{"id":"https://openalex.org/W7128377582","doi":"https://doi.org/10.48550/arxiv.2602.06578","title":"Exploring Sparsity and Smoothness of Arbitrary $\\ell_p$ Norms in Adversarial Attacks","display_name":"Exploring Sparsity and Smoothness of Arbitrary $\\ell_p$ Norms in Adversarial Attacks","publication_year":2026,"publication_date":"2026-02-06","ids":{"openalex":"https://openalex.org/W7128377582","doi":"https://doi.org/10.48550/arxiv.2602.06578"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.06578","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005045460","display_name":"Christof Duhme","orcid":"https://orcid.org/0009-0004-1853-2862"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Duhme, Christof","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054352286","display_name":"Florian Eilers","orcid":"https://orcid.org/0000-0003-0726-3287"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Eilers, Florian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125381939","display_name":"Xiaoyi Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Xiaoyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7972999811172485},{"id":"https://openalex.org/keywords/smoothness","display_name":"Smoothness","score":0.6703000068664551},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.5716999769210815},{"id":"https://openalex.org/keywords/smoothing","display_name":"Smoothing","score":0.4932999908924103},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4074000120162964},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.38119998574256897},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.37400001287460327}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7972999811172485},{"id":"https://openalex.org/C102634674","wikidata":"https://www.wikidata.org/wiki/Q868473","display_name":"Smoothness","level":2,"score":0.6703000068664551},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6008999943733215},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.5716999769210815},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.4932999908924103},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45750001072883606},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.4171999990940094},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4074000120162964},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.37400001287460327},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.36469998955726624},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36039999127388},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3352999985218048},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.328000009059906},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.3089999854564667},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.2976999878883362},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.27459999918937683}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.06578","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.06578","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.06578","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.06578","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"score":0.5056483149528503,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,75],"against":[2],"deep":[3],"neural":[4],"networks":[5],"are":[6,33],"commonly":[7],"constructed":[8],"under":[9,77],"$\\ell_p$":[10,190],"norm":[11,43,81,212],"constraints,":[12],"most":[13,173],"often":[14],"using":[15,189],"$p=1$,":[16],"$p=2$":[17],"or":[18,29,168],"$p=\\infty$,":[19],"and":[20,51,71,103,123,148,158,175,202,216],"potentially":[21],"regularized":[22],"for":[23,83,115],"specific":[24,184],"demands":[25],"such":[26],"as":[27],"sparsity":[28,70,98],"smoothness.":[30],"These":[31,205],"choices":[32],"typically":[34],"made":[35],"without":[36],"a":[37,91,112,126,139,149],"systematic":[38],"investigation":[39],"of":[40,54,65,73,85,152,166,210],"how":[41,62],"the":[42,49,63,101,164,176,183,197,208],"parameter":[44],"\\(":[45,66,78],"p":[46,67],"\\)":[47,68,80],"influences":[48],"structural":[50],"perceptual":[52],"properties":[53],"adversarial":[55,74,218],"perturbations.":[56],"In":[57,108,186],"this":[58],"work,":[59],"we":[60,94,110,137],"study":[61],"choice":[64,165],"affects":[69],"smoothness":[72,106,117,127],"generated":[76],"\\ell_p":[79],"constraints":[82],"values":[84],"$p":[86],"\\in":[87],"[1,2]$.":[88],"To":[89],"enable":[90],"quantitative":[92],"analysis,":[93],"adopt":[95],"two":[96],"established":[97],"measures":[99,118],"from":[100],"literature":[102],"introduce":[104,125],"three":[105],"measures.":[107],"particular,":[109],"propose":[111],"general":[113],"framework":[114],"deriving":[116],"based":[119,129],"on":[120,130,182],"smoothing":[121],"operations":[122],"additionally":[124],"measure":[128],"first-order":[131],"Taylor":[132],"approximations.":[133],"Using":[134],"these":[135],"measures,":[136],"conduct":[138],"comprehensive":[140],"empirical":[141],"evaluation":[142],"across":[143],"multiple":[144],"real-world":[145],"image":[146],"datasets":[147],"diverse":[150],"set":[151],"model":[153],"architectures,":[154],"including":[155],"both":[156],"convolutional":[157],"transformer-based":[159],"networks.":[160],"We":[161],"show":[162],"that":[163],"$\\ell_1$":[167],"$\\ell_2$":[169],"is":[170,180],"suboptimal":[171],"in":[172],"cases":[174],"optimal":[177],"$p$":[178],"value":[179],"dependent":[181],"task.":[185],"our":[187],"experiments,":[188],"norms":[191],"with":[192],"$p\\in":[193],"[1.3,":[194],"1.5]$":[195],"yields":[196],"best":[198],"trade-off":[199],"between":[200],"sparse":[201],"smooth":[203],"attacks.":[204,219],"findings":[206],"highlight":[207],"importance":[209],"principled":[211],"selection":[213],"when":[214],"designing":[215],"evaluating":[217]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-02-10T00:00:00"}