{"id":"https://openalex.org/W3026797990","doi":"https://doi.org/10.1109/tnse.2020.2996738","title":"Gradient Shielding: Towards Understanding Vulnerability of Deep Neural Networks","display_name":"Gradient Shielding: Towards Understanding Vulnerability of Deep Neural Networks","publication_year":2020,"publication_date":"2020-05-22","ids":{"openalex":"https://openalex.org/W3026797990","doi":"https://doi.org/10.1109/tnse.2020.2996738","mag":"3026797990"},"language":"en","primary_location":{"id":"doi:10.1109/tnse.2020.2996738","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2020.2996738","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070856186","display_name":"Zhaoquan Gu","orcid":"https://orcid.org/0000-0001-7546-852X"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoquan Gu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7546-852X","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011383664","display_name":"Weixiong Hu","orcid":"https://orcid.org/0000-0002-5474-991X"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weixiong Hu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5474-991X","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013905680","display_name":"Chuanjing Zhang","orcid":"https://orcid.org/0000-0003-1503-8274"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuanjing Zhang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-1503-8274","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101486498","display_name":"Hui Lu","orcid":"https://orcid.org/0000-0002-4120-7716"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Lu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4120-7716","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100350793","display_name":"Le Wang","orcid":"https://orcid.org/0000-0002-3610-9185"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Le Wang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3610-9185","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":null,"apc_paid":null,"fwci":6.8458,"has_fulltext":false,"cited_by_count":107,"citation_normalized_percentile":{"value":0.97466388,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"8","issue":"2","first_page":"921","last_page":"932"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9185000061988831,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8313019871711731},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7054219245910645},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6155797243118286},{"id":"https://openalex.org/keywords/electromagnetic-shielding","display_name":"Electromagnetic shielding","score":0.614257276058197},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6041038036346436},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5999258160591125},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5803273916244507},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5593219995498657},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5283639430999756},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.47191813588142395},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4139726459980011},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3718995451927185},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33571720123291016},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14299869537353516},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.12794643640518188}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8313019871711731},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7054219245910645},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6155797243118286},{"id":"https://openalex.org/C2265751","wikidata":"https://www.wikidata.org/wiki/Q332007","display_name":"Electromagnetic shielding","level":2,"score":0.614257276058197},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6041038036346436},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5999258160591125},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5803273916244507},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5593219995498657},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5283639430999756},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.47191813588142395},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4139726459980011},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3718995451927185},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33571720123291016},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14299869537353516},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.12794643640518188},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2020.2996738","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2020.2996738","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1735625521","display_name":null,"funder_award_id":"2019YFB1706003","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G2582720763","display_name":null,"funder_award_id":"61902082","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3599181934","display_name":null,"funder_award_id":"U1636215","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":112,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1883420340","https://openalex.org/W1945616565","https://openalex.org/W2113047229","https://openalex.org/W2180612164","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2230740169","https://openalex.org/W2243397390","https://openalex.org/W2408141691","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2561498661","https://openalex.org/W2570343428","https://openalex.org/W2570685808","https://openalex.org/W2598939142","https://openalex.org/W2603766943","https://openalex.org/W2604505099","https://openalex.org/W2612637113","https://openalex.org/W2727966874","https://openalex.org/W2736899637","https://openalex.org/W2746600820","https://openalex.org/W2765424254","https://openalex.org/W2766108848","https://openalex.org/W2774644650","https://openalex.org/W2782017896","https://openalex.org/W2794590848","https://openalex.org/W2796265841","https://openalex.org/W2796347433","https://openalex.org/W2798302089","https://openalex.org/W2896457183","https://openalex.org/W2899037679","https://openalex.org/W2904760137","https://openalex.org/W2905311601","https://openalex.org/W2918967742","https://openalex.org/W2934826843","https://openalex.org/W2962700793","https://openalex.org/W2962713901","https://openalex.org/W2962807143","https://openalex.org/W2962847335","https://openalex.org/W2963001136","https://openalex.org/W2963098487","https://openalex.org/W2963143631","https://openalex.org/W2963154688","https://openalex.org/W2963178695","https://openalex.org/W2963207607","https://openalex.org/W2963273426","https://openalex.org/W2963341956","https://openalex.org/W2963389226","https://openalex.org/W2963542245","https://openalex.org/W2963557656","https://openalex.org/W2963570359","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2963955657","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964166085","https://openalex.org/W2964175514","https://openalex.org/W2964253222","https://openalex.org/W2964331270","https://openalex.org/W2964350391","https://openalex.org/W2969664989","https://openalex.org/W2969985801","https://openalex.org/W2971076825","https://openalex.org/W3004704879","https://openalex.org/W3015383801","https://openalex.org/W3016010032","https://openalex.org/W3100457262","https://openalex.org/W3103557498","https://openalex.org/W3106412272","https://openalex.org/W3187541268","https://openalex.org/W4289147935","https://openalex.org/W4289305644","https://openalex.org/W4289549563","https://openalex.org/W4293529028","https://openalex.org/W4293584584","https://openalex.org/W4293846201","https://openalex.org/W6637162671","https://openalex.org/W6639568328","https://openalex.org/W6640425456","https://openalex.org/W6685943642","https://openalex.org/W6687483927","https://openalex.org/W6689238212","https://openalex.org/W6694260854","https://openalex.org/W6714069269","https://openalex.org/W6719080892","https://openalex.org/W6729756640","https://openalex.org/W6731039222","https://openalex.org/W6731927902","https://openalex.org/W6738157205","https://openalex.org/W6738693630","https://openalex.org/W6739868092","https://openalex.org/W6740446203","https://openalex.org/W6741036071","https://openalex.org/W6745272055","https://openalex.org/W6745847742","https://openalex.org/W6746402973","https://openalex.org/W6747374261","https://openalex.org/W6748010250","https://openalex.org/W6748475379","https://openalex.org/W6748799766","https://openalex.org/W6749733599","https://openalex.org/W6750227808","https://openalex.org/W6750584122","https://openalex.org/W6753468839","https://openalex.org/W6754558403","https://openalex.org/W6755207826","https://openalex.org/W6755892230","https://openalex.org/W6760418104","https://openalex.org/W6767341848"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"have":[4,22],"been":[5,23],"widely":[6],"adopted":[7],"but":[8],"they":[9],"are":[10],"vulnerable":[11],"to":[12,39,52,68,117],"intentionally":[13],"crafted":[14],"adversarial":[15,32,41,78],"examples.":[16,33,79],"Various":[17],"attack":[18],"methods":[19],"against":[20],"DNNs":[21],"proposed,":[24],"yet":[25],"there":[26],"still":[27],"lacks":[28],"theoretical":[29],"explanation":[30],"of":[31,56],"In":[34],"this":[35,129],"paper,":[36],"we":[37,48,81,101,131],"aim":[38],"understand":[40],"examples":[42],"from":[43],"the":[44,53,57,70,119,122,133],"attacking":[45],"process":[46],"and":[47,92,121],"assume":[49],"adding":[50],"perturbations":[51],"key/sensitive":[54],"regions":[55,91],"image":[58,61],"could":[59],"fool":[60],"classification":[62],"DNNs.":[63],"We":[64,113],"propose":[65,82,102],"gradient":[66,84,104],"shielding":[67,85,105],"verify":[69],"assumption":[71],"which":[72,88,108],"ignores":[73,109],"insensitive":[74,110],"information":[75],"during":[76],"generating":[77],"Specifically,":[80],"interactive":[83],"(IGS)":[86],"method":[87,107],"selects":[89],"sensitive":[90],"then":[93],"applies":[94],"gradient-based":[95],"attack.":[96],"To":[97],"remove":[98],"region":[99],"selection,":[100],"adaptive":[103],"(AGS)":[106],"gradients":[111],"automatically.":[112],"conduct":[114],"extensive":[115],"experiments":[116],"evaluate":[118],"performance":[120],"results":[123],"also":[124],"corroborate":[125],"our":[126],"perspective.":[127],"With":[128],"method,":[130],"won":[132],"first":[134],"place":[135],"in":[136],"IJCAI-AAAC":[137],"2019":[138],"Non-targeted":[139],"Adversarial":[140],"Attack":[141],"competition.":[142]},"counts_by_year":[{"year":2026,"cited_by_count":11},{"year":2025,"cited_by_count":34},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":20},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":5}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}