{"id":"https://openalex.org/W3013954922","doi":"https://doi.org/10.1109/asp-dac47756.2020.9045107","title":"Mitigating Adversarial Attacks for Deep Neural Networks by Input Deformation and Augmentation","display_name":"Mitigating Adversarial Attacks for Deep Neural Networks by Input Deformation and Augmentation","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3013954922","doi":"https://doi.org/10.1109/asp-dac47756.2020.9045107","mag":"3013954922"},"language":"en","primary_location":{"id":"doi:10.1109/asp-dac47756.2020.9045107","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asp-dac47756.2020.9045107","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 25th Asia and South Pacific Design Automation Conference (ASP-DAC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069202094","display_name":"Pengfei Qiu","orcid":"https://orcid.org/0000-0001-8644-1445"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Qiu","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100450575","display_name":"Dongsheng Wang","orcid":"https://orcid.org/0000-0001-5779-9026"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongsheng Wang","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071514960","display_name":"Yongqiang Lyu","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongqiang Lyu","raw_affiliation_strings":["Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033897386","display_name":"Zhaojun Lu","orcid":"https://orcid.org/0000-0002-5467-6597"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhaojun Lu","raw_affiliation_strings":["Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012474783","display_name":"Gang Qu","orcid":"https://orcid.org/0000-0001-6759-8949"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Qu","raw_affiliation_strings":["Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Computer Engineering & Institute for Systems Research, Univ. of Maryland, College Park, USA","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"17","issue":null,"first_page":"157","last_page":"162"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.951200008392334,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/generality","display_name":"Generality","score":0.8567600250244141},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8383665084838867},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8234934210777283},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6472263932228088},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6424585580825806},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.6124040484428406},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.608207106590271},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49618062376976013},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4189884662628174},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.09686428308486938}],"concepts":[{"id":"https://openalex.org/C2780767217","wikidata":"https://www.wikidata.org/wiki/Q5532421","display_name":"Generality","level":2,"score":0.8567600250244141},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8383665084838867},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8234934210777283},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6472263932228088},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6424585580825806},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.6124040484428406},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.608207106590271},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49618062376976013},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4189884662628174},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.09686428308486938},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/asp-dac47756.2020.9045107","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asp-dac47756.2020.9045107","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 25th Asia and South Pacific Design Automation Conference (ASP-DAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1731081199","https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2509065397","https://openalex.org/W2516373086","https://openalex.org/W2607219512","https://openalex.org/W2787597845","https://openalex.org/W2794590848","https://openalex.org/W2892090366","https://openalex.org/W2963001136","https://openalex.org/W2963108767","https://openalex.org/W2963143631","https://openalex.org/W2963207607","https://openalex.org/W2963542245","https://openalex.org/W2963564844","https://openalex.org/W2963709863","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2964276371","https://openalex.org/W3098357269","https://openalex.org/W3100646226","https://openalex.org/W3102720581","https://openalex.org/W4293846201","https://openalex.org/W6637162671","https://openalex.org/W6637618735","https://openalex.org/W6640425456","https://openalex.org/W6719080892","https://openalex.org/W6726264252","https://openalex.org/W6727849826","https://openalex.org/W6739868092","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6748475379","https://openalex.org/W6749733599"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Typical":[0],"Deep":[1],"Neural":[2],"Networks":[3],"(DNN)":[4],"are":[5,73,119],"susceptible":[6],"to":[7,14,16,59,77,129,227],"adversarial":[8,62,110,179,198],"attacks":[9,63,111,221],"that":[10,72,91,214],"add":[11],"malicious":[12],"perturbations":[13,118],"input":[15,67,93],"mislead":[17],"the":[18,23,28,39,43,66,79,89,109,115,125,136,163,178,215,220,230],"DNN":[19,41,105,132,165,231],"model.":[20],"Most":[21],"of":[22,38,127,138,162,177,219],"state-of-theart":[24],"countermeasures":[25],"concentrate":[26],"on":[27,88,104,191],"defensive":[29],"distillation":[30],"or":[31,101,158],"parameter":[32,156],"re-training,":[33],"which":[34],"require":[35,153,174],"prior":[36],"knowledge":[37,176],"target":[40,164],"and/or":[42],"attacking":[44],"methods":[45,97],"and":[46,52,69,95,135,167,186,195,205,207],"hence":[47],"greatly":[48],"limit":[49],"their":[50],"generality":[51,185],"usability.":[53,187],"In":[54],"this":[55],"paper,":[56],"we":[57],"propose":[58],"defend":[60],"against":[61],"by":[64,236],"utilizing":[65],"deformation":[68,94],"augmentation":[70,96],"techniques":[71],"currently":[74],"widely":[75],"utilized":[76],"enlarge":[78],"dataset":[80,194],"during":[81],"DNN's":[82],"training":[83],"phase.":[84],"This":[85],"is":[86,146,234],"based":[87],"observation":[90],"certain":[92],"will":[98,112],"have":[99],"little":[100],"no":[102],"impact":[103],"model's":[106,133],"accuracy,":[107],"but":[108],"fail":[113],"when":[114],"maliciously":[116],"induced":[117],"randomly":[120],"deformed.":[121],"We":[122,188],"also":[123],"use":[124],"ensemble":[126],"decisions":[128],"further":[130],"improve":[131],"accuracy":[134,233],"effectiveness":[137],"defending":[139],"various":[140],"attacks.":[141],"Our":[142],"proposed":[143],"mitigation":[144],"method":[145],"model":[147,232],"independent":[148,169],"(i.e.":[149],"it":[150,171,182],"does":[151,172],"not":[152,173],"additional":[154],"training,":[155],"finetuning,":[157],"any":[159,175],"structure":[160],"modifications":[161],"model)":[166],"attack":[168],"(i.e.,":[170],"attacks).":[180],"So":[181],"has":[183],"excellent":[184],"conduct":[189],"experiments":[190],"standard":[192],"CIFAR-10":[193],"three":[196],"representative":[197],"attacks:":[199],"Fast":[200],"Gradient":[201],"Sign":[202],"Method,":[203],"Carlini":[204],"Wagner,":[206],"Jacobian-based":[208],"Saliency":[209],"Map":[210],"Attack.":[211],"Results":[212],"show":[213],"average":[216],"success":[217],"rate":[218],"can":[222],"be":[223],"reduced":[224],"from":[225],"96.5%":[226],"28.7%":[228],"while":[229],"improved":[235],"about":[237],"2%.":[238]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}