{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,8]],"date-time":"2026-03-08T20:42:53Z","timestamp":1773002573293,"version":"3.50.1"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032050595","type":"print"},{"value":"9783032050601","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,9,17]],"date-time":"2025-09-17T00:00:00Z","timestamp":1758067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,17]],"date-time":"2025-09-17T00:00:00Z","timestamp":1758067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-05060-1_8","type":"book-chapter","created":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T07:58:32Z","timestamp":1758009512000},"page":"89-100","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Simultaneous Robustness and\u00a0Generalization Using Nearest Neighbor Classifiers"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0841-4131","authenticated-orcid":false,"given":"O.","family":"Deniz","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7345-4869","authenticated-orcid":false,"given":"G.","family":"Bueno","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7748-6756","authenticated-orcid":false,"given":"A.","family":"Pedraza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9713-6048","authenticated-orcid":false,"given":"H.","family":"Singh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,17]]},"reference":[{"key":"8_CR1","doi-asserted-by":"crossref","unstructured":"Cohen, G., Afshar, S., Tapson, J., van Schaik, A.: EMNIST: an extension of MNIST to handwritten letters (2017). http:\/\/arxiv.org\/abs\/1702.05373","DOI":"10.1109\/IJCNN.2017.7966217"},{"issue":"6","key":"8_CR2","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1109\/MSP.2012.2211477","volume":"29","author":"L Deng","year":"2012","unstructured":"Deng, L.: The MNIST database of handwritten digit images for machine learning research. IEEE Signal Process. Mag. 29(6), 141\u2013142 (2012)","journal-title":"IEEE Signal Process. Mag."},{"issue":"4","key":"8_CR3","doi-asserted-by":"publisher","first-page":"935","DOI":"10.1007\/s13042-020-01097-4","volume":"11","author":"O Deniz","year":"2020","unstructured":"Deniz, O., Pedraza, A., Vallez, N., Salido, J., Bueno, G.: Robustness to adversarial examples can be improved with overfitting. Int. J. Mach. Learn. Cybern. 11(4), 935\u2013944 (2020). https:\/\/doi.org\/10.1007\/s13042-020-01097-4","journal-title":"Int. J. Mach. Learn. Cybern."},{"key":"8_CR4","unstructured":"Georgiev, G.: Statistical methods in online A\/B testing (2019)"},{"key":"8_CR5","unstructured":"Gilmer, J., et al.: Adversarial spheres (2018). https:\/\/openreview.net\/forum?id=SyUkxxZ0b"},{"key":"8_CR6","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: ICLR (2015)"},{"key":"8_CR7","doi-asserted-by":"publisher","unstructured":"Han, S., Lin, C., Shen, C., Wang, Q., Guan, X.: Interpreting adversarial examples in deep learning: a review. ACM Comput. Surv. 55 (2023). https:\/\/doi.org\/10.1145\/3594869","DOI":"10.1145\/3594869"},{"key":"8_CR8","unstructured":"Kamath, S., Deshpande, A., Kambhampati\u00a0Venkata, S., N\u00a0Balasubramanian, V.: Can we have it all? On the trade-off between spatial and adversarial robustness of neural networks. In: Advances in Neural Information Processing Systems, vol.\u00a034, pp. 27462\u201327474. Curran Associates, Inc. (2021). https:\/\/proceedings.neurips.cc\/paper_files\/paper\/2021\/file\/e6ff107459d435e38b54ad4c06202c33-Paper.pdf"},{"key":"8_CR9","unstructured":"Li, B., Jin, J., Zhong, H., Hopcroft, J.E., Wang, L.: Why robust generalization in deep learning is difficult: perspective of expressive power (2022)"},{"key":"8_CR10","doi-asserted-by":"publisher","unstructured":"Li, X., Chen, Y., He, Y., Xue, H.: AdvKnn: adversarial attacks on k-nearest neighbor classifiers with approximate gradients (2019). https:\/\/doi.org\/10.48550\/arXiv.1911.06591","DOI":"10.48550\/arXiv.1911.06591"},{"key":"8_CR11","unstructured":"Netzer, Y., Wang, T., Coates, A., Bissacco, A., Wu, B., Ng, A.: Reading digits in natural images with unsupervised feature learning (2011)"},{"key":"8_CR12","doi-asserted-by":"publisher","unstructured":"Pedraza, A., Deniz, O., Bueno, G.: On the relationship between generalization and robustness to adversarial examples. Symmetry 13(5) (2021). https:\/\/doi.org\/10.3390\/sym13050817, https:\/\/www.mdpi.com\/2073-8994\/13\/5\/817","DOI":"10.3390\/sym13050817"},{"key":"8_CR13","doi-asserted-by":"publisher","unstructured":"Schuirmann, D.J.: A comparison of the two one-sided tests procedure and the power approach for assessing the equivalence of average bioavailability (1987). https:\/\/doi.org\/10.1007\/bf01068419","DOI":"10.1007\/bf01068419"},{"key":"8_CR14","doi-asserted-by":"crossref","unstructured":"Sitawarin, C., Wagner, D.A.: Minimum-norm adversarial examples on KNN and KNN-based models. In: 2020 IEEE Security and Privacy Workshops, pp. 34\u201340 (2020)","DOI":"10.1109\/SPW50608.2020.00023"},{"key":"8_CR15","doi-asserted-by":"crossref","unstructured":"Su, D., Zhang, H., Chen, H., Yi, J., Chen, P.Y., Gao, Y.: Is robustness the cost of accuracy? \u2013 a comprehensive study on the robustness of 18 deep image classification models. In: Proceedings of the ECCV (2018)","DOI":"10.1007\/978-3-030-01258-8_39"},{"key":"8_CR16","unstructured":"Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., Madry, A.: Robustness may be at odds with accuracy. In: International Conference on Learning Representations (2019). https:\/\/openreview.net\/forum?id=SyxAb30cY7"},{"key":"8_CR17","unstructured":"Wang, L., Liu, X., Yi, J., Zhou, Z.H., Hsieh, C.J.: Evaluating the robustness of nearest neighbor classifiers: a primal-dual perspective. ArXiv abs\/1906.03972 (2019)"},{"key":"8_CR18","unstructured":"Wang, Y., Jha, S., Chaudhuri, K.: Analyzing the robustness of nearest neighbors to adversarial examples. In: Dy, J., Krause, A. (eds.) Proceedings of the of the 35th International Conference on Machine Learning, vol.\u00a080, pp. 5133\u20135142 (2018)"},{"key":"8_CR19","unstructured":"Xiao, H., Rasul, K., Vollgraf, R.: Fashion-MNIST: a novel image dataset for benchmarking machine learning algorithms (2017). https:\/\/github.com\/zalandoresearch\/fashion-mnist"},{"key":"8_CR20","doi-asserted-by":"publisher","unstructured":"Xie, C., Tan, M., Gong, B., Wang, J., Yuille, A., Le, Q.V.: Adversarial examples improve image recognition (2020). https:\/\/doi.org\/10.48550\/arXiv.1911.09665","DOI":"10.48550\/arXiv.1911.09665"}],"container-title":["Lecture Notes in Computer Science","Computer Analysis of Images and Patterns"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-05060-1_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T07:58:38Z","timestamp":1758009518000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-05060-1_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,17]]},"ISBN":["9783032050595","9783032050601"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-05060-1_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,17]]},"assertion":[{"value":"17 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CAIP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computer Analysis of Images and Patterns","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Las Palmas de Gran Canaria","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"caip2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/caip2025.com","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}