{"id":"https://openalex.org/W3202331133","doi":"https://doi.org/10.1109/cdc51059.2022.9992383","title":"Local Intrinsic Dimensionality Signals Adversarial Perturbations","display_name":"Local Intrinsic Dimensionality Signals Adversarial Perturbations","publication_year":2022,"publication_date":"2022-12-06","ids":{"openalex":"https://openalex.org/W3202331133","doi":"https://doi.org/10.1109/cdc51059.2022.9992383","mag":"3202331133"},"language":"en","primary_location":{"id":"doi:10.1109/cdc51059.2022.9992383","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/cdc51059.2022.9992383","pdf_url":null,"source":{"id":"https://openalex.org/S4363607710","display_name":"2022 IEEE 61st Conference on Decision and Control (CDC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 61st Conference on Decision and Control (CDC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000987878","display_name":"Sandamal Weerasinghe","orcid":"https://orcid.org/0000-0001-7060-2021"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sandamal Weerasinghe","raw_affiliation_strings":["University of Melbourne,School of Computing and Information Systems,Australia","School of Computing and Information Systems, University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne,School of Computing and Information Systems,Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"School of Computing and Information Systems, University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077639290","display_name":"Tamas Abraham","orcid":"https://orcid.org/0000-0003-2466-7646"},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tamas Abraham","raw_affiliation_strings":["Defence Science and Technology Group,Australia","Defence Science and Technology Group, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Defence Science and Technology Group,Australia","institution_ids":["https://openalex.org/I1303474014"]},{"raw_affiliation_string":"Defence Science and Technology Group, Australia","institution_ids":["https://openalex.org/I1303474014"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060997326","display_name":"Tansu Alpcan","orcid":"https://orcid.org/0000-0002-7434-3239"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tansu Alpcan","raw_affiliation_strings":["University of Melbourne,Department of Electrical and Electronic Engineer-ing,Australia","Department of Electrical and Electronic Engineer-ing, University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne,Department of Electrical and Electronic Engineer-ing,Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"Department of Electrical and Electronic Engineer-ing, University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070030398","display_name":"Sarah Erfani","orcid":"https://orcid.org/0000-0003-0885-0643"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sarah M. Erfani","raw_affiliation_strings":["University of Melbourne,School of Computing and Information Systems,Australia","School of Computing and Information Systems, University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne,School of Computing and Information Systems,Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"School of Computing and Information Systems, University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076014464","display_name":"Christopher Leckie","orcid":"https://orcid.org/0000-0002-4388-0517"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Christopher Leckie","raw_affiliation_strings":["University of Melbourne,School of Computing and Information Systems,Australia","School of Computing and Information Systems, University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne,School of Computing and Information Systems,Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"School of Computing and Information Systems, University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078824132","display_name":"Benjamin I. P. Rubinstein","orcid":"https://orcid.org/0000-0002-2947-6980"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Benjamin I. P. Rubinstein","raw_affiliation_strings":["University of Melbourne,School of Computing and Information Systems,Australia","School of Computing and Information Systems, University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne,School of Computing and Information Systems,Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"School of Computing and Information Systems, University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"80","issue":null,"first_page":"6118","last_page":"6125"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9625999927520752,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7919471263885498},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.7148232460021973},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.6758339405059814},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6077636480331421},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5260792970657349},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4926967918872833},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.48124051094055176},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.461839884519577},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.4598655700683594},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45887744426727295},{"id":"https://openalex.org/keywords/data-point","display_name":"Data point","score":0.458313912153244},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.45753008127212524},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3883821666240692},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3212522268295288},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.07965043187141418}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7919471263885498},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.7148232460021973},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.6758339405059814},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6077636480331421},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5260792970657349},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4926967918872833},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.48124051094055176},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.461839884519577},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.4598655700683594},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45887744426727295},{"id":"https://openalex.org/C21080849","wikidata":"https://www.wikidata.org/wiki/Q13611879","display_name":"Data point","level":2,"score":0.458313912153244},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.45753008127212524},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3883821666240692},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3212522268295288},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.07965043187141418},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cdc51059.2022.9992383","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/cdc51059.2022.9992383","pdf_url":null,"source":{"id":"https://openalex.org/S4363607710","display_name":"2022 IEEE 61st Conference on Decision and Control (CDC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 61st Conference on Decision and Control (CDC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W1969967031","https://openalex.org/W1970647353","https://openalex.org/W2022845879","https://openalex.org/W2032121576","https://openalex.org/W2084434464","https://openalex.org/W2129905273","https://openalex.org/W2169036209","https://openalex.org/W2243397390","https://openalex.org/W2758659144","https://openalex.org/W2760522386","https://openalex.org/W2766462876","https://openalex.org/W2804077623","https://openalex.org/W2894824251","https://openalex.org/W2911634294","https://openalex.org/W2913870986","https://openalex.org/W2943942856","https://openalex.org/W2950048339","https://openalex.org/W2953079921","https://openalex.org/W2963158386","https://openalex.org/W2963207607","https://openalex.org/W2963496101","https://openalex.org/W2963789034","https://openalex.org/W2963952467","https://openalex.org/W2964253222","https://openalex.org/W2972524765","https://openalex.org/W2996344901","https://openalex.org/W3034758058","https://openalex.org/W3086107251","https://openalex.org/W3113477609","https://openalex.org/W3118608800","https://openalex.org/W3125182304","https://openalex.org/W3131377771","https://openalex.org/W3143328915","https://openalex.org/W3187182460","https://openalex.org/W4238652859","https://openalex.org/W4288359933","https://openalex.org/W4293846201","https://openalex.org/W6640425456","https://openalex.org/W6747819456","https://openalex.org/W6751661576","https://openalex.org/W6758684365","https://openalex.org/W6759168081","https://openalex.org/W6765694979","https://openalex.org/W6768030517","https://openalex.org/W6772461460","https://openalex.org/W6773424267","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4362679532","https://openalex.org/W2104708299","https://openalex.org/W2021227444"],"abstract_inverted_index":{"The":[0,83],"vulnerability":[1],"of":[2,14,20,49,65,123,144,177,189],"machine":[3,22],"learning":[4,28],"models":[5],"to":[6,30,69,85,89,166],"adversarial":[7,21,76,107],"perturbations":[8],"has":[9,87],"motivated":[10],"a":[11,46,57,95,114,124,138,157,171],"significant":[12],"amount":[13,159],"research":[15,84],"under":[16],"the":[17,62,120,131,135,142,145,175,187,190],"broad":[18],"umbrella":[19],"learning.":[23],"Sophisticated":[24],"attacks":[25],"may":[26],"cause":[27],"algorithms":[29],"discover":[31],"decision":[32],"functions":[33],"or":[34],"make":[35],"decisions":[36],"with":[37,141],"poor":[38],"predictive":[39],"performance.":[40],"In":[41,109],"this":[42,110],"context,":[43],"there":[44],"is":[45],"growing":[47],"body":[48],"literature":[50],"that":[51,60,130,150,153],"uses":[52],"local":[53,58],"intrinsic":[54],"dimensionality":[55],"(LID),":[56],"metric":[59],"describes":[61],"minimum":[63],"number":[64],"latent":[66],"variables":[67],"required":[68],"describe":[70],"each":[71],"data":[72,126,151],"point,":[73],"for":[74,119,174],"detecting":[75],"samples":[77],"and":[78,116,128],"subsequently":[79],"mitigating":[80],"their":[81],"effects.":[82],"date":[86],"tended":[88],"focus":[90],"on":[91,192],"using":[92],"LID":[93,104,121,163,178],"as":[94],"practical":[96],"defence":[97],"method,":[98],"often":[99],"without":[100],"fully":[101],"explaining":[102],"why":[103],"can":[105],"detect":[106],"samples.":[108],"paper,":[111],"we":[112,148],"derive":[113],"lower-bound":[115],"an":[117],"upper-bound":[118],"value":[122],"perturbed":[125,155],"point":[127],"demonstrate":[129,149],"bounds,":[132],"in":[133,179],"particular":[134],"lower-bound,":[136],"have":[137,161],"positive":[139],"correlation":[140],"magnitude":[143],"perturbation.":[146],"Hence,":[147],"points":[152],"are":[154],"by":[156],"large":[158,162],"would":[160],"values":[164],"compared":[165],"unperturbed":[167],"samples,":[168],"thus":[169],"providing":[170],"theoretical":[172],"justification":[173],"use":[176],"prior":[180],"literature.":[181],"Furthermore,":[182],"our":[183],"empirical":[184],"validation":[185],"demonstrates":[186],"utility":[188],"bounds":[191],"benchmark":[193],"datasets.":[194]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
