{"id":"https://openalex.org/W3206281198","doi":"https://doi.org/10.1145/3475724.3483607","title":"Real World Robustness from Systematic Noise","display_name":"Real World Robustness from Systematic Noise","publication_year":2021,"publication_date":"2021-10-20","ids":{"openalex":"https://openalex.org/W3206281198","doi":"https://doi.org/10.1145/3475724.3483607","mag":"3206281198"},"language":"en","primary_location":{"id":"doi:10.1145/3475724.3483607","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3475724.3483607","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3475724.3483607","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Workshop on Adversarial Learning for Multimedia","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3475724.3483607","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100733313","display_name":"Yan Wang","orcid":"https://orcid.org/0000-0003-3907-9388"},"institutions":[{"id":"https://openalex.org/I4210128910","display_name":"Group Sense (China)","ror":"https://ror.org/036wd5777","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210128910"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yan Wang","raw_affiliation_strings":["SenseTime Research, Beijing, China"],"affiliations":[{"raw_affiliation_string":"SenseTime Research, Beijing, China","institution_ids":["https://openalex.org/I4210128910"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100443277","display_name":"Yuhang Li","orcid":"https://orcid.org/0000-0002-9364-4125"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuhang Li","raw_affiliation_strings":["Yale University, New Haven, NY, USA"],"affiliations":[{"raw_affiliation_string":"Yale University, New Haven, NY, USA","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048414655","display_name":"Ruihao Gong","orcid":"https://orcid.org/0000-0002-6024-7086"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruihao Gong","raw_affiliation_strings":["SenseTime Research &amp; Beihang University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"SenseTime Research &amp; Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042495508","display_name":"Tianzi Xiao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128910","display_name":"Group Sense (China)","ror":"https://ror.org/036wd5777","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210128910"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianzi Xiao","raw_affiliation_strings":["SenseTime Research, Beijing, China"],"affiliations":[{"raw_affiliation_string":"SenseTime Research, Beijing, China","institution_ids":["https://openalex.org/I4210128910"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102785611","display_name":"Fengwei Yu","orcid":"https://orcid.org/0000-0003-0352-8700"},"institutions":[{"id":"https://openalex.org/I4210128910","display_name":"Group Sense (China)","ror":"https://ror.org/036wd5777","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210128910"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengwei Yu","raw_affiliation_strings":["Sensetime Research, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Sensetime Research, Beijing, China","institution_ids":["https://openalex.org/I4210128910"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100733313"],"corresponding_institution_ids":["https://openalex.org/I4210128910"],"apc_list":null,"apc_paid":null,"fwci":0.4079,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.69270924,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"42","last_page":"48"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7582582831382751},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.744571328163147},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6265578269958496},{"id":"https://openalex.org/keywords/systematic-error","display_name":"Systematic error","score":0.6143094897270203},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5713088512420654},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5489041805267334},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5321157574653625},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.5217179656028748},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.4452873766422272},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4183058738708496},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.23388230800628662},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10764440894126892},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.08295297622680664},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.08125722408294678}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7582582831382751},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.744571328163147},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6265578269958496},{"id":"https://openalex.org/C100253034","wikidata":"https://www.wikidata.org/wiki/Q196372","display_name":"Systematic error","level":2,"score":0.6143094897270203},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5713088512420654},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5489041805267334},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5321157574653625},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.5217179656028748},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.4452873766422272},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4183058738708496},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.23388230800628662},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10764440894126892},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.08295297622680664},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.08125722408294678},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3475724.3483607","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3475724.3483607","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3475724.3483607","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Workshop on Adversarial Learning for Multimedia","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3475724.3483607","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3475724.3483607","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3475724.3483607","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Workshop on Adversarial Learning for Multimedia","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3206281198.pdf","grobid_xml":"https://content.openalex.org/works/W3206281198.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W46948191","https://openalex.org/W2108598243","https://openalex.org/W2163605009","https://openalex.org/W2194775991","https://openalex.org/W2899771611","https://openalex.org/W2905631704","https://openalex.org/W2963163009","https://openalex.org/W2963857521","https://openalex.org/W2964253222","https://openalex.org/W2998115938","https://openalex.org/W3000145882","https://openalex.org/W3009542902","https://openalex.org/W3016265891","https://openalex.org/W3030163527","https://openalex.org/W3034429256","https://openalex.org/W3175985367","https://openalex.org/W3177096435","https://openalex.org/W3210232381"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W2942936396","https://openalex.org/W2049105914","https://openalex.org/W2156547184"],"abstract_inverted_index":{"Systematic":[0],"error,":[1],"which":[2,84],"is":[3],"not":[4],"determined":[5],"by":[6,36,51],"chance,":[7],"often":[8,65],"refers":[9],"to":[10,21,72,87,92,111],"the":[11,15,43,112],"inaccuracy":[12],"(involving":[13],"either":[14],"observation":[16],"or":[17],"measurement":[18],"process)":[19],"inherent":[20],"a":[22,89,99],"system.":[23],"In":[24],"this":[25],"paper,":[26],"we":[27,41,80,97],"exhibit":[28],"some":[29],"long-neglected":[30],"but":[31],"frequent-happening":[32],"adversarial":[33,78],"examples":[34],"caused":[35],"systematic":[37,93,113],"error.":[38,94,114],"More":[39],"specifically,":[40],"find":[42,98],"trained":[44,102],"neural":[45],"network":[46],"classifier":[47],"can":[48,105],"be":[49],"fooled":[50],"inconsistent":[52],"implementations":[53,64],"of":[54],"image":[55],"decoding":[56],"and":[57,118,127],"resize.":[58],"This":[59],"tiny":[60],"difference":[61,109],"between":[62],"these":[63,76],"causes":[66],"an":[67],"accuracy":[68,108],"drop":[69],"from":[70],"training":[71],"deployment.":[73],"To":[74],"benchmark":[75],"real-world":[77,125],"examples,":[79],"propose":[81],"ImageNet-S":[82],"dataset,":[83],"enables":[85],"researchers":[86],"measure":[88],"classifier's":[90],"robustness":[91,126],"For":[95],"example,":[96],"normal":[100],"ResNet-50":[101],"on":[103],"ImageNet":[104],"have":[106],"1%$\\sim$5%":[107],"due":[110],"Together":[115],"our":[116],"evaluation":[117],"dataset":[119],"may":[120],"aid":[121],"future":[122],"work":[123],"toward":[124],"practical":[128],"generalization.":[129]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
