{"id":"https://openalex.org/W2640329709","doi":"https://doi.org/10.48550/arxiv.1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","display_name":"Towards Deep Learning Models Resistant to Adversarial Attacks","publication_year":2017,"publication_date":"2017-06-19","ids":{"openalex":"https://openalex.org/W2640329709","doi":"https://doi.org/10.48550/arxiv.1706.06083","mag":"2640329709"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:1706.06083","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1706.06083","pdf_url":"https://arxiv.org/pdf/1706.06083","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1706.06083","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032574693","display_name":"Aleksander M\u0105dry","orcid":"https://orcid.org/0000-0003-0536-0323","observed_orcids":["https://orcid.org/0000-0003-0536-0323"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Madry, Aleksander","raw_affiliation_strings":["Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004850872","display_name":"Aleksandar Makelov","orcid":"https://orcid.org/0009-0003-5394-112X","observed_orcids":["https://orcid.org/0009-0003-5394-112X"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Makelov, Aleksandar","raw_affiliation_strings":["MIT","Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT","institution_ids":["https://openalex.org/I63966007"]},{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110578233","display_name":"Ludwig Schmidt","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Schmidt, Ludwig","raw_affiliation_strings":["MIT","Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT","institution_ids":["https://openalex.org/I63966007"]},{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031570233","display_name":"Dimitris Tsipras","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tsipras, Dimitris","raw_affiliation_strings":["MIT","Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT","institution_ids":["https://openalex.org/I63966007"]},{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091392485","display_name":"Adrian Vladu","orcid":"https://orcid.org/0009-0006-1169-3158","observed_orcids":["https://orcid.org/0009-0006-1169-3158"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vladu, Adrian","raw_affiliation_strings":["MIT","Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT","institution_ids":["https://openalex.org/I63966007"]},{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63966007"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":8407,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.9639999866485596},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8349999785423279},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.8659999966621399},{"id":"https://openalex.org/keywords/robust-optimization","display_name":"robust optimization","score":0.9440000057220459},{"id":"https://openalex.org/keywords/deep-neural-network","display_name":"deep neural network","score":0.7099999785423279},{"id":"https://openalex.org/keywords/security-guarantees","display_name":"security guarantees","score":0.6600000262260437},{"id":"https://openalex.org/keywords/adversarial-training","display_name":"adversarial training","score":0.7829999923706055},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.5649999976158142}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9418244361877441},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.8622210025787354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7801766395568848},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.743362545967102},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6666913032531738},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.6465107202529907},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.636347770690918},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5085064172744751},{"id":"https://openalex.org/C43091099","wikidata":"https://www.wikidata.org/wiki/Q1067788","display_name":"Through-the-lens metering","level":3,"score":0.508234441280365},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4623367488384247},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.44903987646102905},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43330058455467224},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08383011817932129},{"id":"https://openalex.org/C15336307","wikidata":"https://www.wikidata.org/wiki/Q1766051","display_name":"Lens (geology)","level":2,"score":0.07638537883758545},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C78762247","wikidata":"https://www.wikidata.org/wiki/Q1273174","display_name":"Petroleum engineering","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"pmh:oai:arXiv.org:1706.06083","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1706.06083","pdf_url":"https://arxiv.org/pdf/1706.06083","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2640329709","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1706.06083","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"pmh:oai:dspace.mit.edu:1721.1/137496","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/1721.1/137496","pdf_url":null,"source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv","raw_type":"http://purl.org/eprint/type/ConferencePaper"},{"id":"doi:10.48550/arxiv.1706.06083","doi":"https://doi.org/10.48550/arxiv.1706.06083","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1706.06083","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"mag:2964253222","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/pdf/1706.06083.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1706.06083","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1706.06083","pdf_url":"https://arxiv.org/pdf/1706.06083","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G3329116365","display_name":"CAREER: Fast Graph Algorithms and Continuous Optimization","funder_award_id":"1553428","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5996581877","display_name":"AF: Large: Collaborative Research: Algebraic Graph Algorithms: The Laplacian and Beyond","funder_award_id":"1111109","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2640329709.pdf","grobid_xml":"https://content.openalex.org/works/W2640329709.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1677182931","https://openalex.org/W1678450113","https://openalex.org/W1932198206","https://openalex.org/W2114296159","https://openalex.org/W2117130368","https://openalex.org/W2163605009","https://openalex.org/W2174868984","https://openalex.org/W2194775991","https://openalex.org/W2230740169","https://openalex.org/W2243397390","https://openalex.org/W2269778407","https://openalex.org/W2293768274","https://openalex.org/W2319356411","https://openalex.org/W2408141691","https://openalex.org/W2516373086","https://openalex.org/W2516574342","https://openalex.org/W2529714286","https://openalex.org/W2552767274","https://openalex.org/W2607219512","https://openalex.org/W2612637113","https://openalex.org/W2773022113","https://openalex.org/W2891262038","https://openalex.org/W2963076808","https://openalex.org/W2963207607","https://openalex.org/W2963431851","https://openalex.org/W2963564844","https://openalex.org/W2964153729","https://openalex.org/W2989696285","https://openalex.org/W3118608800"],"related_works":["https://openalex.org/W4403012202","https://openalex.org/W2963566318","https://openalex.org/W2793518327","https://openalex.org/W3035468717","https://openalex.org/W2781957615","https://openalex.org/W6967428231","https://openalex.org/W2963076808","https://openalex.org/W3091172437","https://openalex.org/W3113061480","https://openalex.org/W2564099357"],"abstract_inverted_index":{"Recent":[0],"work":[1,83],"has":[2],"demonstrated":[3],"that":[4,13,35,103,120,163],"deep":[5,47,179],"neural":[6,60,101],"networks":[7,61,102,131],"are":[8,14,104,186],"vulnerable":[9],"to":[10,93,136],"adversarial":[11,39,57,141],"examples---inputs":[12],"almost":[15],"indistinguishable":[16],"from":[17],"natural":[18,156],"data":[19],"and":[20,75,99,157,183,190],"yet":[21],"classified":[22],"incorrectly":[23],"by":[24],"the":[25,31,36,56,63,81,146],"network.":[26],"In":[27,112],"fact,":[28],"some":[29],"of":[30,38,46,59,65,80,140,148,169],"latest":[32],"findings":[33],"suggest":[34,145],"existence":[37],"attacks":[40],"may":[41],"be":[42],"an":[43,172],"inherent":[44],"weakness":[45],"learning":[48,180],"models.":[49,181],"To":[50],"address":[51],"this":[52,85],"problem,":[53],"we":[54],"study":[55],"robustness":[58,164],"through":[62],"lens":[64],"robust":[66],"optimization.":[67],"This":[68],"approach":[69],"provides":[70],"us":[71,92,129],"with":[72,132],"a":[73,108,116,137,151,155],"broad":[74,158],"unifying":[76],"view":[77],"on":[78,84],"much":[79],"prior":[82],"topic.":[86],"Its":[87],"principled":[88],"nature":[89],"also":[90,144],"enables":[91],"identify":[94],"methods":[95,127],"for":[96],"both":[97],"training":[98],"attacking":[100],"reliable":[105],"and,":[106],"in":[107],"certain":[109],"sense,":[110],"universal.":[111],"particular,":[113],"they":[114],"specify":[115],"concrete":[117],"security":[118,149,159],"guarantee":[119],"would":[121],"protect":[122],"against":[123,150,165],"any":[124],"adversary.":[125],"These":[126],"let":[128],"train":[130],"significantly":[133],"improved":[134],"resistance":[135],"wide":[138],"range":[139],"attacks.":[142],"They":[143],"notion":[147],"first-order":[152],"adversary":[153],"as":[154],"guarantee.":[160],"We":[161],"believe":[162],"such":[166],"well-defined":[167],"classes":[168],"adversaries":[170],"is":[171],"important":[173],"stepping":[174],"stone":[175],"towards":[176],"fully":[177],"resistant":[178],"Code":[182],"pre-trained":[184],"models":[185],"available":[187],"at":[188],"https://github.com/MadryLab/mnist_challenge":[189],"https://github.com/MadryLab/cifar10_challenge.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":774},{"year":2025,"cited_by_count":1301},{"year":2024,"cited_by_count":1604},{"year":2023,"cited_by_count":1484},{"year":2022,"cited_by_count":1164},{"year":2021,"cited_by_count":1013},{"year":2020,"cited_by_count":610},{"year":2019,"cited_by_count":325},{"year":2018,"cited_by_count":114},{"year":2017,"cited_by_count":15},{"year":2016,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2017-06-30T00:00:00"}