{"id":"https://openalex.org/W4390547380","doi":"https://doi.org/10.1109/tai.2023.3349238","title":"Frequency Attacks Based on Invertible Neural Networks","display_name":"Frequency Attacks Based on Invertible Neural Networks","publication_year":2024,"publication_date":"2024-01-03","ids":{"openalex":"https://openalex.org/W4390547380","doi":"https://doi.org/10.1109/tai.2023.3349238"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2023.3349238","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3349238","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072912487","display_name":"Mingwen Shao","orcid":"https://orcid.org/0000-0001-7323-5896"},"institutions":[{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming-Wen Shao","raw_affiliation_strings":["School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0001-7323-5896","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jian-Xin Yang","orcid":"https://orcid.org/0009-0001-9694-9047"},"institutions":[{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian-Xin Yang","raw_affiliation_strings":["School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China"],"raw_orcid":"https://orcid.org/0009-0001-9694-9047","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091712399","display_name":"Lingzhuang Meng","orcid":"https://orcid.org/0000-0002-6549-6989"},"institutions":[{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ling-Zhuang Meng","raw_affiliation_strings":["School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0002-6549-6989","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103165552","display_name":"Zhiyong Hu","orcid":"https://orcid.org/0000-0001-6224-4631"},"institutions":[{"id":"https://openalex.org/I4210162190","display_name":"China University of Petroleum, East China","ror":"https://ror.org/05gbn2817","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210162190"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi-Yong Hu","raw_affiliation_strings":["College of Control Science and Engineering, China University of Petroleum (East China), Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0001-6224-4631","affiliations":[{"raw_affiliation_string":"College of Control Science and Engineering, China University of Petroleum (East China), Qingdao, China","institution_ids":["https://openalex.org/I4210162190"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210162190"],"apc_list":null,"apc_paid":null,"fwci":0.2778,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.56324767,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"6","issue":"2","first_page":"292","last_page":"300"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9057000279426575,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9020000100135803,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/invertible-matrix","display_name":"Invertible matrix","score":0.7263984680175781},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6319237947463989},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6198946833610535},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6075976490974426},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5682049989700317},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.5057058334350586},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4844062924385071},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4423348903656006},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.42534250020980835},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.41905510425567627},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3800291121006012},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3590140640735626},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.26614898443222046}],"concepts":[{"id":"https://openalex.org/C96442724","wikidata":"https://www.wikidata.org/wiki/Q242188","display_name":"Invertible matrix","level":2,"score":0.7263984680175781},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6319237947463989},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6198946833610535},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6075976490974426},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5682049989700317},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.5057058334350586},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4844062924385071},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4423348903656006},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.42534250020980835},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.41905510425567627},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3800291121006012},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3590140640735626},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26614898443222046},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2023.3349238","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3349238","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6000000238418579,"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8"}],"awards":[{"id":"https://openalex.org/G2822445701","display_name":null,"funder_award_id":"62376285","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7504528221","display_name":null,"funder_award_id":"61673396","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7895523656","display_name":null,"funder_award_id":"2021YFA1000102","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G8982218747","display_name":null,"funder_award_id":"ZR2022MF260","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2121058967","https://openalex.org/W2194775991","https://openalex.org/W2535873859","https://openalex.org/W2603766943","https://openalex.org/W2774644650","https://openalex.org/W2798302089","https://openalex.org/W2949736877","https://openalex.org/W2963268689","https://openalex.org/W2963384482","https://openalex.org/W2963857521","https://openalex.org/W2964274719","https://openalex.org/W2965496811","https://openalex.org/W2992308087","https://openalex.org/W3034175346","https://openalex.org/W3107032263","https://openalex.org/W3108141698","https://openalex.org/W3173217100","https://openalex.org/W3176041926","https://openalex.org/W3176756041","https://openalex.org/W3200885897","https://openalex.org/W3202281277","https://openalex.org/W3211999566","https://openalex.org/W4225928697","https://openalex.org/W4252713891","https://openalex.org/W4285605803","https://openalex.org/W4291653574","https://openalex.org/W4323338672"],"related_works":["https://openalex.org/W3176659669","https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W3203790781","https://openalex.org/W2997056298","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W3127875750","https://openalex.org/W4383221314"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1],"reveal":[2],"the":[3,25,29,43,69,73,77,86,89,103,109,112,121,125,140,144,154,190,193,208,211,222],"vulnerability":[4],"of":[5,72,76,108,197],"classifiers":[6],"based":[7,52],"on":[8,20,53,60,165],"deep":[9],"neural":[10,62,156],"networks":[11,63],"to":[12,24,65,68,101,117,158],"well-designed":[13],"perturbations.":[14],"Most":[15],"existing":[16],"attack":[17,194],"methods":[18,34],"focus":[19],"adding":[21],"perturbations":[22,30,67,90],"directly":[23],"pixel":[26,78],"space.":[27,79],"However,":[28],"generated":[31,214],"by":[32,39,95,215],"these":[33],"may":[35],"be":[36,118],"easily":[37,93],"perceived":[38],"humans.":[40,96],"To":[41],"alleviate":[42],"aforementioned":[44],"problem,":[45],"we":[46,83,98],"propose":[47],"a":[48],"novel":[49],"High-Frequency":[50],"Attack":[51],"Invertible":[54],"Neural":[55],"Networks":[56],"(HA-INN)":[57],"that":[58,172],"relies":[59],"invertible":[61,155],"(INNs)":[64],"adds":[66],"high-frequency":[70,104,126,132,145],"space":[71],"image":[74],"instead":[75],"In":[80],"this":[81],"way,":[82],"can":[84,175],"fool":[85],"classifier":[87],"while":[88,124],"are":[91,115,128,150,218],"not":[92],"detected":[94],"Specifically,":[97],"introduce":[99],"INNs":[100],"separate":[102],"and":[105,143,169,178,199,203],"low-frequency":[106,113,141],"components":[107,114,127,142,146],"image.":[110],"And":[111],"guaranteed":[116],"reconstructed":[119],"as":[120],"original":[122],"image,":[123],"replaced":[129],"with":[130,135,147,183],"resampled":[131],"latent":[133],"variables":[134],"additional":[136],"adversarial":[137,148,161,181,212],"information.":[138],"Then,":[139],"information":[149],"inversely":[151],"fed":[152],"into":[153],"network":[157],"generate":[159,176],"effective":[160,220],"examples.":[162],"Extensive":[163],"experiments":[164],"two":[166],"datasets":[167],"(CIFAR-10":[168],"CIFAR-100)":[170],"show":[171],"our":[173,216],"method":[174,217],"misleading":[177],"transferable":[179],"cross-architectural":[180],"examples":[182,213],"greatly":[184],"reduced":[185],"computational":[186],"resource":[187],"requirements.":[188],"Under":[189],"white-box":[191],"setting,":[192,210],"success":[195],"rate":[196],"CIFAR10":[198],"CIFAR100":[200],"is":[201],"99.8%":[202],"99.74%,":[204],"respectively.":[205],"Further,":[206],"under":[207],"black-box":[209],"more":[219],"than":[221],"other":[223],"methods.":[224]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}