{"id":"https://openalex.org/W4225280522","doi":"https://doi.org/10.1109/icassp43922.2022.9746138","title":"Combating False Sense of Security: Breaking the Defense of Adversarial Training Via Non-Gradient Adversarial Attack","display_name":"Combating False Sense of Security: Breaking the Defense of Adversarial Training Via Non-Gradient Adversarial Attack","publication_year":2022,"publication_date":"2022-04-27","ids":{"openalex":"https://openalex.org/W4225280522","doi":"https://doi.org/10.1109/icassp43922.2022.9746138"},"language":"en","primary_location":{"id":"doi:10.1109/icassp43922.2022.9746138","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp43922.2022.9746138","pdf_url":null,"source":{"id":"https://openalex.org/S4363607702","display_name":"ICASSP 2022 - 2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2022 - 2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064674050","display_name":"Mingyuan Fan","orcid":"https://orcid.org/0000-0001-9550-9237"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Mingyuan Fan","raw_affiliation_strings":["Fuzhou University,College of Computer and Data Science,China","College of Computer and Data Science, Fuzhou University, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou University,College of Computer and Data Science,China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Xidian University,School of Cyber Engineering,China","School of Cyber Engineering, Xidian University, China"],"affiliations":[{"raw_affiliation_string":"Xidian University,School of Cyber Engineering,China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100622590","display_name":"Cen Chen","orcid":"https://orcid.org/0000-0003-1389-0148"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cen Chen","raw_affiliation_strings":["East China Normal University,School of Data Science and Engineering,China","School of Data Science and Engineering, East China Normal University, China"],"affiliations":[{"raw_affiliation_string":"East China Normal University,School of Data Science and Engineering,China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"School of Data Science and Engineering, East China Normal University, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075265849","display_name":"Shengxing Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengxing Yu","raw_affiliation_strings":["Peking University,School of Electronics Engineering and Computer Science,China","School of Electronics Engineering and Computer Science, Peking University, China"],"affiliations":[{"raw_affiliation_string":"Peking University,School of Electronics Engineering and Computer Science,China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Electronics Engineering and Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100643723","display_name":"Wenzhong Guo","orcid":"https://orcid.org/0000-0003-4118-8823"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenzhong Guo","raw_affiliation_strings":["Fuzhou University,College of Computer and Data Science,China","College of Computer and Data Science, Fuzhou University, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou University,College of Computer and Data Science,China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058120371","display_name":"Ximeng Liu","orcid":"https://orcid.org/0000-0002-4238-3295"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ximeng Liu","raw_affiliation_strings":["Fuzhou University,College of Computer and Data Science,China","College of Computer and Data Science, Fuzhou University, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou University,College of Computer and Data Science,China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, China","institution_ids":["https://openalex.org/I80947539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5064674050"],"corresponding_institution_ids":["https://openalex.org/I80947539"],"apc_list":null,"apc_paid":null,"fwci":0.3122,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.47815547,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"3293","last_page":"3297"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9685999751091003,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9623000025749207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9765249490737915},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6810068488121033},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.44041240215301514},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41593456268310547},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36517035961151123}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9765249490737915},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6810068488121033},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.44041240215301514},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41593456268310547},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36517035961151123},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp43922.2022.9746138","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp43922.2022.9746138","pdf_url":null,"source":{"id":"https://openalex.org/S4363607702","display_name":"ICASSP 2022 - 2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2022 - 2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321878","display_name":"Natural Science Foundation of Fujian Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W1988485873","https://openalex.org/W2163605009","https://openalex.org/W2575705757","https://openalex.org/W2592929672","https://openalex.org/W2736899637","https://openalex.org/W2792106437","https://openalex.org/W2922266198","https://openalex.org/W2951696358","https://openalex.org/W2962700793","https://openalex.org/W2963143631","https://openalex.org/W2963857521","https://openalex.org/W2996564870","https://openalex.org/W3047587361","https://openalex.org/W3100405174","https://openalex.org/W3170514715","https://openalex.org/W3173859330","https://openalex.org/W3175322636","https://openalex.org/W4288363925","https://openalex.org/W4288600704","https://openalex.org/W4289744111","https://openalex.org/W4293846201","https://openalex.org/W4300511536","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6684191040","https://openalex.org/W6719080892","https://openalex.org/W6737496325","https://openalex.org/W6739868092","https://openalex.org/W6741036071","https://openalex.org/W6748475379","https://openalex.org/W6753552644","https://openalex.org/W6759329600","https://openalex.org/W6761100157","https://openalex.org/W6771809012"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119"],"abstract_inverted_index":{"Adversarial":[0],"training":[1],"is":[2],"believed":[3],"to":[4,23,53,60,111],"be":[5,54],"the":[6,25,37,65,68,88,94,99,113,123],"most":[7,89],"robust":[8],"and":[9,80],"effective":[10,90],"defense":[11],"method":[12],"against":[13],"adversarial":[14,17,28,39,45,69,73,91,125],"attacks.":[15],"Gradient-based":[16],"attack":[18,40,50],"methods":[19,51,79,83],"are":[20],"generally":[21],"adopted":[22],"evaluate":[24],"effectiveness":[26,66],"of":[27,67],"training.":[29,70],"However,":[30],"in":[31,86,101],"this":[32,102],"paper,":[33],"by":[34,48,132],"diving":[35],"into":[36],"existing":[38,72],"literature,":[41],"we":[42,104],"find":[43],"that":[44,119],"examples":[46,92],"generated":[47],"these":[49],"tend":[52],"less":[55],"imperceptible,":[56],"which":[57],"may":[58],"lead":[59],"an":[61],"inaccurate":[62],"estimation":[63],"for":[64],"The":[71],"attacks":[74,126],"mostly":[75],"adopt":[76],"gradient-based":[77],"optimization":[78,82],"such":[81],"have":[84],"difficulties":[85],"searching":[87],"(i.e.,":[93],"global":[95],"extreme":[96],"points).":[97],"On":[98],"contrast,":[100],"work,":[103],"propose":[105],"a":[106],"novel":[107],"Non-Gradient":[108],"Attack":[109,128],"(NGA)":[110],"overcome":[112],"above-mentioned":[114],"problem.":[115],"Extensive":[116],"experiments":[117],"show":[118],"NGA":[120],"significantly":[121],"outperforms":[122],"state-of-the-art":[124],"on":[127],"Success":[129],"Rate":[130],"(ASR)":[131],"2%":[133],"\u223c":[134],"7%.":[135]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}