{"id":"https://openalex.org/W4413887252","doi":"https://doi.org/10.1109/access.2025.3604636","title":"Unveiling Illusionary Robust Features: A Novel Approach for Adversarial Defenses in Deep Neural Networks","display_name":"Unveiling Illusionary Robust Features: A Novel Approach for Adversarial Defenses in Deep Neural Networks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4413887252","doi":"https://doi.org/10.1109/access.2025.3604636"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3604636","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3604636","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3604636","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063366811","display_name":"Alireza Aghabagherloo","orcid":"https://orcid.org/0000-0003-0783-0261"},"institutions":[{"id":"https://openalex.org/I4210115377","display_name":"VIB-KU Leuven Center for Microbiology","ror":"https://ror.org/02bpp8r91","country_code":"BE","type":"facility","lineage":["https://openalex.org/I2802017950","https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Alireza Aghabagherloo","raw_affiliation_strings":["Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM"],"raw_orcid":"https://orcid.org/0000-0003-0783-0261","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"raw_affiliation_string":"COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020665124","display_name":"Rafa G\u00e1lvez","orcid":"https://orcid.org/0000-0002-1565-933X"},"institutions":[{"id":"https://openalex.org/I4210115377","display_name":"VIB-KU Leuven Center for Microbiology","ror":"https://ror.org/02bpp8r91","country_code":"BE","type":"facility","lineage":["https://openalex.org/I2802017950","https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Rafa G\u00e1lvez","raw_affiliation_strings":["Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM"],"raw_orcid":"https://orcid.org/0000-0002-1565-933X","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"raw_affiliation_string":"COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069939159","display_name":"Davy Preuveneers","orcid":"https://orcid.org/0000-0001-6279-4430"},"institutions":[{"id":"https://openalex.org/I4210115793","display_name":"De Wever-Ziekenhuis","ror":"https://ror.org/0285m5c69","country_code":"NL","type":"healthcare","lineage":["https://openalex.org/I4210115793"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE","NL"],"is_corresponding":false,"raw_author_name":"Davy Preuveneers","raw_affiliation_strings":["DistriNet, KU Leuven, Leuven, Belgium","DistriNet, Celestijnenlaan 200A, Heverlee, Heverlee"],"raw_orcid":"https://orcid.org/0000-0001-6279-4430","affiliations":[{"raw_affiliation_string":"DistriNet, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I99464096"]},{"raw_affiliation_string":"DistriNet, Celestijnenlaan 200A, Heverlee, Heverlee","institution_ids":["https://openalex.org/I4210115793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039506639","display_name":"Bart Preneel","orcid":"https://orcid.org/0000-0003-2005-9651"},"institutions":[{"id":"https://openalex.org/I4210115377","display_name":"VIB-KU Leuven Center for Microbiology","ror":"https://ror.org/02bpp8r91","country_code":"BE","type":"facility","lineage":["https://openalex.org/I2802017950","https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Bart Preneel","raw_affiliation_strings":["Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM"],"raw_orcid":"https://orcid.org/0000-0003-2005-9651","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, COSIC, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210115377","https://openalex.org/I99464096"]},{"raw_affiliation_string":"COSIC, KU Leuven, Kasteelpark Arenberg 10 Bus 2452, Leuven, BELGIUM","institution_ids":["https://openalex.org/I99464096"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0879086,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"154678","last_page":"154694"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9632999897003174,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8697912096977234},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6168932318687439},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6001194715499878},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5624644756317139},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5355783104896545}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8697912096977234},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6168932318687439},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6001194715499878},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5624644756317139},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5355783104896545}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2025.3604636","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3604636","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/772135","is_oa":true,"landing_page_url":"https://lirias.kuleuven.be/handle/20.500.12942/772135","pdf_url":"https://lirias.kuleuven.be/retrieve/36022e67-4f96-42ad-9d19-5991aea26259","source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Ieee Access, vol. 13, (154678-154694)","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:9a50e4f5bdd44dd090d829ad11be6d5f","is_oa":true,"landing_page_url":"https://doaj.org/article/9a50e4f5bdd44dd090d829ad11be6d5f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 154678-154694 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3604636","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3604636","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6220799212","display_name":"Cybersecurity Research Program Flanders \u2013 second cycle","funder_award_id":"VOEWICS02","funder_id":"https://openalex.org/F4320327336","funder_display_name":"Vlaamse regering"}],"funders":[{"id":"https://openalex.org/F4320322308","display_name":"KU Leuven","ror":"https://ror.org/05f950310"},{"id":"https://openalex.org/F4320327336","display_name":"Vlaamse regering","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2395579298","https://openalex.org/W2963516603","https://openalex.org/W3013263853","https://openalex.org/W3015481738","https://openalex.org/W3105400121","https://openalex.org/W3107235539","https://openalex.org/W3128086538","https://openalex.org/W3190041646","https://openalex.org/W3211999566","https://openalex.org/W4211033763","https://openalex.org/W4225858632","https://openalex.org/W4287851276","https://openalex.org/W4287851288","https://openalex.org/W4295806247","https://openalex.org/W4313134375","https://openalex.org/W4322736917","https://openalex.org/W4372260187","https://openalex.org/W4385080319","https://openalex.org/W4385270036","https://openalex.org/W4385482777","https://openalex.org/W4391326543","https://openalex.org/W4400925671","https://openalex.org/W4410087115","https://openalex.org/W4411997043"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298","https://openalex.org/W4298079292"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNNs)":[3],"are":[4,25,51],"vulnerable":[5,52],"to":[6,21,53,66,130,299],"visually":[7],"imperceptible":[8],"perturbations,":[9],"known":[10],"as":[11,136],"Adversarial":[12],"Examples":[13],"(AEs).":[14],"The":[15,276],"leading":[16],"hypothesis":[17],"attributes":[18],"this":[19,100,141,279],"susceptibility":[20,62,125,236],"\u201cnon-robust":[22],"features,\u201d":[23],"which":[24,248],"highly":[26,91,175],"predictive":[27],"but":[28,172],"fragile.":[29],"Recent":[30],"studies":[31],"have":[32,76],"challenged":[33],"the":[34,61,80,84,96,105,124,127,137,161,185,188,217,235,251,267,273,282,301],"robustness":[35,109,186],"of":[36,63,79,86,99,107,126,140,163,187,215,219,237,253,269,272,278,284],"models":[37,46,65,189],"trained":[38,47,190],"on":[39,48,69,191,202],"robust":[40,49,64,81,88,134,153,181,291],"features.":[41],"One":[42],"study":[43,59],"demonstrates":[44],"that":[45,149,243],"features":[50,90,164,174,224,258],"AutoAttack":[54,204],"in":[55,211,225,234,259],"cross-paradigm":[56],"settings.":[57],"Another":[58],"showing":[60],"attacks":[67],"based":[68,201],"Projected":[70],"Gradient":[71],"Descent":[72],"(PGD)":[73],"when":[74],"attackers":[75],"complete":[77],"knowledge":[78],"model":[82],"suggests":[83],"presence":[85,218],"\u201cillusionary":[87,133,222,256],"features\u201d\u2014robust":[89],"correlated":[92,166,176],"with":[93,167,177],"incorrect":[94,178],"labels\u2014as":[95],"root":[97,138],"cause":[98,139],"vulnerability.":[101],"These":[102,208],"findings":[103],"complicate":[104],"analysis":[106],"DNNs\u2019":[108],"and":[110,194,205,221,227,229,255,262,287],"reveal":[111],"limitations,":[112],"without":[113],"offering":[114],"concrete":[115],"solutions.":[116],"This":[117,155],"paper":[118,280],"extends":[119],"previous":[120],"works":[121],"by":[122],"reevaluating":[123],"\u201crobust":[128],"model\u201d":[129],"AutoAttack.":[131],"Considering":[132],"features\u201d":[135],"susceptibility,":[142],"we":[143],"propose":[144],"a":[145,151,212,289],"novel":[146],"robustification":[147,156,246],"algorithm":[148],"generates":[150],"\u201cpurified":[152,195],"dataset\u201d.":[154],"method":[157],"not":[158],"only":[159],"nullifies":[160],"effect":[162,252],"weakly":[165],"correct":[168],"labels":[169,179],"(non-robust":[170],"features)":[171],"also":[173,241],"(illusionary":[180],"features).":[182],"We":[183,297],"evaluated":[184],"\u201cstandard\u201d,":[192],"\u201crobust\u201d,":[193],"robust\u201d":[196,223,257],"datasets":[197,226],"against":[198,293],"various":[199],"strategies":[200],"state-of-the-art":[203],"PGD":[206],"attacks.":[207,296],"evaluations":[209],"resulted":[210],"better":[213],"understanding":[214,283],"how":[216],"\u201cnon-robust\u201d":[220,254],"classifiers":[228],"their":[230],"entanglements":[231],"can":[232],"result":[233],"DNNs.":[238],"Our":[239],"experiment":[240],"shows":[242],"employing":[244],"our":[245],"method,":[247],"filters":[249],"out":[250],"both":[260],"trian":[261],"test":[263],"sets,":[264],"effectively":[265],"addresses":[266],"vulnerabilities":[268,286],"DNNs,":[270],"regardless":[271],"mentioned":[274],"entanglements.":[275],"contributions":[277],"advance":[281],"DNN":[285],"provide":[288],"more":[290],"solution":[292],"sophisticated":[294],"adversarial":[295],"commit":[298],"sharing":[300],"source":[302],"code":[303],"upon":[304],"acceptance.":[305]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}