{"id":"https://openalex.org/W4380763484","doi":"https://doi.org/10.1109/tsc.2023.3286583","title":"Securing Deep Learning as a Service Against Adaptive High Frequency Attacks With MMCAT","display_name":"Securing Deep Learning as a Service Against Adaptive High Frequency Attacks With MMCAT","publication_year":2023,"publication_date":"2023-06-15","ids":{"openalex":"https://openalex.org/W4380763484","doi":"https://doi.org/10.1109/tsc.2023.3286583"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2023.3286583","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2023.3286583","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086376919","display_name":"Bingbing Song","orcid":"https://orcid.org/0000-0003-3758-6546"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingbing Song","raw_affiliation_strings":["School of Information Science & Engineering, Yunnan University, Kunming, Yunnan, China"],"raw_orcid":"https://orcid.org/0000-0003-3758-6546","affiliations":[{"raw_affiliation_string":"School of Information Science & Engineering, Yunnan University, Kunming, Yunnan, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101848673","display_name":"Ruxin Wang","orcid":"https://orcid.org/0000-0002-2730-9409"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruxin Wang","raw_affiliation_strings":["National Pilot School of Software and Engineering Research Center of Cyberspace, Yunnan University, Kunming, Yunnan, China"],"raw_orcid":"https://orcid.org/0000-0002-2730-9409","affiliations":[{"raw_affiliation_string":"National Pilot School of Software and Engineering Research Center of Cyberspace, Yunnan University, Kunming, Yunnan, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102814071","display_name":"Song Gao","orcid":"https://orcid.org/0000-0002-7169-6370"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Gao","raw_affiliation_strings":["National Pilot School of Software, Yunnan University, Kunming, Yunnan, China"],"raw_orcid":"https://orcid.org/0000-0002-7169-6370","affiliations":[{"raw_affiliation_string":"National Pilot School of Software, Yunnan University, Kunming, Yunnan, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053902963","display_name":"Yunyun Dong","orcid":"https://orcid.org/0009-0004-5251-9928"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunyun Dong","raw_affiliation_strings":["National Pilot School of Software, Yunnan University, Kunming, Yunnan, China"],"raw_orcid":"https://orcid.org/0009-0004-5251-9928","affiliations":[{"raw_affiliation_string":"National Pilot School of Software, Yunnan University, Kunming, Yunnan, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100343991","display_name":"Ling Liu","orcid":"https://orcid.org/0000-0002-4138-3082"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ling Liu","raw_affiliation_strings":["College of Computing, Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":"https://orcid.org/0000-0002-4138-3082","affiliations":[{"raw_affiliation_string":"College of Computing, Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051349066","display_name":"Wei Zhou","orcid":"https://orcid.org/0000-0002-5881-9436"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Zhou","raw_affiliation_strings":["National Pilot School of Software and Engineering Research Center of Cyberspace, Yunnan University, Kunming, Yunnan, China"],"raw_orcid":"https://orcid.org/0000-0002-5881-9436","affiliations":[{"raw_affiliation_string":"National Pilot School of Software and Engineering Research Center of Cyberspace, Yunnan University, Kunming, Yunnan, China","institution_ids":["https://openalex.org/I189210763"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3173,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.61109589,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":"16","issue":"5","first_page":"3723","last_page":"3735"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9383000135421753,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8121222853660583},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7000814080238342},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6913178563117981},{"id":"https://openalex.org/keywords/frequency-domain","display_name":"Frequency domain","score":0.5509117245674133},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5224296450614929},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4981653690338135},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47048380970954895},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.43500688672065735},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4327068328857422},{"id":"https://openalex.org/keywords/modal","display_name":"Modal","score":0.4239610433578491},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.11163374781608582}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8121222853660583},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7000814080238342},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6913178563117981},{"id":"https://openalex.org/C19118579","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Frequency domain","level":2,"score":0.5509117245674133},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5224296450614929},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4981653690338135},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47048380970954895},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.43500688672065735},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4327068328857422},{"id":"https://openalex.org/C71139939","wikidata":"https://www.wikidata.org/wiki/Q910194","display_name":"Modal","level":2,"score":0.4239610433578491},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.11163374781608582},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C188027245","wikidata":"https://www.wikidata.org/wiki/Q750446","display_name":"Polymer chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2023.3286583","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2023.3286583","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2408903403","display_name":null,"funder_award_id":"62101480","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2703468498","display_name":null,"funder_award_id":"62162067","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":62,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2302255633","https://openalex.org/W2408141691","https://openalex.org/W2535690855","https://openalex.org/W2791953061","https://openalex.org/W2905423756","https://openalex.org/W2913266441","https://openalex.org/W2913848079","https://openalex.org/W2949582403","https://openalex.org/W2950782995","https://openalex.org/W2951062700","https://openalex.org/W2951611096","https://openalex.org/W2954165282","https://openalex.org/W2963143631","https://openalex.org/W2963465081","https://openalex.org/W2963745020","https://openalex.org/W2963857521","https://openalex.org/W2964301649","https://openalex.org/W2965496811","https://openalex.org/W2971028215","https://openalex.org/W2972212613","https://openalex.org/W2973934518","https://openalex.org/W2982648698","https://openalex.org/W3027282887","https://openalex.org/W3034175346","https://openalex.org/W3034678948","https://openalex.org/W3035743198","https://openalex.org/W3118608800","https://openalex.org/W3166466426","https://openalex.org/W3175786209","https://openalex.org/W3190229640","https://openalex.org/W3202911773","https://openalex.org/W4288261383","https://openalex.org/W4288359148","https://openalex.org/W4288360049","https://openalex.org/W4288363925","https://openalex.org/W4293846201","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6714069269","https://openalex.org/W6739868092","https://openalex.org/W6748475379","https://openalex.org/W6748965907","https://openalex.org/W6755308174","https://openalex.org/W6758975236","https://openalex.org/W6759129252","https://openalex.org/W6759580348","https://openalex.org/W6761100157","https://openalex.org/W6761839128","https://openalex.org/W6762775584","https://openalex.org/W6763810570","https://openalex.org/W6763924878","https://openalex.org/W6764110253","https://openalex.org/W6764942769","https://openalex.org/W6766951806","https://openalex.org/W6767757807","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W3203790781","https://openalex.org/W2997056298","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W3127875750","https://openalex.org/W4383221314","https://openalex.org/W2953536436"],"abstract_inverted_index":{"Most":[0],"cloud":[1],"providers":[2],"offer":[3],"Deep":[4],"Learning":[5],"as":[6,51,231],"a":[7,52,55,168,180,224],"Service":[8],"(DLaaS)":[9],"for":[10,171,196,242,249],"different":[11],"business,":[12],"science":[13],"and":[14,64,200,277],"engineering":[15],"domains.":[16],"However,":[17],"it":[18],"is":[19,177],"known":[20],"that":[21,98,141,259],"deep":[22,49],"neural":[23,99,146,159],"networks":[24,100,147,160],"(DNNs)":[25],"are":[26,82,87,148,161],"vulnerable":[27],"to":[28,37,43,89,95,104,130,202,210],"adversarial":[29,61,80,124,163,174,227,282],"examples,":[30,175],"which":[31,176,233],"can":[32],"cause":[33],"well-trained":[34],"DNN":[35],"models":[36,113],"misbehave":[38],"by":[39,118,179],"injecting":[40],"human-imperceptible":[41],"perturbations":[42,81],"the":[44,66,106,112,119,131,137,142,145,155,184,193,212,235,239,265,270,280],"query":[45],"input":[46,62,240],"data.":[47],"Securing":[48],"learning":[50,150,194,251],"service":[53,135,216,267],"becomes":[54],"critical":[56],"challenge":[57],"in":[58,136,149,183],"mitigating":[59],"such":[60,218],"perturbations,":[63],"enhancing":[65],"robustness":[67,213,278],"of":[68,123,133,214,238,252],"DNNs.":[69],"In":[70,208],"this":[71],"article,":[72],"we":[73,222],"report":[74],"two":[75],"important":[76],"facts:":[77],"First,":[78],"most":[79],"high":[83,90,120,152,197],"frequency":[84,91,108,121,153,185,198,206,220,263],"signals":[85,109,122,199],"or":[86],"added":[88],"signals.":[92,207],"Second,":[93],"due":[94],"Frequency":[96],"Principle":[97],"overly":[101],"pay":[102],"attention":[103],"fit":[105],"low":[107,205],"during":[110],"training,":[111,245],"could":[114],"be":[115],"easily":[116],"misled":[117],"examples.":[125,165],"These":[126],"facts":[127],"consequently":[128],"contribute":[129],"vulnerability":[132],"DNNs":[134,215,266],"Cloud.":[138],"We":[139,166],"conjecture":[140],"more":[143,156],"robust":[144],"from":[151],"signals,":[154],"resilient":[157],"these":[158],"against":[162],"perturbed":[164],"propose":[167,223],"novel":[169],"method":[170,191,273],"generating":[172],"high-frequency-enhanced":[173],"achieved":[178],"high-pass":[181],"filter":[182],"domain":[186],"via":[187],"Fourier":[188],"Transform.":[189],"This":[190],"enhances":[192],"ability":[195],"ameliorates":[201],"over-fit":[203],"useless":[204],"order":[209],"improve":[211],"under":[217,260],"signal":[219],"attacks,":[221,264],"multi-modal":[225,236,253],"collaborative":[226,244],"training":[228,283],"framework,":[229],"named":[230],"MMCAT,":[232],"uses":[234],"information":[237],"images":[241],"cross-modal":[243],"delivering":[246],"excellent":[247],"extension":[248],"effectively":[250],"image":[254],"information.":[255],"Extensive":[256],"experiments":[257],"show":[258],"strong":[261],"adaptive":[262],"trained":[268],"with":[269],"proposed":[271],"MMCAT":[272],"achieve":[274],"superior":[275],"performance":[276],"over":[279],"state-of-the-art":[281],"approaches.":[284]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}