{"id":"https://openalex.org/W3112460852","doi":"https://doi.org/10.1109/smc42975.2020.9282889","title":"It is double pleasure to deceive the deceiver: disturbing classifiers against adversarial attacks","display_name":"It is double pleasure to deceive the deceiver: disturbing classifiers against adversarial attacks","publication_year":2020,"publication_date":"2020-10-11","ids":{"openalex":"https://openalex.org/W3112460852","doi":"https://doi.org/10.1109/smc42975.2020.9282889","mag":"3112460852"},"language":"en","primary_location":{"id":"doi:10.1109/smc42975.2020.9282889","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smc42975.2020.9282889","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015346355","display_name":"Jo\u00e3o G. Zago","orcid":null},"institutions":[{"id":"https://openalex.org/I4210126369","display_name":"Polydoro Ernani de S\u00e3o Thiago University Hospital","ror":"https://ror.org/0303d1x26","country_code":"BR","type":"healthcare","lineage":["https://openalex.org/I4210126369"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Joao G. Zago","raw_affiliation_strings":["UFSC, Florian\u00f3polis, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFSC, Florian\u00f3polis, Brazil","institution_ids":["https://openalex.org/I4210126369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053429698","display_name":"Eric Aislan Antonelo","orcid":"https://orcid.org/0000-0002-7285-0974"},"institutions":[{"id":"https://openalex.org/I4210126369","display_name":"Polydoro Ernani de S\u00e3o Thiago University Hospital","ror":"https://ror.org/0303d1x26","country_code":"BR","type":"healthcare","lineage":["https://openalex.org/I4210126369"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Eric A. Antonelo","raw_affiliation_strings":["UFSC, Florian\u00f3polis, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFSC, Florian\u00f3polis, Brazil","institution_ids":["https://openalex.org/I4210126369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113931928","display_name":"Fabio L. Baldissera","orcid":null},"institutions":[{"id":"https://openalex.org/I4210126369","display_name":"Polydoro Ernani de S\u00e3o Thiago University Hospital","ror":"https://ror.org/0303d1x26","country_code":"BR","type":"healthcare","lineage":["https://openalex.org/I4210126369"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Fabio L. Baldissera","raw_affiliation_strings":["UFSC, Florian\u00f3polis, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFSC, Florian\u00f3polis, Brazil","institution_ids":["https://openalex.org/I4210126369"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090728337","display_name":"Rodrigo T. Saad","orcid":"https://orcid.org/0000-0001-5117-1975"},"institutions":[{"id":"https://openalex.org/I4210126369","display_name":"Polydoro Ernani de S\u00e3o Thiago University Hospital","ror":"https://ror.org/0303d1x26","country_code":"BR","type":"healthcare","lineage":["https://openalex.org/I4210126369"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Rodrigo T. Saad","raw_affiliation_strings":["UFSC, Florian\u00f3polis, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFSC, Florian\u00f3polis, Brazil","institution_ids":["https://openalex.org/I4210126369"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210126369"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.164339,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"160","last_page":"165"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9714000225067139,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9580000042915344,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.9141498804092407},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7787530422210693},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.7187361121177673},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.6971268653869629},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6183875799179077},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5814146995544434},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5616966485977173},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4941418468952179},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4496017098426819},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.424643337726593},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.42355582118034363},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.42326152324676514},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4200577139854431},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.4192870557308197},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.375951886177063}],"concepts":[{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.9141498804092407},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7787530422210693},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.7187361121177673},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6971268653869629},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6183875799179077},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5814146995544434},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5616966485977173},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4941418468952179},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4496017098426819},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.424643337726593},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.42355582118034363},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42326152324676514},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4200577139854431},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.4192870557308197},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.375951886177063},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/smc42975.2020.9282889","is_oa":false,"landing_page_url":"https://doi.org/10.1109/smc42975.2020.9282889","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2408141691","https://openalex.org/W2543927648","https://openalex.org/W2611576673","https://openalex.org/W2620038827","https://openalex.org/W2745565856","https://openalex.org/W2746600820","https://openalex.org/W2765424254","https://openalex.org/W2766108848","https://openalex.org/W2787708942","https://openalex.org/W2950468330","https://openalex.org/W2951972811","https://openalex.org/W2962759300","https://openalex.org/W2963143631","https://openalex.org/W2963389226","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W2964350391","https://openalex.org/W3103557498","https://openalex.org/W3106412272","https://openalex.org/W3187541268","https://openalex.org/W4293529028","https://openalex.org/W4293584023","https://openalex.org/W4293846201","https://openalex.org/W4297573953","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6685943642","https://openalex.org/W6694260854","https://openalex.org/W6714069269","https://openalex.org/W6719080892","https://openalex.org/W6729756640","https://openalex.org/W6733645847","https://openalex.org/W6734483310","https://openalex.org/W6734787559","https://openalex.org/W6739868092","https://openalex.org/W6744679260","https://openalex.org/W6745847742","https://openalex.org/W6748475379"],"related_works":["https://openalex.org/W4283819496","https://openalex.org/W4300326282","https://openalex.org/W2742395793","https://openalex.org/W4385524141","https://openalex.org/W4297776111","https://openalex.org/W3018979822","https://openalex.org/W3026616975","https://openalex.org/W2989784533","https://openalex.org/W2810018382","https://openalex.org/W4288018014"],"abstract_inverted_index":{"Convolutional":[0],"neural":[1,82],"networks":[2],"(CNNs)":[3],"for":[4,45],"image":[5],"classification":[6],"can":[7],"be":[8],"fragile":[9],"to":[10,18,24,54,62,90,147],"small":[11],"perturbations":[12,150],"in":[13,28,31,60,151],"the":[14,47,57,77,86,107,120,133,138,144,152],"images":[15],"they":[16],"ought":[17],"classify.":[19],"This":[20],"fragility":[21],"exposes":[22],"CNNs":[23],"malicious":[25],"attacks,":[26],"resulting":[27],"safety":[29],"concerns":[30],"many":[32],"application":[33],"domains.":[34],"In":[35],"this":[36,98],"paper,":[37],"we":[38,101],"propose":[39],"a":[40,91,103,115],"simple":[41],"yet":[42],"efficient":[43],"strategy":[44],"decreasing":[46],"effectiveness":[48],"of":[49,70,81,93,137],"black-box":[50,116],"attacks":[51],"that":[52,127],"need":[53],"sequentially":[55],"query":[56],"classifier":[58],"network":[59,83],"order":[61],"build":[63],"an":[64],"attack.":[65],"The":[66,124],"general":[67],"idea":[68],"consists":[69],"applying":[71],"controlled":[72],"random":[73],"disturbances":[74],"(noise)":[75],"at":[76],"softmax":[78],"output":[79],"layer":[80],"classifiers,":[84],"changing":[85],"confidence":[87],"scores":[88],"according":[89],"set":[92],"design":[94],"requirements.":[95],"To":[96],"evaluate":[97],"defense":[99,129],"strategy,":[100],"employ":[102],"CNN,":[104],"trained":[105],"on":[106],"MNIST":[108],"data":[109],"set,":[110],"and":[111,141],"attack":[112,117,134,145],"it":[113],"with":[114],"method":[118],"from":[119],"literature":[121],"called":[122],"ZOO.":[123],"results":[125],"show":[126],"our":[128],"strategy:":[130],"a)":[131],"decreases":[132],"success":[135],"rate":[136],"adversarial":[139],"examples;":[140],"b)":[142],"forces":[143],"algorithm":[146],"insert":[148],"larger":[149],"input":[153],"images.":[154]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}