{"id":"https://openalex.org/W4385757486","doi":"https://doi.org/10.1109/tnnls.2023.3267460","title":"Improving Robustness of Intent Detection Under Adversarial Attacks: A Geometric Constraint Perspective","display_name":"Improving Robustness of Intent Detection Under Adversarial Attacks: A Geometric Constraint Perspective","publication_year":2023,"publication_date":"2023-08-11","ids":{"openalex":"https://openalex.org/W4385757486","doi":"https://doi.org/10.1109/tnnls.2023.3267460","pmid":"https://pubmed.ncbi.nlm.nih.gov/37566500"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2023.3267460","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2023.3267460","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048953650","display_name":"Biqing Qi","orcid":"https://orcid.org/0000-0002-4072-0577"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Biqing Qi","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Frontis.AI, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Frontis.AI, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107808331","display_name":"Bowen Zhou","orcid":"https://orcid.org/0009-0004-3414-6267"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]},{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowen Zhou","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Center for Collaborative and Conversational Intelligence, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Center for Collaborative and Conversational Intelligence, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102020193","display_name":"Weinan Zhang","orcid":"https://orcid.org/0000-0001-5553-178X"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weinan Zhang","raw_affiliation_strings":["Center for Social Computing and Information Retrieval, Harbin Institute of Technology, Harbin, China"],"affiliations":[{"raw_affiliation_string":"Center for Social Computing and Information Retrieval, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106670276","display_name":"Jianxing Liu","orcid":"https://orcid.org/0000-0002-2201-3887"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianxing Liu","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108047839","display_name":"Ligang Wu","orcid":"https://orcid.org/0000-0001-8198-5267"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ligang Wu","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5048953650"],"corresponding_institution_ids":["https://openalex.org/I204983213"],"apc_list":null,"apc_paid":null,"fwci":1.049,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.81174705,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"35","issue":"5","first_page":"6133","last_page":"6144"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9707000255584717,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.667072057723999},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6358572840690613},{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.5407696962356567},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5213562250137329},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5018904209136963},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.49282601475715637},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.4483274519443512},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4352082312107086},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.386043518781662},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3452826738357544},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3069097101688385},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.29321038722991943}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.667072057723999},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6358572840690613},{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.5407696962356567},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5213562250137329},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5018904209136963},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.49282601475715637},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.4483274519443512},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4352082312107086},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.386043518781662},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3452826738357544},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3069097101688385},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.29321038722991943},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2023.3267460","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2023.3267460","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:37566500","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37566500","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education","score":0.4300000071525574}],"awards":[{"id":"https://openalex.org/G3614370970","display_name":null,"funder_award_id":"ZD2021F001","funder_id":"https://openalex.org/F4320323085","funder_display_name":"Natural Science Foundation of Heilongjiang Province"},{"id":"https://openalex.org/G6929814106","display_name":null,"funder_award_id":"62022030","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7310273762","display_name":null,"funder_award_id":"HIT.OCEF.2021005","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G7676143151","display_name":null,"funder_award_id":"62033005","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323085","display_name":"Natural Science Foundation of Heilongjiang Province","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1832693441","https://openalex.org/W1945616565","https://openalex.org/W2076636512","https://openalex.org/W2088647313","https://openalex.org/W2194775991","https://openalex.org/W2597655663","https://openalex.org/W2609368435","https://openalex.org/W2784163702","https://openalex.org/W2890719433","https://openalex.org/W2891828758","https://openalex.org/W2898856000","https://openalex.org/W2898963688","https://openalex.org/W2905526464","https://openalex.org/W2949128310","https://openalex.org/W2950048339","https://openalex.org/W2953350408","https://openalex.org/W2963178695","https://openalex.org/W2963834268","https://openalex.org/W2963859254","https://openalex.org/W2970078867","https://openalex.org/W2970449623","https://openalex.org/W2971173235","https://openalex.org/W2996851481","https://openalex.org/W3007685714","https://openalex.org/W3020641979","https://openalex.org/W3035164976","https://openalex.org/W3035507081","https://openalex.org/W3101449015","https://openalex.org/W3103152812","https://openalex.org/W3104570147","https://openalex.org/W3105604018","https://openalex.org/W3116804412","https://openalex.org/W3120061794","https://openalex.org/W3134853163","https://openalex.org/W3175976195","https://openalex.org/W3176311624","https://openalex.org/W3202183072","https://openalex.org/W3215457086","https://openalex.org/W4205293427","https://openalex.org/W4293846201","https://openalex.org/W4294410794","https://openalex.org/W4297683418","https://openalex.org/W4385245566","https://openalex.org/W6631190155","https://openalex.org/W6640425456","https://openalex.org/W6734982453","https://openalex.org/W6735013348","https://openalex.org/W6735377749","https://openalex.org/W6748154493","https://openalex.org/W6751425476","https://openalex.org/W6755480234","https://openalex.org/W6758684365","https://openalex.org/W6767791417","https://openalex.org/W6773944720","https://openalex.org/W6777056823","https://openalex.org/W6788272337"],"related_works":["https://openalex.org/W3107204728","https://openalex.org/W4287591324","https://openalex.org/W3108503355","https://openalex.org/W3090555870","https://openalex.org/W4226420367","https://openalex.org/W2962876041","https://openalex.org/W3022820045","https://openalex.org/W2801655600","https://openalex.org/W3005627584","https://openalex.org/W3120400911"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)-based":[3],"natural":[4],"language":[5],"processing":[6],"(NLP)":[7],"systems":[8,26],"are":[9,27],"vulnerable":[10],"to":[11,66,75,102,142,154],"being":[12],"fooled":[13],"by":[14],"adversarial":[15,77],"examples":[16],"presented":[17],"in":[18,24,51,172],"recent":[19],"studies.":[20],"Intent":[21],"detection":[22],"tasks":[23],"dialog":[25],"no":[28],"exception,":[29],"however,":[30],"relatively":[31],"few":[32],"works":[33],"have":[34],"been":[35],"attempted":[36],"on":[37,200],"the":[38,64,91,124,134,143,147,156,173,179,197],"defense":[39,53,88],"side.":[40],"The":[41],"combination":[42],"of":[43,105,112,128,146],"linear":[44],"classifier":[45],"and":[46],"softmax":[47],"is":[48,73,152],"widely":[49],"used":[50],"most":[52],"methods":[54],"for":[55],"other":[56],"NLP":[57],"tasks.":[58],"Unfortunately,":[59],"it":[60,72,151],"does":[61],"not":[62],"encourage":[63],"model":[65],"learn":[67],"well-separated":[68],"feature":[69,113],"representations.":[70],"Thus,":[71],"easy":[74],"induce":[76],"examples.":[78,202],"In":[79],"this":[80,161],"article,":[81],"we":[82,96,122,163],"propose":[83,98],"a":[84],"simple,":[85],"yet":[86],"efficient":[87],"method":[89,187],"from":[90,133],"geometric":[92,110,126,149,166],"constraint":[93],"perspective.":[94],"Specifically,":[95],"first":[97],"an":[99],"M-similarity":[100],"metric":[101],"shrink":[103],"variances":[104],"intraclass":[106],"features.":[107],"Intuitively,":[108],"better":[109],"conditions":[111],"space":[114],"can":[115,188],"bring":[116],"lower":[117],"misclassification":[118],"probability":[119],"(MP).":[120],"Therefore,":[121],"derive":[123],"optimal":[125,148],"constraints":[127,167],"anchors":[129],"within":[130],"each":[131],"category":[132],"overall":[135],"MP":[136],"(OMP)":[137],"with":[138,193],"theoretical":[139],"guarantees.":[140],"Due":[141],"nonconvex":[144],"characteristic":[145],"condition,":[150],"hard":[153],"satisfy":[155],"traditional":[157],"optimization":[158,170],"process.":[159],"To":[160],"end,":[162],"regard":[164],"such":[165],"as":[168],"manifold":[169],"processes":[171],"Stiefel":[174],"manifold,":[175],"thus":[176],"naturally":[177],"avoiding":[178],"above":[180],"challenges.":[181],"Experimental":[182],"results":[183],"demonstrate":[184],"that":[185],"our":[186],"significantly":[189],"improve":[190],"robustness":[191],"compared":[192],"baselines,":[194],"while":[195],"retaining":[196],"excellent":[198],"performance":[199],"normal":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
