","institution_ids":["https://openalex.org/I27837315"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.2323,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.60349247,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"10","issue":null,"first_page":"103074","last_page":"103088"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9419000148773193,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ask-price","display_name":"Ask price","score":0.9640748500823975},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7086061239242554},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7032519578933716},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6940687894821167},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.604631245136261},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4723913371562958},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4377056658267975},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36177337169647217},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.35989147424697876}],"concepts":[{"id":"https://openalex.org/C90329073","wikidata":"https://www.wikidata.org/wiki/Q914232","display_name":"Ask price","level":2,"score":0.9640748500823975},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7086061239242554},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7032519578933716},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6940687894821167},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.604631245136261},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4723913371562958},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4377056658267975},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36177337169647217},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.35989147424697876},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C136264566","wikidata":"https://www.wikidata.org/wiki/Q159810","display_name":"Economy","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2022.3209243","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3209243","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09902964.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:osti.gov:1922471","is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/1922471","pdf_url":"https://www.osti.gov/servlets/purl/1922471","source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},{"id":"pmh:oai:doaj.org/article:498d8e90801445479d34eca1be867efc","is_oa":true,"landing_page_url":"https://doaj.org/article/498d8e90801445479d34eca1be867efc","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 103074-103088 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3209243","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3209243","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09902964.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1083510804","display_name":null,"funder_award_id":"DE\u2010NA0003921","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G408915191","display_name":null,"funder_award_id":"W911NF1510479","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G4841212180","display_name":"GEORGIA TECH RESEARCH CORPORATION;\n\n''CONSORTIUM FOR ENABLING TECHNOLOGIES AND INNOVATION (ETI);''\n\n*NEW AWARD","funder_award_id":"DENA0003921","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G4987928950","display_name":null,"funder_award_id":"HR00112020011","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G5385673730","display_name":null,"funder_award_id":"W911NF-15-1-","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7819333623","display_name":null,"funder_award_id":"DE-NA0003921","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332369","display_name":"National Nuclear Security Administration","ror":"https://ror.org/03sk1we31"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4297094602.pdf","grobid_xml":"https://content.openalex.org/works/W4297094602.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1736726159","https://openalex.org/W2112796928","https://openalex.org/W2122111042","https://openalex.org/W2737730861","https://openalex.org/W2750384547","https://openalex.org/W2793165286","https://openalex.org/W2842511635","https://openalex.org/W2911339339","https://openalex.org/W2963542245","https://openalex.org/W2973512984","https://openalex.org/W2976680996","https://openalex.org/W2987037559","https://openalex.org/W3005880646","https://openalex.org/W3015495219","https://openalex.org/W3113880833","https://openalex.org/W4293846201","https://openalex.org/W4297808394","https://openalex.org/W6601137802","https://openalex.org/W6637162671","https://openalex.org/W6730323794","https://openalex.org/W6739868092","https://openalex.org/W6743688258","https://openalex.org/W6749162425","https://openalex.org/W6758854760","https://openalex.org/W6759129252","https://openalex.org/W6763402779","https://openalex.org/W6770385200","https://openalex.org/W6772136174","https://openalex.org/W6774314701","https://openalex.org/W6783813245"],"related_works":["https://openalex.org/W2905433371","https://openalex.org/W2888392564","https://openalex.org/W4310278675","https://openalex.org/W4388422664","https://openalex.org/W4390569940","https://openalex.org/W4361193272","https://openalex.org/W2963326959","https://openalex.org/W2809283485","https://openalex.org/W4293768783","https://openalex.org/W4288347394"],"abstract_inverted_index":{"K-Nearest":[0],"Neighbor":[1],"(kNN)-based":[2],"deep":[3,24,55],"learning":[4],"methods":[5,64],"have":[6],"been":[7,29],"applied":[8],"to":[9,13,103,122],"many":[10],"applications":[11],"due":[12],"their":[14],"simplicity":[15],"and":[16,32,60,94,118,165],"geometric":[17],"interpretability.":[18],"However,":[19],"the":[20,75,87,91,95,100,110,138,169],"robustness":[21,182],"of":[22,74,181],"kNN-based":[23,54],"classification":[25,78],"models":[26],"has":[27],"not":[28],"thoroughly":[30],"explored":[31],"kNN":[33,47,77,124,163],"attack":[34,58,107,116,158],"strategies":[35,59],"are":[36,186],"underdeveloped.":[37],"In":[38],"this":[39],"paper,":[40],"we":[41],"first":[42],"propose":[43],"an":[44,132],"Adversarial":[45],"Soft":[46],"(ASK)":[48],"loss":[49,69,102],"for":[50],"developing":[51],"more":[52],"effective":[53],"neural":[56],"network":[57],"designing":[61],"better":[62],"defense":[63],"against":[65],"them.":[66],"Our":[67],"ASK":[68,101,140],"provides":[70],"a":[71,105],"differentiable":[72],"surrogate":[73],"expected":[76],"error.":[79],"It":[80],"is":[81],"also":[82],"interpretable":[83],"as":[84],"it":[85],"preserves":[86],"mutual":[88],"information":[89],"between":[90],"perturbed":[92],"input":[93],"in-class-reference":[96],"data.":[97],"We":[98,129],"use":[99],"design":[104],"novel":[106],"method":[108,135,173],"called":[109],"ASK-Attack":[111],"(ASK-Atk),":[112],"which":[113],"shows":[114],"superior":[115],"efficiency":[117],"accuracy":[119],"degradation":[120],"relative":[121],"previous":[123,162],"attacks":[125],"on":[126,144],"hidden":[127],"layers.":[128],"then":[130],"derive":[131],"ASK-Defense":[133],"(ASK-Def)":[134],"that":[136,148],"optimizes":[137],"worst-case":[139],"training":[141,172],"loss.":[142],"Experiments":[143],"CIFAR-10":[145],"(ImageNet)":[146],"show":[147],"(i)":[149],"ASK-Atk":[150],"achieves":[151],"\u2265":[152,175],"13%":[153],"(\u2265":[154,177],"13%)":[155],"improvement":[156],"in":[157,179],"success":[159],"rate":[160],"over":[161],"attacks,":[164],"(ii)":[166],"ASK-Def":[167],"outperforms":[168],"conventional":[170],"adversarial":[171],"by":[174],"6.9%":[176],"3.5%)":[178],"terms":[180],"improvement.":[183],"Relevant":[184],"codes":[185],"available":[187],"at":[188],"https://github.com/wangren09/ASK.":[189]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2022-09-27T00:00:00"}