{"id":"https://openalex.org/W3206275452","doi":"https://doi.org/10.1145/3474085.3475614","title":"Delving into Deep Image Prior for Adversarial Defense","display_name":"Delving into Deep Image Prior for Adversarial Defense","publication_year":2021,"publication_date":"2021-10-17","ids":{"openalex":"https://openalex.org/W3206275452","doi":"https://doi.org/10.1145/3474085.3475614","mag":"3206275452"},"language":"en","primary_location":{"id":"doi:10.1145/3474085.3475614","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3474085.3475614","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063847363","display_name":"Li Ding","orcid":"https://orcid.org/0000-0001-5311-953X"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Ding","raw_affiliation_strings":["Xi'an Jiaotong University &amp; University of British Columbia, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong University &amp; University of British Columbia, Xi'an, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100664076","display_name":"Yongwei Wang","orcid":"https://orcid.org/0000-0001-9712-8964"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yongwei Wang","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084601239","display_name":"Xin Ding","orcid":"https://orcid.org/0000-0003-2183-607X"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Xin Ding","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016673975","display_name":"Kaiwen Yuan","orcid":"https://orcid.org/0000-0003-4386-5373"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Kaiwen Yuan","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100338614","display_name":"Ping Wang","orcid":"https://orcid.org/0000-0001-8386-4637"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Wang","raw_affiliation_strings":["Xi'an Jiaotong University, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong University, Xi'an, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022334521","display_name":"Hua Huang","orcid":"https://orcid.org/0000-0003-2587-1702"},"institutions":[{"id":"https://openalex.org/I25254941","display_name":"Beijing Normal University","ror":"https://ror.org/022k4wk35","country_code":"CN","type":"education","lineage":["https://openalex.org/I25254941"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Huang","raw_affiliation_strings":["Beijing Normal University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Normal University, Beijing, China","institution_ids":["https://openalex.org/I25254941"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051587486","display_name":"Z. Jane Wang","orcid":"https://orcid.org/0000-0002-3791-0249"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Z. Jane Wang","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4564","last_page":"4572"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9807999730110168,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9334999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8175067901611328},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7128076553344727},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7124119997024536},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.6495703458786011},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.6047684550285339},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.5547875165939331},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5287755727767944},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.5215125679969788},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5207359790802002},{"id":"https://openalex.org/keywords/iterative-reconstruction","display_name":"Iterative reconstruction","score":0.45620959997177124},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3549480140209198},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.14954370260238647}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8175067901611328},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7128076553344727},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7124119997024536},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.6495703458786011},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.6047684550285339},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.5547875165939331},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5287755727767944},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.5215125679969788},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5207359790802002},{"id":"https://openalex.org/C141379421","wikidata":"https://www.wikidata.org/wiki/Q6094427","display_name":"Iterative reconstruction","level":2,"score":0.45620959997177124},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3549480140209198},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.14954370260238647},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3474085.3475614","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3474085.3475614","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5899999737739563}],"awards":[{"id":"https://openalex.org/G6658023004","display_name":null,"funder_award_id":"61936011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1901129140","https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2552767274","https://openalex.org/W2619479788","https://openalex.org/W2774644650","https://openalex.org/W2787708942","https://openalex.org/W2913848079","https://openalex.org/W2962847335","https://openalex.org/W2962872506","https://openalex.org/W2963178695","https://openalex.org/W2963207607","https://openalex.org/W2963564844","https://openalex.org/W2963693747","https://openalex.org/W2963771536","https://openalex.org/W2964013315","https://openalex.org/W2964153729","https://openalex.org/W2974383094","https://openalex.org/W3034190247","https://openalex.org/W3034214559","https://openalex.org/W3035100882","https://openalex.org/W3035667859","https://openalex.org/W3092991443","https://openalex.org/W3101202235","https://openalex.org/W3101417165","https://openalex.org/W3118565077","https://openalex.org/W3118608800","https://openalex.org/W3168679743","https://openalex.org/W4236392932","https://openalex.org/W4242177601"],"related_works":["https://openalex.org/W4286235935","https://openalex.org/W4385154961","https://openalex.org/W2924161931","https://openalex.org/W2981213860","https://openalex.org/W2019469476","https://openalex.org/W2580636385","https://openalex.org/W103332046","https://openalex.org/W598997827","https://openalex.org/W4307307693","https://openalex.org/W3127069801"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"based":[2],"image":[3,45,124,166],"classification":[4],"models":[5],"are":[6,119],"shown":[7],"vulnerable":[8],"to":[9,17,81,112,121],"adversarial":[10,23,70,100,114,165],"attacks":[11,24,150],"by":[12,41,104,130],"injecting":[13],"deliberately":[14],"crafted":[15],"noises":[16],"clean":[18],"images.":[19],"To":[20],"defend":[21],"against":[22],"in":[25,147],"a":[26,34,160],"training-free":[27],"and":[28,36,58,92,151],"attack-agnostic":[29],"manner,":[30],"this":[31],"work":[32],"proposes":[33],"novel":[35],"effective":[37],"reconstruction-based":[38,52,144],"defense":[39],"framework":[40],"delving":[42],"into":[43,65],"deep":[44],"prior":[46],"(DIP).":[47],"Fundamentally":[48],"different":[49],"from":[50],"existing":[51,142],"defenses,":[53],"the":[54,61,82,109,113,131,138,155],"proposed":[55,139,156],"method":[56,140,157],"analyzes":[57],"explicitly":[59],"incorporates":[60],"model":[62,83],"decision":[63,84],"process":[64],"our":[66],"defense.":[67],"Given":[68],"an":[69,123],"image,":[71],"firstly":[72],"we":[73],"map":[74],"its":[75],"reconstructed":[76],"images":[77,88,94,107,118],"during":[78,164],"DIP":[79],"optimization":[80],"space,":[85],"where":[86],"cross-boundary":[87],"can":[89,95,126,158],"be":[90,96,127],"detected":[91],"on-boundary":[93,106],"further":[97],"localized.":[98],"Then,":[99],"noise":[101],"is":[102],"purified":[103],"perturbing":[105],"along":[108],"reverse":[110],"direction":[111],"image.":[115],"Finally,":[116],"on-manifold":[117],"stitched":[120],"construct":[122],"that":[125,137],"correctly":[128],"predicted":[129],"victim":[132],"classifier.":[133],"Extensive":[134],"experiments":[135],"demonstrate":[136],"outperforms":[141],"state-of-the-art":[143],"methods":[145],"both":[146],"defending":[148],"white-box":[149],"defense-aware":[152],"attacks.":[153],"Moreover,":[154],"maintain":[159],"high":[161],"visual":[162],"quality":[163],"reconstruction.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
