{"id":"https://openalex.org/W3012084487","doi":"https://doi.org/10.1109/tnnls.2020.2977142","title":"Gradients Cannot Be Tamed: Behind the Impossible Paradox of Blocking Targeted Adversarial Attacks","display_name":"Gradients Cannot Be Tamed: Behind the Impossible Paradox of Blocking Targeted Adversarial Attacks","publication_year":2020,"publication_date":"2020-03-10","ids":{"openalex":"https://openalex.org/W3012084487","doi":"https://doi.org/10.1109/tnnls.2020.2977142","mag":"3012084487","pmid":"https://pubmed.ncbi.nlm.nih.gov/32167916"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2020.2977142","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2020.2977142","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062053119","display_name":"Ziv Katzir","orcid":"https://orcid.org/0000-0002-6375-7882"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Ziv Katzir","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0002-6375-7882","affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072913672","display_name":"Yuval Elovici","orcid":"https://orcid.org/0000-0002-9641-128X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yuval Elovici","raw_affiliation_strings":["Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel"],"raw_orcid":"https://orcid.org/0000-0002-9641-128X","affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I124227911"],"apc_list":null,"apc_paid":null,"fwci":1.4341,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.85583766,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"32","issue":"1","first_page":"128","last_page":"138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9685999751091003,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8106645345687866},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7350921630859375},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7089577317237854},{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.5746971368789673},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5504239797592163},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5358176827430725},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4228053092956543},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.4147111177444458},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.411003977060318},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37969550490379333},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.08537650108337402}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8106645345687866},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7350921630859375},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7089577317237854},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.5746971368789673},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5504239797592163},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5358176827430725},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4228053092956543},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.4147111177444458},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.411003977060318},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37969550490379333},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.08537650108337402},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D002965","descriptor_name":"Classification","qualifier_ui":"Q000379","qualifier_name":"methods","is_major_topic":false},{"descriptor_ui":"D002965","descriptor_name":"Classification","qualifier_ui":"Q000379","qualifier_name":"methods","is_major_topic":false},{"descriptor_ui":"D002965","descriptor_name":"Classification","qualifier_ui":"Q000379","qualifier_name":"methods","is_major_topic":false},{"descriptor_ui":"D010363","descriptor_name":"Pattern Recognition, Automated","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D010363","descriptor_name":"Pattern Recognition, Automated","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D010363","descriptor_name":"Pattern Recognition, Automated","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D015203","descriptor_name":"Reproducibility of Results","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D015203","descriptor_name":"Reproducibility of Results","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D015203","descriptor_name":"Reproducibility of Results","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016571","descriptor_name":"Neural Networks, Computer","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true}],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2020.2977142","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2020.2977142","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:32167916","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/32167916","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1821462560","https://openalex.org/W1945616565","https://openalex.org/W2174868984","https://openalex.org/W2180612164","https://openalex.org/W2460937040","https://openalex.org/W2516574342","https://openalex.org/W2543927648","https://openalex.org/W2552767274","https://openalex.org/W2603766943","https://openalex.org/W2768346313","https://openalex.org/W2782217514","https://openalex.org/W2787708942","https://openalex.org/W2962700793","https://openalex.org/W2963143631","https://openalex.org/W2963249138","https://openalex.org/W2963389226","https://openalex.org/W2963564844","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W3118608800","https://openalex.org/W4300511536","https://openalex.org/W6637162671","https://openalex.org/W6638523607","https://openalex.org/W6640425456","https://openalex.org/W6685800298","https://openalex.org/W6719080892","https://openalex.org/W6726114608","https://openalex.org/W6729756640","https://openalex.org/W6745893766","https://openalex.org/W6748475379","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2317823609","https://openalex.org/W4241263575","https://openalex.org/W3130462184","https://openalex.org/W2902287117","https://openalex.org/W4318256508","https://openalex.org/W2401463593","https://openalex.org/W2349808627","https://openalex.org/W2391671934","https://openalex.org/W3023500690","https://openalex.org/W2502115930"],"abstract_inverted_index":{"Despite":[0],"their":[1],"accuracy,":[2],"neural":[3,23],"network-based":[4],"classifiers":[5],"are":[6,16,181],"still":[7],"prone":[8],"to":[9,18,29,59,67,77,91,114,142,151,157,208,223,240,246],"manipulation":[10],"through":[11],"adversarial":[12,80,135],"perturbations.":[13],"These":[14],"perturbations":[15,136],"designed":[17],"be":[19,224],"misclassified":[20],"by":[21],"the":[22,45,51,57,61,120,129,155,176,215,233,237,247],"network":[24,222],"while":[25],"being":[26],"perceptually":[27],"identical":[28],"some":[30,68],"valid":[31,69],"inputs.":[32],"The":[33,82],"vast":[34],"majority":[35],"of":[36,50,84,124,128,168,183,235],"such":[37,174],"attack":[38],"methods":[39,96],"rely":[40],"on":[41,164],"white-box":[42,86],"conditions,":[43],"where":[44],"attacker":[46,58],"has":[47,88],"full":[48],"knowledge":[49],"attacked":[52],"network's":[53,62,238],"parameters.":[54],"This":[55,205,226],"allows":[56,220],"calculate":[60],"loss":[63],"gradient":[64,74,178,218],"with":[65],"respect":[66],"inputs":[70],"and":[71,112,122],"use":[72],"this":[73,106,110,144],"in":[75,140],"order":[76,141],"create":[78],"an":[79,165,243],"example.":[81],"task":[83],"blocking":[85,229],"attacks":[87,198,213],"proved":[89],"difficult":[90],"address.":[92],"While":[93],"many":[94],"defense":[95,132,145],"have":[97,101],"been":[98],"suggested,":[99],"they":[100],"had":[102],"limited":[103],"success.":[104],"In":[105,170],"article,":[107],"we":[108],"examine":[109],"difficulty":[111],"try":[113],"understand":[115,143],"it.":[116],"We":[117,147,188],"systematically":[118],"explore":[119],"capabilities":[121],"limitations":[123],"defensive":[125,159,186,191],"distillation,":[126],"one":[127],"most":[130],"promising":[131],"mechanisms":[133],"against":[134,196],"suggested":[137],"so":[138],"far,":[139],"challenge.":[146],"show":[148],"that":[149,190,211,219,228],"contrary":[150],"commonly":[152],"held":[153],"belief,":[154],"ability":[156,239],"bypass":[158],"distillation":[160,192],"is":[161,193,200],"not":[162],"dependent":[163],"attack's":[166],"level":[167],"sophistication.":[169],"fact,":[171],"simple":[172],"approaches,":[173],"as":[175],"targeted":[177,203,212],"sign":[179],"method,":[180],"capable":[182],"effectively":[184],"bypassing":[185],"distillation.":[187],"prove":[189],"highly":[194],"effective":[195],"nontargeted":[197],"but":[199],"unsuitable":[201],"for":[202],"attacks.":[204],"discovery":[206],"led":[207],"our":[209],"realization":[210],"leverage":[214],"same":[216],"input":[217],"a":[221],"trained.":[225],"implies":[227],"them":[230],"comes":[231],"at":[232],"cost":[234],"losing":[236],"learn,":[241],"presenting":[242],"impossible":[244],"tradeoff":[245],"research":[248],"community.":[249]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":5}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}