{"id":"https://openalex.org/W4375868878","doi":"https://doi.org/10.1109/icassp49357.2023.10097245","title":"Visual Prompting for Adversarial Robustness","display_name":"Visual Prompting for Adversarial Robustness","publication_year":2023,"publication_date":"2023-05-05","ids":{"openalex":"https://openalex.org/W4375868878","doi":"https://doi.org/10.1109/icassp49357.2023.10097245"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49357.2023.10097245","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10097245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059826739","display_name":"Aochuan Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aochuan Chen","raw_affiliation_strings":["Michigan State University,USA","Michigan State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University,USA","institution_ids":["https://openalex.org/I87216513"]},{"raw_affiliation_string":"Michigan State University, USA","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108140029","display_name":"Peter Lorenz","orcid":null},"institutions":[{"id":"https://openalex.org/I3019415892","display_name":"Fraunhofer Institute for Industrial Mathematics","ror":"https://ror.org/019hjw009","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019415892","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4210124503","display_name":"Fraunhofer Institute for Machine Tools and Forming Technology","ror":"https://ror.org/026taa863","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210124503","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Peter Lorenz","raw_affiliation_strings":["Fraunhofer ITWM and Fraunhofer Center of Machine Learning,Germany","Fraunhofer ITWM and Fraunhofer Center of Machine Learning, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer ITWM and Fraunhofer Center of Machine Learning,Germany","institution_ids":["https://openalex.org/I3019415892","https://openalex.org/I4210124503"]},{"raw_affiliation_string":"Fraunhofer ITWM and Fraunhofer Center of Machine Learning, Germany","institution_ids":["https://openalex.org/I3019415892"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112911726","display_name":"Yuguang Yao","orcid":null},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuguang Yao","raw_affiliation_strings":["Michigan State University,USA","Michigan State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University,USA","institution_ids":["https://openalex.org/I87216513"]},{"raw_affiliation_string":"Michigan State University, USA","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050344371","display_name":"Pin\u2010Yu Chen","orcid":"https://orcid.org/0000-0003-1039-8369"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pin-Yu Chen","raw_affiliation_strings":["IBM Research,USA","IBM Research, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research,USA","institution_ids":[]},{"raw_affiliation_string":"IBM Research, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100321843","display_name":"Sijia Liu","orcid":"https://orcid.org/0000-0003-2817-6991"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sijia Liu","raw_affiliation_strings":["Michigan State University,USA","Michigan State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University,USA","institution_ids":["https://openalex.org/I87216513"]},{"raw_affiliation_string":"Michigan State University, USA","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.8744,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.97098776,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9345999956130981,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9107000231742859,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8941909074783325},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7839779853820801},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7176262140274048},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6953356266021729},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5550671219825745},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5222278833389282},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49698951840400696},{"id":"https://openalex.org/keywords/speedup","display_name":"Speedup","score":0.496359646320343},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.41451388597488403},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3294183015823364},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.22627201676368713},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.0841931700706482}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8941909074783325},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7839779853820801},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7176262140274048},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6953356266021729},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5550671219825745},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5222278833389282},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49698951840400696},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.496359646320343},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.41451388597488403},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3294183015823364},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.22627201676368713},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.0841931700706482},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icassp49357.2023.10097245","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10097245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/506440","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/506440","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":81,"referenced_works":["https://openalex.org/W2618043096","https://openalex.org/W2748789698","https://openalex.org/W2786163515","https://openalex.org/W2913266441","https://openalex.org/W2950468330","https://openalex.org/W2962872506","https://openalex.org/W2963143631","https://openalex.org/W2963496101","https://openalex.org/W2963857521","https://openalex.org/W2970680991","https://openalex.org/W2998600476","https://openalex.org/W3009096484","https://openalex.org/W3009542902","https://openalex.org/W3009751875","https://openalex.org/W3035106315","https://openalex.org/W3035258980","https://openalex.org/W3035742266","https://openalex.org/W3036497855","https://openalex.org/W3087293208","https://openalex.org/W3115505421","https://openalex.org/W3122018033","https://openalex.org/W3124515882","https://openalex.org/W3130405705","https://openalex.org/W3143848010","https://openalex.org/W3150450875","https://openalex.org/W3166048128","https://openalex.org/W3166396011","https://openalex.org/W3172443934","https://openalex.org/W3174770825","https://openalex.org/W3193553875","https://openalex.org/W3214538500","https://openalex.org/W3217234915","https://openalex.org/W4213328902","https://openalex.org/W4221148050","https://openalex.org/W4221150990","https://openalex.org/W4221155122","https://openalex.org/W4221160862","https://openalex.org/W4225922988","https://openalex.org/W4288360049","https://openalex.org/W4288363925","https://openalex.org/W4292779060","https://openalex.org/W4293846201","https://openalex.org/W4297573953","https://openalex.org/W4297899562","https://openalex.org/W4298312696","https://openalex.org/W4386065871","https://openalex.org/W6733645847","https://openalex.org/W6734787559","https://openalex.org/W6739868092","https://openalex.org/W6743581629","https://openalex.org/W6748277150","https://openalex.org/W6748475379","https://openalex.org/W6752946794","https://openalex.org/W6759129252","https://openalex.org/W6761100157","https://openalex.org/W6762707182","https://openalex.org/W6762775584","https://openalex.org/W6763612438","https://openalex.org/W6765694979","https://openalex.org/W6774469542","https://openalex.org/W6774953023","https://openalex.org/W6778883912","https://openalex.org/W6779361924","https://openalex.org/W6779945560","https://openalex.org/W6783055306","https://openalex.org/W6787443072","https://openalex.org/W6788596411","https://openalex.org/W6788789465","https://openalex.org/W6790221796","https://openalex.org/W6791353385","https://openalex.org/W6795828888","https://openalex.org/W6796456916","https://openalex.org/W6800041800","https://openalex.org/W6803435029","https://openalex.org/W6803640674","https://openalex.org/W6809645183","https://openalex.org/W6810311068","https://openalex.org/W6810426963","https://openalex.org/W6810671766","https://openalex.org/W6811187361","https://openalex.org/W6842969589"],"related_works":["https://openalex.org/W2058965144","https://openalex.org/W2164382479","https://openalex.org/W2146343568","https://openalex.org/W98480971","https://openalex.org/W2150291671","https://openalex.org/W2013643406","https://openalex.org/W2027972911","https://openalex.org/W2157978810","https://openalex.org/W4391547476","https://openalex.org/W2097707447"],"abstract_inverted_index":{"In":[0],"this":[1,80],"work,":[2],"we":[3,113],"leverage":[4,135],"visual":[5,128],"prompting":[6,34],"(VP)":[7],"to":[8,21,28,43,59,73,125,132,146,171],"improve":[9,147],"adversarial":[10,23,76,93,108],"robustness":[11],"of":[12,138],"a":[13,96,115,178],"fixed,":[14],"pre-trained":[15],"model":[16,46,61,148],"at":[17,40,186],"test":[18,41],"time.":[19],"Compared":[20,170],"conventional":[22,157],"defenses,":[24,174],"VP":[25,54,87,117,158],"allows":[26],"us":[27],"design":[29],"universal":[30,97],"(i.e.,":[31],"data-agnostic)":[32],"input":[33,98],"templates,":[35],"which":[36],"have":[37],"plug-and-play":[38],"capabilities":[39],"time":[42,181],"achieve":[44],"desired":[45],"performance":[47],"without":[48],"introducing":[49],"much":[50],"computation":[51],"overhead.":[52],"Although":[53],"has":[55],"been":[56],"successfully":[57],"applied":[58],"improving":[60],"generalization,":[62],"it":[63,69],"remains":[64],"elusive":[65],"whether":[66],"and":[67,82,165],"how":[68],"can":[70],"be":[71],"used":[72],"defend":[74],"against":[75,106],"attacks.":[77],"We":[78],"investigate":[79],"problem":[81],"show":[83,152],"that":[84,153],"the":[85,101,136,156],"vanilla":[86],"approach":[88],"is":[89,184],"not":[90,133],"effective":[91],"in":[92],"defense":[94],"since":[95],"prompt":[99],"lacks":[100],"capacity":[102],"for":[103],"robust":[104,167],"learning":[105],"sample-specific":[107],"perturbations.":[109],"To":[110],"circumvent":[111],"it,":[112],"propose":[114],"new":[116],"method,":[118,159],"termed":[119],"Class-wise":[120],"Adversarial":[121],"Visual":[122],"Prompting":[123],"(C-AVP),":[124],"generate":[126],"class-wise":[127],"prompts":[129,140],"so":[130],"as":[131],"only":[134],"strengths":[137],"ensemble":[139],"but":[141],"also":[142,176],"optimize":[143],"their":[144],"interrelations":[145],"robustness.":[149],"Our":[150],"experiments":[151],"C-AVP":[154,175],"outperforms":[155],"with":[160],"2.1\u00d7":[161],"standard":[162],"accuracy":[163,168],"gain":[164],"2\u00d7":[166],"gain.":[169],"classical":[172],"test-time":[173],"yields":[177],"42\u00d7":[179],"inference":[180],"speedup.":[182],"Code":[183],"available":[185],"https://github.com/Phoveran/vp-for-adversarial-robustness.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":6}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}