{"id":"https://openalex.org/W3091626924","doi":"https://doi.org/10.1109/icip40778.2020.9191032","title":"Type I Attack For Generative Models","display_name":"Type I Attack For Generative Models","publication_year":2020,"publication_date":"2020-09-30","ids":{"openalex":"https://openalex.org/W3091626924","doi":"https://doi.org/10.1109/icip40778.2020.9191032","mag":"3091626924"},"language":"en","primary_location":{"id":"doi:10.1109/icip40778.2020.9191032","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icip40778.2020.9191032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085545406","display_name":"Chengjin Sun","orcid":"https://orcid.org/0000-0002-9992-7919"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Chengjin Sun","raw_affiliation_strings":["Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China"],"affiliations":[{"raw_affiliation_string":"Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101888837","display_name":"Sizhe Chen","orcid":"https://orcid.org/0000-0003-3274-6926"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sizhe Chen","raw_affiliation_strings":["Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China"],"affiliations":[{"raw_affiliation_string":"Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033196884","display_name":"Jia Cai","orcid":"https://orcid.org/0000-0001-8942-8668"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia Cai","raw_affiliation_strings":["HuaWei Technologies Co.,Ltd, Hangzhou, P.R. China"],"affiliations":[{"raw_affiliation_string":"HuaWei Technologies Co.,Ltd, Hangzhou, P.R. China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026169938","display_name":"Xiaolin Huang","orcid":"https://orcid.org/0000-0003-4285-6520"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolin Huang","raw_affiliation_strings":["Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China"],"affiliations":[{"raw_affiliation_string":"Department of Automation, Shanghai Jiao Tong University, Shanghai, P.R. China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5085545406"],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":0.5302,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.73188049,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.7750346660614014},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.7566937804222107},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7384651899337769},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6819177269935608},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.6048669815063477},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5793460011482239},{"id":"https://openalex.org/keywords/type","display_name":"Type (biology)","score":0.5617006421089172},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5602996349334717},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.5502203106880188},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.49820542335510254},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.4586373269557953},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38770347833633423},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3836866617202759},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3704148530960083}],"concepts":[{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.7750346660614014},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.7566937804222107},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7384651899337769},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6819177269935608},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.6048669815063477},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5793460011482239},{"id":"https://openalex.org/C2777299769","wikidata":"https://www.wikidata.org/wiki/Q3707858","display_name":"Type (biology)","level":2,"score":0.5617006421089172},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5602996349334717},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.5502203106880188},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.49820542335510254},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4586373269557953},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38770347833633423},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3836866617202759},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3704148530960083},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icip40778.2020.9191032","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icip40778.2020.9191032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1881604308","https://openalex.org/W1959608418","https://openalex.org/W2096733369","https://openalex.org/W2099471712","https://openalex.org/W2243397390","https://openalex.org/W2343938449","https://openalex.org/W2519536754","https://openalex.org/W2560481159","https://openalex.org/W2798841107","https://openalex.org/W2808173987","https://openalex.org/W2962770929","https://openalex.org/W2962793481","https://openalex.org/W2963147844","https://openalex.org/W2963561004","https://openalex.org/W2963800363","https://openalex.org/W2963857521","https://openalex.org/W2964077693","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2969285549","https://openalex.org/W2969985801","https://openalex.org/W2985282977","https://openalex.org/W3034196143","https://openalex.org/W3099206234","https://openalex.org/W4289146964","https://openalex.org/W4293846201","https://openalex.org/W4320013936","https://openalex.org/W6637162671","https://openalex.org/W6639222365","https://openalex.org/W6640963894","https://openalex.org/W6704734575","https://openalex.org/W6739868092","https://openalex.org/W6770273114"],"related_works":["https://openalex.org/W4365211920","https://openalex.org/W3014948380","https://openalex.org/W4380551139","https://openalex.org/W2280377497","https://openalex.org/W3174044702","https://openalex.org/W4238433571","https://openalex.org/W2967848559","https://openalex.org/W4283803360","https://openalex.org/W4317695495","https://openalex.org/W4387506531"],"abstract_inverted_index":{"Generative":[0],"models":[1,52,79,164],"are":[2,107],"popular":[3],"tools":[4],"with":[5],"a":[6,100],"wide":[7],"range":[8],"of":[9,48,143],"applications.":[10],"Nevertheless,":[11],"it":[12],"is":[13,90,154],"as":[14,19,81],"vulnerable":[15],"to":[16,35,39,77,99,137,156],"adversarial":[17,29,160],"samples":[18],"classifiers.":[20],"The":[21,56],"existing":[22],"attack":[23,76,152],"methods":[24],"mainly":[25],"focus":[26,44],"on":[27,45,165],"generating":[28],"examples":[30,161],"by":[31,53,120],"adding":[32],"imperceptible":[33],"perturbations":[34],"input,":[36],"which":[37],"leads":[38],"wrong":[40],"result.":[41],"However,":[42],"we":[43,72,92,115],"another":[46],"aspect":[47],"attack,":[49,114],"i.e.,":[50],"cheating":[51],"significant":[54],"changes.":[55],"former":[57],"induces":[58],"Type":[59,66,74,112,158],"II":[60],"error":[61],"and":[62,83],"the":[63,111,117,122,129,141],"latter":[64],"causes":[65],"I":[67,75,113,159],"error.":[68],"In":[69],"this":[70],"paper,":[71],"propose":[73],"generative":[78,163],"such":[80],"VAE":[82,89],"GAN.":[84],"One":[85],"example":[86],"given":[87],"in":[88,124],"that":[91,150],"can":[93],"change":[94],"an":[95],"original":[96,118],"image":[97,167],"significantly":[98],"meaningless":[101],"one":[102,119],"but":[103],"their":[104],"reconstruction":[105],"results":[106,148],"similar.":[108],"To":[109],"implement":[110],"destroy":[116],"increasing":[121],"distance":[123],"input":[125],"space":[126],"while":[127],"keeping":[128],"output":[130],"similar":[131,138],"because":[132],"different":[133],"inputs":[134],"may":[135],"correspond":[136],"features":[139],"for":[140,162],"property":[142],"deep":[144],"neural":[145],"network.":[146],"Experimental":[147],"show":[149],"our":[151],"method":[153],"effective":[155],"generate":[157],"large-scale":[166],"datasets.":[168]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
