{"id":"https://openalex.org/W3135442688","doi":"https://doi.org/10.1109/ijcnn52387.2021.9533442","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","display_name":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","publication_year":2021,"publication_date":"2021-07-18","ids":{"openalex":"https://openalex.org/W3135442688","doi":"https://doi.org/10.1109/ijcnn52387.2021.9533442","mag":"3135442688"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn52387.2021.9533442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9533442","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2103.03000","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043667103","display_name":"Paula Harder","orcid":"https://orcid.org/0000-0002-9500-7218"},"institutions":[{"id":"https://openalex.org/I3019415892","display_name":"Fraunhofer Institute for Industrial Mathematics","ror":"https://ror.org/019hjw009","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019415892","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4210150545","display_name":"Supply Chain Competence Center (Germany)","ror":"https://ror.org/04rbcv404","country_code":"DE","type":"other","lineage":["https://openalex.org/I4210150545"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Paula Harder","raw_affiliation_strings":["Competence Center High Performance Computing, Fraunhofer ITWM,Kaiserslautern,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Competence Center High Performance Computing, Fraunhofer ITWM,Kaiserslautern,Germany","institution_ids":["https://openalex.org/I3019415892","https://openalex.org/I4210150545"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011407203","display_name":"Franz\u2010Josef Pfreundt","orcid":null},"institutions":[{"id":"https://openalex.org/I3019415892","display_name":"Fraunhofer Institute for Industrial Mathematics","ror":"https://ror.org/019hjw009","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019415892","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4210150545","display_name":"Supply Chain Competence Center (Germany)","ror":"https://ror.org/04rbcv404","country_code":"DE","type":"other","lineage":["https://openalex.org/I4210150545"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Franz-Josef Pfreundt","raw_affiliation_strings":["Competence Center High Performance Computing, Fraunhofer ITWM,Kaiserslautern,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Competence Center High Performance Computing, Fraunhofer ITWM,Kaiserslautern,Germany","institution_ids":["https://openalex.org/I3019415892","https://openalex.org/I4210150545"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029656834","display_name":"Margret Keuper","orcid":"https://orcid.org/0000-0002-8437-7993"},"institutions":[{"id":"https://openalex.org/I177802217","display_name":"University of Mannheim","ror":"https://ror.org/031bsb921","country_code":"DE","type":"education","lineage":["https://openalex.org/I177802217"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Margret Keuper","raw_affiliation_strings":["Data and Web Science Group, University of Mannheim,Germany","Data- and Web Science Group, University of Mannheim, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data and Web Science Group, University of Mannheim,Germany","institution_ids":["https://openalex.org/I177802217"]},{"raw_affiliation_string":"Data- and Web Science Group, University of Mannheim, Germany","institution_ids":["https://openalex.org/I177802217"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083785142","display_name":"Janis Keuper","orcid":"https://orcid.org/0000-0002-1327-1243"},"institutions":[{"id":"https://openalex.org/I913140155","display_name":"Offenburg University of Applied Sciences","ror":"https://ror.org/03zh5eq96","country_code":"DE","type":"education","lineage":["https://openalex.org/I913140155"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Janis Keuper","raw_affiliation_strings":["Institute for Machine Learning and Analytics (IMLA), Offenburg University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Machine Learning and Analytics (IMLA), Offenburg University,Germany","institution_ids":["https://openalex.org/I913140155"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8793,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.75478858,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9639000296592712,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9635000228881836,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8760521411895752},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7452026605606079},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6961342096328735},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6803300380706787},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.611818253993988},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5983795523643494},{"id":"https://openalex.org/keywords/frequency-domain","display_name":"Frequency domain","score":0.5744444131851196},{"id":"https://openalex.org/keywords/fourier-transform","display_name":"Fourier transform","score":0.5045207738876343},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.48503774404525757},{"id":"https://openalex.org/keywords/fourier-domain","display_name":"Fourier domain","score":0.46341627836227417},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3269163966178894},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.16207647323608398}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8760521411895752},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7452026605606079},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6961342096328735},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6803300380706787},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.611818253993988},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5983795523643494},{"id":"https://openalex.org/C19118579","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Frequency domain","level":2,"score":0.5744444131851196},{"id":"https://openalex.org/C102519508","wikidata":"https://www.wikidata.org/wiki/Q6520159","display_name":"Fourier transform","level":2,"score":0.5045207738876343},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.48503774404525757},{"id":"https://openalex.org/C3019555358","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Fourier domain","level":3,"score":0.46341627836227417},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3269163966178894},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.16207647323608398},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":8,"locations":[{"id":"doi:10.1109/ijcnn52387.2021.9533442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9533442","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2103.03000","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.03000","pdf_url":"https://arxiv.org/pdf/2103.03000","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3135442688","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2103.03000.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"pmh:oai:fraunhofer.de:N-642916","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-642916.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer ITWM","raw_type":"Conference Paper"},{"id":"pmh:oai:opus.hs-offenburg.de:5284","is_oa":false,"landing_page_url":"https://opus.hs-offenburg.de/frontdoor/index/index/docId/5284","pdf_url":null,"source":{"id":"https://openalex.org/S4377196587","display_name":"Opus-HSO (Offenburg University of Applied Sciences)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I913140155","host_organization_name":"Offenburg University of Applied Sciences","host_organization_lineage":["https://openalex.org/I913140155"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conferenceobject"},{"id":"pmh:oai:publica.fraunhofer.de:publica/412929","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/412929","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/414255","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/414255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"paper"},{"id":"doi:10.48550/arxiv.2103.03000","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2103.03000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2103.03000","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.03000","pdf_url":"https://arxiv.org/pdf/2103.03000","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3135442688.pdf","grobid_xml":"https://content.openalex.org/works/W3135442688.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2061171222","https://openalex.org/W2117539524","https://openalex.org/W2243397390","https://openalex.org/W2460937040","https://openalex.org/W2561975083","https://openalex.org/W2590523583","https://openalex.org/W2594867206","https://openalex.org/W2606529538","https://openalex.org/W2613144983","https://openalex.org/W2618530766","https://openalex.org/W2735607295","https://openalex.org/W2747237166","https://openalex.org/W2783692467","https://openalex.org/W2798302089","https://openalex.org/W2867167548","https://openalex.org/W2890304135","https://openalex.org/W2950468330","https://openalex.org/W2952388520","https://openalex.org/W2963207607","https://openalex.org/W2963384482","https://openalex.org/W2963564844","https://openalex.org/W2963857521","https://openalex.org/W2964253222","https://openalex.org/W2971028215","https://openalex.org/W2998082509","https://openalex.org/W3034864980","https://openalex.org/W3035182590","https://openalex.org/W3103340107","https://openalex.org/W3112825126","https://openalex.org/W3118608800","https://openalex.org/W6640425456","https://openalex.org/W6719080892","https://openalex.org/W6733645847","https://openalex.org/W6734483310","https://openalex.org/W6734787559","https://openalex.org/W6736296761","https://openalex.org/W6737432490","https://openalex.org/W6739868092","https://openalex.org/W6747819456","https://openalex.org/W6752760542","https://openalex.org/W6763810570","https://openalex.org/W6771958972","https://openalex.org/W6787785851","https://openalex.org/W6864274290"],"related_works":["https://openalex.org/W2973571250","https://openalex.org/W3005939920","https://openalex.org/W3048525077","https://openalex.org/W3175258143","https://openalex.org/W3107816832","https://openalex.org/W3167558987","https://openalex.org/W3164837107","https://openalex.org/W2898780854","https://openalex.org/W3112767751","https://openalex.org/W3147268258","https://openalex.org/W2781036271","https://openalex.org/W3127189741","https://openalex.org/W3041787576","https://openalex.org/W3159273500","https://openalex.org/W2973106725","https://openalex.org/W3020939972","https://openalex.org/W2998901024","https://openalex.org/W3188362651","https://openalex.org/W3179956176","https://openalex.org/W3145726664"],"abstract_inverted_index":{"Despite":[0],"the":[1,27,51,81,85,114,119,130,155,159],"success":[2],"of":[3,54,84,103,121,124,129],"convolutional":[4],"neural":[5],"networks":[6],"(CNNs)":[7],"in":[8,26,50,158],"many":[9],"computer":[10],"vision":[11],"and":[12,57,95,116],"image":[13],"analysis":[14,49],"tasks,":[15],"they":[16],"remain":[17],"vulnerable":[18],"against":[19],"so-called":[20],"adversarial":[21,41,69,91,101,140],"attacks:":[22],"Small,":[23],"crafted":[24],"perturbations":[25,102],"input":[28,55,86],"images":[29,56,87],"can":[30,60,98],"lead":[31],"to":[32,39,63,88,138,144],"false":[33],"predictions.":[34],"A":[35],"possible":[36],"defense":[37],"is":[38,161],"detect":[40,89,100],"examples.":[42],"In":[43],"this":[44,133],"work,":[45],"we":[46,135],"show":[47],"how":[48],"Fourier":[52,122],"domain":[53],"feature":[58],"maps":[59],"be":[61],"used":[62,106],"distinguish":[64],"benign":[65],"test":[66],"samples":[67],"from":[68],"images.":[70],"We":[71],"propose":[72],"two":[73],"novel":[74],"detection":[75,141],"methods:":[76],"Our":[77],"first":[78,115],"method":[79,111],"employs":[80],"magnitude":[82],"spectrum":[83],"an":[90],"attack.":[92],"This":[93],"simple":[94],"robust":[96],"classifier":[97],"successfully":[99],"three":[104],"commonly":[105],"attack":[107,150],"methods.":[108,151],"The":[109,152],"second":[110],"builds":[112],"upon":[113],"additionally":[117],"extracts":[118],"phase":[120],"coefficients":[123],"feature-maps":[125],"at":[126,163],"different":[127,149],"layers":[128],"network.":[131],"With":[132],"extension,":[134],"are":[136],"able":[137],"improve":[139],"rates":[142],"compared":[143],"state-of-the-art":[145],"detectors":[146],"on":[147],"five":[148],"code":[153],"for":[154],"methods":[156],"proposed":[157],"paper":[160],"available":[162],"github.com/paulaharder/SpectralAdversarialDefense":[164]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":4}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}