{"id":"https://openalex.org/W3185020394","doi":"https://doi.org/10.1109/infocomwkshps51825.2021.9484542","title":"Transferable Adversarial Defense by Fusing Reconstruction Learning and Denoising Learning","display_name":"Transferable Adversarial Defense by Fusing Reconstruction Learning and Denoising Learning","publication_year":2021,"publication_date":"2021-05-10","ids":{"openalex":"https://openalex.org/W3185020394","doi":"https://doi.org/10.1109/infocomwkshps51825.2021.9484542","mag":"3185020394"},"language":"en","primary_location":{"id":"doi:10.1109/infocomwkshps51825.2021.9484542","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocomwkshps51825.2021.9484542","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2021 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102814071","display_name":"Song Gao","orcid":"https://orcid.org/0000-0002-7169-6370"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Gao","raw_affiliation_strings":["Engineering Research Center of Cyberspace Yunnan University,School of Information Science & Engineering,Kunming,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace Yunnan University,School of Information Science & Engineering,Kunming,China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000436275","display_name":"Shaowen Yao","orcid":"https://orcid.org/0000-0003-1516-4246"},"institutions":[{"id":"https://openalex.org/I142861451","display_name":"Yunnan Nationalities University","ror":"https://ror.org/030jhb479","country_code":"CN","type":"education","lineage":["https://openalex.org/I142861451"]},{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaowen Yao","raw_affiliation_strings":["Engineering Research Center of Cyberspace Yunnan University,National Pilot School of Software,Kunming,China","National Pilot School of Software, Engineering Research Center of Cyberspace Yunnan University, Kunming, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace Yunnan University,National Pilot School of Software,Kunming,China","institution_ids":["https://openalex.org/I142861451"]},{"raw_affiliation_string":"National Pilot School of Software, Engineering Research Center of Cyberspace Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100665328","display_name":"Ruidong Li","orcid":"https://orcid.org/0000-0002-9905-8952"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ruidong Li","raw_affiliation_strings":["National Institute of Information and Communication Technology,Tokyo,Japan","National Institute of Information and Communication Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communication Technology,Tokyo,Japan","institution_ids":["https://openalex.org/I90023481"]},{"raw_affiliation_string":"National Institute of Information and Communication Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9797999858856201,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.939300000667572,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8679606318473816},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7695049047470093},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6752194166183472},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.634943962097168},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5936166048049927},{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.5305564403533936},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.504736065864563},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.4894360601902008},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.48840540647506714},{"id":"https://openalex.org/keywords/noise-reduction","display_name":"Noise reduction","score":0.4779208302497864},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4764041006565094},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4721681475639343},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4597061276435852}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8679606318473816},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7695049047470093},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6752194166183472},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.634943962097168},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5936166048049927},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.5305564403533936},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.504736065864563},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.4894360601902008},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.48840540647506714},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.4779208302497864},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4764041006565094},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4721681475639343},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4597061276435852},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocomwkshps51825.2021.9484542","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocomwkshps51825.2021.9484542","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2021 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320325440","display_name":"Yunnan Provincial Science and Technology Department","ror":"https://ror.org/03whqdf70"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1883420340","https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2768346313","https://openalex.org/W2774018344","https://openalex.org/W2962872506","https://openalex.org/W2963154688","https://openalex.org/W2963158386","https://openalex.org/W2963207607","https://openalex.org/W2963249138","https://openalex.org/W2963542245","https://openalex.org/W2963771536","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W2964253222","https://openalex.org/W2973934518","https://openalex.org/W2995645057","https://openalex.org/W2998600476","https://openalex.org/W4293846201","https://openalex.org/W6639568328","https://openalex.org/W6640425456","https://openalex.org/W6719080892","https://openalex.org/W6739868092","https://openalex.org/W6745893766","https://openalex.org/W6747819456","https://openalex.org/W6767757807"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W2950864148","https://openalex.org/W2570685808","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"have":[3,14],"been":[4,15],"demonstrated":[5],"fragile":[6],"to":[7,49,58,80,100,128],"adversarial":[8,68,96,110],"examples.":[9],"Some":[10],"powerful":[11],"defense":[12,42],"methods":[13,19],"proposed.":[16],"However,":[17],"these":[18],"usually":[20],"involve":[21],"modification":[22],"in":[23,92,151],"the":[24,60,94,114,158],"process":[25],"of":[26],"model":[27],"training,":[28],"which":[29,71,93],"often":[30],"require":[31],"more":[32],"computational":[33],"complexity.":[34],"In":[35],"this":[36],"paper,":[37],"we":[38,84],"propose":[39],"a":[40,86,162],"novel":[41],"method":[43,54,107,119,140,156],"that":[44,138],"can":[45,124],"be":[46,73,125],"directly":[47],"applied":[48],"unmodified":[50],"off-the-shelf":[51],"models.":[52],"Our":[53],"adopts":[55],"standard":[56,64],"denoiser":[57,65],"maintain":[59],"original":[61,115],"features.":[62],"But":[63],"cannot":[66],"remove":[67],"perturbations":[69,97,111],"effectively,":[70],"will":[72],"progressively":[74],"amplified":[75],"by":[76,161],"classifier":[77],"and":[78,147],"lead":[79],"incorrect":[81],"classification.":[82],"Therefore,":[83],"add":[85],"denoising":[87],"module":[88],"into":[89],"our":[90,102,118,139,155],"method,":[91],"magnified":[95],"are":[98],"used":[99],"guide":[101],"approach's":[103],"training.":[104,134],"The":[105],"proposed":[106],"effectively":[108],"removes":[109],"while":[112],"maintaining":[113],"characteristics.":[116],"Consequently,":[117],"has":[120,141],"good":[121],"transferability,":[122],"it":[123],"reused":[126],"easily":[127],"protect":[129],"different":[130,153],"models":[131],"after":[132],"once":[133],"Extensive":[135],"experiments":[136],"show":[137],"outstanding":[142],"performances":[143],"against":[144],"both":[145],"white-box":[146],"black-box":[148],"attacks.":[149],"Especially":[150],"protecting":[152],"models,":[154],"outperforms":[157],"state-of-the-art":[159],"defenses":[160],"big":[163],"margin.":[164]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}