{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T07:31:24Z","timestamp":1780385484768,"version":"3.54.1"},"reference-count":58,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T00:00:00Z","timestamp":1710374400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T00:00:00Z","timestamp":1710374400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100006470","name":"Aristotle University of Thessaloniki","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100006470","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Machine Vision and Applications"],"published-print":{"date-parts":[[2024,5]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Deep neural networks (DNNs) are key components for the implementation of autonomy in systems that operate in highly complex and unpredictable environments (self-driving cars, smart traffic systems, smart manufacturing, etc.). It is well known that DNNs are vulnerable to adversarial examples, i.e. minimal and usually imperceptible perturbations, applied to their inputs, leading to false predictions. This threat poses critical challenges, especially when DNNs are deployed in safety or security-critical systems, and renders as urgent the need for defences that can improve the trustworthiness of DNN functions. Adversarial training has proven effective in improving the robustness of DNNs against a wide range of adversarial perturbations. However, a general framework for adversarial defences is needed that will extend beyond a single-dimensional assessment of robustness improvement; it is essential to consider simultaneously several distance metrics and adversarial attack strategies. Using such an approach we report the results from extensive experimentation on adversarial defence methods that could improve DNNs resilience to adversarial threats. We wrap up by introducing a general adversarial training methodology, which, according to our experimental results, opens prospects for an holistic defence against a range of diverse types of adversarial perturbations.<\/jats:p>","DOI":"10.1007\/s00138-024-01519-1","type":"journal-article","created":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T10:03:30Z","timestamp":1710410610000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["Adversarial robustness improvement for deep neural networks"],"prefix":"10.1007","volume":"35","author":[{"given":"Charis","family":"Eleftheriadis","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Symeonidis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Panagiotis","family":"Katsaros","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,3,14]]},"reference":[{"key":"1519_CR1","doi-asserted-by":"publisher","unstructured":"Biggio, B., Corona, I., Maiorca, D., Nelson, B., \u0160rndi\u0107, N., Laskov, P., Giacinto, G., Roli, F.: Evasion attacks against machine learning at test time. Lecture Notes in Computer Science, 387\u2013402 (2013) https:\/\/doi.org\/10.1007\/978-3-642-40994-3_25","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"1519_CR2","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I.J., Fergus, R.: Intriguing properties of neural networks. In: Bengio, Y., LeCun, Y. (eds.) 2nd International Conference on Learning Representations, ICLR 2014, Banff, AB, Canada, April 14\u201316, 2014, Conference Track Proceedings (2014). arXiv:1312.6199"},{"key":"1519_CR3","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: Bengio, Y., LeCun, Y. (eds.) 3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7\u20139, 2015, Conference Track Proceedings (2015). arXiv:1412.6572"},{"key":"1519_CR4","unstructured":"Papernot, N., Mcdaniel, P., Goodfellow, I.: Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. arXiv:1605.07277 (2016)"},{"key":"1519_CR5","unstructured":"Biggio, B., Nelson, B., Laskov, P.: Support vector machines under adversarial label noise. In: Hsu, C.-N., Lee, W.S. (eds.) Proceedings of the Asian Conference on Machine Learning. Proceedings of Machine Learning Research, vol. 20, pp. 97\u2013112. PMLR, South Garden Hotels and Resorts, Taoyuan, Taiwain (2011). http:\/\/proceedings.mlr.press\/v20\/biggio11.html"},{"key":"1519_CR6","doi-asserted-by":"publisher","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp. 770\u2013778 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.90","DOI":"10.1109\/CVPR.2016.90"},{"key":"1519_CR7","unstructured":"Ren, S., He, K., Girshick, R., Sun, J.: Faster r-cnn: Towards real-time object detection with region proposal networks. In: Proceedings of the 28th International Conference on Neural Information Processing Systems - Volume 1. NIPS\u201915, pp. 91\u201399. MIT Press, Cambridge, MA, USA (2015)"},{"key":"1519_CR8","doi-asserted-by":"crossref","unstructured":"Redmon, J., Divvala, S.K., Girshick, R.B., Farhadi, A.: You only look once: Unified, real-time object detection. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 779\u2013788 (2016)","DOI":"10.1109\/CVPR.2016.91"},{"key":"1519_CR9","unstructured":"Devlin, J., Chang, M.-W., Lee, K., Toutanova, K.: Bert: pre-training of deep bidirectional transformers for language understanding. In: NAACL (2019)"},{"key":"1519_CR10","unstructured":"Radford, A., Wu, J., Child, R., Luan, D., Amodei, D., Sutskever, I.: Language models are unsupervised multitask learners (2019)"},{"key":"1519_CR11","doi-asserted-by":"publisher","unstructured":"Ren, H., Huang, T.: Adversarial example attacks in the physical world. In: Machine Learning for Cyber Security: Third International Conference, ML4CS 2020, Guangzhou, China, October 8-10, 2020, Proceedings, Part II, pp. 572\u2013582. Springer, Berlin (2020). https:\/\/doi.org\/10.1007\/978-3-030-62460-6_51","DOI":"10.1007\/978-3-030-62460-6_51"},{"key":"1519_CR12","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (2018). https:\/\/openreview.net\/forum?id=rJzIBfZAb"},{"key":"1519_CR13","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proceedings of the 37th International Conference on Machine Learning. ICML\u201920 (2020)"},{"key":"1519_CR14","doi-asserted-by":"crossref","unstructured":"Chen, P.-Y., Sharma, Y., Zhang, H., Yi, J., Hsieh, C.-J.: Ead: Elastic-net attacks to deep neural networks via adversarial examples. In: Thirty-Second AAAI Conference on Artificial Intelligence (2018)","DOI":"10.1609\/aaai.v32i1.11302"},{"key":"1519_CR15","doi-asserted-by":"crossref","unstructured":"Papernot, N., Mcdaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. 2016 IEEE European Symposium on Security and Privacy (EuroS &P), 372\u2013387 (2016)","DOI":"10.1109\/EuroSP.2016.36"},{"key":"1519_CR16","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Fawzi, O., Frossard, P.: Universal adversarial perturbations. In: 2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 86\u201394 (2017)","DOI":"10.1109\/CVPR.2017.17"},{"key":"1519_CR17","doi-asserted-by":"publisher","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Frossard, P.: Deepfool: a simple and accurate method to fool deep neural networks. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp. 2574\u20132582 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.282","DOI":"10.1109\/CVPR.2016.282"},{"key":"1519_CR18","doi-asserted-by":"publisher","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 39\u201357. IEEE Computer Society, Los Alamitos, CA, USA (2017). https:\/\/doi.org\/10.1109\/SP.2017.49","DOI":"10.1109\/SP.2017.49"},{"key":"1519_CR19","doi-asserted-by":"publisher","unstructured":"Chen, P.-Y., Zhang, H., Sharma, Y., Yi, J., Hsieh, C.-J.: Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security. AISec \u201917, pp. 15\u201326. Association for Computing Machinery, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3128572.3140448","DOI":"10.1145\/3128572.3140448"},{"key":"1519_CR20","unstructured":"Brendel, W., Rauber, J., Bethge, M.: Decision-based adversarial attacks: reliable attacks against black-box machine learning models. In: 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30\u2013May 3, 2018, Conference Track Proceedings (2018). https:\/\/openreview.net\/forum?id=SyZI0GWCZ"},{"key":"1519_CR21","doi-asserted-by":"publisher","unstructured":"Chen, J., Jordan, M.I., Wainwright, M.J.: Hopskipjumpattack: A query-efficient decision-based attack. In: 2020 IEEE Symposium on Security and Privacy (SP), pp. 1277\u20131294. IEEE Computer Society, Los Alamitos, CA, USA (2020). https:\/\/doi.org\/10.1109\/SP40000.2020.00045","DOI":"10.1109\/SP40000.2020.00045"},{"key":"1519_CR22","unstructured":"Cheng, M., Singh, S., Chen, P.H., Chen, P.-Y., Liu, S., Hsieh, C.-J.: Sign-opt: a query-efficient hard-label adversarial attack. In: International Conference on Learning Representations (2020). https:\/\/openreview.net\/forum?id=SklTQCNtvS"},{"key":"1519_CR23","doi-asserted-by":"publisher","first-page":"484","DOI":"10.1007\/978-3-030-58592-1_29","volume-title":"Computer Vision - ECCV 2020","author":"M Andriushchenko","year":"2020","unstructured":"Andriushchenko, M., Croce, F., Flammarion, N., Hein, M.: Square attack: a query-efficient black-box adversarial attack via random search. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) Computer Vision - ECCV 2020, pp. 484\u2013501. Springer, Cham (2020)"},{"key":"1519_CR24","unstructured":"Guo, C., Gardner, J.R., You, Y., Wilson, A.G., Weinberger, K.Q.: Simple black-box adversarial attacks. CoRR arXiv:1905.07121 (2019)"},{"key":"1519_CR25","doi-asserted-by":"publisher","unstructured":"Serban, A., Poll, E., Visser, J.: Adversarial examples on object recognition: A comprehensive survey. ACM Comput. Surv. 53(3) (2020) https:\/\/doi.org\/10.1145\/3398394","DOI":"10.1145\/3398394"},{"key":"1519_CR26","doi-asserted-by":"publisher","unstructured":"Kos, J., Fischer, I., Song, D.: Adversarial examples for generative models. In: 2018 IEEE Security and Privacy Workshops (SPW), pp. 36\u201342 (2018). https:\/\/doi.org\/10.1109\/SPW.2018.00014","DOI":"10.1109\/SPW.2018.00014"},{"key":"1519_CR27","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.-Y., He, W., Liu, M., Song, D.: Generating adversarial examples with adversarial networks. In: Proceedings of the 27th International Joint Conference on Artificial Intelligence. IJCAI\u201918, pp. 3905\u20133911 (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"1519_CR28","doi-asserted-by":"publisher","first-page":"372","DOI":"10.1016\/j.cose.2019.06.012","volume":"86","author":"AS Hashemi","year":"2019","unstructured":"Hashemi, A.S., Mozaffari, S.: Secure deep neural networks using adversarial image generation and training with noise-gan. Comput. Secur. 86, 372\u2013387 (2019). https:\/\/doi.org\/10.1016\/j.cose.2019.06.012","journal-title":"Comput. Secur."},{"key":"1519_CR29","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Xiao, C., Prakash, A., Kohno, T., Song, D.X.: Robust physical-world attacks on deep learning visual classification. In: 2018 IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 1625\u20131634 (2018)","DOI":"10.1109\/CVPR.2018.00175"},{"key":"1519_CR30","unstructured":"Song, D., Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Tram\u00e8r, F., Prakash, A., Kohno, T.: Physical adversarial examples for object detectors. In: 12th USENIX Workshop on Offensive Technologies (WOOT 18). USENIX Association, Baltimore, MD (2018). https:\/\/www.usenix.org\/conference\/woot18\/presentation\/eykholt"},{"key":"1519_CR31","unstructured":"Sitawarin, C., Bhagoji, A.N., Mosenia, A., Chiang, M., Mittal, P.: Darts: deceiving autonomous cars with toxic signs. arXiv:1802.06430 (2018)"},{"key":"1519_CR32","doi-asserted-by":"publisher","unstructured":"Zhao, Y., Zhu, H., Liang, R., Shen, Q., Zhang, S., Chen, K.: Seeing isn\u2019t believing: Towards more robust adversarial attack against real world object detectors. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS \u201919, pp. 1989\u20132004. Association for Computing Machinery, New York, NY, USA (2019). https:\/\/doi.org\/10.1145\/3319535.3354259","DOI":"10.1145\/3319535.3354259"},{"key":"1519_CR33","unstructured":"Hendrycks, D., Dietterich, T.: Benchmarking neural network robustness to common corruptions and perturbations. In: International Conference on Learning Representations (2019). https:\/\/openreview.net\/forum?id=HJz6tiCqYm"},{"key":"1519_CR34","doi-asserted-by":"publisher","first-page":"22077","DOI":"10.1007\/s11042-020-10379-6","volume":"80","author":"A Hashemi","year":"2021","unstructured":"Hashemi, A., Mozaffari, S.: Cnn adversarial attack mitigation using perturbed samples training. Multimedia Tools Appl. 80, 22077\u201322095 (2021). https:\/\/doi.org\/10.1007\/s11042-020-10379-6","journal-title":"Multimedia Tools Appl."},{"key":"1519_CR35","unstructured":"Croce, F., Andriushchenko, M., Sehwag, V., Debenedetti, E., Flammarion, N., Chiang, M., Mittal, P., Hein, M.: Robustbench: a standardized adversarial robustness benchmark. In: Thirty-fifth Conference on Neural Information Processing Systems Datasets and Benchmarks Track (Round 2) (2021). https:\/\/openreview.net\/forum?id=SSKZPJCt7B"},{"key":"1519_CR36","doi-asserted-by":"publisher","unstructured":"Chen, J., Gu, Q.: Rays: A ray searching method for hard-label adversarial attack. In: Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. KDD \u201920, pp. 1739\u20131747. Association for Computing Machinery, New York, NY, USA (2020). https:\/\/doi.org\/10.1145\/3394486.3403225","DOI":"10.1145\/3394486.3403225"},{"key":"1519_CR37","doi-asserted-by":"crossref","unstructured":"Ling, X., Ji, S., Zou, J., Wang, J., Wu, C., Li, B., Wang, T.: Deepsec: a uniform platform for security analysis of deep learning model. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 673\u2013690 (2019)","DOI":"10.1109\/SP.2019.00023"},{"key":"1519_CR38","unstructured":"Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., Madry, A.: Robustness may be at odds with accuracy. In: 7th International Conference on Learning Representations, ICLR 2019, New Orleans, LA, USA, May 6\u20139, 2019 (2019). https:\/\/openreview.net\/forum?id=SyxAb30cY7"},{"key":"1519_CR39","doi-asserted-by":"publisher","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., Fei-Fei, L.: Imagenet: A large-scale hierarchical image database. In: 2009 IEEE Conference on Computer Vision and Pattern Recognition, pp. 248\u2013255 (2009). https:\/\/doi.org\/10.1109\/CVPR.2009.5206848","DOI":"10.1109\/CVPR.2009.5206848"},{"issue":"5","key":"1519_CR40","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su, J., Vargas, D.V., Sakurai, K.: One pixel attack for fooling deep neural networks. IEEE Trans. Evol. Comput. 23(5), 828\u2013841 (2019). https:\/\/doi.org\/10.1109\/TEVC.2019.2890858","journal-title":"IEEE Trans. Evol. Comput."},{"issue":"2","key":"1519_CR41","doi-asserted-by":"publisher","first-page":"301","DOI":"10.1111\/j.1467-9868.2005.00503.x","volume":"67","author":"H Zou","year":"2005","unstructured":"Zou, H., Hastie, T.: Regularization and variable selection via the elastic net. J. R. Stat. Soc. Ser. B (Statistical Methodology) 67(2), 301\u2013320 (2005)","journal-title":"J. R. Stat. Soc. Ser. B (Statistical Methodology)"},{"key":"1519_CR42","doi-asserted-by":"publisher","unstructured":"Szegedy, C., Vanhoucke, V., Ioffe, S., Shlens, J., Wojna, Z.: Rethinking the inception architecture for computer vision. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp. 2818\u20132826 (2016). https:\/\/doi.org\/10.1109\/CVPR.2016.308","DOI":"10.1109\/CVPR.2016.308"},{"key":"1519_CR43","doi-asserted-by":"publisher","unstructured":"Xu, W., Evans, D., Qi, Y.: Feature squeezing: detecting adversarial examples in deep neural networks. In: Proceedings 2018 Network and Distributed System Security Symposium (2018) https:\/\/doi.org\/10.14722\/ndss.2018.23198","DOI":"10.14722\/ndss.2018.23198"},{"key":"1519_CR44","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M.: A study of the effect of jpg compression on adversarial images. arXiv:1608.00853 (2016)"},{"key":"1519_CR45","unstructured":"Das, N., Shanbhogue, M., Chen, S.-T., Hohman, F., Chen, L., Kounavis, M.E., Chau, D.H.: Keeping the bad guys out: protecting and vaccinating deep learning with jpeg compression. arXiv:1705.02900 (2017)"},{"key":"1519_CR46","unstructured":"Guo, C., Rana, M., Cisse, M., Maaten, L.: Countering adversarial images using input transformations. In: International Conference on Learning Representations (2018). https:\/\/openreview.net\/forum?id=SyJ7ClWCb"},{"key":"1519_CR47","unstructured":"Tram\u00e8r, F., Kurakin, A., Papernot, N., Goodfellow, I.J., Boneh, D., McDaniel, P.D.: Ensemble adversarial training: Attacks and defenses. In: 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30\u2013May 3, 2018, Conference Track Proceedings (2018). https:\/\/openreview.net\/forum?id=rkZvSe-RZ"},{"key":"1519_CR48","unstructured":"Tramer, F., Boneh, D.: Adversarial training and robustness for multiple perturbations. In: Advances in Neural Information Processing Systems, vol. 32 (2019). https:\/\/proceedings.neurips.cc\/paper\/2019\/file\/5d4ae76f053f8f2516ad12961ef7fe97-Paper.pdf"},{"key":"1519_CR49","unstructured":"Maini, P., Wong, E., Kolter, J.Z.: Adversarial robustness against the union of multiple perturbation models. In: Proceedings of the 37th International Conference on Machine Learning. ICML\u201920 (2020)"},{"key":"1519_CR50","unstructured":"Weng, T., Zhang, H., Chen, P., Yi, J., Su, D., Gao, Y., Hsieh, C., Daniel, L.: Evaluating the robustness of neural networks: An extreme value theory approach. In: 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30\u2013May 3, 2018, Conference Track Proceedings (2018). https:\/\/openreview.net\/forum?id=BkUHlMZ0b"},{"key":"1519_CR51","doi-asserted-by":"crossref","unstructured":"Yu, F., Qin, Z., Liu, C., Zhao, L., Wang, Y., Chen, X.: Interpreting and evaluating neural network robustness. In: Proceedings of the 28th International Joint Conference on Artificial Intelligence. IJCAI\u201919, pp. 4199\u20134205 (2019)","DOI":"10.24963\/ijcai.2019\/583"},{"key":"1519_CR52","unstructured":"Arpit, D., Jastrzundefinedbski, S., Ballas, N., Krueger, D., Bengio, E., Kanwal, M.S., Maharaj, T., Fischer, A., Courville, A., Bengio, Y., Lacoste-Julien, S.: A closer look at memorization in deep networks. In: Proceedings of the 34th International Conference on Machine Learning\u2014Volume 70. ICML\u201917, pp. 233\u2013242 (2017)"},{"key":"1519_CR53","unstructured":"Gao, R., Liu, F., Zhang, J., Han, B., Liu, T., Niu, G., Sugiyama, M.: Maximum mean discrepancy test is aware of adversarial attacks. In: Meila, M., Zhang, T. (eds.) Proceedings of the 38th International Conference on Machine Learning, ICML 2021, 18\u201324 July 2021, Virtual Event. Proceedings of Machine Learning Research, vol. 139, pp. 3564\u20133575 (2021). http:\/\/proceedings.mlr.press\/v139\/gao21b.html"},{"key":"1519_CR54","unstructured":"Sinha, A., Namkoong, H., Duchi, J.: Certifiable distributional robustness with principled adversarial training. In: International Conference on Learning Representations (2018). https:\/\/openreview.net\/forum?id=Hk6kPgZA-"},{"key":"1519_CR55","doi-asserted-by":"publisher","unstructured":"Jang, U., Wu, X., Jha, S.: Objective metrics and gradient descent algorithms for adversarial examples in machine learning. In: Proceedings of the 33rd Annual Computer Security Applications Conference. ACSAC 2017, pp. 262\u2013277. Association for Computing Machinery, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3134600.3134635","DOI":"10.1145\/3134600.3134635"},{"key":"1519_CR56","doi-asserted-by":"crossref","unstructured":"Ruan, W., Wu, M., Sun, Y., Huang, X., Kroening, D., Kwiatkowska, M.: Global robustness evaluation of deep neural networks with provable guarantees for the Hamming distance. In: Kraus, S. (ed.) International Joint Conference on Artificial Intelligence (IJCAI), pp. 5944\u20135952 (2019)","DOI":"10.24963\/ijcai.2019\/824"},{"key":"1519_CR57","doi-asserted-by":"crossref","unstructured":"Caruana, R., Lawrence, S., Giles, C.L.: Overfitting in neural nets: backpropagation, conjugate gradient, and early stopping. In: NIPS (2000)","DOI":"10.1109\/IJCNN.2000.857823"},{"key":"1519_CR58","unstructured":"Kingma, D.P., Ba, J.: Adam: A method for stochastic optimization. In: Bengio, Y., LeCun, Y. (eds.) 3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7\u20139, 2015, Conference Track Proceedings (2015). arXiv:1412.6980"}],"container-title":["Machine Vision and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00138-024-01519-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00138-024-01519-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00138-024-01519-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,14]],"date-time":"2024-05-14T00:17:20Z","timestamp":1715645840000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00138-024-01519-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,14]]},"references-count":58,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2024,5]]}},"alternative-id":["1519"],"URL":"https:\/\/doi.org\/10.1007\/s00138-024-01519-1","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-3351648\/v1","asserted-by":"object"}]},"ISSN":["0932-8092","1432-1769"],"issn-type":[{"value":"0932-8092","type":"print"},{"value":"1432-1769","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3,14]]},"assertion":[{"value":"13 September 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 January 2024","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 February 2024","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 March 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed consent"}}],"article-number":"35"}}