{"id":"https://openalex.org/W4392902617","doi":"https://doi.org/10.1109/icassp48485.2024.10448145","title":"Architecture-Agnostic Iterative Black-Box Certified Defense Against Adversarial Patches","display_name":"Architecture-Agnostic Iterative Black-Box Certified Defense Against Adversarial Patches","publication_year":2024,"publication_date":"2024-03-18","ids":{"openalex":"https://openalex.org/W4392902617","doi":"https://doi.org/10.1109/icassp48485.2024.10448145"},"language":"en","primary_location":{"id":"doi:10.1109/icassp48485.2024.10448145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10448145","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089382998","display_name":"Di Yang","orcid":"https://orcid.org/0000-0002-8124-532X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Yang","raw_affiliation_strings":["East China Normal University,China","East China Normal University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University,China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"East China Normal University, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036183844","display_name":"Yihao Huang","orcid":"https://orcid.org/0000-0002-5784-770X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yihao Huang","raw_affiliation_strings":["Nanyang Technological University,Singapore","Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026239594","display_name":"Qing Guo","orcid":"https://orcid.org/0000-0003-0974-9299"},"institutions":[{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]},{"id":"https://openalex.org/I4210161496","display_name":"A*STAR Graduate Academy","ror":"https://ror.org/059yjzn93","country_code":"SG","type":"education","lineage":["https://openalex.org/I115228651","https://openalex.org/I4210161496"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Qing Guo","raw_affiliation_strings":["A*STAR,CFAR and IHPC,Singapore","CFAR and IHPC, A*STAR, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"A*STAR,CFAR and IHPC,Singapore","institution_ids":["https://openalex.org/I4210161496"]},{"raw_affiliation_string":"CFAR and IHPC, A*STAR, Singapore","institution_ids":["https://openalex.org/I115228651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034751153","display_name":"Felix Juefei-Xu","orcid":"https://orcid.org/0000-0002-0857-8611"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Felix Juefei-Xu","raw_affiliation_strings":["New York University,USA","New York University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University,USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"New York University, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101999266","display_name":"Ming Hu","orcid":"https://orcid.org/0000-0002-2553-1188"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ming Hu","raw_affiliation_strings":["Nanyang Technological University,Singapore","Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University,Singapore","Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054490662","display_name":"Geguang Pu","orcid":"https://orcid.org/0000-0001-9750-8334"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Geguang Pu","raw_affiliation_strings":["East China Normal University,China","East China Normal University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University,China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"East China Normal University, China","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0668,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.7592611,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"5985","last_page":"5989"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9602000117301941,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9564999938011169,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.7778618335723877},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7476749420166016},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6956131458282471},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.4871816039085388},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.47931969165802},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.42902472615242004},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.4269673228263855},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4039114713668823},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.38969939947128296},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36652684211730957},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3234045207500458}],"concepts":[{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.7778618335723877},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7476749420166016},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6956131458282471},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.4871816039085388},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.47931969165802},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.42902472615242004},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.4269673228263855},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4039114713668823},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.38969939947128296},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36652684211730957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3234045207500458},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp48485.2024.10448145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10448145","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.6499999761581421,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2890054895","https://openalex.org/W2902867332","https://openalex.org/W2963302614","https://openalex.org/W2996629283","https://openalex.org/W3007603175","https://openalex.org/W3097573595","https://openalex.org/W3103340107","https://openalex.org/W3113588330","https://openalex.org/W3118608800","https://openalex.org/W3119917739","https://openalex.org/W3130986770","https://openalex.org/W3205945722","https://openalex.org/W4221166007","https://openalex.org/W6747706139","https://openalex.org/W6774113373","https://openalex.org/W6774549192","https://openalex.org/W6784333009","https://openalex.org/W6784545786","https://openalex.org/W6800565261"],"related_works":["https://openalex.org/W2047881532","https://openalex.org/W1984273188","https://openalex.org/W2727407240","https://openalex.org/W154189287","https://openalex.org/W3033197410","https://openalex.org/W3009622996","https://openalex.org/W2777690624","https://openalex.org/W3037859390","https://openalex.org/W2601181618","https://openalex.org/W1855700431"],"abstract_inverted_index":{"The":[0,128],"adversarial":[1,45],"patch":[2,27,88,101,126],"attack":[3,54],"aims":[4],"to":[5,39],"fool":[6],"image":[7],"classifiers":[8],"within":[9],"a":[10,22,66,71,91],"bounded,":[11],"contiguous":[12],"region":[13],"of":[14,43,60,144],"arbitrary":[15],"changes.":[16],"To":[17,56],"address":[18],"this":[19],"problem":[20],"in":[21,52,65,90],"trustworthy":[23],"way,":[24],"the":[25,33,41,44,58,61,82,87,96,100,108,111,117,124,140],"certified":[26,35,63,120],"defense":[28,64,121],"methods":[29,122],"are":[30,114],"proposed.":[31],"However,":[32],"state-of-the-art":[34],"defenses":[36],"inevitably":[37],"needed":[38],"access":[40],"size":[42,89,97],"patch,":[46],"which":[47],"is":[48],"unreasonable":[49],"and":[50,102,136,142],"impractical":[51],"real-world":[53],"scenarios.":[55],"improve":[57],"feasibility":[59],"architecture-agnostic":[62],"black-box":[67],"setting,":[68],"we":[69],"propose":[70],"novel":[72],"two-stage":[73],"Iterative":[74],"Black-box":[75],"Certified":[76],"Defense":[77],"method,":[78],"termed":[79],"IBCD.":[80,145],"In":[81,107],"first":[83],"stage,":[84,110],"it":[85],"estimates":[86],"search-based":[92],"manner":[93],"by":[94,116],"evaluating":[95],"relationship":[98],"between":[99],"mask":[103],"with":[104,123],"pixel":[105],"masking.":[106],"second":[109],"accuracy":[112],"results":[113],"calculated":[115],"existing":[118],"white-box":[119],"estimated":[125],"size.":[127],"experiments":[129],"conducted":[130],"on":[131],"two":[132,137],"popular":[133],"model":[134],"architectures":[135],"datasets":[138],"verify":[139],"effectiveness":[141],"efficiency":[143]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}