{"id":"https://openalex.org/W3200950110","doi":"https://doi.org/10.1109/ijcnn52387.2021.9533495","title":"Adversarial Attacks and Defense on Deep Learning Classification Models using YCbCr Color Images","display_name":"Adversarial Attacks and Defense on Deep Learning Classification Models using YCbCr Color Images","publication_year":2021,"publication_date":"2021-07-18","ids":{"openalex":"https://openalex.org/W3200950110","doi":"https://doi.org/10.1109/ijcnn52387.2021.9533495","mag":"3200950110"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn52387.2021.9533495","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9533495","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://admin.research-repository.uwa.edu.au/en/publications/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014311265","display_name":"Camilo Pestana","orcid":null},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Camilo Pestana","raw_affiliation_strings":["The University of Western Australia, Crawley, WA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069697936","display_name":"Naveed Akhtar","orcid":"https://orcid.org/0000-0003-3406-673X"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Naveed Akhtar","raw_affiliation_strings":["The University of Western Australia, Crawley, WA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100641142","display_name":"Wei Liu","orcid":"https://orcid.org/0000-0002-7409-0948"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Liu","raw_affiliation_strings":["The University of Western Australia, Crawley, WA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083177580","display_name":"David Glance","orcid":"https://orcid.org/0000-0002-6743-5303"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"David Glance","raw_affiliation_strings":["The University of Western Australia, Crawley, WA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089986388","display_name":"Ajmal Mian","orcid":"https://orcid.org/0000-0002-5206-3842"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ajmal Mian","raw_affiliation_strings":["The University of Western Australia, Crawley, WA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I177877127"],"apc_list":null,"apc_paid":null,"fwci":0.881,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.77117261,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9696999788284302,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9666000008583069,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.712910532951355},{"id":"https://openalex.org/keywords/rgb-color-model","display_name":"RGB color model","score":0.6367835402488708},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.5647008419036865},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.564063549041748},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5402145385742188},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5173527598381042},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.43837589025497437},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4132024347782135},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.37563085556030273},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.3255993127822876},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2855110764503479},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.16650435328483582},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.09580692648887634}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.712910532951355},{"id":"https://openalex.org/C82990744","wikidata":"https://www.wikidata.org/wiki/Q166194","display_name":"RGB color model","level":2,"score":0.6367835402488708},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.5647008419036865},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.564063549041748},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5402145385742188},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5173527598381042},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.43837589025497437},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4132024347782135},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.37563085556030273},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.3255993127822876},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2855110764503479},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.16650435328483582},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.09580692648887634},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/ijcnn52387.2021.9533495","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn52387.2021.9533495","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:openaire/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","is_oa":true,"landing_page_url":"https://admin.research-repository.uwa.edu.au/en/publications/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Pestana, C, Akhtar, N, Liu, W, Glance, D & Mian, A 2021, Adversarial Attacks and Defense on Deep Learning Classification Models using YC b C r \u00a0 Color Images. in IJCNN 2021 - International Joint Conference on Neural Networks, Proceedings. Proceedings of the International Joint Conference on Neural Networks, vol. 2021-July, IEEE, Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/IJCNN52387.2021.9533495","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:pure.atira.dk:publications/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","is_oa":true,"landing_page_url":"http://www.scopus.com/inward/record.url?scp=85116499284&partnerID=8YFLogxK","pdf_url":"https://api.research-repository.uwa.edu.au/ws/files/148565506/Pestana_et_al._2021_Adversarial_attacks_and_defense.pdf","source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Pestana, C, Akhtar, N, Liu, W, Glance, D & Mian, A 2021, Adversarial Attacks and Defense on Deep Learning Classification Models using YC b C r \u00a0 Color Images. in IJCNN 2021 - International Joint Conference on Neural Networks, Proceedings. Proceedings of the International Joint Conference on Neural Networks, vol. 2021-July, IEEE, Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/IJCNN52387.2021.9533495","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pure.atira.dk:openaire/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","is_oa":true,"landing_page_url":"https://admin.research-repository.uwa.edu.au/en/publications/c10a9935-2ca6-4bcd-8cad-e0bc15a6bcfa","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Pestana, C, Akhtar, N, Liu, W, Glance, D & Mian, A 2021, Adversarial Attacks and Defense on Deep Learning Classification Models using YC b C r \u00a0 Color Images. in IJCNN 2021 - International Joint Conference on Neural Networks, Proceedings. Proceedings of the International Joint Conference on Neural Networks, vol. 2021-July, IEEE, Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/IJCNN52387.2021.9533495","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":77,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1901129140","https://openalex.org/W1945616565","https://openalex.org/W1950594372","https://openalex.org/W1985806826","https://openalex.org/W2016482162","https://openalex.org/W2067042811","https://openalex.org/W2097073572","https://openalex.org/W2097074225","https://openalex.org/W2108598243","https://openalex.org/W2163605009","https://openalex.org/W2269778407","https://openalex.org/W2476548250","https://openalex.org/W2503523779","https://openalex.org/W2561498661","https://openalex.org/W2603766943","https://openalex.org/W2604505099","https://openalex.org/W2607219512","https://openalex.org/W2612372205","https://openalex.org/W2613144983","https://openalex.org/W2620038827","https://openalex.org/W2765384636","https://openalex.org/W2791182480","https://openalex.org/W2805751152","https://openalex.org/W2887695188","https://openalex.org/W2911634294","https://openalex.org/W2913318911","https://openalex.org/W2916286792","https://openalex.org/W2927807671","https://openalex.org/W2944049653","https://openalex.org/W2947028053","https://openalex.org/W2952610664","https://openalex.org/W2954978443","https://openalex.org/W2962872506","https://openalex.org/W2962933288","https://openalex.org/W2963001136","https://openalex.org/W2963184668","https://openalex.org/W2963207607","https://openalex.org/W2963341057","https://openalex.org/W2963389226","https://openalex.org/W2963431851","https://openalex.org/W2963501948","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2964335429","https://openalex.org/W2970390122","https://openalex.org/W2979450790","https://openalex.org/W2982389494","https://openalex.org/W3010856332","https://openalex.org/W3013529009","https://openalex.org/W3103340107","https://openalex.org/W3124561108","https://openalex.org/W4293846201","https://openalex.org/W4297208907","https://openalex.org/W4300725094","https://openalex.org/W4308831279","https://openalex.org/W6637162671","https://openalex.org/W6639824700","https://openalex.org/W6640425456","https://openalex.org/W6684191040","https://openalex.org/W6725195833","https://openalex.org/W6729756640","https://openalex.org/W6731039222","https://openalex.org/W6736207377","https://openalex.org/W6737432490","https://openalex.org/W6737443998","https://openalex.org/W6739868092","https://openalex.org/W6745272055","https://openalex.org/W6749270609","https://openalex.org/W6756444276","https://openalex.org/W6758061364","https://openalex.org/W6761566305","https://openalex.org/W6762456237","https://openalex.org/W6763151900","https://openalex.org/W6765966149"],"related_works":["https://openalex.org/W2357461155","https://openalex.org/W2384129116","https://openalex.org/W2354251581","https://openalex.org/W2766721049","https://openalex.org/W3145924829","https://openalex.org/W2353647904","https://openalex.org/W3152267458","https://openalex.org/W2087937280","https://openalex.org/W2607965789","https://openalex.org/W2361361118"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"network":[2],"models":[3],"are":[4,10,19,180],"vulnerable":[5],"to":[6,55,91,99],"adversarial":[7,41,126],"perturbations":[8,18,42,68,141,179],"that":[9,40,109,131],"subtle":[11],"but":[12],"change":[13],"the":[14,31,37,45,71,89,93,103,112,117,133,144,159,168,178,184],"model":[15,170],"predictions.":[16],"Adversarial":[17],"generally":[20],"computed":[21],"for":[22,36,132,183],"RGB":[23,32],"images":[24,122],"and":[25,51,107,123,136,164,174],"are,":[26],"hence,":[27],"equally":[28],"distributed":[29],"among":[30],"channels.":[33],"We":[34,96],"show,":[35],"first":[38],"time,":[39],"prevail":[43],"in":[44,77,102,143,147],"Y-channel":[46,72,85,145],"of":[47,162],"the$\\mathbf{YC}_{b}\\mathbf{C}_{r}$>":[48],"color":[49],"space":[50],"exploit":[52],"this":[53],"finding":[54],"propose":[56],"a":[57,78,154],"defense":[58,61,124],"mechanism.":[59],"Our":[60],"ResUpNet,":[62],"which":[63],"is":[64,86],"end-to-end":[65],"trainable,":[66],"removes":[67],"only":[69,142,182],"from":[70],"by":[73,172],"exploiting":[74],"ResNet":[75],"features":[76],"bottleneck":[79],"free":[80],"up-sampling":[81],"framework.":[82],"The":[83],"refined":[84],"combined":[87],"with":[88,153],"untouched$\\mathbf{C}_{b}\\mathbf{C}_{r}$-channels":[90],"restore":[92],"clean":[94,121],"image.":[95],"compare":[97],"ResUpNet":[98],"existing":[100],"defenses":[101],"input":[104],"transformation":[105],"category":[106],"show":[108,130],"it":[110],"achieves":[111],"best":[113],"balance":[114],"between":[115],"maintaining":[116],"original":[118],"accuracies":[119],"on":[120,167],"against":[125],"attacks.":[127],"Finally,":[128],"we":[129],"same":[134],"attack":[135],"fixed":[137],"perturbation":[138,157],"magnitude,":[139],"learning":[140],"results":[146],"higher":[148],"fooling":[149,160],"rates.":[150],"For":[151],"example,":[152],"very":[155],"small":[156],"magnitude$\\epsilon=0.002$)":[158],"rates":[161],"FGSM":[163],"PGD":[165],"attacks":[166],"ResNet50":[169],"increase":[171],"11.1%":[173],"15.6%":[175],"respectively,":[176],"when":[177],"learned":[181],"Y-channel.":[185]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}