{"id":"https://openalex.org/W4416374066","doi":"https://doi.org/10.48550/arxiv.2510.04245","title":"Concept-Based Masking: A Patch-Agnostic Defense Against Adversarial Patch Attacks","display_name":"Concept-Based Masking: A Patch-Agnostic Defense Against Adversarial Patch Attacks","publication_year":2025,"publication_date":"2025-10-05","ids":{"openalex":"https://openalex.org/W4416374066","doi":"https://doi.org/10.48550/arxiv.2510.04245"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2510.04245","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.04245","pdf_url":"https://arxiv.org/pdf/2510.04245","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2510.04245","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Mehrotra, Ayushi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mehrotra, Ayushi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120555337","display_name":"Derek Peng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng, Derek","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014560362","display_name":"Dipkamal Bhusal","orcid":"https://orcid.org/0000-0003-1214-1954"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bhusal, Dipkamal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5001140269","display_name":"Nidhi Rastogi","orcid":"https://orcid.org/0000-0002-2002-3213"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rastogi, Nidhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8240000009536743},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.8126999735832214},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.6685000061988831},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6406000256538391},{"id":"https://openalex.org/keywords/forcing","display_name":"Forcing (mathematics)","score":0.6376000046730042},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5024999976158142}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8240000009536743},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8126999735832214},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6953999996185303},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.6685000061988831},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6406000256538391},{"id":"https://openalex.org/C197115733","wikidata":"https://www.wikidata.org/wiki/Q1003136","display_name":"Forcing (mathematics)","level":2,"score":0.6376000046730042},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5024999976158142},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4641000032424927},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4334000051021576},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.37959998846054077},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3765999972820282},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3765000104904175},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.31380000710487366},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2685000002384186}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2510.04245","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.04245","pdf_url":"https://arxiv.org/pdf/2510.04245","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2510.04245","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2510.04245","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2510.04245","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.04245","pdf_url":"https://arxiv.org/pdf/2510.04245","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Adversarial":[0],"patch":[1,31,62,91,120],"attacks":[2],"pose":[3],"a":[4,43,71,110],"practical":[5],"threat":[6],"to":[7,50],"deep":[8],"learning":[9,116],"models":[10,117],"by":[11],"forcing":[12],"targeted":[13],"misclassifications":[14],"through":[15],"localized":[16],"perturbations,":[17],"often":[18],"realized":[19],"in":[20],"the":[21,54,82,98],"physical":[22],"world.":[23],"Existing":[24],"defenses":[25,108],"typically":[26],"assume":[27],"prior":[28],"knowledge":[29],"of":[30,100],"size":[32],"or":[33],"location,":[34],"limiting":[35],"their":[36],"applicability.":[37],"In":[38],"this":[39],"work,":[40],"we":[41],"propose":[42],"patch-agnostic":[44],"defense":[45],"that":[46],"leverages":[47],"concept-based":[48],"explanations":[49],"identify":[51],"and":[52,78,93,105],"suppress":[53],"most":[55],"influential":[56],"concept":[57],"activation":[58],"vectors,":[59],"thereby":[60],"neutralizing":[61],"effects":[63],"without":[64],"explicit":[65],"detection.":[66],"Evaluated":[67],"on":[68],"Imagenette":[69],"with":[70,103],"ResNet-50,":[72],"our":[73],"method":[74],"achieves":[75],"higher":[76],"robust":[77],"clean":[79],"accuracy":[80],"than":[81],"state-of-the-art":[83],"PatchCleanser,":[84],"while":[85],"maintaining":[86],"strong":[87],"performance":[88],"across":[89],"varying":[90],"sizes":[92],"locations.":[94],"Our":[95],"results":[96],"highlight":[97],"promise":[99],"combining":[101],"interpretability":[102],"robustness":[104],"suggest":[106],"concept-driven":[107],"as":[109],"scalable":[111],"strategy":[112],"for":[113],"securing":[114],"machine":[115],"against":[118],"adversarial":[119],"attacks.":[121]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}