{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T19:40:28Z","timestamp":1742931628814,"version":"3.40.3"},"publisher-location":"Cham","reference-count":50,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031729454"},{"type":"electronic","value":"9783031729461"}],"license":[{"start":{"date-parts":[[2024,10,2]],"date-time":"2024-10-02T00:00:00Z","timestamp":1727827200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,10,2]],"date-time":"2024-10-02T00:00:00Z","timestamp":1727827200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-72946-1_17","type":"book-chapter","created":{"date-parts":[[2024,10,1]],"date-time":"2024-10-01T19:02:08Z","timestamp":1727809328000},"page":"293-310","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Catastrophic Overfitting: A Potential Blessing in\u00a0Disguise"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8319-4266","authenticated-orcid":false,"given":"Mengnan","family":"Zhao","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lihe","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuqiu","family":"Kong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Baocai","family":"Yin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,10,2]]},"reference":[{"key":"17_CR1","doi-asserted-by":"publisher","first-page":"301","DOI":"10.1007\/978-3-031-20065-6_18","volume-title":"European Conference on Computer Vision 2022","author":"S Addepalli","year":"2022","unstructured":"Addepalli, S., Jain, S., Sriramanan, G., Venkatesh Babu, R.: Scaling adversarial training to large perturbation bounds. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13665, pp. 301\u2013316. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-20065-6_18"},{"key":"17_CR2","unstructured":"Andriushchenko, M., Flammarion, N.: Understanding and improving fast adversarial training. In: Advances in Neural Information Processing Systems, pp. 16048\u201316059 (2020)"},{"issue":"6","key":"17_CR3","doi-asserted-by":"publisher","first-page":"7499","DOI":"10.1109\/TNNLS.2022.3229161","volume":"35","author":"V Borisov","year":"2022","unstructured":"Borisov, V., Leemann, T., Se\u00dfler, K., Haug, J., Pawelczyk, M., Kasneci, G.: Deep neural networks and tabular data: a survey. IEEE Trans. Neural Netw. Learn. Syst. 35(6), 7499\u20137519 (2022)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"17_CR4","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1007\/978-3-031-20065-6_3","volume-title":"European Conference on Computer Vision 2022","author":"Y Cao","year":"2022","unstructured":"Cao, Y., Xiao, C., Anandkumar, A., Xu, D., Pavone, M.: AdvDo: realistic adversarial attacks for trajectory prediction. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13665, pp. 36\u201352. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-20065-6_3"},{"key":"17_CR5","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy, pp. 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"17_CR6","unstructured":"Chen, W., Wu, B., Wang, H.: Effective backdoor defense by exploiting sensitivity of poisoned samples. In: Advances in Neural Information Processing Systems, vol. 35, pp. 9727\u20139737 (2022)"},{"key":"17_CR7","unstructured":"Cheng, Y., Song, J., Zhu, X., Zhang, Q., Gao, L., Shen, H.T.: Fast gradient non-sign methods. arXiv preprint arXiv:2110.12734 (2021)"},{"key":"17_CR8","doi-asserted-by":"crossref","unstructured":"Chou, S.Y., Chen, P.Y., Ho, T.Y.: How to backdoor diffusion models? In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4015\u20134024 (2023)","DOI":"10.1109\/CVPR52729.2023.00391"},{"key":"17_CR9","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: International Conference on Machine Learning (2020)"},{"key":"17_CR10","unstructured":"Golgooni, Z., Saberi, M., Eskandar, M., Rohban, M.H.: ZeroGrad: mitigating and explaining catastrophic overfitting in FGSM adversarial training. arXiv preprint arXiv:2103.15476 (2021)"},{"key":"17_CR11","volume":"19","author":"Z Golgooni","year":"2023","unstructured":"Golgooni, Z., Saberi, M., Eskandar, M., Rohban, M.H.: ZeroGrad: costless conscious remedies for catastrophic overfitting in the FGSM adversarial training. Intell. Syst. Appl. 19, 200258 (2023)","journal-title":"Intell. Syst. Appl."},{"key":"17_CR12","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (ICLR) (2015)"},{"key":"17_CR13","doi-asserted-by":"publisher","first-page":"308","DOI":"10.1007\/978-3-031-19818-2_18","volume-title":"European Conference on Computer Vision 2022","author":"J Gu","year":"2022","unstructured":"Gu, J., Zhao, H., Tresp, V., Torr, P.H.: SegPGD: an effective and efficient adversarial attack for evaluating and boosting segmentation robustness. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13689, pp. 308\u2013325. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19818-2_18"},{"key":"17_CR14","doi-asserted-by":"crossref","unstructured":"Guzman-Nateras, L., Van\u00a0Nguyen, M., Nguyen, T.: Cross-lingual event detection via optimized adversarial training. In: Proceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, pp. 5588\u20135599 (2022)","DOI":"10.18653\/v1\/2022.naacl-main.409"},{"key":"17_CR15","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"17_CR16","doi-asserted-by":"crossref","unstructured":"He, Z., Li, T., Chen, S., Huang, X.: Investigating catastrophic overfitting in fast adversarial training: a self-fitting perspective. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 2313\u20132320 (2023)","DOI":"10.1109\/CVPRW59228.2023.00227"},{"key":"17_CR17","unstructured":"Huang, Z., et al.: Fast adversarial training with adaptive step size. arXiv preprint arXiv:2206.02417 (2022)"},{"key":"17_CR18","doi-asserted-by":"crossref","unstructured":"Jia, X., Zhang, Y., Wu, B., Ma, K., Wang, J., Cao, X.: LAS-AT: adversarial training with learnable attack strategy. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13398\u201313408 (2022)","DOI":"10.1109\/CVPR52688.2022.01304"},{"key":"17_CR19","doi-asserted-by":"publisher","first-page":"4417","DOI":"10.1109\/TIP.2022.3184255","volume":"31","author":"X Jia","year":"2022","unstructured":"Jia, X., Zhang, Y., Wu, B., Wang, J., Cao, X.: Boosting fast adversarial training with learnable adversarial initialization. IEEE Trans. Image Process. 31, 4417\u20134430 (2022)","journal-title":"IEEE Trans. Image Process."},{"key":"17_CR20","doi-asserted-by":"crossref","unstructured":"Jin, G., Yi, X., Huang, W., Schewe, S., Huang, X.: Enhancing adversarial training with second-order statistics of weights. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 15273\u201315283 (2022)","DOI":"10.1109\/CVPR52688.2022.01484"},{"key":"17_CR21","unstructured":"de Jorge Aranda, P., et al.: Make some noise: reliable and efficient single-step adversarial training. In: Advances in Neural Information Processing Systems, vol. 35, pp. 12881\u201312893 (2022)"},{"key":"17_CR22","unstructured":"Krizhevsky, A., Hinton, G., et al.: Learning multiple layers of features from tiny images (2009)"},{"key":"17_CR23","doi-asserted-by":"crossref","unstructured":"Li, T., Wu, Y., Chen, S., Fang, K., Huang, X.: Subspace adversarial training. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13409\u201313418 (2022)","DOI":"10.1109\/CVPR52688.2022.01305"},{"key":"17_CR24","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (ICLR) (2018)"},{"key":"17_CR25","unstructured":"Mo, Y., Wu, D., Wang, Y., Guo, Y., Wang, Y.: When adversarial training meets vision transformers: recipes from training to architecture. In: Advances in Neural Information Processing Systems, vol. 35, pp. 18599\u201318611 (2022)"},{"key":"17_CR26","doi-asserted-by":"crossref","unstructured":"Mousavi, S.M., Beroza, G.C.: Deep-learning seismology. Science 377(6607), eabm4470 (2022)","DOI":"10.1126\/science.abm4470"},{"key":"17_CR27","unstructured":"Niu, A., et al.: Fast adversarial training with noise augmentation: a unified perspective on randstart and gradalign. arXiv preprint arXiv:2202.05488 (2022)"},{"key":"17_CR28","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. In: 2016 IEEE European Symposium on Security and Privacy (EuroS &P), pp. 372\u2013387. IEEE (2016)","DOI":"10.1109\/EuroSP.2016.36"},{"key":"17_CR29","doi-asserted-by":"crossref","unstructured":"Park, G.Y., Lee, S.W.: Reliably fast adversarial training via latent adversarial perturbation. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 7758\u20137767 (2021)","DOI":"10.1109\/ICCV48922.2021.00766"},{"issue":"4","key":"17_CR30","doi-asserted-by":"publisher","first-page":"486","DOI":"10.1038\/s41592-022-01426-1","volume":"19","author":"TD Pereira","year":"2022","unstructured":"Pereira, T.D., et al.: SLEAP: a deep learning system for multi-animal pose tracking. Nat. Methods 19(4), 486\u2013495 (2022)","journal-title":"Nat. Methods"},{"key":"17_CR31","unstructured":"Rice, L., Wong, E., Kolter, Z.: Overfitting in adversarially robust deep learning. In: International Conference on Machine Learning, pp. 8093\u20138104. PMLR (2020)"},{"key":"17_CR32","doi-asserted-by":"publisher","DOI":"10.1016\/j.compbiomed.2021.105111","volume":"140","author":"Z Salahuddin","year":"2022","unstructured":"Salahuddin, Z., Woodruff, H.C., Chatterjee, A., Lambin, P.: Transparency of deep neural networks for medical image analysis: a review of interpretability methods. Comput. Biol. Med. 140, 105111 (2022)","journal-title":"Comput. Biol. Med."},{"key":"17_CR33","unstructured":"Shafahi, A., et al.: Adversarial training for free! In: Advances in Neural Information Processing Systems, vol. 32 (2019)"},{"key":"17_CR34","doi-asserted-by":"crossref","unstructured":"Sitawarin, C., Chakraborty, S., Wagner, D.: SAT: improving adversarial training via curriculum-based loss smoothing. In: Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security, pp. 25\u201336 (2021)","DOI":"10.1145\/3474369.3486878"},{"key":"17_CR35","unstructured":"Sriramanan, G., Addepalli, S., Baburaj, A., et al.: Towards efficient and effective adversarial training, vol. 34, pp. 11821\u201311833 (2021)"},{"key":"17_CR36","unstructured":"Tramer, F., Boneh, D.: Adversarial training and robustness for multiple perturbations. In: Advances in Neural Information Processing Systems, vol. 32 (2019)"},{"key":"17_CR37","doi-asserted-by":"publisher","first-page":"9572","DOI":"10.1109\/TMM.2023.3255742","volume":"25","author":"C Wan","year":"2023","unstructured":"Wan, C., Huang, F., Zhao, X.: Average gradient-based adversarial attack. IEEE Trans. Multimedia 25, 9572\u20139585 (2023)","journal-title":"IEEE Trans. Multimedia"},{"issue":"10","key":"17_CR38","doi-asserted-by":"publisher","first-page":"6139","DOI":"10.1109\/TSMC.2021.3138550","volume":"52","author":"L Wei","year":"2022","unstructured":"Wei, L., Jin, L., Luo, X.: Noise-suppressing neural dynamics for time-dependent constrained nonlinear optimization with applications. IEEE Trans. Syst. Man Cybern. Syst. 52(10), 6139\u20136150 (2022)","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"key":"17_CR39","unstructured":"Wong, E., Rice, L., Kolter, J.Z.: Fast is better than free: revisiting adversarial training. In: International Conference on Learning Representations (ICLR) (2020)"},{"key":"17_CR40","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1007\/978-3-031-19778-9_18","volume-title":"European Conference on Computer Vision","author":"B Wu","year":"2022","unstructured":"Wu, B., Gu, J., Li, Z., Cai, D., He, X., Liu, W.: Towards efficient adversarial training on vision transformers. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13673, pp. 307\u2013325. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19778-9_18"},{"key":"17_CR41","unstructured":"Xiao, J., Fan, Y., Sun, R., Wang, J., Luo, Z.Q.: Stability analysis and generalization bounds of adversarial training. In: Advances in Neural Information Processing Systems, vol. 35, pp. 15446\u201315459 (2022)"},{"key":"17_CR42","doi-asserted-by":"publisher","first-page":"567","DOI":"10.1007\/978-3-031-19772-7_33","volume-title":"European Conference on Computer Vision (ECCV)","author":"X Jia","year":"2022","unstructured":"Jia, X., et al.: Prior-guided adversarial initialization for fast adversarial training. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13664, pp. 567\u2013584. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19772-7_33"},{"key":"17_CR43","doi-asserted-by":"crossref","unstructured":"Yuan, Z., Zhang, J., Jia, Y., Tan, C., Xue, T., Shan, S.: Meta gradient adversarial attack. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 7748\u20137757 (2021)","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"17_CR44","doi-asserted-by":"crossref","unstructured":"Zagoruyko, S., Komodakis, N.: Wide residual networks. arXiv preprint arXiv:1605.07146 (2016)","DOI":"10.5244\/C.30.87"},{"key":"17_CR45","doi-asserted-by":"publisher","first-page":"1291","DOI":"10.1109\/TIP.2020.3042083","volume":"30","author":"C Zhang","year":"2020","unstructured":"Zhang, C., et al.: Interpreting and improving adversarial robustness of deep neural networks with neuron sensitivity. IEEE Trans. Image Process. 30, 1291\u20131304 (2020)","journal-title":"IEEE Trans. Image Process."},{"key":"17_CR46","unstructured":"Zhang, H., Yu, Y., Jiao, J., Xing, E., El\u00a0Ghaoui, L., Jordan, M.: Theoretically principled trade-off between robustness and accuracy. In: International Conference on Machine Learning, pp. 7472\u20137482. PMLR (2019)"},{"key":"17_CR47","unstructured":"Zhang, Y., Zhang, G., Khanduri, P., Hong, M., Chang, S., Liu, S.: Revisiting and advancing fast adversarial training through the lens of bi-level optimization. In: International Conference on Machine Learning, pp. 26693\u201326712. PMLR (2022)"},{"key":"17_CR48","doi-asserted-by":"crossref","unstructured":"Zhao, M., Zhang, L., Kong, Y., Yin, B.: Fast adversarial training with smooth convergence. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 4720\u20134729 (2023)","DOI":"10.1109\/ICCV51070.2023.00435"},{"key":"17_CR49","doi-asserted-by":"crossref","unstructured":"Zhong, Y., Liu, X., Zhai, D., Jiang, J., Ji, X.: Shadows can be dangerous: stealthy and effective physical-world adversarial attack by natural phenomenon. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 15345\u201315354 (2022)","DOI":"10.1109\/CVPR52688.2022.01491"},{"issue":"1","key":"17_CR50","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1038\/s41377-022-00714-x","volume":"11","author":"C Zuo","year":"2022","unstructured":"Zuo, C., et al.: Deep learning in optical metrology: a review. Light Sci. Appl. 11(1), 39 (2022)","journal-title":"Light Sci. Appl."}],"container-title":["Lecture Notes in Computer Science","Computer Vision \u2013 ECCV 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-72946-1_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,1]],"date-time":"2024-10-01T19:05:36Z","timestamp":1727809536000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-72946-1_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,2]]},"ISBN":["9783031729454","9783031729461"],"references-count":50,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-72946-1_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024,10,2]]},"assertion":[{"value":"2 October 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECCV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Computer Vision","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Milan","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 October 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eccv2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eccv2024.ecva.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}