{"id":"https://openalex.org/W4390744427","doi":"https://doi.org/10.3389/fcomp.2023.1274695","title":"Manifold-driven decomposition for adversarial robustness","display_name":"Manifold-driven decomposition for adversarial robustness","publication_year":2024,"publication_date":"2024-01-11","ids":{"openalex":"https://openalex.org/W4390744427","doi":"https://doi.org/10.3389/fcomp.2023.1274695"},"language":"en","primary_location":{"id":"doi:10.3389/fcomp.2023.1274695","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3389/fcomp.2023.1274695","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2023.1274695/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2023.1274695/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100719744","display_name":"Wenjia Zhang","orcid":"https://orcid.org/0000-0002-9545-1124"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenjia Zhang","raw_affiliation_strings":["Department of Computer Science, Rutgers University, Piscataway, NJ, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Rutgers University, Piscataway, NJ, United States","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101772111","display_name":"Yikai Zhang","orcid":"https://orcid.org/0000-0003-4924-7824"},"institutions":[{"id":"https://openalex.org/I2802755631","display_name":"Morgan Stanley (United States)","ror":"https://ror.org/00aphdz18","country_code":"US","type":"company","lineage":["https://openalex.org/I2802755631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yikai Zhang","raw_affiliation_strings":["Morgan Stanley, New York, NY, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Morgan Stanley, New York, NY, United States","institution_ids":["https://openalex.org/I2802755631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022509823","display_name":"Xiaoling Hu","orcid":"https://orcid.org/0000-0003-3188-3005"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaoling Hu","raw_affiliation_strings":["Department of Computer Science, Stony Brook University, Stony Brook, NY, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Stony Brook University, Stony Brook, NY, United States","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101158022","display_name":"Yi Yao","orcid":"https://orcid.org/0000-0001-8227-5662"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yi Yao","raw_affiliation_strings":["SRI International, Computer Vision Lab, Princeton, NJ, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Computer Vision Lab, Princeton, NJ, United States","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080620426","display_name":"Mayank Goswami","orcid":"https://orcid.org/0000-0001-8829-9980"},"institutions":[{"id":"https://openalex.org/I111455621","display_name":"Queens College, CUNY","ror":"https://ror.org/03v8adn41","country_code":"US","type":"education","lineage":["https://openalex.org/I111455621"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mayank Goswami","raw_affiliation_strings":["Department of Computer Science, Queens College of CUNY, New York, NY, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Queens College of CUNY, New York, NY, United States","institution_ids":["https://openalex.org/I111455621"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100408397","display_name":"Chao Chen","orcid":"https://orcid.org/0000-0003-1703-6483"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Chao Chen","raw_affiliation_strings":["Department of Biomedical Informatics, Stony Brook University, Stony Brook, NY, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Biomedical Informatics, Stony Brook University, Stony Brook, NY, United States","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064437234","display_name":"Dimitris Metaxas","orcid":"https://orcid.org/0000-0001-7142-7640"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Dimitris Metaxas","raw_affiliation_strings":["Department of Computer Science, Rutgers University, Piscataway, NJ, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Rutgers University, Piscataway, NJ, United States","institution_ids":["https://openalex.org/I102322142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5064437234","https://openalex.org/A5100408397"],"corresponding_institution_ids":["https://openalex.org/I102322142","https://openalex.org/I59553526"],"apc_list":{"value":1285,"currency":"USD","value_usd":1285},"apc_paid":{"value":1285,"currency":"USD","value_usd":1285},"fwci":0.243,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.59308621,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"5","issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9108999967575073,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8964508175849915},{"id":"https://openalex.org/keywords/manifold","display_name":"Manifold (fluid mechanics)","score":0.6237272024154663},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.5183095335960388},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.47008442878723145},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4268735349178314},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3971732556819916},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30537480115890503},{"id":"https://openalex.org/keywords/mathematical-analysis","display_name":"Mathematical analysis","score":0.10488840937614441},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07373508810997009}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8964508175849915},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.6237272024154663},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.5183095335960388},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47008442878723145},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4268735349178314},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3971732556819916},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30537480115890503},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.10488840937614441},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07373508810997009},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3389/fcomp.2023.1274695","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3389/fcomp.2023.1274695","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2023.1274695/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a126ca63873a4963bdebfb2c073a1848","is_oa":true,"landing_page_url":"https://doaj.org/article/a126ca63873a4963bdebfb2c073a1848","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Frontiers in Computer Science, Vol 5 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3389/fcomp.2023.1274695","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3389/fcomp.2023.1274695","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2023.1274695/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4790716882","display_name":null,"funder_award_id":"CCF-1910873","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5767367758","display_name":"CRII: AF: RUI: Faster and Cache-Efficient Similarity Filters and Searches for Big Data","funder_award_id":"1755791","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6725775983","display_name":"AF: Small: RUI: Towards Resolving the Dynamic Optimality Conjecture.","funder_award_id":"1910873","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4390744427.pdf","grobid_xml":"https://content.openalex.org/works/W4390744427.grobid-xml"},"referenced_works_count":55,"referenced_works":["https://openalex.org/W1569738040","https://openalex.org/W1673923490","https://openalex.org/W2001141328","https://openalex.org/W2157878484","https://openalex.org/W2166093887","https://openalex.org/W2199460564","https://openalex.org/W2269778407","https://openalex.org/W2525778437","https://openalex.org/W2618530766","https://openalex.org/W2914020154","https://openalex.org/W2962872206","https://openalex.org/W2963857521","https://openalex.org/W2964116600","https://openalex.org/W2970680991","https://openalex.org/W2982800384","https://openalex.org/W2990138404","https://openalex.org/W3035589783","https://openalex.org/W3083254535","https://openalex.org/W3092171228","https://openalex.org/W4236965008","https://openalex.org/W4244387609","https://openalex.org/W4287116426","https://openalex.org/W4293846201","https://openalex.org/W4295803779","https://openalex.org/W4381232913","https://openalex.org/W4385245566","https://openalex.org/W6637162671","https://openalex.org/W6657049677","https://openalex.org/W6678367057","https://openalex.org/W6680757391","https://openalex.org/W6684805783","https://openalex.org/W6687483927","https://openalex.org/W6725672702","https://openalex.org/W6727690538","https://openalex.org/W6739868092","https://openalex.org/W6739901393","https://openalex.org/W6748347497","https://openalex.org/W6748799766","https://openalex.org/W6754055892","https://openalex.org/W6754553897","https://openalex.org/W6755310938","https://openalex.org/W6756688878","https://openalex.org/W6759129252","https://openalex.org/W6762235582","https://openalex.org/W6762707182","https://openalex.org/W6767178219","https://openalex.org/W6770588701","https://openalex.org/W6771245373","https://openalex.org/W6774076947","https://openalex.org/W6774681163","https://openalex.org/W6782844408","https://openalex.org/W6783953417","https://openalex.org/W6797663987","https://openalex.org/W6810104341","https://openalex.org/W7034449035"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"The":[0],"adversarial":[1,51,55,66,79,92,104,115,152],"risk":[2,56,67,80,105],"of":[3,50,135,139],"a":[4,29,43,97,140],"machine":[5],"learning":[6],"model":[7,144],"has":[8],"been":[9],"widely":[10],"studied.":[11],"Most":[12],"previous":[13],"studies":[14,125],"assume":[15],"that":[16,76,101],"the":[17,21,34,53,64,72,77,88,102,121,133,137,150],"data":[18,40],"lie":[19,41],"in":[20,42],"whole":[22],"ambient":[23],"space.":[24],"We":[25,74,94,119],"propose":[26],"to":[27,58,69],"take":[28,33],"new":[30,48],"angle":[31],"and":[32,63,90,113],"manifold":[35],"assumption":[36],"into":[37],"consideration.":[38],"Assuming":[39],"manifold,":[44],"we":[45],"investigate":[46],"two":[47],"types":[49],"risk,":[52],"normal":[54,61,89,112,151],"due":[57,68],"perturbation":[59,70],"along":[60],"direction":[62],"in-manifold":[65,91,114],"within":[71],"manifold.":[73],"prove":[75],"classic":[78],"can":[81,106],"be":[82,107],"bounded":[83],"from":[84],"both":[85,111],"sides":[86],"using":[87],"risks.":[93],"also":[95],"show":[96],"surprisingly":[98],"pessimistic":[99],"case":[100],"standard":[103],"non-zero":[108],"even":[109],"when":[110],"risks":[116],"are":[117],"zero.":[118],"finalize":[120],"study":[122],"with":[123],"empirical":[124],"supporting":[126],"our":[127],"theoretical":[128],"results.":[129],"Our":[130],"results":[131],"suggest":[132],"possibility":[134],"improving":[136],"robustness":[138],"classifier":[141],"without":[142],"sacrificing":[143],"accuracy,":[145],"by":[146],"only":[147],"focusing":[148],"on":[149],"risk.":[153]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}