{"id":"https://openalex.org/W3210016964","doi":"https://doi.org/10.1145/3475724.3483606","title":"Detecting Adversarial Patch Attacks through Global-local Consistency","display_name":"Detecting Adversarial Patch Attacks through Global-local Consistency","publication_year":2021,"publication_date":"2021-10-20","ids":{"openalex":"https://openalex.org/W3210016964","doi":"https://doi.org/10.1145/3475724.3483606","mag":"3210016964"},"language":"en","primary_location":{"id":"doi:10.1145/3475724.3483606","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3475724.3483606","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Workshop on Adversarial Learning for Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100374474","display_name":"Bo Li","orcid":"https://orcid.org/0000-0002-9336-1862"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112667951","display_name":"Jianghe Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianghe Xu","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102008934","display_name":"Shuang Wu","orcid":"https://orcid.org/0000-0003-1237-2656"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuang Wu","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086397952","display_name":"Shouhong Ding","orcid":"https://orcid.org/0000-0002-3175-3553"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouhong Ding","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101540189","display_name":"Jilin Li","orcid":null},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jilin Li","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112601777","display_name":"Feiyue Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feiyue Huang","raw_affiliation_strings":["Tencent Youtu Lab, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Youtu Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2250653659"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"35","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9767000079154968,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.890531063079834},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7848659157752991},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7328876256942749},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.6783972978591919},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.652439296245575},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.58406662940979},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5668059587478638},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5499411225318909},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4221295714378357},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.40830743312835693},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38912323117256165},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.37170931696891785}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.890531063079834},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7848659157752991},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7328876256942749},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.6783972978591919},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.652439296245575},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.58406662940979},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5668059587478638},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5499411225318909},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4221295714378357},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.40830743312835693},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38912323117256165},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.37170931696891785},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3475724.3483606","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3475724.3483606","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Workshop on Adversarial Learning for Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W2119821739","https://openalex.org/W2163605009","https://openalex.org/W2194775991","https://openalex.org/W2561975083","https://openalex.org/W2618043096","https://openalex.org/W2619479788","https://openalex.org/W2787708942","https://openalex.org/W2905423756","https://openalex.org/W2950468330","https://openalex.org/W2953610242","https://openalex.org/W2962748759","https://openalex.org/W2962835968","https://openalex.org/W2962846186","https://openalex.org/W2962858109","https://openalex.org/W2962933288","https://openalex.org/W2963207607","https://openalex.org/W2963431851","https://openalex.org/W2963446712","https://openalex.org/W2963557656","https://openalex.org/W2963564844","https://openalex.org/W2963726920","https://openalex.org/W2963952467","https://openalex.org/W2964153729","https://openalex.org/W2996490176","https://openalex.org/W3007789422","https://openalex.org/W3012226457","https://openalex.org/W3013779627","https://openalex.org/W3027471792","https://openalex.org/W3040296059","https://openalex.org/W3044605215","https://openalex.org/W3094984771","https://openalex.org/W3097573595","https://openalex.org/W3102748184","https://openalex.org/W3103340107","https://openalex.org/W3103557498","https://openalex.org/W3118608800","https://openalex.org/W4296423445"],"related_works":["https://openalex.org/W3176659669","https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W2997056298","https://openalex.org/W4313346231","https://openalex.org/W2738001131"],"abstract_inverted_index":{"Recent":[0],"works":[1],"have":[2,131],"well-demonstrated":[3],"the":[4,25,73,104,114],"threat":[5],"of":[6],"adversarial":[7,27,47,105],"patch":[8],"attacks":[9],"to":[10,45,63,68,80,86,130],"real-world":[11],"vision":[12],"media":[13],"systems.":[14],"By":[15],"arbitrarily":[16],"modifying":[17],"pixels":[18],"within":[19],"a":[20,39],"small":[21],"restricted":[22],"area":[23],"in":[24,72],"image,":[26],"patches":[28,48,106],"can":[29,83,101,119],"mislead":[30],"neural-network-based":[31],"image":[32,89],"classifiers.":[33],"In":[34],"this":[35,59],"paper,":[36],"we":[37],"propose":[38,62],"simple":[40],"but":[41],"very":[42],"effective":[43],"approach":[44],"detect":[46,103],"based":[49],"on":[50,93],"an":[51],"interesting":[52],"observation":[53],"called":[54],"global-local":[55],"consistency.":[56],"We":[57],"verify":[58],"insight":[60],"and":[61,82],"use":[64],"Random-Local-Ensemble":[65],"(RLE)":[66],"strategy":[67],"further":[69],"enhance":[70],"it":[71],"detection.":[74],"The":[75],"proposed":[76],"method":[77,127],"is":[78,128],"trivial":[79],"implement":[81],"be":[84,120],"applied":[85],"protect":[87],"any":[88],"classification":[90],"models.":[91],"Experiments":[92],"two":[94],"popular":[95],"datasets":[96],"show":[97],"that":[98],"our":[99,126],"algorithm":[100],"accurately":[102],"while":[107],"maintaining":[108],"high":[109,132],"clean":[110],"accuracy.":[111],"Moreover,":[112],"unlike":[113],"prior":[115],"detection":[116],"approaches":[117],"which":[118],"easily":[121],"broken":[122],"by":[123],"adaptive":[124,136],"attacks,":[125],"proved":[129],"robustness":[133],"when":[134],"facing":[135],"attacks.":[137]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}