{"id":"https://openalex.org/W3100149641","doi":"https://doi.org/10.3390/make2040030","title":"Probabilistic Jacobian-Based Saliency Maps Attacks","display_name":"Probabilistic Jacobian-Based Saliency Maps Attacks","publication_year":2020,"publication_date":"2020-11-13","ids":{"openalex":"https://openalex.org/W3100149641","doi":"https://doi.org/10.3390/make2040030","mag":"3100149641"},"language":"en","primary_location":{"id":"pmh:oai:mdpi.com:/2504-4990/2/4/30/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/make2040030","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Machine Learning and Knowledge Extraction; Volume 2; Issue 4; Pages: 558-578","raw_type":"Text"},"type":"article","indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://dx.doi.org/10.3390/make2040030","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066500356","display_name":"Th\u00e9o Combey","orcid":null},"institutions":[{"id":"https://openalex.org/I4210107720","display_name":"CentraleSup\u00e9lec","ror":"https://ror.org/019tcpt25","country_code":"FR","type":"facility","lineage":["https://openalex.org/I277688954","https://openalex.org/I4210107720"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Th\u00e9o Combey; Ant\u00f3nio Loison; Maxime Faucher; Hatem Hajri","raw_affiliation_strings":["CentraleSup\u00e9lec, Mathematics and Computer Science Department, 3 Rue Joliot-Curie, 91192 Gif-sur-Yvette, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CentraleSup\u00e9lec, Mathematics and Computer Science Department, 3 Rue Joliot-Curie, 91192 Gif-sur-Yvette, France","institution_ids":["https://openalex.org/I4210107720"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5066500356"],"corresponding_institution_ids":["https://openalex.org/I4210107720"],"apc_list":null,"apc_paid":null,"fwci":2.139,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":{"value":0.90008248,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9544000029563904,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9139999747276306,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.9395568370819092},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7092577219009399},{"id":"https://openalex.org/keywords/jacobian-matrix-and-determinant","display_name":"Jacobian matrix and determinant","score":0.6987642049789429},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6021639108657837},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5965942740440369},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5479736328125},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5401768684387207},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.45137399435043335},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4312424063682556},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4228234589099884},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3939174711704254},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32650312781333923},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.26935017108917236},{"id":"https://openalex.org/keywords/applied-mathematics","display_name":"Applied mathematics","score":0.06945458054542542}],"concepts":[{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.9395568370819092},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7092577219009399},{"id":"https://openalex.org/C200331156","wikidata":"https://www.wikidata.org/wiki/Q506041","display_name":"Jacobian matrix and determinant","level":2,"score":0.6987642049789429},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6021639108657837},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5965942740440369},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5479736328125},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5401768684387207},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.45137399435043335},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4312424063682556},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4228234589099884},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3939174711704254},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32650312781333923},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26935017108917236},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.06945458054542542},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:mdpi.com:/2504-4990/2/4/30/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/make2040030","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Machine Learning and Knowledge Extraction; Volume 2; Issue 4; Pages: 558-578","raw_type":"Text"}],"best_oa_location":{"id":"pmh:oai:mdpi.com:/2504-4990/2/4/30/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/make2040030","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Machine Learning and Knowledge Extraction; Volume 2; Issue 4; Pages: 558-578","raw_type":"Text"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G6908018420","display_name":"SYSTEMX","funder_award_id":"ANR-10-AIRT-0008","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2274565976","https://openalex.org/W2460937040","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2618530766","https://openalex.org/W2640329709","https://openalex.org/W2785361959","https://openalex.org/W2788820894","https://openalex.org/W2798302089","https://openalex.org/W2888394138","https://openalex.org/W2947130899","https://openalex.org/W2949152835","https://openalex.org/W2950159395","https://openalex.org/W2963207607","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2964152294","https://openalex.org/W2966764754","https://openalex.org/W2991722918","https://openalex.org/W3009262485","https://openalex.org/W3092287343","https://openalex.org/W3103557498","https://openalex.org/W3104224589","https://openalex.org/W3116666954"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W4383221314","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Neural":[0],"network":[1],"classifiers":[2],"(NNCs)":[3],"are":[4,45,129,174],"known":[5],"to":[6,9,47,52,79,95],"be":[7],"vulnerable":[8],"malicious":[10],"adversarial":[11,199],"perturbations":[12],"of":[13,21,65,75,99,114,143,154],"inputs":[14],"including":[15],"those":[16],"modifying":[17],"a":[18,112],"small":[19],"fraction":[20],"the":[22,37,68,72,76,137,160,205],"input":[23,73],"features":[24,74],"named":[25,101],"sparse":[26],"or":[27],"L0":[28,33,163,182,197],"attacks.":[29],"Effective":[30],"and":[31,71,105,109,116,125,133,140,172,194],"fast":[32],"attacks,":[34],"such":[35,203],"as":[36,204],"widely":[38],"used":[39],"Jacobian-based":[40],"Saliency":[41],"Map":[42],"Attack":[43],"(JSMA)":[44],"practical":[46],"fool":[48],"NNCs":[49],"but":[50],"also":[51,146],"improve":[53],"their":[54],"robustness.":[55],"In":[56],"this":[57],"paper,":[58],"we":[59],"show":[60],"that":[61,84,127],"penalising":[62],"saliency":[63],"maps":[64],"JSMA":[66,103,107,193],"by":[67],"output":[69],"probabilities":[70],"NNC":[77],"leads":[78,93],"more":[80,134,175],"powerful":[81],"attack":[82],"algorithms":[83],"better":[85],"take":[86],"into":[87],"account":[88],"each":[89],"input’s":[90],"characteristics.":[91],"This":[92],"us":[94],"introduce":[96],"improved":[97],"versions":[98,142],"JSMA,":[100,168],"Weighted":[102],"(WJSMA)":[104],"Taylor":[106],"(TJSMA),":[108],"demonstrate":[110],"through":[111],"variety":[113],"white-box":[115],"black-box":[117],"experiments":[118],"on":[119,183,201],"three":[120],"different":[121],"datasets":[122,202],"(MNIST,":[123],"CIFAR-10":[124],"GTSRB),":[126],"they":[128],"both":[130],"significantly":[131,169],"faster":[132,170,179],"efficient":[135],"than":[136,176,180],"original":[138],"targeted":[139],"non-targeted":[141],"JSMA.":[144],"Experiments":[145],"demonstrate,":[147],"in":[148,157],"some":[149],"cases,":[150],"very":[151],"competitive":[152],"results":[153],"our":[155,186],"attacks":[156,188],"comparison":[158],"with":[159],"Carlini-Wagner":[161],"(CW)":[162],"attack,":[164],"while":[165],"remaining,":[166],"like":[167],"(WJSMA":[171],"TJSMA":[173],"50":[177],"times":[178],"CW":[181,195],"CIFAR-10).":[184],"Therefore,":[185],"new":[187],"provide":[189],"good":[190],"trade-offs":[191],"between":[192],"for":[196],"real-time":[198],"testing":[200],"ones":[206],"previously":[207],"cited.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":6}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}