{"id":"https://openalex.org/W4410638999","doi":"https://doi.org/10.1109/tdsc.2025.3573294","title":"A Knowledge-Guided Adversarial Defense for Resisting Malicious Visual Manipulation","display_name":"A Knowledge-Guided Adversarial Defense for Resisting Malicious Visual Manipulation","publication_year":2025,"publication_date":"2025-05-23","ids":{"openalex":"https://openalex.org/W4410638999","doi":"https://doi.org/10.1109/tdsc.2025.3573294"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3573294","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3573294","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100655950","display_name":"Dawei Zhou","orcid":"https://orcid.org/0000-0002-0694-3603"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Dawei Zhou","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027218934","display_name":"Zhi\u2010gang Su","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhigang Su","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058058294","display_name":"Decheng Liu","orcid":"https://orcid.org/0000-0002-6550-212X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Decheng Liu","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi&#x2019;an, China","State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi&#x0027;an, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065250332","display_name":"Tongliang Liu","orcid":"https://orcid.org/0000-0002-9640-6472"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tongliang Liu","raw_affiliation_strings":["School of Computer Science, Facult of Engineering, The University of Sydney, Darlington, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, Facult of Engineering, The University of Sydney, Darlington, NSW, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nannan Wang","orcid":"https://orcid.org/0000-0002-4695-6134"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nannan Wang","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Telecommunications Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101785348","display_name":"Xinbo Gao","orcid":"https://orcid.org/0000-0002-7985-0037"},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]},{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinbo Gao","raw_affiliation_strings":["School of Electronic Engineering, Xidian University, Xi&#x2019;an, China","Chongqing Key Laboratory of Image Cognition, Chongqing University of Posts and Telecommunications, Chongqing, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Engineering, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Chongqing Key Laboratory of Image Cognition, Chongqing University of Posts and Telecommunications, Chongqing, China","institution_ids":["https://openalex.org/I10535382"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100655950"],"corresponding_institution_ids":["https://openalex.org/I149594827"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.05168651,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"5","first_page":"5688","last_page":"5700"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9617999792098999,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8626511096954346},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7280864715576172},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5908455848693848},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.4939196705818176},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.4063173532485962},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31507107615470886}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8626511096954346},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7280864715576172},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5908455848693848},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.4939196705818176},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.4063173532485962},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31507107615470886}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3573294","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3573294","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2452297484","display_name":null,"funder_award_id":"QTZX23042","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G4297946667","display_name":null,"funder_award_id":"U22A2096","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G528944840","display_name":null,"funder_award_id":"62306227","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G913836228","display_name":null,"funder_award_id":"62036007","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W1975732501","https://openalex.org/W2064076387","https://openalex.org/W2068181924","https://openalex.org/W2087361987","https://openalex.org/W2133665775","https://openalex.org/W2141983208","https://openalex.org/W2144569783","https://openalex.org/W2145023731","https://openalex.org/W2255466643","https://openalex.org/W2341528187","https://openalex.org/W2475287302","https://openalex.org/W2734256217","https://openalex.org/W2787755382","https://openalex.org/W2919234133","https://openalex.org/W2962785568","https://openalex.org/W2962793481","https://openalex.org/W2963366334","https://openalex.org/W2963626105","https://openalex.org/W2963767194","https://openalex.org/W2978074392","https://openalex.org/W2982058372","https://openalex.org/W3019200173","https://openalex.org/W3028481464","https://openalex.org/W3035063907","https://openalex.org/W3035574324","https://openalex.org/W3038930935","https://openalex.org/W3094728142","https://openalex.org/W3096831136","https://openalex.org/W3127084502","https://openalex.org/W3174807077","https://openalex.org/W3175906703","https://openalex.org/W3176406820","https://openalex.org/W3202767484","https://openalex.org/W4214876496","https://openalex.org/W4283319085","https://openalex.org/W4285604433","https://openalex.org/W4296396156","https://openalex.org/W4304701424","https://openalex.org/W4312914048","https://openalex.org/W4313029498","https://openalex.org/W4315473855","https://openalex.org/W4390874199"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W4288019534"],"abstract_inverted_index":{"Malicious":[0],"applications":[1],"of":[2,14,102,160],"visual":[3,126,174,199],"manipulation":[4,91,144],"have":[5,26],"raised":[6],"serious":[7],"threats":[8],"to":[9,37,53,87,93,125,128],"the":[10,42,48,100,115,130,142,153,158,161],"security":[11],"and":[12,72,119,149,167,173,190],"reputation":[13],"users":[15],"in":[16,30,41,55,66,99,152],"many":[17],"fields.":[18],"To":[19,156],"alleviate":[20],"these":[21],"issues,":[22],"adversarial":[23,84,105,136],"noise-based":[24],"defenses":[25],"been":[27],"enthusiastically":[28],"studied":[29],"recent":[31],"years.":[32],"However,":[33],"\u201cdata-only\u201d":[34],"methods":[35],"tend":[36],"distort":[38],"fake":[39,154],"samples":[40],"low-level":[43],"feature":[44],"space":[45],"rather":[46],"than":[47],"high-level":[49],"semantic":[50,112],"space,":[51],"leading":[52],"limitations":[54],"resisting":[56],"malicious":[57,90,143,198],"manipulation.":[58,200],"Frontier":[59],"research":[60],"has":[61],"shown":[62],"that":[63,193],"integrating":[64],"knowledge":[65,117],"deep":[67],"learning":[68],"can":[69,138,195],"produce":[70],"reliable":[71],"generalizable":[73],"solutions.":[74],"Inspired":[75],"by":[76,146],"these,":[77],"we":[78,107,164],"propose":[79],"a":[80,121],"<italic":[81],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[82],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">knowledge-guided":[83],"defense":[85,186],"(KGAD)":[86],"actively":[88,139],"force":[89],"models":[92],"output":[94],"semantically":[95],"confusing":[96],"samples</i>.":[97],"Specifically,":[98],"process":[101],"generating":[103],"protective":[104],"noise,":[106],"focus":[108],"on":[109,170,179],"constructing":[110],"significant":[111],"confusions":[113],"at":[114],"domain-specific":[116],"level,":[118],"exploit":[120],"metric":[122],"closely":[123],"related":[124],"perception":[127,172],"replace":[129],"general":[131],"pixel-wise":[132],"metrics.":[133],"The":[134,177],"generated":[135],"noise":[137],"interfere":[140],"with":[141],"model":[145],"triggering":[147],"knowledge-guided":[148],"perception-related":[150],"disruptions":[151],"samples.":[155],"validate":[157],"effectiveness":[159],"proposed":[162],"method,":[163],"conduct":[165],"qualitative":[166],"quantitative":[168],"experiments":[169],"human":[171],"quality":[175],"assessment.":[176],"results":[178],"two":[180],"different":[181],"tasks":[182],"both":[183],"show":[184],"our":[185],"achieves":[187],"competitive":[188],"performances":[189],"generalizability,":[191],"indicating":[192],"it":[194],"effectively":[196],"resist":[197]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}