{"id":"https://openalex.org/W4323022447","doi":"https://doi.org/10.1109/access.2023.3250661","title":"Adversarial Attacks and Batch Normalization: A Batch Statistics Perspective","display_name":"Adversarial Attacks and Batch Normalization: A Batch Statistics Perspective","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4323022447","doi":"https://doi.org/10.1109/access.2023.3250661"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3250661","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3250661","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10056932.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10056932.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037534166","display_name":"Awais Muhammad","orcid":"https://orcid.org/0000-0003-2407-7865"},"institutions":[{"id":"https://openalex.org/I35928602","display_name":"Kyung Hee University","ror":"https://ror.org/01zqcg218","country_code":"KR","type":"education","lineage":["https://openalex.org/I35928602"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Awais Muhammad","raw_affiliation_strings":["Department of Computer Science and Engineering, Kyung-Hee University, Yongin, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-2407-7865","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Kyung-Hee University, Yongin, South Korea","institution_ids":["https://openalex.org/I35928602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033921097","display_name":"Fahad Shamshad","orcid":"https://orcid.org/0000-0003-2442-0475"},"institutions":[{"id":"https://openalex.org/I4210113480","display_name":"Mohamed bin Zayed University of Artificial Intelligence","ror":"https://ror.org/0258gkt32","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210113480"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Fahad Shamshad","raw_affiliation_strings":["Computer Vision Department, Mohamed bin Zayed University of Artificial Intelligence, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-2442-0475","affiliations":[{"raw_affiliation_string":"Computer Vision Department, Mohamed bin Zayed University of Artificial Intelligence, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I4210113480"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005200603","display_name":"Sung\u2010Ho Bae","orcid":"https://orcid.org/0000-0003-2677-3186"},"institutions":[{"id":"https://openalex.org/I35928602","display_name":"Kyung Hee University","ror":"https://ror.org/01zqcg218","country_code":"KR","type":"education","lineage":["https://openalex.org/I35928602"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sung-Ho Bae","raw_affiliation_strings":["Department of Computer Science and Engineering, Kyung-Hee University, Yongin, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-2677-3186","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Kyung-Hee University, Yongin, South Korea","institution_ids":["https://openalex.org/I35928602"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.269,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.82292866,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"11","issue":null,"first_page":"96449","last_page":"96459"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.979200005531311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9352999925613403,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.912721574306488},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.788892388343811},{"id":"https://openalex.org/keywords/normalization","display_name":"Normalization (sociology)","score":0.7564610242843628},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5962662100791931},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5355837941169739},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5210503935813904},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47422027587890625},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4178411364555359},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3924703001976013},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16518473625183105}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.912721574306488},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.788892388343811},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.7564610242843628},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5962662100791931},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5355837941169739},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5210503935813904},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47422027587890625},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4178411364555359},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3924703001976013},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16518473625183105},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2023.3250661","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3250661","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10056932.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bec15144ef58418b9179bbe73c999749","is_oa":true,"landing_page_url":"https://doaj.org/article/bec15144ef58418b9179bbe73c999749","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 96449-96459 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3250661","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3250661","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10056932.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4323022447.pdf","grobid_xml":"https://content.openalex.org/works/W4323022447.grobid-xml"},"referenced_works_count":115,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W1576445103","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1836465849","https://openalex.org/W1932198206","https://openalex.org/W1945616565","https://openalex.org/W1977295328","https://openalex.org/W2047643928","https://openalex.org/W2108598243","https://openalex.org/W2138011018","https://openalex.org/W2155904486","https://openalex.org/W2183182206","https://openalex.org/W2194775991","https://openalex.org/W2284050935","https://openalex.org/W2292729293","https://openalex.org/W2336313603","https://openalex.org/W2412782625","https://openalex.org/W2475287302","https://openalex.org/W2502312327","https://openalex.org/W2508156266","https://openalex.org/W2533598788","https://openalex.org/W2588610957","https://openalex.org/W2618530766","https://openalex.org/W2750384547","https://openalex.org/W2774644650","https://openalex.org/W2785678896","https://openalex.org/W2786689170","https://openalex.org/W2799032899","https://openalex.org/W2804935296","https://openalex.org/W2811135961","https://openalex.org/W2913848079","https://openalex.org/W2919115771","https://openalex.org/W2921569601","https://openalex.org/W2946457369","https://openalex.org/W2949389295","https://openalex.org/W2950095299","https://openalex.org/W2953842602","https://openalex.org/W2962872506","https://openalex.org/W2962949934","https://openalex.org/W2963037989","https://openalex.org/W2963143631","https://openalex.org/W2963263347","https://openalex.org/W2963389226","https://openalex.org/W2963743626","https://openalex.org/W2963857521","https://openalex.org/W2964137095","https://openalex.org/W2981488580","https://openalex.org/W2991040477","https://openalex.org/W3009542902","https://openalex.org/W3021182036","https://openalex.org/W3035160371","https://openalex.org/W3035743198","https://openalex.org/W3040572086","https://openalex.org/W3107235539","https://openalex.org/W3118608800","https://openalex.org/W3132455321","https://openalex.org/W3202090809","https://openalex.org/W4210477486","https://openalex.org/W4250482878","https://openalex.org/W4288334123","https://openalex.org/W4288359148","https://openalex.org/W4288359223","https://openalex.org/W4288618201","https://openalex.org/W4289147935","https://openalex.org/W4289330434","https://openalex.org/W4293846201","https://openalex.org/W4294375521","https://openalex.org/W4298162466","https://openalex.org/W4302375066","https://openalex.org/W4308831279","https://openalex.org/W6620707391","https://openalex.org/W6634343353","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6638667902","https://openalex.org/W6640300313","https://openalex.org/W6640425456","https://openalex.org/W6682778277","https://openalex.org/W6695676441","https://openalex.org/W6697265621","https://openalex.org/W6701650085","https://openalex.org/W6702825319","https://openalex.org/W6724804524","https://openalex.org/W6725508424","https://openalex.org/W6726497184","https://openalex.org/W6729756640","https://openalex.org/W6733590821","https://openalex.org/W6739868092","https://openalex.org/W6743688258","https://openalex.org/W6748281876","https://openalex.org/W6748347497","https://openalex.org/W6748475379","https://openalex.org/W6748582592","https://openalex.org/W6748799766","https://openalex.org/W6750707585","https://openalex.org/W6751839145","https://openalex.org/W6753055032","https://openalex.org/W6755494463","https://openalex.org/W6756444276","https://openalex.org/W6756718674","https://openalex.org/W6758975236","https://openalex.org/W6759292369","https://openalex.org/W6760909513","https://openalex.org/W6761830755","https://openalex.org/W6761839128","https://openalex.org/W6762093561","https://openalex.org/W6763421666","https://openalex.org/W6765168082","https://openalex.org/W6771245373","https://openalex.org/W6771356089","https://openalex.org/W6772750526","https://openalex.org/W6774469542","https://openalex.org/W6780666095","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W2947584067","https://openalex.org/W3118510577","https://openalex.org/W3157230915","https://openalex.org/W2062873522","https://openalex.org/W1756374135","https://openalex.org/W2789975780","https://openalex.org/W2007895524","https://openalex.org/W4390540899"],"abstract_inverted_index":{"Batch":[0],"Normalization":[1],"(BatchNorm)":[2],"is":[3],"an":[4],"effective":[5],"architectural":[6],"component":[7],"in":[8,102],"deep":[9],"learning":[10],"models":[11,33,107],"that":[12,58],"helps":[13],"to":[14,28,34,62,74],"improve":[15],"model":[16],"performance":[17],"and":[18,47,78,89],"speed":[19],"up":[20],"training.":[21],"However,":[22],"it":[23],"has":[24],"also":[25,96],"been":[26],"found":[27],"increase":[29],"the":[30,42,64,67,70,98,104,113],"vulnerability":[31,46],"of":[32,66,69,84,100,106,115],"adversarial":[35,59,109],"attacks.":[36],"In":[37],"this":[38,45],"study,":[39],"we":[40,91],"investigate":[41],"mechanism":[43],"behind":[44],"took":[48],"first":[49],"steps":[50],"towards":[51],"a":[52,82],"solution":[53],"called":[54],"RobustNorm.":[55],"We":[56,95],"observed":[57],"inputs":[60],"tend":[61],"shift":[63],"distributions":[65],"output":[68],"BatchNorm":[71],"layer,":[72],"leading":[73],"inaccurate":[75],"train-time":[76],"statistics":[77],"increased":[79],"vulnerability.":[80],"Through":[81],"series":[83],"experiments":[85],"on":[86],"various":[87],"architectures":[88],"datasets,":[90],"confirm":[92],"our":[93],"hypothesis.":[94],"demonstrate":[97],"effectiveness":[99],"RobustNorm":[101],"improving":[103],"robustness":[105],"under":[108],"perturbation":[110],"while":[111],"maintaining":[112],"benefits":[114],"BatchNorm.":[116]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}