{"id":"https://openalex.org/W4318823998","doi":"https://doi.org/10.1109/tdsc.2023.3241428","title":"Detecting Adversarial Examples on Deep Neural Networks With Mutual Information Neural Estimation","display_name":"Detecting Adversarial Examples on Deep Neural Networks With Mutual Information Neural Estimation","publication_year":2023,"publication_date":"2023-02-01","ids":{"openalex":"https://openalex.org/W4318823998","doi":"https://doi.org/10.1109/tdsc.2023.3241428"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3241428","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3241428","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10034820.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10034820.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102814071","display_name":"Song Gao","orcid":"https://orcid.org/0000-0002-7169-6370"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Gao","raw_affiliation_strings":["Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0002-7169-6370","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101848673","display_name":"Ruxin Wang","orcid":"https://orcid.org/0000-0002-2730-9409"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruxin Wang","raw_affiliation_strings":["Alibaba Group, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2730-9409","affiliations":[{"raw_affiliation_string":"Alibaba Group, Beijing, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115593886","display_name":"Xiaoxuan Wang","orcid":"https://orcid.org/0009-0006-2844-318X"},"institutions":[{"id":"https://openalex.org/I120825670","display_name":"Yunnan Normal University","ror":"https://ror.org/00sc9n023","country_code":"CN","type":"education","lineage":["https://openalex.org/I120825670"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoxuan Wang","raw_affiliation_strings":["School of Information Science and Technology, Yunnan Normal University, Kunming, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Yunnan Normal University, Kunming, China","institution_ids":["https://openalex.org/I120825670"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053902963","display_name":"Yunyun Dong","orcid":"https://orcid.org/0009-0004-5251-9928"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunyun Dong","raw_affiliation_strings":["Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000436275","display_name":"Shaowen Yao","orcid":"https://orcid.org/0000-0003-1516-4246"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaowen Yao","raw_affiliation_strings":["Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0003-1516-4246","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051349066","display_name":"Wei Zhou","orcid":"https://orcid.org/0000-0002-5881-9436"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Zhou","raw_affiliation_strings":["Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0002-5881-9436","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Cyberspace and the National Pilot School of Software, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5121,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.90938288,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"20","issue":"6","first_page":"5168","last_page":"5181"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9362999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9214000105857849,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.8620372414588928},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7562139630317688},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7347220182418823},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6783359050750732},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6108514070510864},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5858362317085266},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5720290541648865},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5451090931892395},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5058829188346863},{"id":"https://openalex.org/keywords/prior-probability","display_name":"Prior probability","score":0.41404667496681213},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.34645211696624756},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.15223509073257446}],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.8620372414588928},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7562139630317688},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7347220182418823},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6783359050750732},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6108514070510864},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5858362317085266},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5720290541648865},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5451090931892395},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5058829188346863},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.41404667496681213},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.34645211696624756},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.15223509073257446}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3241428","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3241428","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10034820.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2023.3241428","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3241428","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10034820.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[{"id":"https://openalex.org/G2408903403","display_name":null,"funder_award_id":"62101480","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2703468498","display_name":null,"funder_award_id":"62162067","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4318823998.pdf","grobid_xml":"https://content.openalex.org/works/W4318823998.grobid-xml"},"referenced_works_count":53,"referenced_works":["https://openalex.org/W2080722576","https://openalex.org/W2127234432","https://openalex.org/W2134478553","https://openalex.org/W2141652941","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2598549816","https://openalex.org/W2605631833","https://openalex.org/W2611576673","https://openalex.org/W2614635052","https://openalex.org/W2768346313","https://openalex.org/W2774644650","https://openalex.org/W2953791858","https://openalex.org/W2962710014","https://openalex.org/W2962872506","https://openalex.org/W2963165448","https://openalex.org/W2963341057","https://openalex.org/W2963446712","https://openalex.org/W2963542245","https://openalex.org/W2963771536","https://openalex.org/W2963857521","https://openalex.org/W2963952467","https://openalex.org/W2964082701","https://openalex.org/W2998600476","https://openalex.org/W3132003984","https://openalex.org/W3185020394","https://openalex.org/W4293584023","https://openalex.org/W4293846201","https://openalex.org/W4297573953","https://openalex.org/W4297775537","https://openalex.org/W4297792735","https://openalex.org/W6622262455","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6680000691","https://openalex.org/W6717434760","https://openalex.org/W6733645847","https://openalex.org/W6734483310","https://openalex.org/W6734787559","https://openalex.org/W6735522978","https://openalex.org/W6735913928","https://openalex.org/W6737577832","https://openalex.org/W6737664043","https://openalex.org/W6745272055","https://openalex.org/W6747819456","https://openalex.org/W6751715430","https://openalex.org/W6752051073","https://openalex.org/W6754278344","https://openalex.org/W6765694979","https://openalex.org/W6767757807","https://openalex.org/W6780248173"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W3203790781","https://openalex.org/W2997056298","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W3127875750","https://openalex.org/W4383221314","https://openalex.org/W2953536436"],"abstract_inverted_index":{"Despite":[0],"achieving":[1],"exceptional":[2],"performance,":[3],"deep":[4],"neural":[5,181,231],"networks":[6],"(DNNs)":[7],"suffer":[8],"from":[9],"the":[10,46,50,82,99,108,112,160,178,187,190,196,202,208,213,220,224,237,247,251,255,263,270,286],"harassment":[11],"caused":[12],"by":[13,19,97,116],"adversarial":[14,60,91,125,274],"examples,":[15],"which":[16,81,127,243],"are":[17,62,87],"produced":[18],"corrupting":[20],"clean":[21,56],"examples":[22,86,92,103,211],"with":[23,246],"tiny":[24],"perturbations.":[25],"Many":[26],"powerful":[27],"defense":[28,291],"methods":[29],"have":[30,66],"been":[31],"presented":[32],"such":[33],"as":[34],"training":[35],"data":[36],"augmentation":[37],"and":[38,58,107,134,216,282,293],"input":[39,102,260,271],"reconstruction":[40],"which,":[41],"however,":[42],"usually":[43],"rely":[44,218],"on":[45,219,279],"prior":[47,197,221],"knowledge":[48,222],"of":[49,84,101,111,139,189,210,223,250,258],"targeted":[51,225,252],"models":[52],"or":[53,275],"attacks.":[54,141],"A":[55],"example":[57,261,272],"its":[59],"version":[61],"very":[63],"similar":[64,85],"but":[65],"different":[67],"high-level":[68,109],"representations":[69,83,100,209,239],"in":[70,80,104,212,262],"a":[71,78,120,146,153,227],"victim":[72,113],"model.":[73,114,253],"If":[74],"we":[75,118,143,266],"can":[76,93,128,267],"obtain":[77],"space":[79,106,110],"also":[88],"similar,":[89],"then":[90,194],"be":[94],"picked":[95],"out":[96],"comparing":[98],"this":[105],"Inspired":[115],"this,":[117],"propose":[119],"novel":[121],"approach":[122],"for":[123],"detecting":[124],"images,":[126],"protect":[129],"any":[130],"pre-trained":[131],"DNN":[132],"classifiers":[133],"resist":[135],"an":[136,241,259],"endless":[137],"stream":[138],"new":[140],"Specifically,":[142],"first":[144],"adopt":[145],"dual":[147,157],"autoencoder":[148,158],"to":[149,152,163,168,185,200,235],"project":[150],"images":[151],"latent":[154,175,191,203],"space.":[155],"The":[156],"uses":[159],"self-supervised":[161],"learning":[162],"ensure":[164],"that":[165,285],"small":[166],"modifications":[167],"samples":[169],"do":[170],"not":[171,217],"significantly":[172],"alter":[173],"their":[174],"representations.":[176,192,204],"Next,":[177],"mutual":[179],"information":[180],"estimation":[182],"is":[183,233,244,273],"utilized":[184],"enhance":[186],"discrimination":[188],"We":[193],"leverage":[195],"distribution":[198,256],"matching":[199],"regularize":[201],"To":[205],"easily":[206],"compare":[207],"two":[214,264],"spaces,":[215],"model,":[226],"simple":[228],"fully":[229],"connected":[230],"network":[232],"used":[234],"embed":[236],"learned":[238],"into":[240],"eigenspace,":[242],"consistent":[245],"output":[248],"eigenspace":[249],"Through":[254],"similarity":[257],"eigenspaces,":[265],"judge":[268],"whether":[269],"not.":[276],"Extensive":[277],"experiments":[278],"MNIST,":[280],"CIFAR-10,":[281],"ImageNet":[283],"show":[284],"proposed":[287],"method":[288],"has":[289],"superior":[290],"performance":[292],"transferability":[294],"than":[295],"state-of-the-arts.":[296]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}