{"id":"https://openalex.org/W2990846467","doi":"https://doi.org/10.1109/icassp40776.2020.9052930","title":"Witchcraft: Efficient PGD Attacks with Random Step Size","display_name":"Witchcraft: Efficient PGD Attacks with Random Step Size","publication_year":2020,"publication_date":"2020-04-09","ids":{"openalex":"https://openalex.org/W2990846467","doi":"https://doi.org/10.1109/icassp40776.2020.9052930","mag":"2990846467"},"language":"en","primary_location":{"id":"doi:10.1109/icassp40776.2020.9052930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp40776.2020.9052930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2020 - 2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1911.07989","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089287895","display_name":"Ping-yeh Chiang","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ping-Yeh Chiang","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049400969","display_name":"Jonas Geiping","orcid":null},"institutions":[{"id":"https://openalex.org/I206895457","display_name":"University of Siegen","ror":"https://ror.org/02azyry73","country_code":"DE","type":"education","lineage":["https://openalex.org/I206895457"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jonas Geiping","raw_affiliation_strings":["University of Siegen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Siegen","institution_ids":["https://openalex.org/I206895457"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066564672","display_name":"Micah Goldblum","orcid":"https://orcid.org/0000-0002-8266-2424"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Micah Goldblum","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060687985","display_name":"Tom Goldstein","orcid":"https://orcid.org/0000-0003-1660-9307"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tom Goldstein","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083225492","display_name":"Renkun Ni","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Renkun Ni","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043765038","display_name":"Steven Reich","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Steven Reich","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009839197","display_name":"Ali Shafahi","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ali Shafahi","raw_affiliation_strings":["University of Maryland, College Park","University of Maryland - College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland - College Park","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2708,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.62104936,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"3747","last_page":"3751"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.84331214427948},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7345494627952576},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.578082799911499},{"id":"https://openalex.org/keywords/stochastic-gradient-descent","display_name":"Stochastic gradient descent","score":0.5352727770805359},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5272418856620789},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4753027856349945},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.46346747875213623},{"id":"https://openalex.org/keywords/iterative-method","display_name":"Iterative method","score":0.4516037702560425},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.439456045627594},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.436102032661438},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42136186361312866},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.41605550050735474},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3214167654514313},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.18407252430915833}],"concepts":[{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.84331214427948},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7345494627952576},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.578082799911499},{"id":"https://openalex.org/C206688291","wikidata":"https://www.wikidata.org/wiki/Q7617819","display_name":"Stochastic gradient descent","level":3,"score":0.5352727770805359},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5272418856620789},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4753027856349945},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.46346747875213623},{"id":"https://openalex.org/C159694833","wikidata":"https://www.wikidata.org/wiki/Q2321565","display_name":"Iterative method","level":2,"score":0.4516037702560425},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.439456045627594},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.436102032661438},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42136186361312866},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.41605550050735474},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3214167654514313},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.18407252430915833},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/icassp40776.2020.9052930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp40776.2020.9052930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2020 - 2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1911.07989","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1911.07989","pdf_url":"https://arxiv.org/pdf/1911.07989","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:2990846467","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1911.07989.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1911.07989","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1911.07989","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"},{"id":"doi:10.17023/kt5h-dw02","is_oa":true,"landing_page_url":"https://doi.org/10.17023/kt5h-dw02","pdf_url":null,"source":{"id":"https://openalex.org/S7407051697","display_name":"IEEE RESOURCE CENTERS","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1911.07989","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1911.07989","pdf_url":"https://arxiv.org/pdf/1911.07989","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2990846467.pdf","grobid_xml":"https://content.openalex.org/works/W2990846467.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1883420340","https://openalex.org/W2108598243","https://openalex.org/W2401231614","https://openalex.org/W2543927648","https://openalex.org/W2767075075","https://openalex.org/W2768346313","https://openalex.org/W2788820894","https://openalex.org/W2797142180","https://openalex.org/W2963070423","https://openalex.org/W2963143631","https://openalex.org/W2963207607","https://openalex.org/W2963249138","https://openalex.org/W2963516603","https://openalex.org/W2963557656","https://openalex.org/W2963664311","https://openalex.org/W2964121744","https://openalex.org/W2964137095","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2970049488","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6639568328","https://openalex.org/W6640425456","https://openalex.org/W6739868092","https://openalex.org/W6741036071","https://openalex.org/W6745454490","https://openalex.org/W6746608116","https://openalex.org/W6748019269","https://openalex.org/W6748475379","https://openalex.org/W6748982675","https://openalex.org/W6750223653","https://openalex.org/W6764942769"],"related_works":["https://openalex.org/W3129164124","https://openalex.org/W3156498837","https://openalex.org/W2979957050","https://openalex.org/W3162000999","https://openalex.org/W1818275235","https://openalex.org/W2963693747","https://openalex.org/W2949358371","https://openalex.org/W2995387004","https://openalex.org/W3211585184","https://openalex.org/W3082537755","https://openalex.org/W3196681108","https://openalex.org/W2999448676","https://openalex.org/W3201305891","https://openalex.org/W3177442104","https://openalex.org/W4226474468","https://openalex.org/W3204546319","https://openalex.org/W3008718813","https://openalex.org/W3041064305","https://openalex.org/W3214686816","https://openalex.org/W3035736465"],"abstract_inverted_index":{"State-of-the-art":[0],"adversarial":[1,115],"attacks":[2,106,118],"on":[3,87],"neural":[4],"networks":[5],"use":[6],"expensive":[7,69],"iterative":[8],"methods":[9,20],"and":[10,38,90],"numerous":[11],"random":[12,60,70],"restarts":[13,22],"from":[14],"different":[15],"initial":[16],"points.":[17],"Iterative":[18,75],"FGSM-based":[19],"without":[21,66,95],"trade":[23],"off":[24],"performance":[25,65],"for":[26],"computational":[27,97],"efficiency":[28],"because":[29],"they":[30],"do":[31],"not":[32],"adequately":[33],"explore":[34],"the":[35,43,83,88],"image":[36],"space":[37],"are":[39],"highly":[40],"sensitive":[41],"to":[42,63,68,82,120],"choice":[44],"of":[45,52,102],"step":[46,61],"size.":[47],"We":[48],"propose":[49],"a":[50,59],"variant":[51],"Projected":[53],"Gradient":[54],"Descent":[55],"(PGD)":[56],"that":[57],"uses":[58],"size":[62],"improve":[64],"resorting":[67],"restarts.":[71],"Our":[72],"method,":[73],"Wide":[74],"Stochastic":[76],"crafting":[77,105],"(WITCHcraft),":[78],"achieves":[79],"results":[80],"superior":[81],"classical":[84],"PGD":[85,103],"attack":[86],"CIFAR-10":[89],"MNIST":[91],"data":[92],"sets":[93],"but":[94],"additional":[96],"cost.":[98],"This":[99],"simple":[100],"modification":[101],"makes":[104],"more":[107],"economical,":[108],"which":[109],"is":[110],"important":[111],"in":[112,123],"situations":[113],"like":[114],"training":[116],"where":[117],"need":[119],"be":[121],"crafted":[122],"real":[124],"time.":[125]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}