{"id":"https://openalex.org/W2994027480","doi":"https://doi.org/10.1109/tifs.2020.3021899","title":"Walking on the Edge: Fast, Low-Distortion Adversarial Examples","display_name":"Walking on the Edge: Fast, Low-Distortion Adversarial Examples","publication_year":2020,"publication_date":"2020-09-04","ids":{"openalex":"https://openalex.org/W2994027480","doi":"https://doi.org/10.1109/tifs.2020.3021899","mag":"2994027480"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2020.3021899","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2020.3021899","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1912.02153","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Hanwei Zhang","orcid":"https://orcid.org/0000-0002-9690-6952"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN","FR"],"is_corresponding":true,"raw_author_name":"Hanwei Zhang","raw_affiliation_strings":["Inria, CNRS, IRISA, Universit \u00e9 de Rennes 1, Rennes, France","School of Computer Science and Technology, East China Normal University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Inria, CNRS, IRISA, Universit \u00e9 de Rennes 1, Rennes, France","institution_ids":["https://openalex.org/I2802519937","https://openalex.org/I56067802","https://openalex.org/I1294671590"]},{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yannis Avrithis","orcid":"https://orcid.org/0000-0001-7476-4482"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yannis Avrithis","raw_affiliation_strings":["Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France","institution_ids":["https://openalex.org/I2802519937","https://openalex.org/I56067802","https://openalex.org/I1294671590"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Teddy Furon","orcid":"https://orcid.org/0000-0002-1565-765X"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Teddy Furon","raw_affiliation_strings":["Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France","institution_ids":["https://openalex.org/I2802519937","https://openalex.org/I56067802","https://openalex.org/I1294671590"]}]},{"author_position":"last","author":{"id":null,"display_name":"Laurent Amsaleg","orcid":null},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Laurent Amsaleg","raw_affiliation_strings":["Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Inria, CNRS, IRISA, Universit\u00e9 de Rennes 1, Rennes, France","institution_ids":["https://openalex.org/I2802519937","https://openalex.org/I56067802","https://openalex.org/I1294671590"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I56067802","https://openalex.org/I66867065"],"apc_list":null,"apc_paid":null,"fwci":3.9422,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":{"value":0.9465661,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"16","issue":null,"first_page":"701","last_page":"713"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9728000164031982,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9725000262260437,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8019000291824341},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.6424000263214111},{"id":"https://openalex.org/keywords/distortion","display_name":"Distortion (music)","score":0.6176000237464905},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5390999913215637},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4722999930381775},{"id":"https://openalex.org/keywords/projection","display_name":"Projection (relational algebra)","score":0.4453999996185303},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.435699999332428}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8019000291824341},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7935000061988831},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.6424000263214111},{"id":"https://openalex.org/C126780896","wikidata":"https://www.wikidata.org/wiki/Q899871","display_name":"Distortion (music)","level":4,"score":0.6176000237464905},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6003000140190125},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5390999913215637},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4722999930381775},{"id":"https://openalex.org/C57493831","wikidata":"https://www.wikidata.org/wiki/Q3134666","display_name":"Projection (relational algebra)","level":2,"score":0.4453999996185303},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.435699999332428},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.40369999408721924},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.3939000070095062},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32350000739097595},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3230000138282776},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.31540000438690186},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3140000104904175},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3052000105381012}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tifs.2020.3021899","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2020.3021899","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:1912.02153","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1912.02153","pdf_url":"https://arxiv.org/pdf/1912.02153","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:HAL:hal-02931493v1","is_oa":true,"landing_page_url":"https://hal.science/hal-02931493","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Information Forensics and Security, 2020, 16, pp.701 - 713. ⟨10.1109/TIFS.2020.3021899⟩","raw_type":"Journal articles"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1912.02153","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1912.02153","pdf_url":"https://arxiv.org/pdf/1912.02153","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2138674039","https://openalex.org/W2183341477","https://openalex.org/W2243397390","https://openalex.org/W2539093944","https://openalex.org/W2543927648","https://openalex.org/W2604505099","https://openalex.org/W2612637113","https://openalex.org/W2620038827","https://openalex.org/W2790437783","https://openalex.org/W2795727551","https://openalex.org/W2879765882","https://openalex.org/W2902905500","https://openalex.org/W2912867020","https://openalex.org/W2946457369","https://openalex.org/W2962972208","https://openalex.org/W2963366334","https://openalex.org/W2963448658","https://openalex.org/W2963693747","https://openalex.org/W2963857521","https://openalex.org/W2964301649","https://openalex.org/W2970335439","https://openalex.org/W2970740201","https://openalex.org/W3009756253","https://openalex.org/W4300410929","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6638667902","https://openalex.org/W6640425456","https://openalex.org/W6682953061","https://openalex.org/W6719080892","https://openalex.org/W6725508424","https://openalex.org/W6729295261","https://openalex.org/W6739868092","https://openalex.org/W6746307094","https://openalex.org/W6746608116","https://openalex.org/W6751831877","https://openalex.org/W6756512625","https://openalex.org/W6762624066","https://openalex.org/W6787972765"],"related_works":[],"abstract_inverted_index":{"Adversarial":[0],"examples":[1],"of":[2,30,51],"deep":[3,31],"neural":[4,32],"networks":[5,33],"are":[6,41,76],"receiving":[7],"ever":[8],"increasing":[9,28],"attention":[10],"because":[11],"they":[12],"help":[13],"in":[14,34,56,96,128],"understanding":[15],"and":[16,99,138],"reducing":[17],"the":[18,27,49,52,122,129,136],"sensitivity":[19],"to":[20],"their":[21,57],"input.":[22],"This":[23],"is":[24,46,66,120,125],"natural":[25],"given":[26],"applications":[29],"our":[35],"everyday":[36],"lives.":[37],"When":[38],"white-box":[39],"attacks":[40,75],"almost":[42],"always":[43,87],"successful,":[44],"it":[45],"typically":[47],"only":[48],"distortion":[50,141],"perturbations":[53],"that":[54,64,73,108,121],"matters":[55],"evaluation.":[58],"In":[59],"this":[60,93,143],"work,":[61],"we":[62,132],"argue":[63],"speed":[65],"important":[67],"as":[68],"well,":[69],"especially":[70],"when":[71],"considering":[72],"fast":[74],"required":[77],"by":[78,113],"adversarial":[79],"training.":[80],"Given":[81],"more":[82],"time,":[83],"iterative":[84],"methods":[85,112],"can":[86],"find":[88],"better":[89],"solutions.":[90],"We":[91],"investigate":[92],"speed-distortion":[94],"trade-off":[95],"some":[97],"depth":[98],"introduce":[100],"a":[101,114,126],"new":[102],"attack":[103],"called":[104],"boundary":[105,124,137],"projection":[106],"(BP)":[107],"improves":[109],"upon":[110],"existing":[111],"large":[115],"margin.":[116],"Our":[117],"key":[118],"idea":[119],"classification":[123],"manifold":[127],"image":[130],"space:":[131],"therefore":[133],"quickly":[134],"reach":[135],"then":[139],"optimize":[140],"on":[142],"manifold.":[144]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":7}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2019-12-13T00:00:00"}