{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T20:19:01Z","timestamp":1783109941650,"version":"3.54.6"},"publisher-location":"Singapore","reference-count":33,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819543663","type":"print"},{"value":"9789819543670","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T00:00:00Z","timestamp":1763769600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T00:00:00Z","timestamp":1763769600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-4367-0_17","type":"book-chapter","created":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T12:37:43Z","timestamp":1763728663000},"page":"245-260","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["CLIP-Guided Adversarial Example Detection via\u00a0Latent Mutual Information"],"prefix":"10.1007","author":[{"given":"Jun","family":"Ma","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"PengJu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jing","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,11,22]]},"reference":[{"key":"17_CR1","unstructured":"Metzen, J.H., Genewein, T., Fischer, V., Bischoff, B.: On detecting adversarial perturbations. In: International Conference on Learning Representations (2017)"},{"key":"17_CR2","unstructured":"Radford, A., et al.: Learning transferable visual models from natural language supervision. In: International Conference on Machine Learning, pp. 8748\u20138763. PMLR (2021)"},{"key":"17_CR3","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (SP), pp. 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"17_CR4","doi-asserted-by":"crossref","unstructured":"Dong, Y., et al.: Boosting adversarial attacks with momentum. In: IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"17_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"381","DOI":"10.1007\/978-3-030-01234-2_23","volume-title":"Computer Vision \u2013 ECCV 2018","author":"X Liu","year":"2018","unstructured":"Liu, X., Cheng, M., Zhang, H., Hsieh, C.-J.: Towards robust neural networks via random self-ensemble. In: Ferrari, V., Hebert, M., Sminchisescu, C., Weiss, Y. (eds.) ECCV 2018. LNCS, vol. 11211, pp. 381\u2013397. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-01234-2_23"},{"key":"17_CR6","unstructured":"Athalye, A., Carlini, N., Wagner, D.: Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples. In: International Conference on Machine Learning, pp. 274\u2013283. PMLR (2018)"},{"key":"17_CR7","doi-asserted-by":"crossref","unstructured":"Lu, J., Issaranon, T., Forsyth, D.: SafetyNet: detecting and rejecting adversarial examples robustly. In: IEEE International Conference on Computer Vision, pp. 446\u2013454 (2017)","DOI":"10.1109\/ICCV.2017.56"},{"key":"17_CR8","doi-asserted-by":"crossref","unstructured":"Yang, P., Chen, J., Hsieh, C.J., Wang, J., Jordan, M.: ML-LOO: detecting adversarial examples with feature attribution. In: AAAI Conference on Artificial Intelligence, vol. 34(04), pp. 6639\u20136647 (2020)","DOI":"10.1609\/aaai.v34i04.6140"},{"key":"17_CR9","doi-asserted-by":"crossref","unstructured":"Gong, Z., Wang, W.: Adversarial and clean data are not twins. In: International Workshop on Exploiting Artificial Intelligence Techniques for Data Management, pp. 1\u20135 (2023)","DOI":"10.1145\/3593078.3593935"},{"key":"17_CR10","doi-asserted-by":"crossref","unstructured":"Jia, X., Wei, X., Cao, X., Foroosh, H.: ComDefend: an efficient image compression model to defend adversarial example. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 6084\u20136092 (2019)","DOI":"10.1109\/CVPR.2019.00624"},{"key":"17_CR11","unstructured":"Guo, C., Rana, M., Cisse, M., van der Maaten, L.: Countering adversarial images using input transformations. In: International Conference on Learning Representations (2018)"},{"key":"17_CR12","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (2015)"},{"key":"17_CR13","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (2018)"},{"key":"17_CR14","unstructured":"Ma, X., et al.: Characterizing adversarial subspaces using local intrinsic dimensionality. In: International Conference on Learning Representations (2018)"},{"key":"17_CR15","unstructured":"Wong, E., Kolter, Z.: Provable defenses against adversarial examples via the convex outer adversarial polytope. In: International Conference on Machine Learning. PMLR (2018)"},{"key":"17_CR16","doi-asserted-by":"crossref","unstructured":"Ross, A., Doshi-Velez, F.: Improving the adversarial robustness and interpretability of deep neural networks by regularizing their input gradients. In: AAAI Conference on Artificial Intelligence, vol. 32(1) (2018)","DOI":"10.1609\/aaai.v32i1.11504"},{"key":"17_CR17","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Wu, X., Jha, S., Swami, A.: Distillation as a defense to adversarial perturbations against deep neural networks. In: IEEE Symposium on Security and Privacy (SP) pp. 582\u2013597 (2016)","DOI":"10.1109\/SP.2016.41"},{"key":"17_CR18","doi-asserted-by":"crossref","unstructured":"Gao, S., Yao, S., Li, R.: Transferable adversarial defense by fusing reconstruction learning and denoising learning. In: IEEE INFOCOM Workshops, pp. 1\u20136 (2021)","DOI":"10.1109\/INFOCOMWKSHPS51825.2021.9484542"},{"key":"17_CR19","doi-asserted-by":"crossref","unstructured":"Bhagoji, A.N., Cullina, D., Sitawarin, C., Mittal, P.: Enhancing robustness of machine learning systems via data transformations. In: Annual Conference on Information Sciences and Systems (CISS), pp. 1\u20135 (2018)","DOI":"10.1109\/CISS.2018.8362326"},{"key":"17_CR20","doi-asserted-by":"crossref","unstructured":"Xie, C., Wu, Y., van der Maaten, L., Yuille, A.L., He, K.: Feature denoising for improving adversarial robustness. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 501\u2013509 (2019)","DOI":"10.1109\/CVPR.2019.00059"},{"key":"17_CR21","unstructured":"Song, C., He, K., Lin, J., Wang, L., Hopcroft, J.E.: Robust local features for improving the generalization of adversarial training. In: International Conference on Learning Representations (2020)"},{"key":"17_CR22","first-page":"1310","volume":"2019","author":"J Cohen","year":"2019","unstructured":"Cohen, J., Rosenfeld, E., Kolter, Z.: Certified adversarial robustness via randomized smoothing. J. Mach. Learn. 2019, 1310\u20131320 (2019)","journal-title":"J. Mach. Learn."},{"key":"17_CR23","unstructured":"Guo, Y., Zhang, C., Zhang, C., Chen, Y.: Sparse DNNs with improved adversarial robustness. In: Advances in Neural Information Processing Systems, vol. 31 (2018)"},{"key":"17_CR24","doi-asserted-by":"publisher","first-page":"99","DOI":"10.1201\/9781351251389-8","volume":"2018","author":"A Kurakin","year":"2018","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. J. Artif. Intell. Safety Secur. 2018, 99\u2013112 (2018)","journal-title":"J. Artif. Intell. Safety Secur."},{"key":"17_CR25","doi-asserted-by":"crossref","unstructured":"Yang, X., Deng, C., Zheng, F., Yan, J., Liu, W.: Deep spectral clustering using dual autoencoder network. J. IEEE\/CVF Conf. Comput. Vision Pattern Recogn. (2019)","DOI":"10.1109\/CVPR.2019.00419"},{"key":"17_CR26","doi-asserted-by":"crossref","unstructured":"Gao, S., Yu, S., Wu, L., Yao, S., Zhou, X.: Detecting adversarial examples by additional evidence from noise domain. IET Image Processing (2022)","DOI":"10.1049\/ipr2.12354"},{"key":"17_CR27","doi-asserted-by":"crossref","unstructured":"Gao, S., Wang, R., Wang, X., Yu, S., Dong, Y., Yao, S., Zhou, W.: Detecting adversarial examples on deep neural networks with mutual information neural estimation. IEEE Transactions on Dependable and Secure Computing (2023)","DOI":"10.1109\/TDSC.2023.3241428"},{"key":"17_CR28","unstructured":"Grosse, K., Manoharan, P., Papernot, N., Backes, M., McDaniel, P.: On the (Statistical) Detection of Adversarial Examples. arXiv preprint arXiv:1702.06280 (2017)"},{"key":"17_CR29","unstructured":"Hosseini, H., et al.: Blocking Transferability of Adversarial Examples in Black-Box Learning Systems. arXiv preprint arXiv:1703.04318 (2017)"},{"key":"17_CR30","doi-asserted-by":"crossref","unstructured":"Lecuyer, M., Atlidakis, V., Geambasu, R., Hsu, D., Jana, S.: certified robustness to adversarial examples with differential privacy. In: IEEE Symposium on Security and Privacy (SP), pp. 656\u2013672 (2019)","DOI":"10.1109\/SP.2019.00044"},{"key":"17_CR31","unstructured":"Hjelm, R. Devon, et al.: Learning deep representations by mutual information estimation and maximization. In: International Conference on Learning Representations (2019)"},{"key":"17_CR32","unstructured":"Belghazi, M.I., et al.: Mutual information neural estimation. In: International Conference on Machine Learning, pp. 530\u2013539 (2018)"},{"key":"17_CR33","unstructured":"Gulrajani, I., et al.: Improved training of Wasserstein GANs. In: Advances in Neural Information Processing Systems, vol. 30 (2017)"}],"container-title":["Lecture Notes in Computer Science","Neural Information Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-4367-0_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T19:36:15Z","timestamp":1783107375000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-4367-0_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,22]]},"ISBN":["9789819543663","9789819543670"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-4367-0_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,22]]},"assertion":[{"value":"22 November 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICONIP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Neural Information Processing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Okinawa","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iconip2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iconip2025.apnns.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}