{"id":"https://openalex.org/W2912108684","doi":"https://doi.org/10.1109/cisp-bmei.2018.8633182","title":"Characterizing Adversarial Samples of Convolutional Neural Networks","display_name":"Characterizing Adversarial Samples of Convolutional Neural Networks","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2912108684","doi":"https://doi.org/10.1109/cisp-bmei.2018.8633182","mag":"2912108684"},"language":"en","primary_location":{"id":"doi:10.1109/cisp-bmei.2018.8633182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cisp-bmei.2018.8633182","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059966520","display_name":"Cheng Jiang","orcid":"https://orcid.org/0000-0001-7655-9140"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Cheng Jiang","raw_affiliation_strings":["NLSDE, Beihang University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"NLSDE, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103057112","display_name":"Qiyang Zhao","orcid":"https://orcid.org/0000-0002-8476-5742"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiyang Zhao","raw_affiliation_strings":["NLSDE, Beihang University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"NLSDE, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103103154","display_name":"Yuzhong Liu","orcid":"https://orcid.org/0000-0001-8360-5037"},"institutions":[{"id":"https://openalex.org/I4210103986","display_name":"Jingdong (China)","ror":"https://ror.org/01dkjkq64","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210103986"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuzhong Liu","raw_affiliation_strings":["Tech Infrastructure Group, JD, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tech Infrastructure Group, JD, Beijing, China","institution_ids":["https://openalex.org/I4210103986"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5059966520"],"corresponding_institution_ids":["https://openalex.org/I82880672"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17294552,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9782999753952026,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9695000052452087,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9611279368400574},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.8123022317886353},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7194167375564575},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6831249594688416},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6669928431510925},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5119372606277466},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.49773529171943665},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4567199945449829},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.42028331756591797},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3682699203491211}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9611279368400574},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.8123022317886353},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7194167375564575},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6831249594688416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6669928431510925},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5119372606277466},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.49773529171943665},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4567199945449829},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.42028331756591797},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3682699203491211},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cisp-bmei.2018.8633182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cisp-bmei.2018.8633182","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics (CISP-BMEI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1932198206","https://openalex.org/W1945616565","https://openalex.org/W2095195675","https://openalex.org/W2180290696","https://openalex.org/W2230740169","https://openalex.org/W2269778407","https://openalex.org/W2342045095","https://openalex.org/W2460937040","https://openalex.org/W2561975083","https://openalex.org/W2590523583","https://openalex.org/W2594867206","https://openalex.org/W2605631833","https://openalex.org/W2963098487","https://openalex.org/W2963143631","https://openalex.org/W2963154688","https://openalex.org/W2963564844","https://openalex.org/W2963695663","https://openalex.org/W2963784236","https://openalex.org/W2963955657","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W4293584023","https://openalex.org/W4294349862","https://openalex.org/W4297573953","https://openalex.org/W4300511536","https://openalex.org/W4381325153","https://openalex.org/W6637162671","https://openalex.org/W6639568328","https://openalex.org/W6685488650","https://openalex.org/W6685943642","https://openalex.org/W6711870810","https://openalex.org/W6733645847","https://openalex.org/W6734483310","https://openalex.org/W6736296761","https://openalex.org/W6736640963","https://openalex.org/W6748475379"],"related_works":["https://openalex.org/W4226493464","https://openalex.org/W4312417841","https://openalex.org/W3133861977","https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W2951211570","https://openalex.org/W3103566983","https://openalex.org/W3167935049","https://openalex.org/W3093978547"],"abstract_inverted_index":{"Adversarial":[0],"samples":[1,19],"aim":[2],"to":[3,29,54,65,75],"make":[4],"deep":[5],"convolutional":[6,21,70],"neural":[7,22,71],"networks":[8,23,72],"predict":[9],"incorrectly":[10],"under":[11],"small":[12],"perturbations.":[13],"This":[14],"paper":[15],"investigates":[16],"non-targeted":[17],"adversarial":[18,31,38,47,80],"of":[20,69],"and":[24,73],"makes":[25],"a":[26,62],"primitive":[27],"attempt":[28],"characterize":[30],"samples.":[32,81],"Two":[33],"observations":[34,60],"are":[35,40],"made:":[36],"first,":[37],"perturbations":[39],"mainly":[41],"in":[42],"the":[43,55,67],"high-frequency":[44],"domain;":[45],"second,":[46],"categories":[48],"usually":[49],"have":[50],"strong":[51],"semantic":[52],"relevance":[53],"original":[56],"categories.":[57],"Our":[58],"two":[59],"provide":[61],"solid":[63],"basis":[64],"understand":[66],"behavior":[68],"thus":[74],"improve":[76],"their":[77],"robustness":[78],"against":[79]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}