{"id":"https://openalex.org/W3162748751","doi":"https://doi.org/10.1109/icassp39728.2021.9414793","title":"Enhancing Model Robustness by Incorporating Adversarial Knowledge into Semantic Representation","display_name":"Enhancing Model Robustness by Incorporating Adversarial Knowledge into Semantic Representation","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3162748751","doi":"https://doi.org/10.1109/icassp39728.2021.9414793","mag":"3162748751"},"language":"en","primary_location":{"id":"doi:10.1109/icassp39728.2021.9414793","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414793","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100428948","display_name":"Jinfeng Li","orcid":"https://orcid.org/0000-0001-9462-2625"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jinfeng Li","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061219446","display_name":"Tianyu Du","orcid":"https://orcid.org/0000-0003-0896-0690"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyu Du","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100331368","display_name":"Xiangyu Liu","orcid":"https://orcid.org/0000-0002-9690-296X"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyu Liu","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101618645","display_name":"Rong Zhang","orcid":"https://orcid.org/0000-0001-8019-245X"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rong Zhang","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337747","display_name":"Hui Xue","orcid":"https://orcid.org/0000-0002-2093-2839"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Xue","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100428948"],"corresponding_institution_ids":["https://openalex.org/I45928872"],"apc_list":null,"apc_paid":null,"fwci":0.6799,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.7499276,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"7708","last_page":"7712"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9531000256538391,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8396937847137451},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8230562210083008},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6644629240036011},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6153668761253357},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.470573365688324},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.45240339636802673},{"id":"https://openalex.org/keywords/machine-translation","display_name":"Machine translation","score":0.4316878318786621},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4119125008583069},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.40989258885383606},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.35137104988098145}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8396937847137451},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8230562210083008},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6644629240036011},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6153668761253357},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.470573365688324},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.45240339636802673},{"id":"https://openalex.org/C203005215","wikidata":"https://www.wikidata.org/wiki/Q79798","display_name":"Machine translation","level":2,"score":0.4316878318786621},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4119125008583069},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.40989258885383606},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35137104988098145},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp39728.2021.9414793","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9414793","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1614298861","https://openalex.org/W1673923490","https://openalex.org/W1832693441","https://openalex.org/W2078617306","https://openalex.org/W2096733369","https://openalex.org/W2133564696","https://openalex.org/W2153579005","https://openalex.org/W2165945467","https://openalex.org/W2340954483","https://openalex.org/W2517194566","https://openalex.org/W2739599645","https://openalex.org/W2896457183","https://openalex.org/W2905526464","https://openalex.org/W2915602689","https://openalex.org/W2917779306","https://openalex.org/W2921273687","https://openalex.org/W2950577311","https://openalex.org/W2954034987","https://openalex.org/W2962756421","https://openalex.org/W2963341956","https://openalex.org/W2963564844","https://openalex.org/W2963783970","https://openalex.org/W2963859254","https://openalex.org/W2964153729","https://openalex.org/W2964199361","https://openalex.org/W2964308564","https://openalex.org/W2970127247","https://openalex.org/W2982054702","https://openalex.org/W3024608270","https://openalex.org/W3035577668","https://openalex.org/W3098259638","https://openalex.org/W3099206234","https://openalex.org/W4294170691","https://openalex.org/W6636510571","https://openalex.org/W6637162671","https://openalex.org/W6679434410","https://openalex.org/W6682691769","https://openalex.org/W6755207826","https://openalex.org/W6777342446"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Despite":[0],"that":[1,114],"deep":[2],"neural":[3],"networks":[4],"(DNNs)":[5],"have":[6,19,48],"achieved":[7],"enormous":[8],"success":[9],"in":[10,51,166,192],"many":[11],"domains":[12],"like":[13],"natural":[14],"language":[15,65],"processing":[16],"(NLP),":[17],"they":[18],"also":[20],"been":[21,49],"proven":[22],"to":[23,26,62,73,77],"be":[24,164],"vulnerable":[25],"maliciously":[27],"generated":[28],"adversarial":[29,98,158],"examples.":[30],"Such":[31],"inherent":[32],"vulnerability":[33],"has":[34],"threatened":[35],"various":[36],"real-world":[37,111],"deployed":[38],"DNNs-based":[39],"applications.":[40],"To":[41],"strength":[42],"the":[43,52,63,78,90,101,105,129,134,154,189],"model":[44,130,142],"robustness,":[45],"several":[46],"countermeasures":[47],"proposed":[50],"English":[53],"NLP":[54,94,169],"domain":[55],"and":[56,173],"obtained":[57],"satisfactory":[58],"performance.":[59],"However,":[60],"due":[61],"unique":[64],"properties":[66],"of":[67,92,104,156],"Chinese,":[68],"it":[69,126,177],"is":[70,160,178],"not":[71],"trivial":[72],"extend":[74],"existing":[75],"defenses":[76],"Chinese":[79],"domain.":[80],"Therefore,":[81],"we":[82],"propose":[83],"AdvGraph,":[84],"a":[85,179],"novel":[86],"defense":[87,181],"which":[88,162,186],"enhances":[89],"robustness":[91,131],"Chinese-based":[93,168],"models":[95,170],"by":[96],"incorporating":[97],"knowledge":[99,159],"into":[100],"semantic":[102],"representation":[103,155],"input.":[106],"Extensive":[107],"experiments":[108],"on":[109,141],"two":[110],"tasks":[112],"show":[113],"AdvGraph":[115],"exhibits":[116],"better":[117],"performance":[118,143],"compared":[119],"with":[120,182],"previous":[121],"work:":[122],"(i)":[123],"effective":[124],"\u2013":[125,149,176],"significantly":[127],"strengthens":[128],"even":[132],"under":[133],"adaptive":[135],"attacks":[136],"setting":[137],"without":[138,171],"negative":[139],"impact":[140],"over":[144],"legitimate":[145],"input;":[146],"(ii)":[147],"generic":[148],"its":[150],"key":[151],"component,":[152],"i.e.,":[153],"connotative":[157],"task-agnostic,":[161],"can":[163,187],"reused":[165],"any":[167],"retraining;":[172],"(iii)":[174],"efficient":[175],"light-weight":[180],"sub-linear":[183],"computational":[184],"complexity,":[185],"guarantee":[188],"efficiency":[190],"required":[191],"practical":[193],"scenarios.":[194]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
