{"id":"https://openalex.org/W4408354907","doi":"https://doi.org/10.1109/icassp49660.2025.10888691","title":"Robust Adversarial Defense Based on Non-Transferability of Attack Across Foundation Models","display_name":"Robust Adversarial Defense Based on Non-Transferability of Attack Across Foundation Models","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408354907","doi":"https://doi.org/10.1109/icassp49660.2025.10888691"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10888691","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10888691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115842103","display_name":"Koshiro Toishi","orcid":null},"institutions":[{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Koshiro Toishi","raw_affiliation_strings":["Hokkaido University,School of Engineering,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hokkaido University,School of Engineering,Japan","institution_ids":["https://openalex.org/I205349734"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033215072","display_name":"Keisuke Maeda","orcid":"https://orcid.org/0000-0001-8039-3462"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Keisuke Maeda","raw_affiliation_strings":["Data-Driven Interdisciplinary,Research Emergence Department,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data-Driven Interdisciplinary,Research Emergence Department,Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002757875","display_name":"Ren Togo","orcid":"https://orcid.org/0000-0002-4474-3995"},"institutions":[{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ren Togo","raw_affiliation_strings":["Hokkaido University,Faculty of Information Science and Technology,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hokkaido University,Faculty of Information Science and Technology,Japan","institution_ids":["https://openalex.org/I205349734"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009032240","display_name":"Takahiro Ogawa","orcid":"https://orcid.org/0000-0001-5332-8112"},"institutions":[{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takahiro Ogawa","raw_affiliation_strings":["Hokkaido University,Faculty of Information Science and Technology,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hokkaido University,Faculty of Information Science and Technology,Japan","institution_ids":["https://openalex.org/I205349734"]}]},{"author_position":"last","author":{"id":null,"display_name":"Miki Haseyama","orcid":null},"institutions":[{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Miki Haseyama","raw_affiliation_strings":["Hokkaido University,Faculty of Information Science and Technology,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hokkaido University,Faculty of Information Science and Technology,Japan","institution_ids":["https://openalex.org/I205349734"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.951200008392334,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.951200008392334,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9096347093582153},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.8716270327568054},{"id":"https://openalex.org/keywords/foundation","display_name":"Foundation (evidence)","score":0.7656391859054565},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6667405366897583},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5380638837814331},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24032145738601685},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.1679406464099884},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.0697539746761322}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9096347093582153},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.8716270327568054},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.7656391859054565},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6667405366897583},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5380638837814331},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24032145738601685},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.1679406464099884},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0697539746761322},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10888691","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10888691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W12634471","https://openalex.org/W1977295328","https://openalex.org/W2047643928","https://openalex.org/W2108598243","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W4293846201","https://openalex.org/W4386075882","https://openalex.org/W4386113272","https://openalex.org/W4402727210","https://openalex.org/W4402727297","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6677919164","https://openalex.org/W6774469542","https://openalex.org/W6787972765","https://openalex.org/W6790019176","https://openalex.org/W6791353385","https://openalex.org/W6800751262","https://openalex.org/W6811072154","https://openalex.org/W6846007759","https://openalex.org/W6847311340","https://openalex.org/W6852164222"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4392340763","https://openalex.org/W4283325551","https://openalex.org/W4403006689"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,31,51,65,97],"novel":[4],"adversarial":[5,17,24,28,59,74,89,127],"defense":[6,52],"method":[7,53,63,93,118],"that":[8,36,54,115],"exploits":[9],"non-transferability":[10,57,107],"of":[11,69,88,108,122],"attack":[12,40,109],"across":[13],"foundation":[14,44],"models.":[15,111],"Existing":[16],"training":[18],"methods":[19],"have":[20],"insufficient":[21],"robustness":[22],"to":[23],"examples":[25,75,128],"under":[26],"powerful":[27],"attacks":[29],"in":[30],"white-box":[32],"setting.":[33],"We":[34],"clarify":[35],"there":[37],"is":[38],"no":[39],"transferability":[41],"between":[42,110],"various":[43],"models":[45,71],"through":[46],"preliminary":[47],"experiments":[48],"and":[49,72],"propose":[50],"combines":[55],"the":[56,78,86,91,102,116,120],"with":[58],"training.":[60],"The":[61],"proposed":[62,92,117],"constructs":[64],"common":[66],"embedding":[67],"space":[68],"different":[70,79],"detects":[73],"by":[76],"leveraging":[77],"outputs":[80],"from":[81],"each":[82,130],"model.":[83,131],"Based":[84],"on":[85,101,106],"detection":[87],"examples,":[90],"can":[94],"adaptively":[95],"select":[96],"robust":[98],"model":[99],"depending":[100],"input":[103],"images":[104],"based":[105],"Experimental":[112],"results":[113],"show":[114],"improves":[119],"accuracy":[121],"zero-shot":[123],"class":[124],"classification":[125],"for":[126],"against":[129]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}