{"id":"https://openalex.org/W7105653141","doi":"https://doi.org/10.1109/ijcnn64981.2025.11228345","title":"Enhancing the \"Immunity\" of Mixture-of-Experts Networks for Adversarial Defense","display_name":"Enhancing the \"Immunity\" of Mixture-of-Experts Networks for Adversarial Defense","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W7105653141","doi":"https://doi.org/10.1109/ijcnn64981.2025.11228345"},"language":null,"primary_location":{"id":"doi:10.1109/ijcnn64981.2025.11228345","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11228345","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Qiao Han","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiao Han","raw_affiliation_strings":["Zhejiang Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Lab","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yong Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Huang","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd,Zhejiang Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd,Zhejiang Lab","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xinling Guo","orcid":null},"institutions":[{"id":"https://openalex.org/I109935558","display_name":"Ningbo University","ror":"https://ror.org/03et85d35","country_code":"CN","type":"education","lineage":["https://openalex.org/I109935558"]},{"id":"https://openalex.org/I159389169","display_name":"Ningbo University of Technology","ror":"https://ror.org/037dym702","country_code":"CN","type":"education","lineage":["https://openalex.org/I159389169"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinling Guo","raw_affiliation_strings":["NingboTech University,School of Information Science and Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NingboTech University,School of Information Science and Engineering","institution_ids":["https://openalex.org/I109935558","https://openalex.org/I159389169"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yiteng Zhai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiteng Zhai","raw_affiliation_strings":["Zhejiang Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Lab","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yu Qin","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Qin","raw_affiliation_strings":["Institute of Software Chinese Academy of Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Software Chinese Academy of Science","institution_ids":["https://openalex.org/I4210128818"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yao Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Yang","raw_affiliation_strings":["Zhejiang Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Lab","institution_ids":["https://openalex.org/I4210123185"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.73764436,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7925999760627747},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.652899980545044},{"id":"https://openalex.org/keywords/mutual-information","display_name":"Mutual information","score":0.45399999618530273},{"id":"https://openalex.org/keywords/position","display_name":"Position (finance)","score":0.421099990606308},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4198000133037567},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4115999937057495},{"id":"https://openalex.org/keywords/position-paper","display_name":"Position paper","score":0.39070001244544983},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3871999979019165}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7925999760627747},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.652899980545044},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6324999928474426},{"id":"https://openalex.org/C152139883","wikidata":"https://www.wikidata.org/wiki/Q252973","display_name":"Mutual information","level":2,"score":0.45399999618530273},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.421099990606308},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4198000133037567},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4115999937057495},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4025999903678894},{"id":"https://openalex.org/C78780964","wikidata":"https://www.wikidata.org/wiki/Q7233193","display_name":"Position paper","level":2,"score":0.39070001244544983},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3871999979019165},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3635999858379364},{"id":"https://openalex.org/C200985842","wikidata":"https://www.wikidata.org/wiki/Q3375503","display_name":"Random permutation","level":3,"score":0.3578000068664551},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.314300000667572},{"id":"https://openalex.org/C2777402642","wikidata":"https://www.wikidata.org/wiki/Q2557224","display_name":"Explanatory power","level":2,"score":0.29120001196861267},{"id":"https://openalex.org/C52622258","wikidata":"https://www.wikidata.org/wiki/Q131222","display_name":"Information theory","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C2777693866","wikidata":"https://www.wikidata.org/wiki/Q359099","display_name":"Blackout","level":4,"score":0.289000004529953},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C64357122","wikidata":"https://www.wikidata.org/wiki/Q1149766","display_name":"Causality (physics)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2581999897956848},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.2565000057220459}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn64981.2025.11228345","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11228345","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2066334462","https://openalex.org/W2295107390","https://openalex.org/W2603766943","https://openalex.org/W2774644650","https://openalex.org/W2896817483","https://openalex.org/W2962710014","https://openalex.org/W2962858109","https://openalex.org/W2962933288","https://openalex.org/W2963178695","https://openalex.org/W2963393494","https://openalex.org/W2963542245","https://openalex.org/W2963771536","https://openalex.org/W2964301649","https://openalex.org/W2966658324","https://openalex.org/W2978305311","https://openalex.org/W2981748264","https://openalex.org/W2993842823","https://openalex.org/W3018661145","https://openalex.org/W3035253074","https://openalex.org/W3035467354","https://openalex.org/W3035743198","https://openalex.org/W3121997355","https://openalex.org/W3190601614","https://openalex.org/W3202320739","https://openalex.org/W4312692109","https://openalex.org/W4313547544"],"related_works":[],"abstract_inverted_index":{"Recent":[0],"studies":[1],"have":[2],"revealed":[3],"the":[4,58,111,114,126,134,143,150,153],"vulnerability":[5],"of":[6,65,78,85,116,142,152,164],"Deep":[7],"Neural":[8],"Networks":[9],"(DNNs)":[10],"to":[11,57,70,109,139],"adversarial":[12,31,158],"examples,":[13],"which":[14],"can":[15],"easily":[16],"fool":[17],"DNNs":[18],"into":[19],"making":[20],"incorrect":[21],"predictions.":[22],"To":[23],"mitigate":[24],"this":[25,52],"deficiency,":[26],"we":[27],"propose":[28],"a":[29,46,161],"novel":[30],"defense":[32],"method":[33],"called":[34],"\"Immunity\"":[35],"(Innovative":[36],"MoE":[37,60],"with":[38],"MUtual":[39],"information":[40],"&":[41],"positioN":[42],"stabilITY)":[43],"based":[44],"on":[45,105,125,133],"modified":[47],"Mixture-of-Experts":[48],"(MoE)":[49],"architecture":[50],"in":[51,156],"work.":[53],"The":[54],"key":[55],"enhancements":[56],"standard":[59],"are":[61],"two-fold:":[62],"1)":[63],"integrating":[64],"Random":[66],"Switch":[67],"Gates":[68],"(RSGs)":[69],"obtain":[71],"diverse":[72],"network":[73],"structures":[74],"via":[75],"random":[76],"permutation":[77],"RSG":[79],"parameters":[80],"at":[81],"evaluation":[82,148],"time,":[83],"despite":[84],"RSGs":[86],"being":[87],"determined":[88],"after":[89],"one-time":[90],"training;":[91],"2)":[92],"devising":[93],"innovative":[94],"Mutual":[95],"Information":[96],"(MI)-based":[97],"and":[98,113],"Position":[99],"Stability-based":[100],"loss":[101,122],"functions":[102],"by":[103],"capitalizing":[104],"Grad-CAM\u2019s":[106],"explanatory":[107],"power":[108],"increase":[110],"diversity":[112],"causality":[115],"expert":[117],"networks.":[118],"Notably,":[119],"our":[120],"MI-based":[121],"operates":[123],"directly":[124],"heatmaps,":[127],"thereby":[128],"inducing":[129],"subtler":[130],"negative":[131],"impacts":[132],"classification":[135],"performance":[136],"when":[137],"compared":[138],"other":[140],"losses":[141],"same":[144],"type,":[145],"theoretically.":[146],"Extensive":[147],"validates":[149],"efficacy":[151],"proposed":[154],"approach":[155],"improving":[157],"robustness":[159],"against":[160],"wide":[162],"range":[163],"attacks.":[165]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-11-14T00:00:00"}