{"id":"https://openalex.org/W2963671728","doi":"https://doi.org/10.1609/aaai.v33i01.33015869","title":"The Adversarial Attack and Detection under the Fisher Information Metric","display_name":"The Adversarial Attack and Detection under the Fisher Information Metric","publication_year":2019,"publication_date":"2019-07-17","ids":{"openalex":"https://openalex.org/W2963671728","doi":"https://doi.org/10.1609/aaai.v33i01.33015869","mag":"2963671728"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v33i01.33015869","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33015869","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/4536/4414","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/4536/4414","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018576548","display_name":"Chenxiao Zhao","orcid":"https://orcid.org/0000-0003-4043-4797"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenxiao Zhao","raw_affiliation_strings":["East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010665785","display_name":"P. Thomas Fletcher","orcid":"https://orcid.org/0000-0002-3111-2553"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"P. Thomas Fletcher","raw_affiliation_strings":["University of Virginia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Virginia","institution_ids":["https://openalex.org/I51556381"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007231534","display_name":"Mixue Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mixue Yu","raw_affiliation_strings":["East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033203506","display_name":"Yaxin Peng","orcid":"https://orcid.org/0000-0002-2983-555X"},"institutions":[{"id":"https://openalex.org/I113940042","display_name":"Shanghai University","ror":"https://ror.org/006teas31","country_code":"CN","type":"education","lineage":["https://openalex.org/I113940042"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaxin Peng","raw_affiliation_strings":["Shanghai University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai University","institution_ids":["https://openalex.org/I113940042"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060120202","display_name":"Guixu Zhang","orcid":"https://orcid.org/0000-0003-4720-6607"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guixu Zhang","raw_affiliation_strings":["East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008090356","display_name":"Chaomin Shen","orcid":"https://orcid.org/0000-0001-9389-6472"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaomin Shen","raw_affiliation_strings":["East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":39,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":"01","first_page":"5869","last_page":"5876"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9161999821662903,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7498836517333984},{"id":"https://openalex.org/keywords/fisher-information","display_name":"Fisher information","score":0.735589861869812},{"id":"https://openalex.org/keywords/eigenvalues-and-eigenvectors","display_name":"Eigenvalues and eigenvectors","score":0.729054868221283},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5794636011123657},{"id":"https://openalex.org/keywords/quadratic-equation","display_name":"Quadratic equation","score":0.4912721514701843},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4900251626968384},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4153464436531067},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.414090633392334},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39300185441970825},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.33715176582336426},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3369964063167572},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.28520864248275757}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7498836517333984},{"id":"https://openalex.org/C29406490","wikidata":"https://www.wikidata.org/wiki/Q1420659","display_name":"Fisher information","level":2,"score":0.735589861869812},{"id":"https://openalex.org/C158693339","wikidata":"https://www.wikidata.org/wiki/Q190524","display_name":"Eigenvalues and eigenvectors","level":2,"score":0.729054868221283},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5794636011123657},{"id":"https://openalex.org/C129844170","wikidata":"https://www.wikidata.org/wiki/Q41299","display_name":"Quadratic equation","level":2,"score":0.4912721514701843},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4900251626968384},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4153464436531067},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.414090633392334},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39300185441970825},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.33715176582336426},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3369964063167572},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28520864248275757},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1609/aaai.v33i01.33015869","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33015869","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/4536/4414","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:ojs.aaai.org:article/4536","is_oa":false,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/4536","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v33i01.33015869","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33015869","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/4536/4414","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G237963763","display_name":"\u5927\u8111\u5f71\u50cf\u6807\u51c6\u5316\u7684\u4f18\u5316\u6a21\u578b\u4e0e\u7b97\u6cd5\u7814\u7a76","funder_award_id":"11471208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3200469410","display_name":null,"funder_award_id":"14DZ2260800","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4760357681","display_name":null,"funder_award_id":"14DZ2260800","funder_id":"https://openalex.org/F4320321885","funder_display_name":"Science and Technology Commission of Shanghai Municipality"},{"id":"https://openalex.org/G4804542777","display_name":null,"funder_award_id":"61273298","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5221450027","display_name":"\u4e09\u7ef4\u533b\u5b66\u5f71\u50cf\u56fe\u8c31\u51e0\u4f55\u5efa\u6a21\u4e0e\u5185\u8574\u7b97\u6cd5\u7814\u7a76","funder_award_id":"11771276","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5391332462","display_name":null,"funder_award_id":"61731009","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G988271626","display_name":null,"funder_award_id":"No. 14DZ2260800","funder_id":"https://openalex.org/F4320321885","funder_display_name":"Science and Technology Commission of Shanghai Municipality"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321885","display_name":"Science and Technology Commission of Shanghai Municipality","ror":"https://ror.org/03kt66j61"},{"id":"https://openalex.org/F4320322370","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2963671728.pdf","grobid_xml":"https://content.openalex.org/works/W2963671728.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W769612788","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1866637071","https://openalex.org/W1945616565","https://openalex.org/W2117539524","https://openalex.org/W2174868984","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2408141691","https://openalex.org/W2508156266","https://openalex.org/W2513314332","https://openalex.org/W2516574342","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2578457540","https://openalex.org/W2594877703","https://openalex.org/W2612637113","https://openalex.org/W2618098489","https://openalex.org/W2619479788","https://openalex.org/W2738001131","https://openalex.org/W2767075075","https://openalex.org/W2783692467","https://openalex.org/W2949311987","https://openalex.org/W2950468330","https://openalex.org/W2963003451","https://openalex.org/W2963158386","https://openalex.org/W2963285578","https://openalex.org/W2963389226","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W3105463048","https://openalex.org/W3118608800","https://openalex.org/W4229633200","https://openalex.org/W4251193772","https://openalex.org/W4293584023","https://openalex.org/W4295803779","https://openalex.org/W4297779775","https://openalex.org/W4299356147","https://openalex.org/W4300511536","https://openalex.org/W6634556549","https://openalex.org/W6637162671","https://openalex.org/W6639419720","https://openalex.org/W6642904842","https://openalex.org/W6685208663","https://openalex.org/W6719080892","https://openalex.org/W6734483310","https://openalex.org/W6734787559"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W2482350142","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"Many":[0],"deep":[1,40],"learning":[2,41],"models":[3],"are":[4,149],"vulnerable":[5,114],"to":[6,15,118,152,176],"the":[7,16,23,37,45,53,84,89,96,100,105,112,115,122,128,138,169,178],"adversarial":[8,66,91,134,179],"attack,":[9],"i.e.,":[10],"imperceptible":[11],"but":[12],"intentionally-designed":[13],"perturbations":[14],"input":[17],"can":[18],"cause":[19],"incorrect":[20],"output":[21],"of":[22,39,83,127],"networks.":[24],"In":[25],"this":[26],"paper,":[27],"using":[28],"information":[29,55,86,171],"geometry,":[30],"we":[31,62,130],"provide":[32],"a":[33,49,59,79,173],"reasonable":[34],"explanation":[35],"for":[36],"vulnerability":[38,101],"models.":[42],"By":[43],"considering":[44],"data":[46],"space":[47,51],"as":[48,141],"non-linear":[50],"with":[52,137,164],"Fisher":[54,85,170],"metric":[56],"induced":[57],"from":[58],"neural":[60],"network,":[61],"first":[63,97],"propose":[64,132],"an":[65,109,133],"attack":[67,72,145],"algorithm":[68],"termed":[69],"one-step":[70],"spectral":[71],"(OSSA).":[73],"The":[74,107],"method":[75,136],"is":[76,93,102,117,172],"described":[77],"by":[78,95,104,121],"constrained":[80],"quadratic":[81],"form":[82],"matrix,":[87],"where":[88],"optimal":[90],"perturbation":[92],"given":[94],"eigenvector,":[98],"and":[99,146,181],"reflected":[103],"eigenvalues.":[106],"larger":[108],"eigenvalue":[110],"is,":[111],"more":[113],"model":[116],"be":[119],"attacked":[120],"corresponding":[123],"eigenvector.":[124],"Taking":[125],"advantage":[126],"property,":[129],"also":[131],"detection":[135,147],"eigenvalues":[139],"serving":[140],"characteristics.":[142],"Both":[143],"our":[144],"algorithms":[148],"numerically":[150],"optimized":[151],"work":[153],"efficiently":[154],"on":[155],"large":[156],"datasets.":[157],"Our":[158],"evaluations":[159],"show":[160],"superior":[161],"performance":[162],"compared":[163],"other":[165],"methods,":[166],"implying":[167],"that":[168],"promising":[174],"approach":[175],"investigate":[177],"attacks":[180],"defenses.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":6}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}