{"id":"https://openalex.org/W7148408602","doi":"https://doi.org/10.1109/wifs66636.2025.00037","title":"A Targeted Attack against Certifiably Robust Smoothed Classifiers","display_name":"A Targeted Attack against Certifiably Robust Smoothed Classifiers","publication_year":2025,"publication_date":"2025-12-01","ids":{"openalex":"https://openalex.org/W7148408602","doi":"https://doi.org/10.1109/wifs66636.2025.00037"},"language":null,"primary_location":{"id":"doi:10.1109/wifs66636.2025.00037","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wifs66636.2025.00037","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Workshop on Information Forensics and Security (WIFS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132810066","display_name":"Kai Zeng","orcid":null},"institutions":[{"id":"https://openalex.org/I102064193","display_name":"University of Siena","ror":"https://ror.org/01tevnk56","country_code":"IT","type":"education","lineage":["https://openalex.org/I102064193"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Kai Zeng","raw_affiliation_strings":["University of Siena,Siena,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Siena,Siena,Italy","institution_ids":["https://openalex.org/I102064193"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110156813","display_name":"Mauro Barni","orcid":null},"institutions":[{"id":"https://openalex.org/I102064193","display_name":"University of Siena","ror":"https://ror.org/01tevnk56","country_code":"IT","type":"education","lineage":["https://openalex.org/I102064193"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Barni","raw_affiliation_strings":["University of Siena,Siena,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Siena,Siena,Italy","institution_ids":["https://openalex.org/I102064193"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026139768","display_name":"Benedetta Tondi","orcid":"https://orcid.org/0000-0002-7518-046X"},"institutions":[{"id":"https://openalex.org/I102064193","display_name":"University of Siena","ror":"https://ror.org/01tevnk56","country_code":"IT","type":"education","lineage":["https://openalex.org/I102064193"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Benedetta Tondi","raw_affiliation_strings":["University of Siena,Siena,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Siena,Siena,Italy","institution_ids":["https://openalex.org/I102064193"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102064193"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.75084084,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"168","last_page":"173"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9649999737739563,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9649999737739563,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0032999999821186066,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.367000013589859},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.336899995803833},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.27790001034736633},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.272599995136261},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.2678999900817871}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5058000087738037},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49889999628067017},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.35830000042915344},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.336899995803833},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.27790001034736633},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2761000096797943},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.2531999945640564},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2524999976158142},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2517000138759613}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wifs66636.2025.00037","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wifs66636.2025.00037","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Workshop on Information Forensics and Security (WIFS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W1905153633","https://openalex.org/W2194775991","https://openalex.org/W2963693747","https://openalex.org/W2963952467","https://openalex.org/W3035574324","https://openalex.org/W3133516147","https://openalex.org/W4224917599","https://openalex.org/W4293846201","https://openalex.org/W4412939929"],"related_works":[],"abstract_inverted_index":{"Randomized":[0],"Smoothing":[1],"(RS)":[2],"has":[3],"been":[4],"proposed":[5,138,154],"as":[6],"a":[7,20,33,111,158],"technique":[8],"to":[9,144,161],"develop":[10],"deep":[11],"learning":[12],"classifiers":[13,92],"with":[14,93],"certified":[15,34,68,77],"robustness.":[16],"For":[17],"these":[18],"classifiers,":[19,105],"certain":[21],"level":[22],"of":[23,168],"robustness":[24],"can":[25,36,46,156],"be":[26,37,157],"theoretically":[27],"guaranteed,":[28],"and,":[29],"for":[30],"every":[31],"input,":[32],"radius":[35,45,78],"defined,":[38],"such":[39],"that":[40,136],"no":[41],"perturbation":[42],"within":[43],"this":[44,107],"change":[47],"the":[48,58,72,75,81,84,90,137,146,163],"network":[49],"classification":[50,130],"result.":[51],"Many":[52],"works":[53],"have":[54],"focused":[55],"on":[56,103,121],"extending":[57],"randomized":[59],"smoothing":[60],"theory":[61,82,149],"in":[62,106],"several":[63],"directions":[64],"and":[65,83,131,150,166],"getting":[66],"larger":[67],"robust":[69],"radii.":[70],"However,":[71],"gap":[73,147],"between":[74,148],"empirical":[76,170],"derived":[79],"from":[80,123],"practical":[85,151],"robustness,":[86],"assessed":[87],"by":[88],"attacking":[89],"RS":[91,116,169],"minimum":[94],"distortion":[95],"adversarial":[96],"examples,":[97],"is":[98],"still":[99],"unexplored.":[100],"By":[101],"focusing":[102],"binary":[104],"paper,":[108],"we":[109],"derive":[110],"targeted":[112],"attack":[113,139,155],"algorithm":[114],"against":[115],"classifiers.":[117],"Experiments":[118],"carried":[119],"out":[120],"tasks":[122],"two":[124],"different":[125],"application":[126],"domains,":[127],"namely":[128],"gender":[129],"synthetic":[132],"image":[133],"detection,":[134],"reveal":[135],"outperforms":[140],"existing":[141],"attacks,":[142],"contributing":[143],"closing":[145],"results.":[152],"The":[153],"useful":[159],"tool":[160],"evaluate":[162],"real-world":[164],"effectiveness":[165],"tightness":[167],"certification":[171],"bounds.":[172]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-04-03T00:00:00"}