{"id":"https://openalex.org/W4206451732","doi":"https://doi.org/10.1109/ase51524.2021.9678732","title":"Detecting Adversarial Samples with Graph-Guided Testing","display_name":"Detecting Adversarial Samples with Graph-Guided Testing","publication_year":2021,"publication_date":"2021-11-01","ids":{"openalex":"https://openalex.org/W4206451732","doi":"https://doi.org/10.1109/ase51524.2021.9678732"},"language":"en","primary_location":{"id":"doi:10.1109/ase51524.2021.9678732","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase51524.2021.9678732","pdf_url":null,"source":{"id":"https://openalex.org/S4363608212","display_name":"2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070235251","display_name":"Zuohui Chen","orcid":"https://orcid.org/0000-0003-1806-6676"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zuohui Chen","raw_affiliation_strings":["Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023056561","display_name":"Renxuan Wang","orcid":"https://orcid.org/0000-0002-3595-2058"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Renxuan Wang","raw_affiliation_strings":["Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075361470","display_name":"Jingyang Xiang","orcid":"https://orcid.org/0000-0001-5350-1528"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyang Xiang","raw_affiliation_strings":["Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100397991","display_name":"Yue Yu","orcid":"https://orcid.org/0000-0002-9865-2212"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Yu","raw_affiliation_strings":["National University of Defense Technology, Changsha, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006669765","display_name":"Xin Xia","orcid":"https://orcid.org/0000-0002-6302-3256"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Xia","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016704080","display_name":"Qi Xuan","orcid":"https://orcid.org/0000-0002-1042-470X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Xuan","raw_affiliation_strings":["Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047444184","display_name":"Xiaoniu Yang","orcid":"https://orcid.org/0000-0003-3117-2211"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoniu Yang","raw_affiliation_strings":["Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20110906,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1196","last_page":"1198"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9593999981880188,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8760156631469727},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6660856008529663},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5410664081573486},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5172765851020813},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5085440874099731},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46925756335258484},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4481755495071411},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41521838307380676},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.38237521052360535},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3422676920890808},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3232570290565491},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.31062600016593933},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.07975688576698303}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8760156631469727},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6660856008529663},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5410664081573486},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5172765851020813},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5085440874099731},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46925756335258484},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4481755495071411},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41521838307380676},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.38237521052360535},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3422676920890808},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3232570290565491},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.31062600016593933},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.07975688576698303},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ase51524.2021.9678732","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase51524.2021.9678732","pdf_url":null,"source":{"id":"https://openalex.org/S4363608212","display_name":"2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2342840547","https://openalex.org/W2736899637","https://openalex.org/W2765424254","https://openalex.org/W2889741439","https://openalex.org/W2953381066","https://openalex.org/W2954629067","https://openalex.org/W2963857521","https://openalex.org/W2964164993","https://openalex.org/W2964301649","https://openalex.org/W3040986370","https://openalex.org/W3091441586","https://openalex.org/W3101877327","https://openalex.org/W3103340107","https://openalex.org/W3103557498","https://openalex.org/W6640425456","https://openalex.org/W6704559304","https://openalex.org/W6741036071","https://openalex.org/W6774549192","https://openalex.org/W6779715462"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNN)":[3],"are":[4,75],"known":[5],"to":[6,9,38,56,124,175],"be":[7,89],"vulnerable":[8],"adversarial":[10,60,67,94,110,121],"samples,":[11],"the":[12,19,40,70,134,148],"detection":[13,123],"of":[14,22,29,42,47,66,136,140,147],"which":[15,96],"is":[16],"crucial":[17],"for":[18,120],"wide":[20],"application":[21],"these":[23,126],"DNN":[24,43],"models.":[25],"Recently,":[26],"a":[27],"number":[28,79],"deep":[30],"testing":[31],"methods":[32],"in":[33,73,78,101,107,151],"software":[34],"engineering":[35],"were":[36],"proposed":[37],"find":[39],"vulnerability":[41],"systems,":[44],"and":[45,84,104,153,178],"one":[46],"them,":[48],"i.e.,":[49],"Model":[50],"Mutation":[51],"Testing":[52,118],"(MMT),":[53],"was":[54],"used":[55],"successfully":[57],"detect":[58],"various":[59],"samples":[61],"generated":[62],"by":[63,92],"different":[64],"kinds":[65],"attacks.":[68],"However,":[69],"mutated":[71,149],"models":[72,132,156],"MMT":[74,172],"always":[76],"huge":[77],"(e.g.,":[80,87],"over":[81],"100":[82],"models)":[83],"lack":[85],"diversity":[86],"can":[88],"easily":[90],"circumvented":[91],"high-confidence":[93,109],"samples),":[95],"makes":[97],"it":[98],"less":[99,105],"efficient":[100],"real":[102],"applications":[103],"effective":[106],"detecting":[108],"samples.":[111],"In":[112],"this":[113],"study,":[114],"we":[115],"propose":[116],"Graph-Guided":[117],"(GGT)":[119],"sample":[122],"overcome":[125],"aforementioned":[127],"challenges.":[128],"GGT":[129,167],"generates":[130],"pruned":[131],"with":[133,173],"guide":[135],"graph":[137,154],"characteristics,":[138],"each":[139],"them":[141],"has":[142],"only":[143],"about":[144],"5%":[145],"parameters":[146],"model":[150],"MMT,":[152],"guided":[155],"have":[157],"higher":[158],"diversity.":[159],"The":[160],"initial":[161],"experiments":[162],"on":[163],"CIFAR10":[164],"validate":[165],"that":[166],"performs":[168],"much":[169],"better":[170],"than":[171],"respect":[174],"both":[176],"effectiveness":[177],"efficiency.":[179]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}