{"id":"https://openalex.org/W4319300797","doi":"https://doi.org/10.1109/wacv56688.2023.00454","title":"Certified Defense for Content Based Image Retrieval","display_name":"Certified Defense for Content Based Image Retrieval","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4319300797","doi":"https://doi.org/10.1109/wacv56688.2023.00454"},"language":"en","primary_location":{"id":"doi:10.1109/wacv56688.2023.00454","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/wacv56688.2023.00454","pdf_url":null,"source":{"id":"https://openalex.org/S4363607736","display_name":"IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055148101","display_name":"Kazuya Kakizaki","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]},{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuya Kakizaki","raw_affiliation_strings":["University of Tsukuba,NEC Corporation,Kawasaki,Japan","NEC Corporation, University of Tsukuba, Kawasaki, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Tsukuba,NEC Corporation,Kawasaki,Japan","institution_ids":["https://openalex.org/I118347220","https://openalex.org/I146399215"]},{"raw_affiliation_string":"NEC Corporation, University of Tsukuba, Kawasaki, Japan","institution_ids":["https://openalex.org/I118347220","https://openalex.org/I146399215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008914720","display_name":"Kazuto Fukuchi","orcid":"https://orcid.org/0000-0003-3895-219X","observed_orcids":["https://orcid.org/0000-0003-3895-219X"]},"institutions":[{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]},{"id":"https://openalex.org/I4210110652","display_name":"RIKEN","ror":"https://ror.org/01sjwvz98","country_code":"JP","type":"facility","lineage":["https://openalex.org/I4210110652"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuto Fukuchi","raw_affiliation_strings":["University of Tsukuba,RIKEN AIP,Tsukuba,Japan","RIKEN AIP, University of Tsukuba, Tsukuba, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Tsukuba,RIKEN AIP,Tsukuba,Japan","institution_ids":["https://openalex.org/I146399215","https://openalex.org/I4210110652"]},{"raw_affiliation_string":"RIKEN AIP, University of Tsukuba, Tsukuba, Japan","institution_ids":["https://openalex.org/I146399215"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022139141","display_name":"Jun Sakuma","orcid":"https://orcid.org/0000-0001-5015-3812","observed_orcids":["https://orcid.org/0000-0001-5015-3812"]},"institutions":[{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]},{"id":"https://openalex.org/I4210110652","display_name":"RIKEN","ror":"https://ror.org/01sjwvz98","country_code":"JP","type":"facility","lineage":["https://openalex.org/I4210110652"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jun Sakuma","raw_affiliation_strings":["University of Tsukuba,RIKEN AIP,Tsukuba,Japan","RIKEN AIP, University of Tsukuba, Tsukuba, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Tsukuba,RIKEN AIP,Tsukuba,Japan","institution_ids":["https://openalex.org/I146399215","https://openalex.org/I4210110652"]},{"raw_affiliation_string":"RIKEN AIP, University of Tsukuba, Tsukuba, Japan","institution_ids":["https://openalex.org/I146399215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9979,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.76160704,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"31","issue":null,"first_page":"4550","last_page":"4559"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10824","display_name":"Image Retrieval and Classification Techniques","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/certified-defenses","display_name":"certified defenses","score":0.7910000085830688},{"id":"https://openalex.org/keywords/content-based-image-retrieval","display_name":"content-based image retrieval","score":0.9440000057220459},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.9959999918937683},{"id":"https://openalex.org/keywords/certified-robustness","display_name":"certified robustness","score":0.968999981880188},{"id":"https://openalex.org/keywords/deep-neural-network","display_name":"deep neural network","score":0.7350000143051147},{"id":"https://openalex.org/keywords/verification-algorithms","display_name":"verification algorithms","score":0.7459999918937683},{"id":"https://openalex.org/keywords/ranking-robustness","display_name":"ranking robustness","score":0.6430000066757202}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8817464113235474},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.711673378944397},{"id":"https://openalex.org/C2780052074","wikidata":"https://www.wikidata.org/wiki/Q1128648","display_name":"Content-based image retrieval","level":4,"score":0.6314691305160522},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5695372819900513},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5249219536781311},{"id":"https://openalex.org/C1667742","wikidata":"https://www.wikidata.org/wiki/Q10927554","display_name":"Image retrieval","level":3,"score":0.5095146298408508},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5049927830696106},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47152408957481384},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3731703758239746},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.19925305247306824},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wacv56688.2023.00454","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/wacv56688.2023.00454","pdf_url":null,"source":{"id":"https://openalex.org/S4363607736","display_name":"IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G7810789773","display_name":"Deep learning security and privacy focused on human-machine recognition gap","funder_award_id":"19H04164","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W398859631","https://openalex.org/W1522301498","https://openalex.org/W1686810756","https://openalex.org/W1797268635","https://openalex.org/W1945616565","https://openalex.org/W2096733369","https://openalex.org/W2112796928","https://openalex.org/W2516574342","https://openalex.org/W2594877703","https://openalex.org/W2750384547","https://openalex.org/W2785755647","https://openalex.org/W2891698621","https://openalex.org/W2898963688","https://openalex.org/W2900153411","https://openalex.org/W2910603373","https://openalex.org/W2962756933","https://openalex.org/W2962864294","https://openalex.org/W2963857521","https://openalex.org/W2963988212","https://openalex.org/W2969633865","https://openalex.org/W2984942115","https://openalex.org/W2990945337","https://openalex.org/W2998904801","https://openalex.org/W3009756253","https://openalex.org/W3016193692","https://openalex.org/W3083878034","https://openalex.org/W3093070413","https://openalex.org/W3102720581","https://openalex.org/W3103340107","https://openalex.org/W3108274592","https://openalex.org/W3109275961","https://openalex.org/W3118608800","https://openalex.org/W3125380646","https://openalex.org/W3125736290","https://openalex.org/W3165917199","https://openalex.org/W3176237992","https://openalex.org/W3204189730","https://openalex.org/W3208732533","https://openalex.org/W4214645465","https://openalex.org/W6631190155","https://openalex.org/W6637373629","https://openalex.org/W6638319203","https://openalex.org/W6640425456","https://openalex.org/W6736207377","https://openalex.org/W6739868092","https://openalex.org/W6743688258","https://openalex.org/W6748093715","https://openalex.org/W6748458661","https://openalex.org/W6750745550","https://openalex.org/W6754543342","https://openalex.org/W6755480234","https://openalex.org/W6758779121","https://openalex.org/W6763911020","https://openalex.org/W6771967508","https://openalex.org/W6774549192","https://openalex.org/W6782106965","https://openalex.org/W6787972765","https://openalex.org/W6789883375","https://openalex.org/W6796239886","https://openalex.org/W6802419594"],"related_works":["https://openalex.org/W1996690921","https://openalex.org/W2746816529","https://openalex.org/W2900811989","https://openalex.org/W2341223103","https://openalex.org/W2905186525","https://openalex.org/W1499339903","https://openalex.org/W2044706866","https://openalex.org/W2031096531","https://openalex.org/W2080928936","https://openalex.org/W4367727948"],"abstract_inverted_index":{"This":[0],"paper":[1],"develops":[2],"a":[3],"certified":[4,27,33,48,74,82,115,157,178],"defense":[5,28,75],"for":[6,29,76,143],"deep":[7],"neural":[8],"network":[9],"(DNN)":[10],"based":[11,13],"content":[12],"image":[14],"retrieval":[15],"(CBIR)":[16],"against":[17,64],"adversarial":[18,62],"examples":[19],"(AXs).":[20],"Previous":[21],"works":[22],"put":[23],"their":[24],"effort":[25],"into":[26],"classification":[30,65],"to":[31,40,55],"improve":[32,176],"robustness,":[34],"which":[35,86],"guarantees":[36,87],"that":[37,88,91,111,148,154,171],"no":[38,89],"AX":[39,90],"cause":[41],"misclassification":[42],"exists":[43,97],"around":[44,98],"the":[45,59,73,93,99,114,150,156,163,177],"sample.":[46],"Such":[47],"defense,":[49],"however,":[50],"could":[51],"not":[52],"be":[53],"applied":[54],"CBIR":[56,67,96,118,160,181],"directly":[57],"because":[58],"goals":[60],"of":[61,84,95,117,127,132,152,159,180],"attack":[63],"and":[66,124,134,165],"are":[68],"completely":[69],"different.":[70],"To":[71],"develop":[72],"CBIR,":[77,85],"we":[78,105,138],"first":[79],"define":[80],"new":[81,140],"robustness":[83,116,158,179],"changes":[92],"ranking":[94],"query":[100],"or":[101],"candidate":[102],"images.":[103,136],"Then,":[104],"propose":[106,139],"computationally":[107],"tractable":[108],"verification":[109],"algorithms":[110],"verify":[112],"whether":[113],"is":[119],"achieved":[120],"by":[121,161],"utilizing":[122],"upper":[123,164],"lower":[125,166],"bounds":[126],"distances":[128],"between":[129],"feature":[130,145],"representations":[131],"perturbed":[133],"non-perturbed":[135],"Finally,":[137],"objective":[141,173],"functions":[142,174],"training":[144],"extraction":[146],"DNNs":[147],"increases":[149],"number":[151],"inputs":[153],"satisfy":[155],"tightening":[162],"bounds.":[167],"Experimental":[168],"results":[169],"show":[170],"our":[172],"significantly":[175],"than":[182],"existing":[183],"methods.":[184]},"counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-10-05T09:50:58.205359","created_date":"2025-10-10T00:00:00"}