{"id":"https://openalex.org/W4295441398","doi":"https://doi.org/10.1109/embc48229.2022.9871347","title":"Towards Adversarial Robustness with Early Exit Ensembles","display_name":"Towards Adversarial Robustness with Early Exit Ensembles","publication_year":2022,"publication_date":"2022-07-11","ids":{"openalex":"https://openalex.org/W4295441398","doi":"https://doi.org/10.1109/embc48229.2022.9871347","pmid":"https://pubmed.ncbi.nlm.nih.gov/36086386"},"language":"en","primary_location":{"id":"doi:10.1109/embc48229.2022.9871347","is_oa":true,"landing_page_url":"https://doi.org/10.1109/embc48229.2022.9871347","pdf_url":"https://ieeexplore.ieee.org/ielx7/9870821/9870822/09871347.pdf","source":{"id":"https://openalex.org/S4363607706","display_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/9870821/9870822/09871347.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054150857","display_name":"Lorena Qendro","orcid":"https://orcid.org/0000-0002-3391-1658"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Lorena Qendro","raw_affiliation_strings":["University of Cambridge,Department of Computer Science and Technology,United Kingdom","Department of Computer Science and Technology, University of Cambridge, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Department of Computer Science and Technology,United Kingdom","institution_ids":["https://openalex.org/I241749"]},{"raw_affiliation_string":"Department of Computer Science and Technology, University of Cambridge, United Kingdom","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010623957","display_name":"Cecilia Mascolo","orcid":"https://orcid.org/0000-0001-9614-4380"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Cecilia Mascolo","raw_affiliation_strings":["University of Cambridge,Department of Computer Science and Technology,United Kingdom","Department of Computer Science and Technology, University of Cambridge, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Department of Computer Science and Technology,United Kingdom","institution_ids":["https://openalex.org/I241749"]},{"raw_affiliation_string":"Department of Computer Science and Technology, University of Cambridge, United Kingdom","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I241749"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2022","issue":null,"first_page":"313","last_page":"316"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9491000175476074,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10645","display_name":"Cardiac Arrest and Resuscitation","score":0.9358000159263611,"subfield":{"id":"https://openalex.org/subfields/2711","display_name":"Emergency Medicine"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9546884894371033},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7654184103012085},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.666614830493927},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6661937832832336},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.659221351146698},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6344468593597412},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.613903820514679},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5978087782859802},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.48810896277427673}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9546884894371033},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7654184103012085},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.666614830493927},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6661937832832336},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.659221351146698},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6344468593597412},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.613903820514679},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5978087782859802},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.48810896277427673},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true}],"locations_count":2,"locations":[{"id":"doi:10.1109/embc48229.2022.9871347","is_oa":true,"landing_page_url":"https://doi.org/10.1109/embc48229.2022.9871347","pdf_url":"https://ieeexplore.ieee.org/ielx7/9870821/9870822/09871347.pdf","source":{"id":"https://openalex.org/S4363607706","display_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","raw_type":"proceedings-article"},{"id":"pmid:36086386","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/36086386","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual International Conference of the IEEE Engineering in Medicine and Biology Society. IEEE Engineering in Medicine and Biology Society. Annual International Conference","raw_type":null}],"best_oa_location":{"id":"doi:10.1109/embc48229.2022.9871347","is_oa":true,"landing_page_url":"https://doi.org/10.1109/embc48229.2022.9871347","pdf_url":"https://ieeexplore.ieee.org/ielx7/9870821/9870822/09871347.pdf","source":{"id":"https://openalex.org/S4363607706","display_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7699999809265137}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4295441398.pdf","grobid_xml":"https://content.openalex.org/works/W4295441398.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W2027927824","https://openalex.org/W2243397390","https://openalex.org/W2543927648","https://openalex.org/W2551393996","https://openalex.org/W2924551358","https://openalex.org/W2944701285","https://openalex.org/W2962677625","https://openalex.org/W2963744840","https://openalex.org/W2964116600","https://openalex.org/W2964546587","https://openalex.org/W2988244882","https://openalex.org/W3008117795","https://openalex.org/W3092198188","https://openalex.org/W3127657277","https://openalex.org/W3130554404","https://openalex.org/W3166842523","https://openalex.org/W4293846201","https://openalex.org/W6729306796","https://openalex.org/W6736558013","https://openalex.org/W6738693630","https://openalex.org/W6739868092","https://openalex.org/W6755310938","https://openalex.org/W6762100871","https://openalex.org/W6771893781","https://openalex.org/W6784106737","https://openalex.org/W6784808856"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"learning":[1,109,136],"techniques":[2,60],"are":[3],"increasingly":[4],"used":[5],"for":[6,51,81],"decision-making":[7],"in":[8],"health":[9],"applications,":[10],"however,":[11],"these":[12,36],"can":[13,116],"easily":[14],"be":[15],"manipulated":[16],"by":[17],"adversarial":[18,44,78,126,145,149,159],"examples":[19],"across":[20],"different":[21],"clinical":[22],"domains.":[23],"Their":[24],"security":[25],"and":[26,40,124],"privacy":[27],"vulnerabilities":[28],"raise":[29],"concerns":[30],"about":[31],"the":[32,43,131,158,162],"practical":[33],"deployment":[34],"of":[35,42,100,133,165],"systems.":[37],"The":[38,128],"number":[39],"variety":[41],"attacks":[45,69],"grow":[46],"continuously,":[47],"making":[48],"it":[49],"difficult":[50],"mitigation":[52,59,79,146],"approaches":[53],"to":[54,120,139,148,157],"provide":[55,117],"effective":[56],"solutions.":[57],"Current":[58],"often":[61],"rely":[62],"on":[63,89,106],"expensive":[64],"re-training":[65],"procedures":[66],"as":[67,97],"new":[68],"emerge.":[70],"In":[71],"this":[72],"paper,":[73],"we":[74],"propose":[75],"a":[76],"novel":[77],"technique":[80],"biosignal":[82],"classification":[83],"tasks.":[84],"Our":[85,104],"approach":[86,129],"is":[87,152],"based":[88],"recent":[90],"findings":[91],"interpreting":[92],"early":[93,113],"exit":[94,114],"neural":[95],"networks":[96],"an":[98],"ensemble":[99],"weight":[101],"sharing":[102],"sub-networks.":[103],"experiments":[105],"state-of-the-art":[107],"deep":[108,135],"models":[110,137],"show":[111],"that":[112],"ensembles":[115],"robustness":[118],"generalizable":[119],"various":[121],"white":[122],"box":[123],"universal":[125],"attacks.":[127],"increases":[130],"accuracy":[132],"vulnerable":[134],"up":[138],"60":[140],"percentage":[141],"points,":[142],"while":[143],"providing":[144],"comparable":[147],"training.":[150],"This":[151],"achieved":[153],"without":[154],"previous":[155],"exposure":[156],"perturbation":[160],"or":[161],"computational":[163],"burden":[164],"re-training.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}