{"id":"https://openalex.org/W4385484676","doi":"https://doi.org/10.1109/ijcnn54540.2023.10191883","title":"Evaluating Robustness Against Adversarial Attacks: A Representational Similarity Analysis Approach","display_name":"Evaluating Robustness Against Adversarial Attacks: A Representational Similarity Analysis Approach","publication_year":2023,"publication_date":"2023-06-18","ids":{"openalex":"https://openalex.org/W4385484676","doi":"https://doi.org/10.1109/ijcnn54540.2023.10191883"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn54540.2023.10191883","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn54540.2023.10191883","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100731335","display_name":"Chenyu Liu","orcid":"https://orcid.org/0000-0002-3654-1824"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Chenyu Liu","raw_affiliation_strings":["School of Computing, National University of Singapore,Singapore","School of Computing, National University of Singapore, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore,Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"School of Computing, National University of Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5100731335"],"corresponding_institution_ids":["https://openalex.org/I165932596"],"apc_list":null,"apc_paid":null,"fwci":0.1746,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54412134,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"40","issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11948","display_name":"Machine Learning in Materials Science","score":0.940500020980835,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9319999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8062413930892944},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7620799541473389},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.7548754215240479},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6700050830841064},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6448390483856201},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5745838284492493},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5548812747001648},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5013487339019775},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.48492079973220825},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.41594985127449036},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4013901352882385}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8062413930892944},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7620799541473389},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.7548754215240479},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6700050830841064},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6448390483856201},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5745838284492493},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5548812747001648},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5013487339019775},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.48492079973220825},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41594985127449036},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4013901352882385},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn54540.2023.10191883","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn54540.2023.10191883","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.6899999976158142,"id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1945616565","https://openalex.org/W2097117768","https://openalex.org/W2160654481","https://openalex.org/W2194775991","https://openalex.org/W2328322609","https://openalex.org/W2897083899","https://openalex.org/W2962851944","https://openalex.org/W2963715038","https://openalex.org/W2963726920","https://openalex.org/W2982303846","https://openalex.org/W3163940926","https://openalex.org/W4293846201","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6685133223","https://openalex.org/W6738549535","https://openalex.org/W6739868092","https://openalex.org/W6795305336"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Network":[2],"(DNN)":[3],"provides":[4],"state-of-the-art":[5],"results":[6],"in":[7,31,61],"many":[8],"application":[9],"scenarios.":[10],"However,":[11],"the":[12,45,76,90,99,102,111,120,143,184,193,200,209,223],"occasional":[13],"instability":[14],"of":[15,24,63,78,92,113,183,186,211],"DNN":[16,64,79,212],"is":[17,89],"hard":[18],"to":[19,56,74,139,166,207],"be":[20,149,190,204],"noticed":[21],"under":[22],"cover":[23],"its":[25],"impressive":[26],"prediction":[27],"accuracy.":[28],"As":[29],"shown":[30],"adversarial":[32,124,140,227],"attack,":[33,141],"by":[34],"making":[35],"perturbations":[36],"on":[37,81,126],"original":[38],"input,":[39],"intentionally":[40],"designed":[41],"samples":[42],"may":[43],"make":[44],"model":[46],"confused":[47],"unexpectedly":[48],"and":[49,67,97,116,122,128,155,178,214],"produce":[50],"misclassification.":[51],"Existing":[52],"methods":[53],"are":[54,137],"difficult":[55],"reveal":[57],"this":[58],"confusion":[59],"cause":[60],"terms":[62],"design":[65],"structure":[66],"example":[68],"inference":[69],"flow.":[70],"This":[71],"work":[72],"aims":[73],"interpret":[75],"robustness":[77,100,112,210],"models":[80,213],"image":[82],"classification":[83],"tasks.":[84],"By":[85],"extracting":[86],"Representation":[87],"(which":[88],"outputs":[91],"each":[93],"layer),":[94],"we":[95,109,197],"evaluate":[96,208],"compare":[98,110],"with":[101,142,169],"Representational":[103,171,201],"Similarity":[104,202],"Analysis":[105],"(RSA)":[106],"method.":[107],"Specially,":[108],"VGG,":[114],"ResNet,":[115],"GoogLeNet":[117],"against":[118],"both":[119],"While-Box":[121],"Black-Box":[123],"attacks":[125,228],"MNIST":[127],"CIFAR-10":[129],"datasets.":[130],"Our":[131],"experiments":[132],"show":[133],"that":[134,145,160,199],"deep":[135],"layers":[136,168],"vulnerable":[138],"reason":[144],"small":[146],"perturbation":[147,163],"will":[148],"magnified":[150],"as":[151,179],"it":[152],"goes":[153],"deeper":[154],"deeper.":[156],"We":[157],"also":[158],"find":[159],"relatively":[161],"strong":[162],"would":[164,189],"lead":[165],"indiscriminative":[167],"high":[170],"Similarities,":[172],"which":[173,217],"indicates":[174],"ineffective":[175],"feature":[176],"extracting,":[177],"a":[180],"result,":[181],"most":[182],"inputs":[185],"different":[187],"classes":[188],"classified":[191],"into":[192],"same":[194],"class.":[195],"Finally,":[196],"demonstrate":[198],"could":[203],"quantitative":[205],"metrics":[206],"their":[215],"layers,":[216],"can":[218],"help":[219],"researchers":[220],"better":[221],"understand":[222],"layer-level":[224],"reasons":[225],"why":[226],"work.":[229]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2025-12-24T23:09:58.560324","created_date":"2025-10-10T00:00:00"}