{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,7]],"date-time":"2026-02-07T13:05:14Z","timestamp":1770469514437,"version":"3.49.0"},"publisher-location":"Cham","reference-count":50,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031781216","type":"print"},{"value":"9783031781223","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,12,5]],"date-time":"2024-12-05T00:00:00Z","timestamp":1733356800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,12,5]],"date-time":"2024-12-05T00:00:00Z","timestamp":1733356800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-78122-3_6","type":"book-chapter","created":{"date-parts":[[2024,12,4]],"date-time":"2024-12-04T07:15:12Z","timestamp":1733296512000},"page":"81-97","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["On Trace of\u00a0PGD-Like Adversarial Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3813-4875","authenticated-orcid":false,"given":"Mo","family":"Zhou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5239-692X","authenticated-orcid":false,"given":"Vishal M.","family":"Patel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,12,5]]},"reference":[{"key":"6_CR1","doi-asserted-by":"crossref","unstructured":"Aldahdooh, A., et\u00a0al.: Adversarial example detection for DNN models: a review and experimental comparison. Artif. Intell. Rev. 55(6), 4403\u20134462 (2022)","DOI":"10.1007\/s10462-021-10125-w"},{"key":"6_CR2","doi-asserted-by":"crossref","unstructured":"Andriushchenko, M., Croce, F., Flammarion, N., Hein, M.: Square attack: a query-efficient black-box adversarial attack via random search (2020)","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"6_CR3","unstructured":"Andriushchenko, M., Flammarion, N.: Understanding and improving fast adversarial training. In: NeurIPS, vol.\u00a033, pp. 16048\u201316059 (2020)"},{"key":"6_CR4","unstructured":"Athalye, A., et\u00a0al.: Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples. In: ICML, pp. 274\u2013283. PMLR (2018)"},{"key":"6_CR5","unstructured":"Bartlett, P., Bubeck, S., Cherapanamjeri, Y.: Adversarial examples in multi-layer random ReLU networks. In: NeurIPS, vol.\u00a034, pp. 9241\u20139252 (2021)"},{"key":"6_CR6","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Adversarial examples are not easily detected: bypassing ten detection methods. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp. 3\u201314 (2017)","DOI":"10.1145\/3128572.3140444"},{"key":"6_CR7","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE S &P, pp. 39\u201357. IEEE (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"6_CR8","unstructured":"Croce, F., Hein, M.: Minimally distorted adversarial examples with a fast adaptive boundary attack. In: ICML, pp. 2196\u20132205. PMLR (2020)"},{"key":"6_CR9","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: ICML (2020)"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.J., Li, K., Fei-Fei, L.: ImageNet: a large-scale hierarchical image database. In: CVPR, pp. 248\u2013255. IEEE (2009)","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"6_CR11","doi-asserted-by":"crossref","unstructured":"Dong, Y., et al.: Benchmarking adversarial robustness on image classification. In: CVPR (June 2020)","DOI":"10.1109\/CVPR42600.2020.00040"},{"key":"6_CR12","doi-asserted-by":"crossref","unstructured":"Dong, Y., et al.: Boosting adversarial attacks with momentum. In: CVPR (June 2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"6_CR13","doi-asserted-by":"crossref","unstructured":"Dong, Y., Pang, T., Su, H., Zhu, J.: Evading defenses to transferable adversarial examples by translation-invariant attacks. In: CVPR, pp. 4312\u20134321 (2019)","DOI":"10.1109\/CVPR.2019.00444"},{"key":"6_CR14","unstructured":"Engstrom, L., Ilyas, A., Salman, H., Santurkar, S., Tsipras, D.: Robustness (python library) (2019)"},{"key":"6_CR15","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. ICLR (2015)"},{"key":"6_CR16","unstructured":"Gopalakrishnan, S., Marzi, Z., Madhow, U., Pedarsani, R.: Combating adversarial attacks using sparse representations. ICLRw (2018)"},{"key":"6_CR17","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. arXiv preprint arXiv:1512.03385 (2015)","DOI":"10.1109\/CVPR.2016.90"},{"key":"6_CR18","unstructured":"Ilyas, A., Engstrom, L., Athalye, A., Lin, J.: Black-box adversarial attacks with limited queries and information. In: ICML, pp. 2137\u20132146. PMLR (2018)"},{"key":"6_CR19","unstructured":"Ilyas, A., Santurkar, S., Tsipras, D., Engstrom, L., Tran, B., Madry, A.: Adversarial examples are not bugs, they are features. In: NeurIPS, vol.\u00a032 (2019)"},{"key":"6_CR20","doi-asserted-by":"crossref","unstructured":"Khalooei, M., Mehdi\u00a0Homayounpour, M., Amirmazlaghani, M.: Layer-wise regularized adversarial training using layers sustainability analysis framework. Neurocomput. 540(C), 126182 (2023)","DOI":"10.1016\/j.neucom.2023.03.043"},{"key":"6_CR21","doi-asserted-by":"crossref","unstructured":"Kherchouche, A., et\u00a0al.: Detection of adversarial examples in deep neural networks with natural scene statistics. In: IJCNN, pp.\u00a01\u20137 (2020)","DOI":"10.1109\/IJCNN48605.2020.9206959"},{"key":"6_CR22","unstructured":"Krizhevsky, A., Hinton, G., et\u00a0al.: Learning multiple layers of features from tiny images (2009)"},{"key":"6_CR23","unstructured":"Kurakin, A., Goodfellow, I., Bengio, S., et\u00a0al.: Adversarial examples in the physical world. ICLRw (2016)"},{"key":"6_CR24","doi-asserted-by":"crossref","unstructured":"Li, X., Li, F.: Adversarial examples detection in deep networks with convolutional filter statistics. In: ICCV, pp. 5775\u20135783 (2017)","DOI":"10.1109\/ICCV.2017.615"},{"key":"6_CR25","doi-asserted-by":"crossref","unstructured":"Liao, F., et\u00a0al.: Defense against adversarial attacks using high-level representation guided denoiser. CoRR arxiv preprint arxiv:abs\/1712.02976 (2017)","DOI":"10.1109\/CVPR.2018.00191"},{"key":"6_CR26","doi-asserted-by":"crossref","unstructured":"Liu, Z., et\u00a0al.: Swin transformer: hierarchical vision transformer using shifted windows. In: ICCV (2021)","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"6_CR27","doi-asserted-by":"crossref","unstructured":"Lu, J., Issaranon, T., Forsyth, D.A.: SafetyNet: detecting and rejecting adversarial examples robustly. CoRR arxiv preprint arxiv:abs\/1704.00103 (2017)","DOI":"10.1109\/ICCV.2017.56"},{"key":"6_CR28","doi-asserted-by":"crossref","unstructured":"Ma, S., Liu, Y.: NIC: detecting adversarial samples with neural network invariant checking. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23415"},{"key":"6_CR29","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. ICLR (2018)"},{"key":"6_CR30","unstructured":"McMahan, B., et\u00a0al.: Communication-efficient learning of deep networks from decentralized data. In: AISTATS, vol.\u00a054, pp. 1273\u20131282 (2017)"},{"key":"6_CR31","doi-asserted-by":"crossref","unstructured":"Meng, D., Chen, H.: Magnet: a two-pronged defense against adversarial examples. In: ACM SIGSAC, pp. 135\u2013147. CCS \u201917 (2017)","DOI":"10.1145\/3133956.3134057"},{"key":"6_CR32","unstructured":"Metzen, J.H., Genewein, T., Fischer, V., Bischoff, B.: On detecting adversarial perturbations. arXiv preprint arXiv:1702.04267 (2017)"},{"key":"6_CR33","doi-asserted-by":"crossref","unstructured":"Nayak, G.K., Rawal, R., Chakraborty, A.: Dad: data-free adversarial defense at test time. In: WACV, pp. 3562\u20133571 (2022)","DOI":"10.1109\/WACV51458.2022.00384"},{"key":"6_CR34","doi-asserted-by":"crossref","unstructured":"Niu, Z., Zhou, M., Wang, L., Gao, X., Hua, G.: Ordinal regression with multiple output CNN for age estimation. In: CVPR (June 2016)","DOI":"10.1109\/CVPR.2016.532"},{"key":"6_CR35","unstructured":"Pang, T., Du, C., Dong, Y., Zhu, J.: Towards robust detection of adversarial examples. In: NeurIPS, pp. 4584\u20134594. NIPS\u201918 (2018)"},{"key":"6_CR36","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., et al.: Scikit-learn: machine learning in Python. JMLR 12, 2825\u20132830 (2011)","journal-title":"JMLR"},{"key":"6_CR37","unstructured":"Pintor, M., et\u00a0al.: Fast minimum-norm adversarial attacks through adaptive norm constraints. In: NeurIPS, vol.\u00a034, pp. 20052\u201320062 (2021)"},{"key":"6_CR38","unstructured":"Qin, C., et\u00a0al.: Adversarial robustness through local linearization. In: NeurIPS (2019)"},{"key":"6_CR39","unstructured":"Roth, K., Kilcher, Y., Hofmann, T.: The odds are odd: a statistical test for detecting adversarial examples. In: ICML, vol.\u00a097, pp. 5498\u20135507 (2019)"},{"key":"6_CR40","unstructured":"Roth, K., Kilcher, Y., Hofmann, T.: Adversarial training is a form of data-dependent operator norm regularization. In: NeurIPS, vol.\u00a033, pp. 14973\u201314985 (2020)"},{"key":"6_CR41","unstructured":"Song, Y., et\u00a0al.: PixelDefend: leveraging generative models to understand and defend against adversarial examples. In: ICLR (2018)"},{"key":"6_CR42","unstructured":"Souri, H., Khorramshahi, P., Lau, C.P., Goldblum, M., Chellappa, R.: Identification of attack-specific signatures in adversarial examples. CoRR arxiv preprint arxiv:abs\/2110.06802 (2021)"},{"key":"6_CR43","unstructured":"Szegedy, C., et\u00a0al.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"key":"6_CR44","first-page":"1633","volume":"33","author":"F Tramer","year":"2020","unstructured":"Tramer, F., Carlini, N., Brendel, W., Madry, A.: On adaptive attacks to adversarial example defenses. NeurIPS 33, 1633\u20131645 (2020)","journal-title":"NeurIPS"},{"key":"6_CR45","unstructured":"Uesato, J., O\u2019donoghue, B., Kohli, P., Oord, A.: Adversarial risk and the dangers of evaluating against weak attacks. In: ICML, pp. 5025\u20135034. PMLR (2018)"},{"key":"6_CR46","unstructured":"Virtanen, P., et\u00a0al.: SciPy 1.0: fundamental algorithms for scientific computing in python. Nat. Methods 17, 261\u2013272 (2020)"},{"key":"6_CR47","unstructured":"Wu, D., Xia, S.T., Wang, Y.: Adversarial weight perturbation helps robust generalization. In: NeurIPS (2020)"},{"key":"6_CR48","doi-asserted-by":"crossref","unstructured":"Xie, C., Wu, Y., van\u00a0der Maaten, L., Yuille, A.L., He, K.: Feature denoising for improving adversarial robustness. In: CVPR (June 2019)","DOI":"10.1109\/CVPR.2019.00059"},{"key":"6_CR49","doi-asserted-by":"crossref","unstructured":"Xie, C., et al.: Improving transferability of adversarial examples with input diversity. In: CVPR, IEEE (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"6_CR50","unstructured":"Yin, X., Kolouri, S., Rohde, G.K.: Gat: generative adversarial training for adversarial example detection and robust classification. In: ICLR (2020)"}],"container-title":["Lecture Notes in Computer Science","Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-78122-3_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,4]],"date-time":"2024-12-04T08:07:21Z","timestamp":1733299641000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-78122-3_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,5]]},"ISBN":["9783031781216","9783031781223"],"references-count":50,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-78122-3_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12,5]]},"assertion":[{"value":"5 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICPR","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Pattern Recognition","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kolkata","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 December 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 December 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icpr2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icpr2024.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}