{"id":"https://openalex.org/W3161523401","doi":"https://doi.org/10.1109/icassp39728.2021.9414325","title":"Non-Singular Adversarial Robustness of Neural Networks","display_name":"Non-Singular Adversarial Robustness of Neural Networks","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3161523401","doi":"https://doi.org/10.1109/icassp39728.2021.9414325","mag":"3161523401"},"language":"en","primary_location":{"id":"doi:10.1109/icassp39728.2021.9414325","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414325","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012921398","display_name":"Yu\u2010Lin Tsai","orcid":"https://orcid.org/0000-0001-9968-0242"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Yu-Lin Tsai","raw_affiliation_strings":["National Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035387029","display_name":"Chia-Yi Hsu","orcid":null},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chia-Yi Hsu","raw_affiliation_strings":["National Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085568918","display_name":"Chia-Mu Yu","orcid":"https://orcid.org/0000-0002-1677-2131"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chia-Mu Yu","raw_affiliation_strings":["National Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050344371","display_name":"Pin\u2010Yu Chen","orcid":"https://orcid.org/0000-0003-1039-8369"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pin-Yu Chen","raw_affiliation_strings":["IBM Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3840","last_page":"3844"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8317080736160278},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.6179082989692688},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.579159140586853},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5417488217353821},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5404800176620483},{"id":"https://openalex.org/keywords/singular-value","display_name":"Singular value","score":0.4648064374923706},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3898584246635437},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3421880304813385},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.33432814478874207},{"id":"https://openalex.org/keywords/eigenvalues-and-eigenvectors","display_name":"Eigenvalues and eigenvectors","score":0.06332114338874817}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8317080736160278},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.6179082989692688},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.579159140586853},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5417488217353821},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5404800176620483},{"id":"https://openalex.org/C109282560","wikidata":"https://www.wikidata.org/wiki/Q4166054","display_name":"Singular value","level":3,"score":0.4648064374923706},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3898584246635437},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3421880304813385},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33432814478874207},{"id":"https://openalex.org/C158693339","wikidata":"https://www.wikidata.org/wiki/Q190524","display_name":"Eigenvalues and eigenvectors","level":2,"score":0.06332114338874817},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp39728.2021.9414325","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414325","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2116424792","https://openalex.org/W2243397390","https://openalex.org/W2603451662","https://openalex.org/W2618235498","https://openalex.org/W2746600820","https://openalex.org/W2767471303","https://openalex.org/W2771112233","https://openalex.org/W2773446523","https://openalex.org/W2887906331","https://openalex.org/W2945793108","https://openalex.org/W2962756933","https://openalex.org/W2963207607","https://openalex.org/W2963389226","https://openalex.org/W2963540169","https://openalex.org/W2963612069","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2964205597","https://openalex.org/W2964253222","https://openalex.org/W2964346747","https://openalex.org/W2996757750","https://openalex.org/W2998161546","https://openalex.org/W3023868144","https://openalex.org/W3102908045","https://openalex.org/W3106412272","https://openalex.org/W4242053016","https://openalex.org/W4247200422","https://openalex.org/W4288337628","https://openalex.org/W4293846201","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6729756640","https://openalex.org/W6735870940","https://openalex.org/W6738369334","https://openalex.org/W6739868092","https://openalex.org/W6744511767","https://openalex.org/W6748458661","https://openalex.org/W6752985256","https://openalex.org/W6754376045","https://openalex.org/W6762624066","https://openalex.org/W6771747359"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W196429367"],"abstract_inverted_index":{"Adversarial":[0],"robustness":[1,34,43,91,181],"has":[2],"become":[3],"an":[4],"emerging":[5],"challenge":[6],"for":[7,92,144,174],"neural":[8,93,129],"network":[9,130],"owing":[10],"to":[11,14,30,64,73,78,101,150],"its":[12],"over-sensitivity":[13],"small":[15],"input":[16,65],"perturbations.":[17,123,186],"While":[18],"being":[19],"critical,":[20],"we":[21,84,140,169],"argue":[22],"that":[23,57,61],"solving":[24],"this":[25,82,113],"singular":[26,42],"issue":[27],"alone":[28],"fails":[29],"provide":[31],"a":[32,46,126],"comprehensive":[33],"assessment.":[35],"Even":[36],"worse,":[37],"the":[38,86,96,116,146,166],"conclusions":[39],"drawn":[40],"from":[41],"may":[44],"give":[45],"false":[47],"sense":[48],"of":[49,88,98],"overall":[50],"model":[51,107,131,162],"robustness.":[52],"Specifically,":[53],"our":[54,110],"findings":[55],"show":[56],"adversarially":[58],"trained":[59],"models":[60],"are":[62,67],"robust":[63,175],"perturbations":[66,75,100,157],"still":[68],"(or":[69],"even":[70],"more)":[71],"vulnerable":[72],"weight":[74],"when":[76],"compared":[77],"standard":[79,137],"models.":[80],"In":[81],"paper,":[83],"formalize":[85],"notion":[87],"non-singular":[89,180],"adversarial":[90,122,185],"networks":[94],"through":[95],"lens":[97],"joint":[99,183],"data":[102,159],"inputs":[103,160],"as":[104,106],"well":[105],"weights.":[108,163],"To":[109],"best":[111],"knowledge,":[112],"study":[114],"is":[115],"first":[117],"work":[118],"considering":[119],"simultaneous":[120],"input-weight":[121,184],"Based":[124,164],"on":[125,158,165],"multi-layer":[127],"feed-forward":[128],"with":[132],"ReLU":[133],"activation":[134],"functions":[135,173],"and":[136,161,177],"classification":[138],"loss,":[139],"establish":[141],"error":[142,167],"analysis":[143],"quantifying":[145],"loss":[147],"sensitivity":[148],"subject":[149],"\u2113":[151],"<inf":[152],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[153],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">\u221e</inf>":[154],"-norm":[155],"bounded":[156],"analysis,":[168],"propose":[170],"novel":[171],"regularization":[172],"training":[176],"demonstrate":[178],"improved":[179],"against":[182]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}