{"id":"https://openalex.org/W2767471303","doi":"https://doi.org/10.1109/msp.2017.2740965","title":"The Robustness of Deep Networks: A Geometrical Perspective","display_name":"The Robustness of Deep Networks: A Geometrical Perspective","publication_year":2017,"publication_date":"2017-11-01","ids":{"openalex":"https://openalex.org/W2767471303","doi":"https://doi.org/10.1109/msp.2017.2740965","mag":"2767471303"},"language":"en","primary_location":{"id":"doi:10.1109/msp.2017.2740965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2017.2740965","pdf_url":null,"source":{"id":"https://openalex.org/S120977877","display_name":"IEEE Signal Processing Magazine","issn_l":"1053-5888","issn":["1053-5888","1558-0792"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Magazine","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://infoscience.epfl.ch/record/229872","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103067148","display_name":"Alhussein Fawzi","orcid":"https://orcid.org/0000-0002-3361-5533"},"institutions":[{"id":"https://openalex.org/I161318765","display_name":"University of California, Los Angeles","ror":"https://ror.org/046rm7j60","country_code":"US","type":"education","lineage":["https://openalex.org/I161318765"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alhussein Fawzi","raw_affiliation_strings":["Computer Science Department, University of California, Los Angeles","Computer Science, University of California, Los Angeles, United States"],"raw_orcid":"https://orcid.org/0000-0002-3361-5533","affiliations":[{"raw_affiliation_string":"Computer Science Department, University of California, Los Angeles","institution_ids":["https://openalex.org/I161318765"]},{"raw_affiliation_string":"Computer Science, University of California, Los Angeles, United States","institution_ids":["https://openalex.org/I161318765"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053991440","display_name":"Seyed-Mohsen Moosavi-Dezfooli","orcid":null},"institutions":[{"id":"https://openalex.org/I4210121626","display_name":"Signal Processing (United States)","ror":"https://ror.org/021gzyw51","country_code":"US","type":"company","lineage":["https://openalex.org/I4210121626"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seyed-Mohsen Moosavi-Dezfooli","raw_affiliation_strings":["Signal Processing Laboratory 4, EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Signal Processing Laboratory 4, EPFL","institution_ids":["https://openalex.org/I4210121626"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000947076","display_name":"Pascal Frossard","orcid":"https://orcid.org/0000-0002-4010-714X"},"institutions":[{"id":"https://openalex.org/I174424907","display_name":"Laboratoire d'Informatique Fondamentale de Lille","ror":"https://ror.org/05rhg0h08","country_code":"FR","type":"facility","lineage":["https://openalex.org/I174424907"]},{"id":"https://openalex.org/I4210121626","display_name":"Signal Processing (United States)","ror":"https://ror.org/021gzyw51","country_code":"US","type":"company","lineage":["https://openalex.org/I4210121626"]}],"countries":["FR","US"],"is_corresponding":false,"raw_author_name":"Pascal Frossard","raw_affiliation_strings":["EPFL, Signal Processing Laboratory"],"raw_orcid":"https://orcid.org/0000-0002-4010-714X","affiliations":[{"raw_affiliation_string":"EPFL, Signal Processing Laboratory","institution_ids":["https://openalex.org/I174424907","https://openalex.org/I4210121626"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.9474,"has_fulltext":false,"cited_by_count":209,"citation_normalized_percentile":{"value":0.99299795,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"34","issue":"6","first_page":"50","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9607999920845032,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8530701398849487},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7310173511505127},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6256288290023804},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5945326089859009},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5409423112869263},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5091387629508972},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4990267753601074},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.41387939453125}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8530701398849487},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7310173511505127},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6256288290023804},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5945326089859009},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5409423112869263},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5091387629508972},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4990267753601074},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.41387939453125},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/msp.2017.2740965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2017.2740965","pdf_url":null,"source":{"id":"https://openalex.org/S120977877","display_name":"IEEE Signal Processing Magazine","issn_l":"1053-5888","issn":["1053-5888","1558-0792"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Magazine","raw_type":"journal-article"},{"id":"pmh:oai:infoscience.epfl.ch:229872","is_oa":true,"landing_page_url":"http://infoscience.epfl.ch/record/229872","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:infoscience.tind.io:229872","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/139242","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"research article"}],"best_oa_location":{"id":"pmh:oai:infoscience.epfl.ch:229872","is_oa":true,"landing_page_url":"http://infoscience.epfl.ch/record/229872","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":70,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W603908379","https://openalex.org/W1673923490","https://openalex.org/W1821462560","https://openalex.org/W1883420340","https://openalex.org/W1932198206","https://openalex.org/W1945616565","https://openalex.org/W1972581644","https://openalex.org/W1994197834","https://openalex.org/W2097117768","https://openalex.org/W2114892142","https://openalex.org/W2117539524","https://openalex.org/W2153417333","https://openalex.org/W2155893237","https://openalex.org/W2243397390","https://openalex.org/W2269778407","https://openalex.org/W2274565976","https://openalex.org/W2423689290","https://openalex.org/W2460583509","https://openalex.org/W2508156266","https://openalex.org/W2513314332","https://openalex.org/W2517229335","https://openalex.org/W2530184277","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2557579533","https://openalex.org/W2570685808","https://openalex.org/W2592929672","https://openalex.org/W2594867206","https://openalex.org/W2597490979","https://openalex.org/W2604147826","https://openalex.org/W2611576673","https://openalex.org/W2618098489","https://openalex.org/W2618530766","https://openalex.org/W2618955921","https://openalex.org/W2950468330","https://openalex.org/W2950864148","https://openalex.org/W2962968216","https://openalex.org/W2963098487","https://openalex.org/W2963207607","https://openalex.org/W2963467071","https://openalex.org/W2963674959","https://openalex.org/W2963739340","https://openalex.org/W2963857521","https://openalex.org/W2963955657","https://openalex.org/W2964082701","https://openalex.org/W2964088238","https://openalex.org/W2964153729","https://openalex.org/W2964294232","https://openalex.org/W3004623877","https://openalex.org/W3103836116","https://openalex.org/W4245481662","https://openalex.org/W4256044039","https://openalex.org/W4285719527","https://openalex.org/W4293469690","https://openalex.org/W4293529028","https://openalex.org/W4293584023","https://openalex.org/W4295803779","https://openalex.org/W4297756301","https://openalex.org/W4300167250","https://openalex.org/W6618372016","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6682388183","https://openalex.org/W6685943642","https://openalex.org/W6717556742","https://openalex.org/W6725508424","https://openalex.org/W6736987314","https://openalex.org/W6827075365","https://openalex.org/W7024225124"],"related_works":["https://openalex.org/W4379116102","https://openalex.org/W3210882018","https://openalex.org/W2970990331","https://openalex.org/W3207178610","https://openalex.org/W4377865163","https://openalex.org/W3211782752","https://openalex.org/W2799384463","https://openalex.org/W4315588719","https://openalex.org/W3187736218","https://openalex.org/W3193857078"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2,61,149],"have":[3],"recently":[4],"shown":[5],"impressive":[6],"classification":[7],"performance":[8,45],"on":[9,92,100,139],"a":[10,63,109],"diverse":[11,64],"set":[12,65],"of":[13,46,51,59,66,112,126,147,156],"visual":[14],"tasks.":[15],"When":[16],"deployed":[17],"in":[18,73,107,144,153],"real-world":[19],"(noise-prone)":[20],"environments,":[21],"it":[22],"is":[23,54],"equally":[24],"important":[25],"that":[26,68,90,120],"these":[27],"classifiers":[28],"satisfy":[29],"robustness":[30,58,94,125,146],"guarantees:":[31],"small":[32],"perturbations":[33,67],"applied":[34],"to":[35,43,55,62,96,122,136],"the":[36,44,47,57,71,87,93,101,124,140,145,154],"samples":[37,72],"should":[38],"not":[39],"yield":[40],"significant":[41],"loss":[42],"predictor.":[48],"The":[49],"goal":[50],"this":[52,131],"article":[53,84,133],"discuss":[56],"deep":[60,113,127,148],"may":[69],"affect":[70],"practice,":[74],"including":[75],"adversarial":[76],"perturbations,":[77],"random":[78],"noise,":[79],"and":[80,150],"geometric":[81,98],"transformations.":[82],"This":[83],"further":[85],"discusses":[86],"recent":[88,118],"works":[89],"build":[91],"analysis":[95,155],"provide":[97],"insights":[99],"classifier's":[102],"decision":[103],"surface,":[104],"which":[105],"help":[106],"developing":[108],"better":[110],"understanding":[111],"networks.":[114,128],"Finally,":[115],"we":[116],"present":[117],"solutions":[119],"attempt":[121],"increase":[123],"We":[129],"hope":[130],"review":[132],"will":[134],"contribute":[135],"shedding":[137],"light":[138],"open":[141],"research":[142],"challenges":[143],"stir":[151],"interest":[152],"their":[157],"fundamental":[158],"properties.":[159]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":17},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":65},{"year":2020,"cited_by_count":43},{"year":2019,"cited_by_count":27},{"year":2018,"cited_by_count":15}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}