{"id":"https://openalex.org/W4318147148","doi":"https://doi.org/10.1109/bigdata55660.2022.10020163","title":"Randomize Adversarial Defense in a Light Way","display_name":"Randomize Adversarial Defense in a Light Way","publication_year":2022,"publication_date":"2022-12-17","ids":{"openalex":"https://openalex.org/W4318147148","doi":"https://doi.org/10.1109/bigdata55660.2022.10020163"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata55660.2022.10020163","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/bigdata55660.2022.10020163","pdf_url":null,"source":{"id":"https://openalex.org/S4363607709","display_name":"2022 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100409597","display_name":"Ji Young Park","orcid":"https://orcid.org/0000-0002-7571-1064"},"institutions":[{"id":"https://openalex.org/I170239107","display_name":"University of South Australia","ror":"https://ror.org/01p93h210","country_code":"AU","type":"education","lineage":["https://openalex.org/I170239107"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ji-Young Park","raw_affiliation_strings":["University of South Australia,Adelaide,Australia","University of South Australia, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Australia,Adelaide,Australia","institution_ids":["https://openalex.org/I170239107"]},{"raw_affiliation_string":"University of South Australia, Adelaide, Australia","institution_ids":["https://openalex.org/I170239107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100383342","display_name":"Lin Liu","orcid":"https://orcid.org/0000-0003-2843-5738"},"institutions":[{"id":"https://openalex.org/I170239107","display_name":"University of South Australia","ror":"https://ror.org/01p93h210","country_code":"AU","type":"education","lineage":["https://openalex.org/I170239107"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Lin Liu","raw_affiliation_strings":["University of South Australia,Adelaide,Australia","University of South Australia, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Australia,Adelaide,Australia","institution_ids":["https://openalex.org/I170239107"]},{"raw_affiliation_string":"University of South Australia, Adelaide, Australia","institution_ids":["https://openalex.org/I170239107"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029442609","display_name":"Jixue Liu","orcid":"https://orcid.org/0000-0002-0794-0404"},"institutions":[{"id":"https://openalex.org/I170239107","display_name":"University of South Australia","ror":"https://ror.org/01p93h210","country_code":"AU","type":"education","lineage":["https://openalex.org/I170239107"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jixue Liu","raw_affiliation_strings":["University of South Australia,Adelaide,Australia","University of South Australia, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Australia,Adelaide,Australia","institution_ids":["https://openalex.org/I170239107"]},{"raw_affiliation_string":"University of South Australia, Adelaide, Australia","institution_ids":["https://openalex.org/I170239107"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012177739","display_name":"Jiuyong Li","orcid":"https://orcid.org/0000-0002-9023-1878"},"institutions":[{"id":"https://openalex.org/I170239107","display_name":"University of South Australia","ror":"https://ror.org/01p93h210","country_code":"AU","type":"education","lineage":["https://openalex.org/I170239107"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jiuyong Li","raw_affiliation_strings":["University of South Australia,Adelaide,Australia","University of South Australia, Adelaide, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Australia,Adelaide,Australia","institution_ids":["https://openalex.org/I170239107"]},{"raw_affiliation_string":"University of South Australia, Adelaide, Australia","institution_ids":["https://openalex.org/I170239107"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170239107"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":null,"first_page":"1080","last_page":"1089"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9882000088691711,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9801999926567078,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8915647268295288},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7553405165672302},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7012163996696472},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6845472455024719},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.5356943607330322},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42294543981552124},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.42070162296295166},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.372712105512619},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34506112337112427},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2111603021621704},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18023625016212463}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8915647268295288},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7553405165672302},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7012163996696472},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6845472455024719},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.5356943607330322},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42294543981552124},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.42070162296295166},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.372712105512619},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34506112337112427},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2111603021621704},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18023625016212463},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata55660.2022.10020163","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/bigdata55660.2022.10020163","pdf_url":null,"source":{"id":"https://openalex.org/S4363607709","display_name":"2022 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7699999809265137,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320330095","display_name":"Saab","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1945616565","https://openalex.org/W2149298154","https://openalex.org/W2180612164","https://openalex.org/W2490662969","https://openalex.org/W2912070915","https://openalex.org/W2954978443","https://openalex.org/W2962972208","https://openalex.org/W2963485691","https://openalex.org/W2963490782","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2963952467","https://openalex.org/W2964137095","https://openalex.org/W2970603474","https://openalex.org/W3103340107","https://openalex.org/W3103836116","https://openalex.org/W3118608800","https://openalex.org/W4293846201","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6734547106","https://openalex.org/W6739360251","https://openalex.org/W6741036071","https://openalex.org/W6743284318","https://openalex.org/W6744679260","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6748277150","https://openalex.org/W6748475379","https://openalex.org/W6748711285","https://openalex.org/W6757875967","https://openalex.org/W6758684365","https://openalex.org/W6758779121","https://openalex.org/W6771326840","https://openalex.org/W6774348459","https://openalex.org/W6774549192","https://openalex.org/W6774681163","https://openalex.org/W6787972765","https://openalex.org/W6839453425"],"related_works":["https://openalex.org/W4320018150","https://openalex.org/W2040808657","https://openalex.org/W2918664383","https://openalex.org/W4320855730","https://openalex.org/W106056076","https://openalex.org/W2135200719","https://openalex.org/W4286235935","https://openalex.org/W4385154961","https://openalex.org/W4310513257","https://openalex.org/W3198488011"],"abstract_inverted_index":{"The":[0,86,117,128],"ultimate":[1],"goal":[2],"in":[3,30,47,226],"adversarial":[4,23,64,105,188],"defense":[5,12,34,280,289],"is":[6,67,88,120,147],"to":[7,35,59,90,107,123,133,149,152,168,194],"build":[8],"a":[9,32,44,52,70,77,92,97,144,165,170,183,218,234,248,257],"universally":[10],"robust":[11,278],"against":[13,63,291],"all":[14],"types":[15],"of":[16,43,76,114,143,156,200,205,208,216,232],"attacks,":[17],"but":[18],"ongoing":[19],"arms":[20],"race":[21],"between":[22],"attacks":[24,294],"and":[25,80,109,138,220,229,250,282,297],"defenses":[26],"show":[27,269],"the":[28,38,41,61,112,115,125,135,140,153,157,180,187,191,196,201,206,209,214,227,230,242,262,276,286],"difficulty":[29],"building":[31,256],"deterministic":[33,279],"work":[36],"towards":[37],"goal.":[39],"Leveraging":[40],"idea":[42],"mixture":[45,75,87,167,228],"model,":[46,245],"this":[48],"paper,":[49],"we":[50],"introduce":[51],"new":[53],"Randomized":[54],"Adversarial":[55],"Defense":[56],"method":[57,281,290],"(RAD)":[58],"increase":[60],"robustness":[62,113],"examples.":[65],"RAD":[66,246],"designed":[68],"as":[69],"simple,":[71],"yet":[72,253],"effective":[73,254],"random":[74,93,166],"global":[78,118,136,158,219],"model":[79,119,137,146,236],"one":[81],"or":[82],"more":[83,251],"local":[84,129,145,221,235],"models.":[85],"able":[89],"create":[91,169],"decision":[94,141,154,173],"boundary":[95,142,155,174],"for":[96,103,175],"test":[98,177],"instance,":[99],"making":[100],"it":[101],"harder":[102],"an":[104],"example":[106],"succeed,":[108],"thus":[110,139],"increasing":[111],"defense.":[116],"adversarially":[121],"trained":[122],"provide":[124],"baseline":[126],"robustness.":[127],"models":[130,161,222],"are":[131],"aimed":[132],"supplement":[134],"expected":[148],"be":[150],"adjacent":[151],"model.":[159],"These":[160],"then":[162],"together":[163],"form":[164],"randomized":[171,258,288],"(non-deterministic)":[172],"each":[176],"instance":[178],"at":[179],"end.":[181],"Such":[182],"randomization":[184,264,273],"scheme":[185],"reduces":[186],"risk":[189],"since":[190],"adversary":[192],"has":[193,238],"approximate":[195],"best":[197],"attack":[198],"despite":[199],"given":[202],"complete":[203],"knowledge":[204],"parameters":[207],"individual":[210],"classifiers.":[211],"By":[212],"proposing":[213],"notion":[215],"having":[217],"with":[223,261],"different":[224],"focuses":[225],"way":[231],"creating":[233],"which":[237],"minimum":[239],"dependency":[240],"on":[241,295],"base":[243],"(global)":[244],"provides":[247],"simpler":[249],"flexible,":[252],"approach":[255,274],"defense,":[259],"compared":[260],"existing":[263,287],"based":[265],"methods.":[266],"Experimental":[267],"results":[268],"that":[270],"our":[271],"simple":[272],"outperforms":[275],"most":[277],"performs":[283],"competitively":[284],"upon":[285],"strong":[292],"adaptive":[293],"CIFAR10":[296],"CIFAR100.":[298]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
