{"id":"https://openalex.org/W4389633739","doi":"https://doi.org/10.1109/tpami.2023.3341639","title":"Variational Adversarial Defense: A Bayes Perspective for Adversarial Training","display_name":"Variational Adversarial Defense: A Bayes Perspective for Adversarial Training","publication_year":2023,"publication_date":"2023-12-12","ids":{"openalex":"https://openalex.org/W4389633739","doi":"https://doi.org/10.1109/tpami.2023.3341639","pmid":"https://pubmed.ncbi.nlm.nih.gov/38090827"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2023.3341639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2023.3341639","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022881493","display_name":"Chenglong Zhao","orcid":"https://orcid.org/0000-0002-4583-4258"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenglong Zhao","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-4583-4258","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026460309","display_name":"Shibin Mei","orcid":"https://orcid.org/0009-0005-6315-4642"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shibin Mei","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0005-6315-4642","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014362734","display_name":"Bingbing Ni","orcid":"https://orcid.org/0000-0001-7339-028X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingbing Ni","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-7339-028X","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033707937","display_name":"Shengchao Yuan","orcid":"https://orcid.org/0000-0002-8914-489X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengchao Yuan","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-8914-489X","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061038696","display_name":"Zhenbo Yu","orcid":"https://orcid.org/0000-0003-1310-5728"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenbo Yu","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-1310-5728","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100384886","display_name":"Jun Wang","orcid":"https://orcid.org/0000-0003-2177-9757"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I2800372957","display_name":"China Electronics Technology Group Corporation","ror":"https://ror.org/0098hst83","country_code":"CN","type":"company","lineage":["https://openalex.org/I2800372957"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Wang","raw_affiliation_strings":["HIK Research Institute of China Electronics Technology Group Corporation, Zhejiang, China","School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, China"],"raw_orcid":"https://orcid.org/0000-0003-2177-9757","affiliations":[{"raw_affiliation_string":"HIK Research Institute of China Electronics Technology Group Corporation, Zhejiang, China","institution_ids":["https://openalex.org/I2800372957"]},{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiaotong University, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.269,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.8356871,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"46","issue":"5","first_page":"3047","last_page":"3063"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9775999784469604,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8435604572296143},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6401979327201843},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5751613974571228},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.5268346667289734},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.4861871600151062},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.45625409483909607},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.45048192143440247},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4476904273033142},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.438342809677124},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.42832985520362854},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.42048177123069763},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4128100872039795},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.25393182039260864},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.21046602725982666},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.13398417830467224}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8435604572296143},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6401979327201843},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5751613974571228},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.5268346667289734},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.4861871600151062},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.45625409483909607},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.45048192143440247},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4476904273033142},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.438342809677124},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.42832985520362854},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.42048177123069763},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4128100872039795},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.25393182039260864},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.21046602725982666},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.13398417830467224},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tpami.2023.3341639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2023.3341639","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:38090827","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/38090827","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7599999904632568,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1576204990","display_name":null,"funder_award_id":"61976137","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G805875641","display_name":null,"funder_award_id":"U20B2072","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":115,"referenced_works":["https://openalex.org/W1536680647","https://openalex.org/W1601795611","https://openalex.org/W1903029394","https://openalex.org/W1934021597","https://openalex.org/W1945616565","https://openalex.org/W1959608418","https://openalex.org/W2135194391","https://openalex.org/W2194775991","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2610190180","https://openalex.org/W2620038827","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2798302089","https://openalex.org/W2885039223","https://openalex.org/W2891511203","https://openalex.org/W2895097814","https://openalex.org/W2896078964","https://openalex.org/W2906208681","https://openalex.org/W2945557596","https://openalex.org/W2950808778","https://openalex.org/W2962872506","https://openalex.org/W2963542245","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W2964116600","https://openalex.org/W2968009374","https://openalex.org/W2971848556","https://openalex.org/W2976345833","https://openalex.org/W2979450790","https://openalex.org/W2981817257","https://openalex.org/W2981892732","https://openalex.org/W2982648698","https://openalex.org/W2983219069","https://openalex.org/W2983838625","https://openalex.org/W2984699060","https://openalex.org/W2985282977","https://openalex.org/W2985451033","https://openalex.org/W2985987886","https://openalex.org/W2988535323","https://openalex.org/W2992308087","https://openalex.org/W3009756253","https://openalex.org/W3034537217","https://openalex.org/W3035743198","https://openalex.org/W3091918696","https://openalex.org/W3092171228","https://openalex.org/W3104032928","https://openalex.org/W3106412272","https://openalex.org/W3107235539","https://openalex.org/W3116074996","https://openalex.org/W3194499564","https://openalex.org/W3203486979","https://openalex.org/W3211771658","https://openalex.org/W4287242024","https://openalex.org/W4287776850","https://openalex.org/W4293846201","https://openalex.org/W4294030873","https://openalex.org/W4294562888","https://openalex.org/W4375839990","https://openalex.org/W4394665857","https://openalex.org/W6629510986","https://openalex.org/W6633434192","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6640963894","https://openalex.org/W6684578138","https://openalex.org/W6729756640","https://openalex.org/W6735013348","https://openalex.org/W6744627333","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6747920752","https://openalex.org/W6748204703","https://openalex.org/W6748475379","https://openalex.org/W6748711285","https://openalex.org/W6750404860","https://openalex.org/W6750707585","https://openalex.org/W6751535199","https://openalex.org/W6752985256","https://openalex.org/W6753044988","https://openalex.org/W6754438973","https://openalex.org/W6755310938","https://openalex.org/W6759129252","https://openalex.org/W6759580348","https://openalex.org/W6761100157","https://openalex.org/W6761833289","https://openalex.org/W6762681652","https://openalex.org/W6762707182","https://openalex.org/W6763194189","https://openalex.org/W6764550947","https://openalex.org/W6764942769","https://openalex.org/W6766132365","https://openalex.org/W6766725774","https://openalex.org/W6768008261","https://openalex.org/W6772461460","https://openalex.org/W6773304887","https://openalex.org/W6773424267","https://openalex.org/W6774341790","https://openalex.org/W6774469542","https://openalex.org/W6774681163","https://openalex.org/W6783934630","https://openalex.org/W6783953417","https://openalex.org/W6784426856","https://openalex.org/W6784477419","https://openalex.org/W6793087482","https://openalex.org/W6795838898","https://openalex.org/W6803491935","https://openalex.org/W6803606285","https://openalex.org/W6803817518","https://openalex.org/W6811413059","https://openalex.org/W6838840671","https://openalex.org/W6839175653","https://openalex.org/W6864375880"],"related_works":["https://openalex.org/W4362597605","https://openalex.org/W3202158018","https://openalex.org/W2952270521","https://openalex.org/W1934446750","https://openalex.org/W4286235935","https://openalex.org/W4385154961","https://openalex.org/W4310513257","https://openalex.org/W4225319475","https://openalex.org/W2297581032","https://openalex.org/W4384296820"],"abstract_inverted_index":{"Various":[0],"methods":[1],"have":[2],"been":[3],"proposed":[4,143,189],"to":[5,24,42,76,123,139],"defend":[6,118],"against":[7],"adversarial":[8,31,50,58,91,111,153,163],"attacks.":[9,141],"However,":[10],"there":[11],"is":[12,191],"a":[13,64,73,94,98,136,157,176],"lack":[14],"of":[15,19,29,86,110,151,183],"enough":[16],"theoretical":[17,74],"guarantee":[18],"the":[20,36,78,84,87,108,117,146,166,172,181,184,188,194],"performance,":[21],"thus":[22,61,134],"leading":[23],"two":[25],"problems:":[26],"First,":[27],"deficiency":[28],"necessary":[30],"training":[32,88,100,173],"samples":[33],"might":[34],"attenuate":[35],"normal":[37],"gradient's":[38],"back-propagation,":[39],"which":[40,198],"leads":[41],"overfitting":[43],"and":[44,60,83,169],"gradient":[45],"masking":[46],"potentially.":[47],"Second,":[48],"point-wise":[49,122],"sampling":[51],"offers":[52],"an":[53,126],"insufficient":[54],"support":[55,128,178],"region":[56,129,179],"for":[57,130],"data":[59],"cannot":[62],"form":[63],"robust":[65,81,132],"decision-boundary.":[66],"To":[67],"solve":[68],"these":[69],"issues,":[70],"we":[71,96,160],"provide":[72],"analysis":[75],"reveal":[77],"relationship":[79],"between":[80],"accuracy":[82],"complexity":[85],"set":[89,174],"in":[90],"training.":[92],"As":[93],"result,":[95],"propose":[97],"novel":[99,114],"scheme":[101,119],"called":[102],"Variational":[103],"Adversarial":[104],"Defense.":[105],"Based":[106],"on":[107],"distribution":[109],"samples,":[112],"this":[113],"construction":[115],"upgrades":[116],"from":[120,165],"local":[121],"distribution-wise,":[124],"yielding":[125],"enlarged":[127],"safeguarding":[131],"training,":[133],"possessing":[135],"higher":[137],"promising":[138],"defense":[140],"The":[142],"method":[144,190],"features":[145],"following":[147],"advantages:":[148],"1)":[149],"Instead":[150],"seeking":[152],"examples":[154,164],"point-by-point":[155],"(in":[156],"sequential":[158],"way),":[159],"draw":[161],"diverse":[162],"inferred":[167],"distribution;":[168],"2)":[170],"Augmenting":[171],"by":[175],"larger":[177],"consolidates":[180],"smoothness":[182],"decision":[185],"boundary.":[186],"Finally,":[187],"analyzed":[192],"via":[193],"Taylor":[195],"expansion":[196],"technique,":[197],"casts":[199],"our":[200],"solution":[201],"with":[202],"natural":[203],"interpretability.":[204]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}