{"id":"https://openalex.org/W7163555508","doi":"https://doi.org/10.48550/arxiv.2606.04317","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","display_name":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","publication_year":2026,"publication_date":"2026-06-03","ids":{"openalex":"https://openalex.org/W7163555508","doi":"https://doi.org/10.48550/arxiv.2606.04317"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.04317","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04317","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.04317","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137893522","display_name":"Bin Duan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Duan, Bin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013179155","display_name":"Zeyu Bai","orcid":"https://orcid.org/0000-0003-2194-5911"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bai, Zeyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137855937","display_name":"Guowei Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Guowei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9459999799728394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9459999799728394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.032099999487400055,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7491000294685364},{"id":"https://openalex.org/keywords/redundancy","display_name":"Redundancy (engineering)","score":0.6104999780654907},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5277000069618225},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4677000045776367},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.459199994802475},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4465000033378601},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4359999895095825}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7491000294685364},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7017999887466431},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.6104999780654907},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5277000069618225},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47029998898506165},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4677000045776367},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.459199994802475},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4465000033378601},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4359999895095825},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.3596999943256378},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35499998927116394},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.3546000123023987},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.33719998598098755},{"id":"https://openalex.org/C167928553","wikidata":"https://www.wikidata.org/wiki/Q1376021","display_name":"Estimation theory","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2870999872684479},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C2781133158","wikidata":"https://www.wikidata.org/wiki/Q1088669","display_name":"Survivability","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C2983447341","wikidata":"https://www.wikidata.org/wiki/Q1413083","display_name":"Model parameter","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.04317","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04317","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.04317","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.04317","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Deep":[0],"neural":[1,98],"networks":[2,99],"are":[3,14,67,83],"increasingly":[4],"deployed":[5],"across":[6,53,154],"heterogeneous":[7],"and":[8,23,51,121,125,139,143,163,177],"partially":[9],"untrusted":[10],"environments,":[11],"where":[12],"models":[13,145],"distributed":[15],"through":[16],"cloud":[17],"storage,":[18],"CI/CD":[19],"pipelines,":[20],"containerized":[21],"services,":[22],"edge":[24],"execution":[25],"platforms.":[26],"This":[27],"broad":[28],"deployment":[29,76,167],"landscape":[30],"exposes":[31],"model":[32,161],"parameters":[33,50],"to":[34,69],"various":[35],"integrity":[36],"risks.":[37],"Unlike":[38],"input-space":[39],"adversarial":[40],"attacks,":[41],"parameter":[42,81,104,114,156],"attacks":[43,82,157],"directly":[44],"tamper":[45],"with":[46],"the":[47,78],"model's":[48],"internal":[49],"persist":[52],"all":[54],"subsequent":[55],"inferences.":[56],"Existing":[57],"defenses":[58],"either":[59],"require":[60],"retraining,":[61],"incur":[62],"significant":[63],"accuracy":[64],"degradation,":[65],"or":[66],"limited":[68],"specific":[70],"attack":[71,151],"classes.":[72],"However,":[73],"in":[74],"real-world":[75],"scenarios,":[77],"forms":[79],"of":[80,103],"often":[84],"unpredictable.":[85],"To":[86],"address":[87],"this":[88],"challenge,":[89],"we":[90],"present":[91],"ParDef,":[92],"a":[93,175],"generalized":[94,178],"defense":[95,179],"for":[96,180],"deep":[97],"against":[100],"diverse":[101],"types":[102],"attacks.":[105],"ParDef":[106,148,173],"integrates":[107],"keyed":[108],"channel":[109],"reparameterization,":[110],"which":[111,118,129],"obscures":[112],"sensitive":[113],"directions,":[115],"QC-LDPC":[116],"quantization,":[117],"embeds":[119],"redundancy":[120],"supports":[122],"error":[123],"correction,":[124],"adaptive":[126],"robust":[127],"inference,":[128],"stabilizes":[130],"predictions":[131],"under":[132],"uncertainty.":[133],"Our":[134],"evaluation":[135],"on":[136],"CIFAR-10,":[137],"CIFAR-100,":[138],"Tiny-ImageNet":[140],"using":[141],"ResNet":[142],"VGG":[144],"demonstrates":[146],"that":[147,172],"consistently":[149],"reduces":[150],"success":[152],"rates":[153],"different":[155],"while":[158],"maintaining":[159],"high":[160],"performance":[162],"incurring":[164],"only":[165],"moderate":[166],"overhead.":[168],"These":[169],"results":[170],"highlight":[171],"is":[174],"practical":[176],"DNN":[181],"deployments.":[182]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-05T00:00:00"}