{"id":"https://openalex.org/W2760947028","doi":"https://doi.org/10.1109/wifs.2017.8267651","title":"The vulnerability of learning to adversarial perturbation increases with intrinsic dimensionality","display_name":"The vulnerability of learning to adversarial perturbation increases with intrinsic dimensionality","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2760947028","doi":"https://doi.org/10.1109/wifs.2017.8267651","mag":"2760947028"},"language":"en","primary_location":{"id":"doi:10.1109/wifs.2017.8267651","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wifs.2017.8267651","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Workshop on Information Forensics and Security (WIFS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-01599355","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002848228","display_name":"Laurent Amsaleg","orcid":"https://orcid.org/0000-0003-0204-0930"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Laurent Amsaleg","raw_affiliation_strings":["CNRS-IRISA, Rennes, France","Creating and exploiting explicit links between multimedia fragments"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNRS-IRISA, Rennes, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937"]},{"raw_affiliation_string":"Creating and exploiting explicit links between multimedia fragments","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031013029","display_name":"James E. Bailey","orcid":"https://orcid.org/0000-0002-9662-3338"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"James Bailey","raw_affiliation_strings":["Dept. of Computing and Information Systems, The University of Melbourne, Australia","Department of Computing and Information Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computing and Information Systems, The University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"Department of Computing and Information Systems","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039978386","display_name":"Dominique Barbe","orcid":null},"institutions":[{"id":"https://openalex.org/I4210146044","display_name":"\u00c9cole Normale Sup\u00e9rieure de Rennes","ror":"https://ror.org/03rxtdc22","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210146044","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Dominique Barbe","raw_affiliation_strings":["ENS Rennes, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ENS Rennes, France","institution_ids":["https://openalex.org/I4210146044"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070030398","display_name":"Sarah Erfani","orcid":"https://orcid.org/0000-0003-0885-0643"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sarah Erfani","raw_affiliation_strings":["Dept. of Computing and Information Systems, The University of Melbourne, Australia","Department of Computing and Information Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computing and Information Systems, The University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"Department of Computing and Information Systems","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025538864","display_name":"Michael E. Houle","orcid":"https://orcid.org/0000-0001-8486-8015"},"institutions":[{"id":"https://openalex.org/I184597095","display_name":"National Institute of Informatics","ror":"https://ror.org/04ksd4g47","country_code":"JP","type":"facility","lineage":["https://openalex.org/I1319490839","https://openalex.org/I184597095","https://openalex.org/I4210158934"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Michael E. Houle","raw_affiliation_strings":["National Institute of Informatics, Tokyo, Japan","National Institute of Informatics,Tokyo, Japan#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Informatics, Tokyo, Japan","institution_ids":["https://openalex.org/I184597095"]},{"raw_affiliation_string":"National Institute of Informatics,Tokyo, Japan#TAB#","institution_ids":["https://openalex.org/I184597095"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014369345","display_name":"Nguyen Duc Vinh","orcid":"https://orcid.org/0000-0001-6557-9912"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Vinh Nguyen","raw_affiliation_strings":["Dept. of Computing and Information Systems, The University of Melbourne, Australia","Department of Computing and Information Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computing and Information Systems, The University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]},{"raw_affiliation_string":"Department of Computing and Information Systems","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025192310","display_name":"Milo\u0161 Radovanovi\u0107","orcid":"https://orcid.org/0000-0003-2225-7803"},"institutions":[{"id":"https://openalex.org/I170726198","display_name":"University of Novi Sad","ror":"https://ror.org/00xa57a59","country_code":"RS","type":"education","lineage":["https://openalex.org/I170726198"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Milos Radovanovic","raw_affiliation_strings":["Dept. of Mathematics and Informatics, University of Novi Sad, Serbia","Department of Mathematics and Informatics [Novi Sad]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Mathematics and Informatics, University of Novi Sad, Serbia","institution_ids":["https://openalex.org/I170726198"]},{"raw_affiliation_string":"Department of Mathematics and Informatics [Novi Sad]","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9764999747276306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8595156073570251},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.7671270966529846},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.537434458732605},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.49953269958496094},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4881194531917572},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3856150507926941},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.24600088596343994},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1652718484401703},{"id":"https://openalex.org/keywords/quantum-mechanics","display_name":"Quantum mechanics","score":0.15815582871437073}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8595156073570251},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.7671270966529846},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.537434458732605},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.49953269958496094},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4881194531917572},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3856150507926941},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.24600088596343994},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1652718484401703},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.15815582871437073}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/wifs.2017.8267651","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wifs.2017.8267651","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Workshop on Information Forensics and Security (WIFS)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-01599355v1","is_oa":true,"landing_page_url":"https://hal.science/hal-01599355","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"WIFS 2017 - 9th IEEE International Workshop on Information Forensics and Security, Dec 2017, Rennes, France","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01599355v1","is_oa":true,"landing_page_url":"https://hal.science/hal-01599355","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"WIFS 2017 - 9th IEEE International Workshop on Information Forensics and Security, Dec 2017, Rennes, France","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4481040435","display_name":"Practical and Effective Data Mining Via Local Intrinsic Dimensional Modeling","funder_award_id":"15H02753","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1969967031","https://openalex.org/W1970647353","https://openalex.org/W2022845879","https://openalex.org/W2028569884","https://openalex.org/W2029401646","https://openalex.org/W2032121576","https://openalex.org/W2059507684","https://openalex.org/W2064529213","https://openalex.org/W2084434464","https://openalex.org/W2107779728","https://openalex.org/W2113957760","https://openalex.org/W2115845039","https://openalex.org/W2122111042","https://openalex.org/W2124812588","https://openalex.org/W2127248062","https://openalex.org/W2132234208","https://openalex.org/W2136794446","https://openalex.org/W2169036209","https://openalex.org/W2296452361","https://openalex.org/W2758659144","https://openalex.org/W2963003451","https://openalex.org/W2963207607","https://openalex.org/W2963955657","https://openalex.org/W2964153729","https://openalex.org/W4238652859","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6685208663","https://openalex.org/W6685943642"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W2482350142","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"Recent":[0],"research":[1],"has":[2,50,71],"shown":[3],"that":[4,34,54,103,121,144],"machine":[5],"learning":[6,90],"systems,":[7],"including":[8],"state-of-the-art":[9],"deep":[10],"neural":[11],"networks,":[12],"are":[13],"vulnerable":[14],"to":[15,20,45,91,116],"adversarial":[16,28,56,69,87,162],"attacks.":[17],"By":[18],"adding":[19,139],"the":[21,35,42,66,86,92,96,105,147,157,172],"input":[22],"object":[23,44],"an":[24,140,153],"imperceptible":[25],"amount":[26,141],"of":[27,65,68,89,95,127,142,156,159,174],"noise,":[29],"it":[30],"is":[31],"highly":[32],"likely":[33],"classifier":[36],"can":[37,131],"be":[38,132],"tricked":[39],"into":[40,134],"assigning":[41],"modified":[43],"any":[46],"desired":[47],"class.":[48],"It":[49],"also":[51,151],"been":[52],"observed":[53],"these":[55],"samples":[57,70],"generalize":[58],"well":[59],"across":[60],"models.":[61],"A":[62],"complete":[63],"understanding":[64],"nature":[67],"not":[72],"yet":[73],"emerged.":[74],"Towards":[75],"this":[76],"goal,":[77],"we":[78],"present":[79],"a":[80,124,128],"novel":[81],"theoretical":[82],"result":[83,176],"formally":[84],"linking":[85],"vulnerability":[88],"intrinsic":[93,107],"dimensionality":[94,108],"data.":[97],"In":[98],"particular,":[99],"our":[100,175],"investigation":[101],"establishes":[102],"as":[104,146],"local":[106],"(LID)":[109],"increases,":[110],"1-NN":[111],"classifiers":[112],"become":[113],"increasingly":[114],"prone":[115],"being":[117],"subverted.":[118],"We":[119,150],"show":[120],"in":[122],"expectation,":[123],"k-nearest":[125],"neighbor":[126,137],"test":[129],"point":[130],"transformed":[133],"its":[135],"1-nearest":[136],"by":[138],"noise":[143],"diminishes":[145],"LID":[148,160],"increases.":[149],"provide":[152],"experimental":[154],"validation":[155],"impact":[158],"on":[161],"perturbation":[163],"for":[164,177],"both":[165],"synthetic":[166],"and":[167,170],"real":[168],"data,":[169],"discuss":[171],"implications":[173],"general":[178],"classifiers.":[179]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":9},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}