{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T02:07:20Z","timestamp":1779156440495,"version":"3.51.4"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032234490","type":"print"},{"value":"9783032234506","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-23450-6_19","type":"book-chapter","created":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:33:35Z","timestamp":1779154415000},"page":"370-385","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["DARD: Dice Adversarial Robustness Distillation against Adversarial Attacks"],"prefix":"10.1007","author":[{"given":"Jing","family":"Zou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shungeng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Meikang","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chong","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,19]]},"reference":[{"key":"19_CR1","doi-asserted-by":"crossref","unstructured":"Zhao, Z., Jie, S., Yu, J., Sun, Z., Zhang, B., Wei, X.: Enhanced accuracy and robustness via multi-teacher adversarial distillation. In: Proceedings of European Conference on Computer Vision (ECCV), pp. 585\u2013602. Springer, Cham (2022)","DOI":"10.1007\/978-3-031-19772-7_34"},{"key":"19_CR2","doi-asserted-by":"publisher","unstructured":"Goldblum, M., Fowl, L., Feizi, S., Goldstein, T.: Adversarially robust distillation. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34, no. 4, pp. 3996\u20134003 (2020). https:\/\/doi.org\/10.1609\/aaai.v34i04.5816","DOI":"10.1609\/aaai.v34i04.5816"},{"key":"19_CR3","doi-asserted-by":"publisher","unstructured":"Gu, J., Zhao, H., Tresp, V., Torr, P.H.: SegPGD: an effective and efficient adversarial attack for evaluating and boosting segmentation robustness. In: Proceedings of the European Conference on Computer Vision (ECCV), pp. 308\u2013325. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19818-2_18","DOI":"10.1007\/978-3-031-19818-2_18"},{"key":"19_CR4","unstructured":"Zhang, H., Yu, Y., Jiao, J., Xing, E., El Ghaoui, L., Jordan, M.: Theoretically principled trade-off between robustness and accuracy. In: Proceedings of International Conference on Machine Learning (ICML), Long Beach, CA, USA, pp. 7472\u20137482 (2019)"},{"key":"19_CR5","unstructured":"Gowal, S., Qin, C., Uesato, J., Mann, T., Kohli, P.: Uncovering the limits of adversarial training against norm-bounded adversarial examples. arXiv preprint arXiv:2010.03593 (2020)"},{"key":"19_CR6","unstructured":"Cohen, J., Rosenfeld, E., Kolter, Z.: Certified adversarial robustness via randomized smoothing. In: Proceedings of International Conference on Machine Learning (ICML), pp. 1310\u20131320 (2019)"},{"key":"19_CR7","unstructured":"Hinton, G.: Distilling the knowledge in a neural network. arXiv preprint arXiv:1503.02531 (2015)"},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Mettes, P., Ghadimi Atigh, M., Keller-Ressel, M., Gu, J., Yeung, S.: Hyperbolic deep learning in computer vision: a survey. Int. J. Comput. Vision 1\u201325 (2024)","DOI":"10.1007\/s11263-024-02043-5"},{"issue":"12","key":"19_CR9","first-page":"1","volume":"56","author":"S Chen","year":"2024","unstructured":"Chen, S., Zhang, Y., Yang, Q.: Multi-task learning in natural language processing: an overview. ACM Comput. Surv. 56(12), 1\u201332 (2024)","journal-title":"ACM Comput. Surv."},{"key":"19_CR10","doi-asserted-by":"publisher","unstructured":"Okuyama, T., Gonsalves, T., Upadhay, J.: Autonomous driving system based on deep Q learning. In: 2018 International Conference on Intelligent Autonomous Systems (ICoIAS), Singapore, pp. 201\u2013205 (2018). https:\/\/doi.org\/10.1109\/ICoIAS.2018.8494053","DOI":"10.1109\/ICoIAS.2018.8494053"},{"key":"19_CR11","doi-asserted-by":"publisher","unstructured":"Chi, L., et al.: Adversarial attacks on autonomous driving systems in the physical world: a survey. IEEE Trans. Intell. Veh. 1\u201322 (2024). https:\/\/doi.org\/10.1109\/TIV.2024.3484152","DOI":"10.1109\/TIV.2024.3484152"},{"issue":"11","key":"19_CR12","doi-asserted-by":"publisher","first-page":"16118","DOI":"10.1109\/TITS.2024.3410038","volume":"25","author":"H Chen","year":"2024","unstructured":"Chen, H., Yan, H., Yang, X., Su, H., Zhao, S., Qian, F.: Efficient adversarial attack strategy against 3D object detection in autonomous driving systems. IEEE Trans. Intell. Transp. Syst. 25(11), 16118\u201316132 (2024). https:\/\/doi.org\/10.1109\/TITS.2024.3410038","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"19_CR13","doi-asserted-by":"publisher","unstructured":"Surekha, M., Sagar, A.K., Khemchandani, V.: Adversarial attack and defense mechanisms in medical imaging: a comprehensive review. In: 2024 IEEE International Conference on Computing, Power and Communication Technologies (IC2PCT), Greater Noida, India, pp. 1657\u20131661 (2024). https:\/\/doi.org\/10.1109\/IC2PCT60090.2024.10486235","DOI":"10.1109\/IC2PCT60090.2024.10486235"},{"key":"19_CR14","doi-asserted-by":"crossref","unstructured":"Zou, J., Zhang, S., Qiu, M.: Adversarial attacks on large language models. In: International Conference on Knowledge Science, Engineering and Management, pp. 85\u201396. Springer, Singapore (2024)","DOI":"10.1007\/978-981-97-5501-1_7"},{"key":"19_CR15","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: 6th International Conference on Learning Representations (ICLR), Vancouver, BC, Canada, 30 April\u20133 May 2018 (2018)"},{"key":"19_CR16","unstructured":"Krizhevsky, A., Hinton, G.: Learning multiple layers of features from tiny images. Technical Report TR-2009, University of Toronto (2009)"},{"key":"19_CR17","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"19_CR18","unstructured":"Kurakin, A., Goodfellow, I., Bengio, S.: Adversarial machine learning at scale. arXiv preprint arXiv:1611.01236 (2016)"},{"key":"19_CR19","doi-asserted-by":"publisher","first-page":"99","DOI":"10.1201\/9781351251389-8","volume-title":"Artificial Intelligence Safety and Security","author":"A Kurakin","year":"2018","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. In: Yampolskiy, R.V. (ed.) Artificial Intelligence Safety and Security, pp. 99\u2013112. Chapman and Hall\/CRC, Boca Raton (2018)"},{"key":"19_CR20","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proceedings of the 37th International Conference on Machine Learning, vol. 119, pp. 2206\u20132216 (2020)"},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Zeng, Y., Pan, M., Just, H.A., Lyu, L., Qiu, M., Jia, R.: Narcissus: a practical clean-label backdoor attack with limited information. In: Proceedings of 2023 ACM SIGSAC Conference on Computer and Communication Security, pp. 771\u2013785 (2023)","DOI":"10.1145\/3576915.3616617"},{"key":"19_CR22","unstructured":"Ling, C., Jiang, J., et al.: Deep graph representation learning and optimization for influence maximization. In: ICML 2023 (2023)"},{"key":"19_CR23","unstructured":"Zhang, Y., Pan, B., et al.: Visual attention prompted prediction and learning. In: IJCAI 2024, pp. 5517\u20135525 (2024)"},{"key":"19_CR24","doi-asserted-by":"crossref","unstructured":"Zhou, D., et al.: Self-consistent deep geometric learning for heterogeneous multi-source spatial point data prediction. In: KDD 2024, pp. 4001\u20144011 (2024)","DOI":"10.1145\/3637528.3671737"},{"key":"19_CR25","doi-asserted-by":"crossref","unstructured":"Qiu, Y., Fang, H., et al.: A closer look at GAN priors: exploiting intermediate features for enhanced model inversion attacks. In: ECCV, no. 32, pp. 109\u2013126 (2024)","DOI":"10.1007\/978-3-031-73411-3_7"},{"issue":"11","key":"19_CR26","doi-asserted-by":"publisher","first-page":"6617","DOI":"10.1007\/s10115-024-02161-z","volume":"66","author":"Z Wang","year":"2024","unstructured":"Wang, Z., Qiu, M., et al.: Toward fair graph neural networks via real counterfactual samples. Knowl. Inf. Syst. 66(11), 6617\u20136641 (2024)","journal-title":"Knowl. Inf. Syst."},{"issue":"1","key":"19_CR27","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1109\/TNNLS.2024.3362974","volume":"36","author":"X Chen","year":"2024","unstructured":"Chen, X., Xu, G., Xu, X., Jiang, H., Tian, Z., Ma, T.: Multicenter hierarchical federated learning with fault-tolerance mechanisms for resilient edge computing networks. IEEE Trans. Neural Netw. Learn. Syst. 36(1), 47\u201361 (2024)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"19_CR28","unstructured":"Xiong, F., Sun, H., et al.: Graph attention network with high-order neighbor information propagation for social recommendation. In: IJCAI 2024, pp. 2478\u20132486 (2024)"},{"key":"19_CR29","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"19_CR30","unstructured":"G\u00fcrel, N.M., Qi, X., Rimanic, L., Zhang, C., Li, B.: Knowledge enhanced machine learning pipeline against diverse adversarial attacks. In: Proceedings of the 38th International Conference on Machine Learning, vol. 139, pp. 3976\u20133987 (2021)"},{"key":"19_CR31","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"key":"19_CR32","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: Proceedings of IEEE Symposium on Security and Privacy (SP), pp. 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"19_CR33","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: DeepFool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"19_CR34","unstructured":"Romero, A., Ballas, N., Kahou, S.E., Chassang, A., Gatta, C., Bengio, Y.: FitNets: hints for thin deep nets. arXiv preprint arXiv:1412.6550 (2014)"},{"key":"19_CR35","unstructured":"Zagoruyko, S., Komodakis, N.: Paying more attention to attention: improving the performance of convolutional neural networks via attention transfer. arXiv preprint arXiv:1612.03928 (2016)"},{"key":"19_CR36","doi-asserted-by":"crossref","unstructured":"Zi, B., Zhao, S., Ma, X., Jiang, Y.: Revisiting adversarial robustness distillation: robust soft labels make student better. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 16443\u201316452 (2021)","DOI":"10.1109\/ICCV48922.2021.01613"},{"key":"19_CR37","first-page":"30390","volume":"36","author":"X Yue","year":"2023","unstructured":"Yue, X., Mou, N., Wang, Q., Zhao, L.: Revisiting adversarial robustness distillation from the perspective of robust fairness. Adv. Neural. Inf. Process. Syst. 36, 30390\u201330401 (2023)","journal-title":"Adv. Neural. Inf. Process. Syst."}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-23450-6_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T01:33:39Z","timestamp":1779154419000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-23450-6_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032234490","9783032234506"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-23450-6_19","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"19 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Xiangtan","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}