{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T05:38:07Z","timestamp":1751607487273,"version":"3.40.3"},"publisher-location":"Cham","reference-count":58,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030845216"},{"type":"electronic","value":"9783030845223"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-84522-3_37","type":"book-chapter","created":{"date-parts":[[2021,8,8]],"date-time":"2021-08-08T23:04:24Z","timestamp":1628463864000},"page":"450-461","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Adversarial Attacks and Defenses in Deep Learning: A Survey"],"prefix":"10.1007","author":[{"given":"Chengyu","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jia","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiuzhen","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,8,9]]},"reference":[{"key":"37_CR1","unstructured":"Abbasi, M., Gagn\u00e9, C.: Robustness to adversarial examples through an ensemble of specialists. arXiv preprint arXiv:1702.06856 (2017)"},{"key":"37_CR2","doi-asserted-by":"crossref","unstructured":"Addepalli, S., Baburaj, A., Sriramanan, G., Babu, R.V.: Towards achieving adversarial robustness by enforcing feature consistency across bit planes. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp.1020\u20131029 (2020)","DOI":"10.1109\/CVPR42600.2020.00110"},{"key":"37_CR3","unstructured":"Athalye, A., Engstrom, L., Ilyas, A., Kwok, K.: Synthesizing robust adversarial examples. In: International conference on machine learning, pp. 284\u2013293. PMLR (2018)"},{"key":"37_CR4","unstructured":"Bagnall, A., Bunescu, R., Stewart, G.: Training ensembles to detect adversarial examples. arXiv preprint arXiv:1712.04006 (2017)"},{"key":"37_CR5","doi-asserted-by":"crossref","unstructured":"Borkar, T., Heide, F., Karam, L.: Defending against universal attacks through selective feature regeneration. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 709\u2013719 (2020)","DOI":"10.1109\/CVPR42600.2020.00079"},{"key":"37_CR6","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 39\u201357. IEEE (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"37_CR7","unstructured":"Cheng, S., Dong, Y., Pang, T., Su, H., Zhu, J.: Improving black-box adversarial attacks with a transfer-based prior. arXiv preprint arXiv:1906.06919 (2019)"},{"key":"37_CR8","doi-asserted-by":"crossref","unstructured":"Corneanu, C.A., Madadi, M., Escalera, S., Martinez, A.M.: What does it mean to learn in deep networks? And, how does one detect adversarial attacks? In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4757\u20134766 (2019)","DOI":"10.1109\/CVPR.2019.00489"},{"key":"37_CR9","doi-asserted-by":"crossref","unstructured":"Dabouei, A., Soleymani, S., Taherkhani, F., Dawson, J., Nasrabadi, N.M.: Exploiting joint robustness to adversarial perturbations. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 1122\u20131131 (2020)","DOI":"10.1109\/CVPR42600.2020.00120"},{"key":"37_CR10","unstructured":"Das, N., et al.: Keeping the bad guys out: protecting and vaccinating deep learning with jpeg compression. arXiv preprint arXiv:1705.02900 (2017)"},{"key":"37_CR11","doi-asserted-by":"crossref","unstructured":"Dong, Y., et al.: Boosting adversarial attacks with momentum. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"37_CR12","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M.: A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853 (2016)"},{"key":"37_CR13","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"37_CR14","unstructured":"Guo, C., Rana, M., Cisse, M., Van Der Maaten, L.: Countering adversarial images using input transformations. arXiv preprint arXiv:1711.00117 (2017)"},{"key":"37_CR15","doi-asserted-by":"crossref","unstructured":"Guo, M., Yang, Y., Xu, R., Liu, Z., Lin, D.: When NAS meets robustness: In search of robust architectures against adversarial attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 631\u2013640 (2020)","DOI":"10.1109\/CVPR42600.2020.00071"},{"key":"37_CR16","doi-asserted-by":"crossref","unstructured":"He, Z., Rakin, A.S., Fan, D.: Parametric noise injection: trainable randomness to improve deep neural network robustness against adversarial attack. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 588\u2013597 (2019)","DOI":"10.1109\/CVPR.2019.00068"},{"key":"37_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"525","DOI":"10.1007\/978-3-030-01258-8_32","volume-title":"Computer Vision \u2013 ECCV 2018","author":"D Jakubovitz","year":"2018","unstructured":"Jakubovitz, D., Giryes, R.: Improving DNN robustness to adversarial attacks using Jacobian regularization. In: Ferrari, V., Hebert, M., Sminchisescu, C., Weiss, Y. (eds.) ECCV 2018. LNCS, vol. 11216, pp. 525\u2013541. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-01258-8_32"},{"key":"37_CR18","doi-asserted-by":"crossref","unstructured":"Jang, Y., Zhao, T., Hong, S., Lee, H.: Adversarial defense via learning to generate diverse attacks. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 2740\u20132749 (2019)","DOI":"10.1109\/ICCV.2019.00283"},{"key":"37_CR19","doi-asserted-by":"crossref","unstructured":"Jia, X., Wei, X., Cao, X., Foroosh, H.: Comdefend: An efficient image compression model to defend adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 6084\u20136092 (2019)","DOI":"10.1109\/CVPR.2019.00624"},{"key":"37_CR20","unstructured":"Kariyappa, S., Qureshi, M.K.: Improving adversarial robustness of ensembles with diversity training. arXiv preprint arXiv:1901.09981 (2019)"},{"key":"37_CR21","unstructured":"Kou, C., Lee, H.K., Chang, E.C., Ng, T.K.: Enhancing transformation-based defenses against adversarial attacks with a distribution classifier. In: International Conference on Learning Representations (2019)"},{"key":"37_CR22","unstructured":"Kurakin, A., Goodfellow, I., Bengio, S.: Adversarial machine learning at scale. arXiv preprint arXiv:1611.01236 (2016)"},{"key":"37_CR23","unstructured":"Kurakin, A., Goodfellow, I., Bengio, S., et al.: Adversarial examples in the physical world (2016)"},{"key":"37_CR24","unstructured":"Lee, K., Lee, K., Lee, H., Shin, J.: A simple unified framework for detecting out-of-distribution samples and adversarial attacks. arXiv preprint arXiv:1807.03888 (2018)"},{"key":"37_CR25","unstructured":"Li, B., Chen, C., Wang, W., Carin, L.: Certified adversarial robustness with additive noise. arXiv preprint arXiv:1809.03113 (2018)"},{"key":"37_CR26","unstructured":"Li, Y., Bradshaw, J., Sharma, Y.: Are generative classifiers more robust to adversarial attacks? In: International Conference on Machine Learning, pp. 3804\u20133814. PMLR (2019)"},{"key":"37_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"381","DOI":"10.1007\/978-3-030-01234-2_23","volume-title":"Computer Vision \u2013 ECCV 2018","author":"X Liu","year":"2018","unstructured":"Liu, X., Cheng, M., Zhang, H., Hsieh, C.-J.: Towards robust neural networks via random self-ensemble. In: Ferrari, V., Hebert, M., Sminchisescu, C., Weiss, Y. (eds.) ECCV 2018. LNCS, vol. 11211, pp. 381\u2013397. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-01234-2_23"},{"key":"37_CR28","unstructured":"Liu, X., Li, Y., Wu, C., Hsieh, C.J.: Adv-BNN: improved adversarial defense through robust Bayesian neural network. arXiv preprint arXiv:1810.01279 (2018)"},{"key":"37_CR29","doi-asserted-by":"crossref","unstructured":"Liu, Z., et al.: Feature distillation: DNN-oriented JPEG compression against adversarial examples. In: 2019 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 860\u2013868. IEEE (2019)","DOI":"10.1109\/CVPR.2019.00095"},{"key":"37_CR30","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"37_CR31","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., Frossard, P.: Universal adversarial perturbations. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 1765\u20131773 (2017)","DOI":"10.1109\/CVPR.2017.17"},{"key":"37_CR32","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: DeepFool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"37_CR33","unstructured":"Pang, T., Xu, K., Du, C., Chen, N., Zhu, J.: Improving adversarial robustness via promoting ensemble diversity. In: International Conference on Machine Learning, pp. 4970\u20134979. PMLR (2019)"},{"key":"37_CR34","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. In: 2016 IEEE European Symposium on Security and Privacy (EuroS&P), pp. 372\u2013387. IEEE (2016)","DOI":"10.1109\/EuroSP.2016.36"},{"key":"37_CR35","doi-asserted-by":"crossref","unstructured":"Raff, E., Sylvester, J., Forsyth, S., McLean, M.: Barrage of random transforms for adversarially robust defense. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 6528\u20136537 (2019)","DOI":"10.1109\/CVPR.2019.00669"},{"key":"37_CR36","unstructured":"Rawat, A., Wistuba, M., Nicolae, M.I.: Adversarial phenomenon in the eyes of Bayesian deep learning. arXiv preprint arXiv:1711.08244 (2017)"},{"key":"37_CR37","unstructured":"Samangouei, P., Kabkab, M., Chellappa, R.: Defense-GAN: protecting classifiers against adversarial attacks using generative models. arXiv preprintarXiv:1805.06605 (2018)"},{"key":"37_CR38","doi-asserted-by":"crossref","unstructured":"Shafahi, A., Najibi, M., Xu, Z., Dickerson, J., Davis, L.S., Goldstein, T.: Universal adversarial training. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34, pp. 5636\u20135643 (2020)","DOI":"10.1609\/aaai.v34i04.6017"},{"key":"37_CR39","unstructured":"Shen, S., Jin, G., Gao, K., Zhang, Y.: APE-GAN: adversarial perturbation elimination with GAN. arXiv preprint arXiv:1707.05474 (2017)"},{"key":"37_CR40","doi-asserted-by":"crossref","unstructured":"Sun, B., Tsai, N., Liu, F., Yu, R., Su, H.: Adversarial defense by stratified convolutional sparse coding. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 11447\u201311456 (2019)","DOI":"10.1109\/CVPR.2019.01171"},{"key":"37_CR41","unstructured":"Svoboda, J., Masci, J., Monti, F., Bronstein, M.M., Guibas, L.: PeerNets: ex-ploiting peer wisdom against adversarial attacks. arXiv preprint arXiv:1806.00088 (2018)"},{"key":"37_CR42","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"key":"37_CR43","doi-asserted-by":"crossref","unstructured":"Theagarajan, R., Chen, M., Bhanu, B., Zhang, J.: ShieldNets: defending against adversarial attacks using probabilistic adversarial robustness. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 6988\u20136996 (2019)","DOI":"10.1109\/CVPR.2019.00715"},{"key":"37_CR44","unstructured":"Tram\u00e8r, F., Kurakin, A., Papernot, N., Goodfellow, I., Boneh, D., Mc-Daniel, P.: Ensemble adversarial training: attacks and defenses. arXiv preprintarXiv:1705.07204 (2017)"},{"key":"37_CR45","doi-asserted-by":"crossref","unstructured":"Wang, J., Zhang, H.: Bilateral adversarial training: towards fast training of more robust models against adversarial attacks. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 6629\u20136638 (2019)","DOI":"10.1109\/ICCV.2019.00673"},{"key":"37_CR46","doi-asserted-by":"crossref","unstructured":"Wu, W., et al.: Boosting the transferability of adversarial samples via attention. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 1161\u20131170 (2020)","DOI":"10.1109\/CVPR42600.2020.00124"},{"key":"37_CR47","doi-asserted-by":"crossref","unstructured":"Xiao, C., Zheng, C.: One man\u2019s trash is another man\u2019s treasure: Resisting adversarial examples by adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 412\u2013421 (2020)","DOI":"10.1109\/CVPR42600.2020.00049"},{"key":"37_CR48","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.Y., He, W., Liu, M., Song, D.: Generating adversarial examples with adversarial networks. arXiv preprint arXiv:1801.02610 (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"37_CR49","doi-asserted-by":"crossref","unstructured":"Xie, C., Tan, M., Gong, B., Wang, J., Yuille, A.L., Le, Q.V.: Adversarial examples improve image recognition. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 819\u2013828 (2020)","DOI":"10.1109\/CVPR42600.2020.00090"},{"key":"37_CR50","unstructured":"Xie, C., Wang, J., Zhang, Z., Ren, Z., Yuille, A.: Mitigating adversarial effects through randomization. arXiv preprint arXiv:1711.01991 (2017)"},{"key":"37_CR51","doi-asserted-by":"crossref","unstructured":"Xie, C., Wu, Y., Maaten, L, Yuille, A.L., He, K.: Feature denoising for improving adversarial robustness. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 501\u2013509 (2019)","DOI":"10.1109\/CVPR.2019.00059"},{"key":"37_CR52","doi-asserted-by":"crossref","unstructured":"Xie, C., et al.: Improving transferability of adversarial examples with input diversity. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"37_CR53","doi-asserted-by":"crossref","unstructured":"Zantedeschi, V., Nicolae, M.I., Rawat, A.: Efficient defenses against adversarial attacks. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp. 39\u201349 (2017)","DOI":"10.1145\/3128572.3140449"},{"key":"37_CR54","unstructured":"Zhang, H., Wang, J.: Defense against adversarial attacks using feature scattering-based adversarial training. arXiv preprint arXiv:1907.10764 (2019)"},{"key":"37_CR55","unstructured":"Zhang, J., et al.: Attacks which do not kill training make adversarial learning stronger. In: International Conference on Machine Learning, pp. 11278\u201311287. PMLR (2020)"},{"key":"37_CR56","doi-asserted-by":"crossref","unstructured":"Zheng, H., Zhang, Z., Gu, J., Lee, H., Prakash, A.: Efficient adversarial training with transferable adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 1181\u20131190 (2020)","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"37_CR57","unstructured":"Zheng, Z., Hong, P.: Robust detection of adversarial attacks by modeling the intrinsic properties of deep neural networks. In: Proceedings of the 32nd International Conference on Neural Information Processing Systems, pp. 7924\u20137933 (2018)"},{"key":"37_CR58","doi-asserted-by":"crossref","unstructured":"Zhou, M., Wu, J., Liu, Y., Liu, S., Zhu, C.: DaST: data-free substitute training for adversarial attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 234\u2013243 (2020)","DOI":"10.1109\/CVPR42600.2020.00031"}],"container-title":["Lecture Notes in Computer Science","Intelligent Computing Theories and Application"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-84522-3_37","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T15:50:42Z","timestamp":1710345042000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-84522-3_37"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030845216","9783030845223"],"references-count":58,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-84522-3_37","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"9 August 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Intelligent Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Shenzhen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 August 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 August 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icic2021a","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ic-icc.cn\/2021\/index.htm","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}