{"id":"https://openalex.org/W3207908683","doi":"https://doi.org/10.1145/3474085.3475171","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","display_name":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","publication_year":2021,"publication_date":"2021-10-17","ids":{"openalex":"https://openalex.org/W3207908683","doi":"https://doi.org/10.1145/3474085.3475171","mag":"3207908683"},"language":"en","primary_location":{"id":"doi:10.1145/3474085.3475171","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3474085.3475171","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036183844","display_name":"Yihao Huang","orcid":"https://orcid.org/0000-0002-5784-770X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yihao Huang","raw_affiliation_strings":["East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026239594","display_name":"Qing Guo","orcid":"https://orcid.org/0000-0003-0974-9299"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Qing Guo","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034751153","display_name":"Felix Juefei-Xu","orcid":"https://orcid.org/0000-0002-0857-8611"},"institutions":[{"id":"https://openalex.org/I4210095624","display_name":"Alibaba Group (United States)","ror":"https://ror.org/00rn0m335","country_code":"US","type":"company","lineage":["https://openalex.org/I4210095624","https://openalex.org/I45928872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Felix Juefei-Xu","raw_affiliation_strings":["Alibaba Group, USA, San Mateo, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alibaba Group, USA, San Mateo, CA, USA","institution_ids":["https://openalex.org/I4210095624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101468661","display_name":"Lei Ma","orcid":"https://orcid.org/0000-0002-8621-2420"},"institutions":[{"id":"https://openalex.org/I154425047","display_name":"University of Alberta","ror":"https://ror.org/0160cpw27","country_code":"CA","type":"education","lineage":["https://openalex.org/I154425047"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lei Ma","raw_affiliation_strings":["University of Alberta, Edmonton, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Alberta, Edmonton, BC, Canada","institution_ids":["https://openalex.org/I154425047"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107246472","display_name":"Weikai Miao","orcid":"https://orcid.org/0009-0006-2038-439X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weikai Miao","raw_affiliation_strings":["East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technology University, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technology University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054490662","display_name":"Geguang Pu","orcid":"https://orcid.org/0000-0001-9750-8334"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Geguang Pu","raw_affiliation_strings":["East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4653,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.85583858,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"395","last_page":"403"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9602000117301941,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8400484323501587},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7579619884490967},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7282037138938904},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.6975789070129395},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6230002045631409},{"id":"https://openalex.org/keywords/noise-reduction","display_name":"Noise reduction","score":0.5995792150497437},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.46470609307289124},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.42710524797439575},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4219121038913727},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39788976311683655}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8400484323501587},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7579619884490967},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7282037138938904},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.6975789070129395},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6230002045631409},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.5995792150497437},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.46470609307289124},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42710524797439575},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4219121038913727},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39788976311683655},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3474085.3475171","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3474085.3475171","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1901129140","https://openalex.org/W1999360130","https://openalex.org/W2056370875","https://openalex.org/W2064076387","https://openalex.org/W2103559027","https://openalex.org/W2108598243","https://openalex.org/W2118292451","https://openalex.org/W2194775991","https://openalex.org/W2533214323","https://openalex.org/W2549139847","https://openalex.org/W2735607295","https://openalex.org/W2774018344","https://openalex.org/W2791953061","https://openalex.org/W2795727551","https://openalex.org/W2807398060","https://openalex.org/W2962872506","https://openalex.org/W2963200935","https://openalex.org/W3021849104","https://openalex.org/W3023692346","https://openalex.org/W3035084548","https://openalex.org/W3087885918","https://openalex.org/W3118608800","https://openalex.org/W3143835446","https://openalex.org/W3162741182","https://openalex.org/W3171806107","https://openalex.org/W3192400886","https://openalex.org/W3194088782","https://openalex.org/W4242177601"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W3176659669","https://openalex.org/W4287115361","https://openalex.org/W3211393740","https://openalex.org/W3208049411","https://openalex.org/W3022908591","https://openalex.org/W4285706568"],"abstract_inverted_index":{"High-level":[0],"representation-guided":[1],"pixel":[2,40,58,82,202],"denoising":[3,83,203],"and":[4,23,36,61,92,102,171,178,189,214,230,233,245],"adversarial":[5,17,29,86,127,152,201,207],"training":[6,30,188],"are":[7,176],"independent":[8],"solutions":[9,68],"to":[10,180,219,242],"enhance":[11],"the":[12,39,63,66,97,139,143,148,183,187],"robustness":[13,87,122,140],"of":[14,65,81,100,142,151],"CNNs":[15],"against":[16],"attacks":[18],"by":[19],"pre-processing":[20],"input":[21],"data":[22,213],"re-training":[24],"models,":[25],"respectively.":[26],"Most":[27],"recently,":[28],"techniques":[31],"have":[32],"been":[33],"widely":[34],"studied":[35],"improved":[37],"while":[38],"denoising-based":[41,59],"method":[42,60,145,193],"is":[43,49,194,217],"getting":[44],"less":[45],"attractive.":[46],"However,":[47,134],"it":[48],"still":[50],"questionable":[51],"whether":[52,62],"there":[53],"exists":[54],"a":[55],"more":[56,221],"advanced":[57],"combination":[64],"two":[67,79],"benefits":[69],"each":[70],"other.":[71],"To":[72,157],"this":[73,159],"end,":[74],"we":[75,135,161,199],"first":[76],"comprehensively":[77],"investigate":[78],"kinds":[80],"methods":[84,204],"for":[85,155],"enhancement":[88],"(i.e.,":[89],"existing":[90,130],"additive-based":[91,132],"unexplored":[93],"filtering-based":[94,144],"methods)":[95],"under":[96],"loss":[98],"functions":[99],"image-level":[101],"semantic-level,":[103],"respectively,":[104],"showing":[105],"that":[106,138,211],"pixel-wise":[107,131,166],"filtering":[108,170],"can":[109],"obtain":[110],"much":[111],"higher":[112,116,121,124],"image":[113],"quality":[114],"(e.g.,":[115,123],"PSNR)":[117],"as":[118,120,196],"well":[119],"accuracy":[125],"on":[126,147,227],"examples)":[128],"than":[129],"method.":[133],"also":[136],"observe":[137],"results":[141],"rely":[146],"perturbation":[149,184],"amplitude":[150,185],"examples":[153],"used":[154],"training.":[156],"address":[158],"problem,":[160],"propose":[162],"predictive":[163],"perturbation-aware":[164],"&":[165],"filtering,":[167],"where":[168],"dual-perturbation":[169],"an":[172],"uncertainty-aware":[173],"fusion":[174],"module":[175],"designed":[177],"employed":[179],"automatically":[181],"perceive":[182],"during":[186],"testing":[190],"process.":[191],"The":[192,224],"termed":[195],"AdvFilter.":[197],"Moreover,":[198],"combine":[200],"with":[205],"three":[206],"training-based":[208],"methods,":[209],"hinting":[210],"considering":[212],"models":[215,244],"jointly":[216],"able":[218],"achieve":[220],"robust":[222],"CNNs.":[223],"experiments":[225],"conduct":[226],"NeurIPS-2017DEV,":[228],"SVHN":[229],"CIFAR10":[231],"datasets":[232],"show":[234],"advantages":[235],"over":[236],"enhancing":[237],"CNNs'":[238],"robustness,":[239],"high":[240],"generalization":[241],"different":[243],"noise":[246],"levels.":[247]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}