{"id":"https://openalex.org/W4389438920","doi":"https://doi.org/10.1145/3636551","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models against Adversarial Attacks","display_name":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models against Adversarial Attacks","publication_year":2023,"publication_date":"2023-12-07","ids":{"openalex":"https://openalex.org/W4389438920","doi":"https://doi.org/10.1145/3636551"},"language":"en","primary_location":{"id":"doi:10.1145/3636551","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3636551","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100677179","display_name":"Yanjie Li","orcid":"https://orcid.org/0000-0001-8859-8331"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":true,"raw_author_name":"Yanjie Li","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong"],"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103125014","display_name":"Bin Xie","orcid":"https://orcid.org/0000-0001-5118-3570"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Bin Xie","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong"],"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055813479","display_name":"Songtao Guo","orcid":"https://orcid.org/0000-0001-6741-4871"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songtao Guo","raw_affiliation_strings":["Chongqing University, China"],"affiliations":[{"raw_affiliation_string":"Chongqing University, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100638446","display_name":"Yuanyuan Yang","orcid":"https://orcid.org/0000-0001-7296-9222"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuanyuan Yang","raw_affiliation_strings":["Stony Brook University, USA"],"affiliations":[{"raw_affiliation_string":"Stony Brook University, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100365935","display_name":"Bin Xiao","orcid":"https://orcid.org/0000-0003-4223-8220"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Bin Xiao","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong"],"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100677179"],"corresponding_institution_ids":["https://openalex.org/I14243506"],"apc_list":null,"apc_paid":null,"fwci":4.4988,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.95751871,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"56","issue":"6","first_page":"1","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9801999926567078,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9728999733924866,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9385411739349365},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.796881377696991},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7271610498428345},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6833980083465576},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5862017869949341},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.5167895555496216},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.515426754951477},{"id":"https://openalex.org/keywords/flourishing","display_name":"Flourishing","score":0.5007340908050537},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.49123281240463257},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4899250864982605},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4290027618408203},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3498138189315796}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9385411739349365},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.796881377696991},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7271610498428345},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6833980083465576},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5862017869949341},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.5167895555496216},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.515426754951477},{"id":"https://openalex.org/C2781017355","wikidata":"https://www.wikidata.org/wiki/Q5462027","display_name":"Flourishing","level":2,"score":0.5007340908050537},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.49123281240463257},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4899250864982605},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4290027618408203},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3498138189315796},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3636551","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3636551","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7699999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":175,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2326925005","https://openalex.org/W2408141691","https://openalex.org/W2535690855","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2572504188","https://openalex.org/W2603766943","https://openalex.org/W2604505099","https://openalex.org/W2612637113","https://openalex.org/W2620038827","https://openalex.org/W2640329709","https://openalex.org/W2693668331","https://openalex.org/W2747329762","https://openalex.org/W2765424254","https://openalex.org/W2768718880","https://openalex.org/W2773022113","https://openalex.org/W2774510177","https://openalex.org/W2774644650","https://openalex.org/W2781800156","https://openalex.org/W2791319131","https://openalex.org/W2795374598","https://openalex.org/W2798302089","https://openalex.org/W2885183727","https://openalex.org/W2890591829","https://openalex.org/W2895097814","https://openalex.org/W2896078964","https://openalex.org/W2902617128","https://openalex.org/W2906208681","https://openalex.org/W2917621442","https://openalex.org/W2923771489","https://openalex.org/W2932026309","https://openalex.org/W2942630857","https://openalex.org/W2947028053","https://openalex.org/W2950808778","https://openalex.org/W2952104986","https://openalex.org/W2958109694","https://openalex.org/W2959364614","https://openalex.org/W2960644152","https://openalex.org/W2962847335","https://openalex.org/W2962878175","https://openalex.org/W2962968216","https://openalex.org/W2963068442","https://openalex.org/W2963070423","https://openalex.org/W2963516603","https://openalex.org/W2963527086","https://openalex.org/W2963542245","https://openalex.org/W2963560523","https://openalex.org/W2963612069","https://openalex.org/W2963662610","https://openalex.org/W2963693747","https://openalex.org/W2963744840","https://openalex.org/W2963855547","https://openalex.org/W2963857521","https://openalex.org/W2964077693","https://openalex.org/W2964082701","https://openalex.org/W2964152294","https://openalex.org/W2964171870","https://openalex.org/W2964205597","https://openalex.org/W2969542116","https://openalex.org/W2970257215","https://openalex.org/W2971089407","https://openalex.org/W2977345164","https://openalex.org/W2979750740","https://openalex.org/W2982104318","https://openalex.org/W2984699060","https://openalex.org/W2985282977","https://openalex.org/W2985390828","https://openalex.org/W2985451033","https://openalex.org/W2990258745","https://openalex.org/W2991496458","https://openalex.org/W2997811843","https://openalex.org/W3007264885","https://openalex.org/W3015625436","https://openalex.org/W3015952003","https://openalex.org/W3025561882","https://openalex.org/W3034196143","https://openalex.org/W3034376720","https://openalex.org/W3034412497","https://openalex.org/W3034455297","https://openalex.org/W3034619610","https://openalex.org/W3034643863","https://openalex.org/W3034707001","https://openalex.org/W3034823537","https://openalex.org/W3035367371","https://openalex.org/W3035447895","https://openalex.org/W3035569111","https://openalex.org/W3035584216","https://openalex.org/W3036069296","https://openalex.org/W3036167779","https://openalex.org/W3036294592","https://openalex.org/W3044504496","https://openalex.org/W3080297477","https://openalex.org/W3093060913","https://openalex.org/W3093926352","https://openalex.org/W3096240177","https://openalex.org/W3097024155","https://openalex.org/W3098881644","https://openalex.org/W3099756208","https://openalex.org/W3103438628","https://openalex.org/W3103557498","https://openalex.org/W3106050153","https://openalex.org/W3107089345","https://openalex.org/W3107235539","https://openalex.org/W3107942585","https://openalex.org/W3107990944","https://openalex.org/W3111535274","https://openalex.org/W3112787034","https://openalex.org/W3113540817","https://openalex.org/W3114501414","https://openalex.org/W3125713917","https://openalex.org/W3127040757","https://openalex.org/W3153465022","https://openalex.org/W3160805431","https://openalex.org/W3170514715","https://openalex.org/W3171288285","https://openalex.org/W3173859330","https://openalex.org/W3175451538","https://openalex.org/W3175786209","https://openalex.org/W3176237992","https://openalex.org/W3177184533","https://openalex.org/W3179647175","https://openalex.org/W3179921780","https://openalex.org/W3185095134","https://openalex.org/W3186991201","https://openalex.org/W3189402954","https://openalex.org/W3191965994","https://openalex.org/W3192213611","https://openalex.org/W3193088178","https://openalex.org/W3199407824","https://openalex.org/W3200450146","https://openalex.org/W3204155906","https://openalex.org/W3210780202","https://openalex.org/W3213694540","https://openalex.org/W3214557511","https://openalex.org/W3216468633","https://openalex.org/W3216686652","https://openalex.org/W4214755140","https://openalex.org/W4221156702","https://openalex.org/W4225786036","https://openalex.org/W4225859735","https://openalex.org/W4225928697","https://openalex.org/W4226021007","https://openalex.org/W4226378932","https://openalex.org/W4230735544","https://openalex.org/W4249142012","https://openalex.org/W4280605483","https://openalex.org/W4286865884","https://openalex.org/W4288283367","https://openalex.org/W4288359148","https://openalex.org/W4289752762","https://openalex.org/W4293580221","https://openalex.org/W4293846201","https://openalex.org/W4297814571","https://openalex.org/W4306309425","https://openalex.org/W4308831279","https://openalex.org/W4312414395","https://openalex.org/W4312790346","https://openalex.org/W4312962761","https://openalex.org/W4376312282","https://openalex.org/W4377130782","https://openalex.org/W4385245566","https://openalex.org/W4385681574","https://openalex.org/W4385805112","https://openalex.org/W4385889984","https://openalex.org/W4386065609","https://openalex.org/W4390872002","https://openalex.org/W6637162671","https://openalex.org/W6739901393","https://openalex.org/W6763151900","https://openalex.org/W6779823529","https://openalex.org/W6838695150","https://openalex.org/W6852244834"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W4303645823","https://openalex.org/W2900159906","https://openalex.org/W4283221438","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W2899811703","https://openalex.org/W2930249865"],"abstract_inverted_index":{"Benefiting":[0],"from":[1,87],"the":[2,52,64,94,106,133,140],"rapid":[3],"development":[4],"of":[5,35,58,68,97,108,123,135],"deep":[6,27,69,124],"learning,":[7],"2D":[8,99],"and":[9,23,54,66,90,100,114,183],"3D":[10,101,148],"computer":[11],"vision":[12],"applications":[13],"are":[14,30,139],"deployed":[15],"in":[16],"many":[17,155],"safe-critical":[18],"systems,":[19],"such":[20],"as":[21],"autopilot":[22],"identity":[24],"authentication.":[25],"However,":[26],"learning":[28,70,125],"models":[29,71],"not":[31,172],"trustworthy":[32,78,190],"enough":[33],"because":[34],"their":[36],"limited":[37],"robustness":[38,65,127],"against":[39,72,128],"adversarial":[40,45,73,102,109,130,145,163],"attacks.":[41,74,103,131],"The":[42],"physically":[43],"realizable":[44],"attacks":[46,146,164],"further":[47],"pose":[48],"fatal":[49],"threats":[50],"to":[51,62,77,119,142,154,167],"application":[53],"human":[55],"safety.":[56],"Lots":[57],"papers":[59,118],"have":[60],"emerged":[61],"investigate":[63,144],"safety":[67,168],"To":[75,132],"lead":[76,166],"AI,":[79],"we":[80,138,160,174],"first":[81,141],"construct":[82],"a":[83,150],"general":[84],"threat":[85],"model":[86,126],"different":[88],"perspectives":[89],"then":[91],"comprehensively":[92],"review":[93],"latest":[95],"progress":[96],"both":[98],"We":[104],"extend":[105],"concept":[107],"examples":[110],"beyond":[111],"imperceptive":[112],"perturbations":[113],"collate":[115],"over":[116],"170":[117],"give":[120,179],"an":[121],"overview":[122],"various":[129],"best":[134],"our":[136],"knowledge,":[137],"systematically":[143],"for":[147],"models,":[149],"flourishing":[151],"field":[152],"applied":[153],"real-world":[156],"applications.":[157],"In":[158],"addition,":[159],"examine":[161],"physical":[162],"that":[165],"violations.":[169],"Last":[170],"but":[171],"least,":[173],"summarize":[175],"present":[176],"popular":[177],"topics,":[178],"insights":[180],"on":[181,186,189],"challenges,":[182],"shed":[184],"light":[185],"future":[187],"research":[188],"AI.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":2}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}