{"id":"https://openalex.org/W4312630460","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892818","title":"Trust-No-Pixel: A Remarkably Simple Defense against Adversarial Attacks Based on Massive Inpainting","display_name":"Trust-No-Pixel: A Remarkably Simple Defense against Adversarial Attacks Based on Massive Inpainting","publication_year":2022,"publication_date":"2022-07-18","ids":{"openalex":"https://openalex.org/W4312630460","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892818"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn55064.2022.9892818","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892818","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053309359","display_name":"Giorgio Ughini","orcid":null},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Giorgio Ughini","raw_affiliation_strings":["Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","institution_ids":["https://openalex.org/I93860229"]},{"raw_affiliation_string":"Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024228106","display_name":"Stefano Samele","orcid":"https://orcid.org/0000-0002-3325-9225"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Samele","raw_affiliation_strings":["Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","institution_ids":["https://openalex.org/I93860229"]},{"raw_affiliation_string":"Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003932703","display_name":"Matteo Matteucci","orcid":"https://orcid.org/0000-0002-8306-6739"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Matteo Matteucci","raw_affiliation_strings":["Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano,Department of Electronics, Information and Bioengineering,Milan,Italy","institution_ids":["https://openalex.org/I93860229"]},{"raw_affiliation_string":"Department of Electronics, Information and Bioengineering, Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5053309359"],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":null,"apc_paid":null,"fwci":0.3122,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.52362226,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"abs 1608 4644","issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.957099974155426,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inpainting","display_name":"Inpainting","score":0.8653868436813354},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8096504211425781},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.7567591071128845},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7223472595214844},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.712160587310791},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6633810997009277},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6060827374458313},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5701161026954651},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5034751296043396},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.4570602774620056},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.4555652141571045},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.41104716062545776},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3506404757499695},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34327659010887146},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29628270864486694}],"concepts":[{"id":"https://openalex.org/C11727466","wikidata":"https://www.wikidata.org/wiki/Q1628157","display_name":"Inpainting","level":3,"score":0.8653868436813354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8096504211425781},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.7567591071128845},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7223472595214844},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.712160587310791},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6633810997009277},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6060827374458313},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5701161026954651},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5034751296043396},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4570602774620056},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.4555652141571045},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.41104716062545776},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3506404757499695},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34327659010887146},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29628270864486694},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ijcnn55064.2022.9892818","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892818","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},{"id":"pmh:oai:re.public.polimi.it:11311/1220501","is_oa":false,"landing_page_url":"http://hdl.handle.net/11311/1220501","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7099999785423279,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1563795667","https://openalex.org/W1686810756","https://openalex.org/W1775729916","https://openalex.org/W1821462560","https://openalex.org/W1945616565","https://openalex.org/W2117539524","https://openalex.org/W2125527601","https://openalex.org/W2133665775","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2295107390","https://openalex.org/W2603766943","https://openalex.org/W2607219512","https://openalex.org/W2611104282","https://openalex.org/W2620038827","https://openalex.org/W2732026016","https://openalex.org/W2738588019","https://openalex.org/W2765793020","https://openalex.org/W2774018344","https://openalex.org/W2786118190","https://openalex.org/W2797455600","https://openalex.org/W2962759300","https://openalex.org/W2962933288","https://openalex.org/W2963001136","https://openalex.org/W2963143631","https://openalex.org/W2963384482","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2963917315","https://openalex.org/W2963920068","https://openalex.org/W2964082701","https://openalex.org/W2966658324","https://openalex.org/W2982763192","https://openalex.org/W2983498217","https://openalex.org/W3043547428","https://openalex.org/W3043786973","https://openalex.org/W3088909400","https://openalex.org/W3092704883","https://openalex.org/W3118608800","https://openalex.org/W3167558987","https://openalex.org/W4230471307","https://openalex.org/W4297775537","https://openalex.org/W4300511536","https://openalex.org/W4300677102","https://openalex.org/W4320013936","https://openalex.org/W6633802082","https://openalex.org/W6726114608","https://openalex.org/W6736207377","https://openalex.org/W6737664043","https://openalex.org/W6740934225","https://openalex.org/W6744679260","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6747920752","https://openalex.org/W6748711285","https://openalex.org/W6752670383"],"related_works":["https://openalex.org/W2380775572","https://openalex.org/W2213520135","https://openalex.org/W2244018504","https://openalex.org/W4242046654","https://openalex.org/W3174923100","https://openalex.org/W3134074939","https://openalex.org/W2117562399","https://openalex.org/W2907830442","https://openalex.org/W3176659669","https://openalex.org/W4287115361"],"abstract_inverted_index":{"Deep":[0],"Learning":[1],"systems,":[2],"able":[3],"to":[4,39,65],"achieve":[5],"significant":[6],"breakthroughs":[7],"in":[8],"many":[9],"fields,":[10],"including":[11,146],"computer":[12,24],"vision":[13,25],"and":[14,94,149],"speech":[15],"recognition,":[16],"are":[17],"not":[18],"inherently":[19],"secure.":[20],"Adversarial":[21],"attacks":[22,148],"on":[23,75],"models":[26],"can":[27],"craft":[28],"slightly":[29],"perturbed":[30],"inputs":[31],"that":[32,48],"exploit":[33],"the":[34,46,91,106,114,134],"models'":[35],"multi-dimensional":[36],"boundary":[37],"shape":[38],"dramatically":[40],"reduce":[41],"their":[42],"performance":[43],"without":[44],"compromising":[45],"perception":[47],"human":[49],"beings":[50],"have":[51],"of":[52,83,90,110,123,138,144],"such":[53,111],"input.":[54],"In":[55],"this":[56],"work,":[57],"we":[58],"present":[59],"Trust-No-Pixel,":[60],"a":[61,76,87,141],"novel":[62],"plug-and-play":[63],"strategy":[64],"harden":[66],"neural":[67],"network":[68,151],"image":[69,93],"classifiers":[70],"from":[71,97,130],"adversarial":[72,117],"attacks,":[73,112],"based":[74],"massive":[77],"inpainting":[78,81],"strategy.":[79],"The":[80],"technique":[82,125],"our":[84,124],"defense":[85,136],"performs":[86],"total":[88],"erase":[89],"input":[92],"its":[95],"reconstruction":[96],"scratch.":[98],"Our":[99],"experiments":[100],"show":[101],"Trust-No-Pixel":[102,139],"improved":[103],"accuracy":[104],"against":[105,126],"more":[107],"challenging":[108],"type":[109],"namely":[113],"white":[115],"box":[116],"attacks.":[118],"Moreover,":[119],"an":[120],"exhaustive":[121],"comparison":[122],"state-of-the-art":[127],"approaches":[128],"taken":[129],"academic":[131],"literature":[132],"confirmed":[133],"solid":[135],"performances":[137],"under":[140],"wide":[142],"variety":[143],"scenarios,":[145],"different":[147],"attacked":[150],"architectures.":[152]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}