{"id":"https://openalex.org/W7104858347","doi":"https://doi.org/10.1109/tdsc.2025.3632109","title":"Mix 2 Aug: Revisiting Mixing-Based Augmentations for Improving Robust Generalization of Adversarial Training","display_name":"Mix 2 Aug: Revisiting Mixing-Based Augmentations for Improving Robust Generalization of Adversarial Training","publication_year":2025,"publication_date":"2025-11-12","ids":{"openalex":"https://openalex.org/W7104858347","doi":"https://doi.org/10.1109/tdsc.2025.3632109"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3632109","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3632109","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhaozhe Hu","orcid":"https://orcid.org/0009-0005-7017-5513"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaozhe Hu","raw_affiliation_strings":["Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0009-0005-7017-5513","affiliations":[{"raw_affiliation_string":"Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Bin Chen","orcid":"https://orcid.org/0000-0003-2944-6105"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]},{"id":"https://openalex.org/I99908691","display_name":"Yuan Ze University","ror":"https://ror.org/01fv1ds98","country_code":"TW","type":"education","lineage":["https://openalex.org/I99908691"]}],"countries":["CN","TW"],"is_corresponding":false,"raw_author_name":"Bin Chen","raw_affiliation_strings":["Department of Computer Science and Engineering, Yuan Ze University, Taoyuan, Taiwan","Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2944-6105","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Yuan Ze University, Taoyuan, Taiwan","institution_ids":["https://openalex.org/I99908691"]},{"raw_affiliation_string":"Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jia-Li Yin","orcid":"https://orcid.org/0000-0002-8087-9769"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Li Yin","raw_affiliation_strings":["Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8087-9769","affiliations":[{"raw_affiliation_string":"Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Bo-Hao Chen","orcid":"https://orcid.org/0000-0002-7999-3396"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]},{"id":"https://openalex.org/I99908691","display_name":"Yuan Ze University","ror":"https://ror.org/01fv1ds98","country_code":"TW","type":"education","lineage":["https://openalex.org/I99908691"]}],"countries":["CN","TW"],"is_corresponding":false,"raw_author_name":"Bo-Hao Chen","raw_affiliation_strings":["Department of Computer Science and Engineering, Yuan Ze University, Taoyuan, Taiwan","Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-7999-3396","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Yuan Ze University, Taoyuan, Taiwan","institution_ids":["https://openalex.org/I99908691"]},{"raw_affiliation_string":"Fujian Province Key Laboratory of Information Security and Network Systems, and College of Computer Science and Big Data, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yaguan Qian","orcid":"https://orcid.org/0000-0003-4056-9755"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaguan Qian","raw_affiliation_strings":["School of Artificial Intelligence and Information Engineering, Zhejiang University of Science and Technology, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-4056-9755","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Information Engineering, Zhejiang University of Science and Technology, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":null,"display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-4268-372X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.73146148,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"3036","last_page":"3050"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9021999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9021999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.04500000178813934,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.01640000008046627,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.9039000272750854},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.76910001039505},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7369999885559082},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6632000207901001},{"id":"https://openalex.org/keywords/early-stopping","display_name":"Early stopping","score":0.5080000162124634},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.47909998893737793},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4674000144004822},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.44519999623298645}],"concepts":[{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.9039000272750854},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7929999828338623},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.76910001039505},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7369999885559082},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6632999777793884},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6632000207901001},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6100999712944031},{"id":"https://openalex.org/C5465570","wikidata":"https://www.wikidata.org/wiki/Q5326898","display_name":"Early stopping","level":3,"score":0.5080000162124634},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.47909998893737793},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4674000144004822},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.44519999623298645},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3790999948978424},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3264000117778778},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C117765406","wikidata":"https://www.wikidata.org/wiki/Q5362437","display_name":"Generalization error","level":3,"score":0.31859999895095825},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.31470000743865967},{"id":"https://openalex.org/C193254401","wikidata":"https://www.wikidata.org/wiki/Q2160088","display_name":"Robust optimization","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C18555067","wikidata":"https://www.wikidata.org/wiki/Q8375051","display_name":"Joint (building)","level":2,"score":0.3100999891757965},{"id":"https://openalex.org/C67226441","wikidata":"https://www.wikidata.org/wiki/Q1665389","display_name":"Robust statistics","level":3,"score":0.25859999656677246},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.25519999861717224}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3632109","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3632109","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1056051951","display_name":"\u5927\u6a21\u578b\u5b89\u5168\u98ce\u9669\u62a4\u680f\u7406\u8bba\u53ca\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"LD24F020002","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G1198879025","display_name":null,"funder_award_id":"2024M762829","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G2094257571","display_name":null,"funder_award_id":"62402425","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4644492335","display_name":null,"funder_award_id":"62402418","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4868500656","display_name":null,"funder_award_id":"U24A20336","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6047521378","display_name":null,"funder_award_id":"62476250","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6963178280","display_name":null,"funder_award_id":"62172243","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8246309483","display_name":null,"funder_award_id":"62202104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8283732743","display_name":null,"funder_award_id":"U244120033","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8607162268","display_name":null,"funder_award_id":"U2441239","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1861492603","https://openalex.org/W2117539524","https://openalex.org/W2302255633","https://openalex.org/W2765793020","https://openalex.org/W2949736877","https://openalex.org/W2963857521","https://openalex.org/W2964137095","https://openalex.org/W2992308087","https://openalex.org/W3035682985","https://openalex.org/W3107235539","https://openalex.org/W3126932579","https://openalex.org/W3135151133","https://openalex.org/W3202897123","https://openalex.org/W3211739457","https://openalex.org/W4226164018","https://openalex.org/W4236362309","https://openalex.org/W4285287329","https://openalex.org/W4286609345","https://openalex.org/W4301425558","https://openalex.org/W4307823382","https://openalex.org/W4360898063","https://openalex.org/W4363622847","https://openalex.org/W4366724916","https://openalex.org/W4386057723","https://openalex.org/W4390872540","https://openalex.org/W4399526174","https://openalex.org/W4400771068","https://openalex.org/W4405316528","https://openalex.org/W4405717578","https://openalex.org/W4405741930","https://openalex.org/W4406387993","https://openalex.org/W4408166132","https://openalex.org/W4408235512"],"related_works":[],"abstract_inverted_index":{"Although":[0],"adversarial":[1,111],"training":[2,36,112],"(AT)":[3],"is":[4],"currently":[5],"one":[6],"of":[7,24,93,107,157,179,199],"the":[8,22,30,35,41,89,105,110,150,154,193,197],"most":[9],"promising":[10],"methods":[11],"to":[12,49,69,81,118],"make":[13],"deep":[14],"neural":[15],"networks":[16],"adversarially":[17],"robust,":[18],"it":[19],"suffers":[20],"from":[21],"issue":[23],"robust":[25,31,90,127,155,177],"overfitting":[26,128],"and":[27,37,85,114,145,181,206],"thus":[28],"aggravates":[29],"generalization":[32,56,91,156,178],"gap":[33],"between":[34],"testing":[38],"dataset.":[39],"At":[40],"same":[42],"time,":[43],"data":[44],"augmentations":[45,122],"(DAs)":[46],"are":[47],"considered":[48],"be":[50,70,143],"powerful":[51],"tools":[52],"for":[53,175],"improving":[54,88,153,176,183],"model":[55,184],"in":[57,74,109,129],"standard":[58],"training;":[59],"however,":[60],"they":[61,141],"have":[62],"been":[63],"observed":[64],"by":[65,95,159],"many":[66],"previous":[67],"studies":[68],"ineffective":[71],"when":[72],"applied":[73],"AT.":[75,130],"In":[76],"this":[77,83,165],"paper,":[78],"we":[79,138,146,167],"try":[80],"break":[82],"prejudice":[84],"focus":[86],"on":[87,208],"ability":[92],"AT":[94,158,180],"DAs":[96,108,137],"alone.":[97],"We":[98],"first":[99],"take":[100],"a":[101,160,169],"close":[102],"look":[103],"at":[104],"effect":[106],"process":[113],"find":[115],"that":[116,140,189],"compared":[117],"common":[119],"DAs,":[120],"mixing-based":[121,136,171],"(i.e.,MixUpandCutMix)":[123],"can":[124,142,147],"effectively":[125],"prevent":[126],"Then,":[131],"after":[132],"revisiting":[133],"these":[134],"two":[135],"found":[139],"complementary":[144],"subtly":[148],"stimulate":[149],"effectiveness":[151],"ofMixUpandCutMixin":[152],"joint":[161,170],"mixing":[162],"manner.":[163],"To":[164],"end,":[166],"propose":[168],"augmentation":[172],"scheme,":[173],"namedMix2Aug,":[174],"ultimately":[182],"robustness.":[185],"Experimental":[186],"results":[187],"show":[188],"ourMix2Augcan":[190],"significantly":[191],"increase":[192],"upper":[194],"limit":[195],"ofMixUpandCutMixwithout":[196],"need":[198],"additional":[200],"ensemble":[201],"techniques,":[202],"achieving":[203],"state-of-the-art":[204],"accuracy":[205],"robustness":[207],"extensive":[209],"datasets.":[210]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-11-12T00:00:00"}