{"id":"https://openalex.org/W3162712668","doi":"https://doi.org/10.1109/icassp39728.2021.9414008","title":"Adversarial Examples Detection Beyond Image Space","display_name":"Adversarial Examples Detection Beyond Image Space","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3162712668","doi":"https://doi.org/10.1109/icassp39728.2021.9414008","mag":"3162712668"},"language":"en","primary_location":{"id":"doi:10.1109/icassp39728.2021.9414008","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414008","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045121980","display_name":"Kejiang Chen","orcid":"https://orcid.org/0000-0002-9868-3414"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kejiang Chen","raw_affiliation_strings":["University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102976060","display_name":"Yuefeng Chen","orcid":"https://orcid.org/0000-0003-0378-3103"},"institutions":[{"id":"https://openalex.org/I4210095624","display_name":"Alibaba Group (United States)","ror":"https://ror.org/00rn0m335","country_code":"US","type":"company","lineage":["https://openalex.org/I4210095624","https://openalex.org/I45928872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuefeng Chen","raw_affiliation_strings":["Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alibaba Group","institution_ids":["https://openalex.org/I4210095624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025286392","display_name":"Hang Zhou","orcid":"https://orcid.org/0000-0001-7860-8452"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hang Zhou","raw_affiliation_strings":["University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101894371","display_name":"Chuan Qin","orcid":"https://orcid.org/0000-0002-5841-8210"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuan Qin","raw_affiliation_strings":["University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051298007","display_name":"Xiaofeng Mao","orcid":"https://orcid.org/0000-0003-4486-556X"},"institutions":[{"id":"https://openalex.org/I4210095624","display_name":"Alibaba Group (United States)","ror":"https://ror.org/00rn0m335","country_code":"US","type":"company","lineage":["https://openalex.org/I4210095624","https://openalex.org/I45928872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaofeng Mao","raw_affiliation_strings":["Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alibaba Group","institution_ids":["https://openalex.org/I4210095624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067689180","display_name":"Weiming Zhang","orcid":"https://orcid.org/0000-0001-5576-6108"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiming Zhang","raw_affiliation_strings":["University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064573190","display_name":"Nenghai Yu","orcid":"https://orcid.org/0000-0003-4417-9316"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nenghai Yu","raw_affiliation_strings":["University of Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3850","last_page":"3854"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9819999933242798,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9498000144958496,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8744726181030273},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7311341166496277},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6157241463661194},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5865718722343445},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.5732011198997498},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.542772650718689},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4606291353702545},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4351913630962372},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.43180644512176514},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.41428154706954956},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3849254846572876},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3236919641494751}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8744726181030273},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7311341166496277},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6157241463661194},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5865718722343445},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.5732011198997498},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.542772650718689},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4606291353702545},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4351913630962372},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.43180644512176514},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.41428154706954956},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3849254846572876},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3236919641494751},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp39728.2021.9414008","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414008","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1576445103","https://openalex.org/W1686810756","https://openalex.org/W2009130368","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2594867206","https://openalex.org/W2601789736","https://openalex.org/W2607219512","https://openalex.org/W2752069020","https://openalex.org/W2753160622","https://openalex.org/W2867167548","https://openalex.org/W2893099989","https://openalex.org/W2952388520","https://openalex.org/W2955425717","https://openalex.org/W2960139675","https://openalex.org/W2962835968","https://openalex.org/W2963158386","https://openalex.org/W2963539306","https://openalex.org/W2963564844","https://openalex.org/W2963612069","https://openalex.org/W2963693747","https://openalex.org/W2964082701","https://openalex.org/W2964253222","https://openalex.org/W2971848556","https://openalex.org/W2981572764","https://openalex.org/W2995404272","https://openalex.org/W3012909934","https://openalex.org/W3101903411","https://openalex.org/W3105009650","https://openalex.org/W4293584023","https://openalex.org/W4293846201","https://openalex.org/W6634343353","https://openalex.org/W6637373629","https://openalex.org/W6734483310","https://openalex.org/W6736207377","https://openalex.org/W6739868092","https://openalex.org/W6743661861","https://openalex.org/W6747749088","https://openalex.org/W6747819456","https://openalex.org/W6752760542","https://openalex.org/W6762718338","https://openalex.org/W6771683604","https://openalex.org/W6786165312"],"related_works":["https://openalex.org/W3176659669","https://openalex.org/W4287115361","https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"have":[3,31],"been":[4,32],"proved":[5],"that":[6,55,119],"they":[7],"are":[8,14],"vulnerable":[9],"to":[10,20,67,134],"adversarial":[11,25,42,51],"examples,":[12,26,52],"which":[13,64,97],"generated":[15],"by":[16,92],"adding":[17],"human-imperceptible":[18],"perturbations":[19,60],"images.":[21],"To":[22,77],"defend":[23,135],"these":[24,50],"various":[27],"detection":[28],"based":[29],"methods":[30,126],"proposed.":[33],"However,":[34],"most":[35],"of":[36,74],"them":[37],"perform":[38],"poorly":[39],"on":[40,102],"detecting":[41],"examples":[43],"with":[44,111],"extremely":[45],"slight":[46],"perturbations.":[47],"By":[48],"exploring":[49],"we":[53,85],"find":[54],"there":[56],"exists":[57],"compliance":[58],"between":[59],"and":[61,82,106,130],"prediction":[62,75],"confidence,":[63],"guides":[65],"us":[66],"detect":[68,78],"few-perturbation":[69,80],"attacks":[70,81,129,137],"from":[71],"the":[72,98,103,107,112,120,124],"aspect":[73],"confidence.":[76],"both":[79],"large-perturbation":[83],"attacks,":[84],"propose":[86],"a":[87,93],"method":[88,122],"beyond":[89],"image":[90,99],"space":[91],"two-stream":[94],"architecture,":[95],"in":[96],"stream":[100,109],"focuses":[101],"pixel":[104],"artifacts":[105],"gradient":[108],"copes":[110],"confidence":[113],"artifacts.":[114],"The":[115],"experimental":[116],"results":[117],"show":[118],"proposed":[121],"outperforms":[123],"existing":[125],"under":[127],"oblivious":[128],"is":[131],"verified":[132],"effective":[133],"omniscient":[136],"as":[138],"well.":[139]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}