{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T15:26:42Z","timestamp":1743002802097,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":28,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819983872"},{"type":"electronic","value":"9789819983889"}],"license":[{"start":{"date-parts":[[2023,11,27]],"date-time":"2023-11-27T00:00:00Z","timestamp":1701043200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,11,27]],"date-time":"2023-11-27T00:00:00Z","timestamp":1701043200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-981-99-8388-9_26","type":"book-chapter","created":{"date-parts":[[2023,11,26]],"date-time":"2023-11-26T16:02:21Z","timestamp":1701014541000},"page":"315-327","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Causal Disentanglement for\u00a0Adversarial Defense"],"prefix":"10.1007","author":[{"given":"Ji-Young","family":"Park","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lin","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jixue","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiuyong","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,11,27]]},"reference":[{"key":"26_CR1","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on S &P, pp. 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"26_CR2","unstructured":"Carlini, N., et al.: On evaluating adversarial robustness. arXiv:1902.06705 (2019)"},{"key":"26_CR3","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: ICML, pp. 2206\u20132216. PMLR (2020)"},{"key":"26_CR4","unstructured":"Dong, Y., et al.: Adversarial distributional training for robust deep learning. In: Advances in NeurIPS, vol. 33, pp. 8270\u20138283 (2020)"},{"key":"26_CR5","doi-asserted-by":"crossref","unstructured":"Dong, Y., et al.: Boosting adversarial attacks with momentum. In: CVPR, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"26_CR6","unstructured":"Goodfellow, I.J., et al.: Explaining and harnessing adversarial examples. In: ICLR (2015)"},{"key":"26_CR7","unstructured":"Kim, H.: Torchattacks: a PyTorch repository for adversarial attacks. arXiv:2010.01950 (2020)"},{"key":"26_CR8","unstructured":"Kingma, D.P., Welling, M.: Auto-encoding variational bayes. In: ICLR (2014)"},{"key":"26_CR9","doi-asserted-by":"crossref","unstructured":"Liu, J., et al.: Stable adversarial learning under distributional shifts. In: Proceedings of the AAAI, pp. 8662\u20138670 (2021)","DOI":"10.1609\/aaai.v35i10.17050"},{"key":"26_CR10","unstructured":"Ma, X., et al.: Characterizing adversarial subspaces using local intrinsic dimensionality. In: ICLR (2018)"},{"key":"26_CR11","unstructured":"Madry, A., et al.: Towards deep learning models resistant to adversarial attacks. In: ICLR (2018)"},{"key":"26_CR12","unstructured":"Pang, T., et al.: Mixup inference: better exploiting mixup to defend adversarial attacks. In: ICLR (2020)"},{"key":"26_CR13","unstructured":"Papernot, N., et al.: Technical report on the CleverHans v2.1.0 adversarial examples library. arXiv preprint arXiv:1610.00768 (2018)"},{"key":"26_CR14","doi-asserted-by":"publisher","first-page":"947","DOI":"10.1111\/rssb.12167","volume":"78","author":"J Peters","year":"2016","unstructured":"Peters, J., et al.: Causal inference by using invariant prediction: identification and confidence intervals. J. Roy. Stat. Soc. 78, 947\u20131012 (2016)","journal-title":"J. Roy. Stat. Soc."},{"key":"26_CR15","volume-title":"Elements of Causal Inference: Foundations and Learning Algorithms","author":"J Peters","year":"2017","unstructured":"Peters, J., et al.: Elements of Causal Inference: Foundations and Learning Algorithms. The MIT Press, Cambridge (2017)"},{"key":"26_CR16","doi-asserted-by":"publisher","first-page":"19843","DOI":"10.1007\/s10489-023-04532-5","volume":"53","author":"L Schwinn","year":"2023","unstructured":"Schwinn, L., et al.: Exploring misclassifications of robust neural networks to enhance adversarial attacks. Appl. Intell. 53, 19843\u201319859 (2023). https:\/\/doi.org\/10.1007\/s10489-023-04532-5","journal-title":"Appl. Intell."},{"key":"26_CR17","unstructured":"Sen, S., et al.: EMPIR: ensembles of mixed precision deep networks for increased robustness against adversarial attacks. In: ICLR (2020)"},{"key":"26_CR18","unstructured":"Sun, X., et al.: Recovering latent causal factor for generalization to distributional shifts. In: Advances in NeurIPS, vol. 34, pp. 16846\u201316859 (2021)"},{"key":"26_CR19","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. In: ICLR (2014)"},{"key":"26_CR20","doi-asserted-by":"crossref","unstructured":"Daniel, T., Tamar, A.: Soft-IntroVAE: analyzing and improving the introspective variational autoencoder. In: Proceedings of the IEEE\/CVF CVPR, pp. 4391\u20134400 (2021)","DOI":"10.1109\/CVPR46437.2021.00437"},{"key":"26_CR21","unstructured":"Tramer, F., et al.: Ensemble adversarial training. In: ICLR (2018)"},{"key":"26_CR22","unstructured":"Tramer, F., et al.: On adaptive attacks to adversarial example defenses. In: NeurIPS (2020)"},{"key":"26_CR23","unstructured":"Tsipras, D., et al.: Robustness may be at odds with accuracy. In: ICLR (2019)"},{"key":"26_CR24","unstructured":"Wong, E., et al.: Fast is better than free. In: ICLR (2020)"},{"key":"26_CR25","unstructured":"Yang, K., et al.: Class-disentanglement and applications in adversarial detection and defense. In: Advances in NeurIPS (2021)"},{"key":"26_CR26","doi-asserted-by":"publisher","first-page":"2240","DOI":"10.1109\/TPAMI.2019.2908373","volume":"42","author":"K Yu","year":"2020","unstructured":"Yu, K., et al.: Multi-source causal feature selection. PAMI 42, 2240\u20132256 (2020)","journal-title":"PAMI"},{"key":"26_CR27","unstructured":"Zhang, H., et al.: Theoretically principled trade-off between robustness and accuracy. In: ICML, pp. 7472\u20137482 (2019)"},{"key":"26_CR28","unstructured":"Zhang, Y., et al.: Adversarial robustness through the lens of causality. In: ICLR (2022)"}],"container-title":["Lecture Notes in Computer Science","AI 2023: Advances in Artificial Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-99-8388-9_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T18:53:56Z","timestamp":1710356036000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-99-8388-9_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,27]]},"ISBN":["9789819983872","9789819983889"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-981-99-8388-9_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2023,11,27]]},"assertion":[{"value":"27 November 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"AI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australasian Joint Conference on Artificial Intelligence","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Brisbane, QLD","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 November 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 December 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ausai2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ajcai2023.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"213","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"59","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}