{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T04:39:29Z","timestamp":1791261569916,"version":"4.1.0"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2023,8,24]],"date-time":"2023-08-24T00:00:00Z","timestamp":1692835200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,8,24]],"date-time":"2023-08-24T00:00:00Z","timestamp":1692835200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Vis Comput"],"published-print":{"date-parts":[[2024,5]]},"DOI":"10.1007\/s00371-023-03057-9","type":"journal-article","created":{"date-parts":[[2023,8,24]],"date-time":"2023-08-24T12:02:01Z","timestamp":1692878521000},"page":"3649-3661","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["ATRA: Efficient adversarial training with high-robust area"],"prefix":"10.1007","volume":"40","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9164-0905","authenticated-orcid":false,"given":"Shibin","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yahong","family":"Han","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,8,24]]},"reference":[{"key":"3057_CR1","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"issue":"5","key":"3057_CR2","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su, J., Vargas, D.V., Sakurai, K.: One pixel attack for fooling deep neural networks. IEEE Trans. Evol. Comput. 23(5), 828\u2013841 (2019)","journal-title":"IEEE Trans. Evol. Comput."},{"key":"3057_CR3","doi-asserted-by":"crossref","unstructured":"Fan, L., et al.: Explore gap between 3D DNN and human vision utilizing fooling point cloud generated by MEHHO. Secur. Commun. Netw. 2023 (2023)","DOI":"10.1155\/2023\/3427385"},{"key":"3057_CR4","unstructured":"Hu, S., Nalisnick, E., Welling, M.: Adversarial defense via image denoising with chaotic encryption. arXiv preprint arXiv:2203.10290 (2022)"},{"key":"3057_CR5","unstructured":"Tobia, J., et al.: AGS: Attribution guided sharpening as a defense against adversarial attacks. In: Advances in Intelligent Data Analysis XX: 20th International Symposium on Intelligent Data Analysis, Proceedings. Springer, Cham (2022)"},{"key":"3057_CR6","doi-asserted-by":"publisher","first-page":"1711","DOI":"10.1109\/TIP.2019.2940533","volume":"29","author":"A Mustafa","year":"2019","unstructured":"Mustafa, A., et al.: Image super-resolution as a defense against adversarial attacks. IEEE Trans. Image Process. 29, 1711\u20131724 (2019)","journal-title":"IEEE Trans. Image Process."},{"key":"3057_CR7","doi-asserted-by":"crossref","unstructured":"Chen, Y., et al.: MFFN: image super-resolution via multi-level features fusion network. Vis. Comput. 1\u201316 (2023)","DOI":"10.1007\/s00371-023-02795-0"},{"key":"3057_CR8","doi-asserted-by":"crossref","unstructured":"Chen, Y., et al.: RNON: image inpainting via repair network and optimization network. Int. J. Mach. Learn. Cybern. 1\u201317 (2023)","DOI":"10.1007\/s13042-023-01811-y"},{"key":"3057_CR9","unstructured":"Madry, A., et al.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"issue":"2","key":"3057_CR10","doi-asserted-by":"publisher","first-page":"639","DOI":"10.1007\/s00371-021-02363-4","volume":"39","author":"H Wang","year":"2023","unstructured":"Wang, H., et al.: Attentional and adversarial feature mimic for efficient object detection. Vis. Comput. 39(2), 639\u2013650 (2023)","journal-title":"Vis. Comput."},{"key":"3057_CR11","doi-asserted-by":"crossref","unstructured":"Zhang, J., et al.: ReYOLO: A traffic sign detector based on network reparameterization and features adaptive weighting. J. Ambient Intell. Smart Environ. 1\u201318 (2022). (Preprint)","DOI":"10.3233\/AIS-220038"},{"key":"3057_CR12","unstructured":"Jia, X., Xiao, J., Wu, C.: TICS: text-image-based semantic CAPTCHA synthesis via multi-condition adversarial learning. Vis. Comput. 1\u201313 (2022)"},{"key":"3057_CR13","unstructured":"Zhang, J., et al.: CCTSDB 2021: A more comprehensive traffic sign detection benchmark. Hum. Centric Comput. Inf. Sci. 12 (2022)"},{"issue":"1","key":"3057_CR14","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1007\/s44196-023-00266-x","volume":"16","author":"B Rasheed","year":"2023","unstructured":"Rasheed, B., et al.: Boosting adversarial training using robust selective data augmentation. Int. J. Comput. Intell. Syst. 16(1), 89 (2023)","journal-title":"Int. J. Comput. Intell. Syst."},{"key":"3057_CR15","doi-asserted-by":"crossref","unstructured":"Zheng, H., et al.: Efficient adversarial training with transferable adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (2020)","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"3057_CR16","unstructured":"Wong, E., Rice, L., Kolter, J.Z.: Fast is better than free: revisiting adversarial training. arXiv preprint arXiv:2001.03994 (2020)"},{"key":"3057_CR17","doi-asserted-by":"crossref","unstructured":"He, Z., et al.: Investigating catastrophic overfitting in fast adversarial training: a self-fitting perspective. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (2023)","DOI":"10.1109\/CVPRW59228.2023.00227"},{"key":"3057_CR18","first-page":"16048","volume":"33","author":"M Andriushchenko","year":"2020","unstructured":"Andriushchenko, M., Flammarion, N.: Understanding and improving fast adversarial training. Adv. Neural. Inf. Process. Syst. 33, 16048\u201316059 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"3057_CR19","first-page":"12881","volume":"35","author":"J de Aranda","year":"2022","unstructured":"de Aranda, J., Pau, et al.: Make some noise: reliable and efficient single-step adversarial training. Adv. Neural. Inf. Process. Syst. 35, 12881\u201312893 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"3057_CR20","doi-asserted-by":"crossref","unstructured":"Li, T., et al.: Subspace adversarial training. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (2022)","DOI":"10.1109\/CVPR52688.2022.01305"},{"issue":"1","key":"3057_CR21","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2022.103143","volume":"60","author":"C Xu","year":"2023","unstructured":"Xu, C., et al.: Accelerate adversarial training with loss guided propagation for robust image classification. Inf. Process. 60(1), 103143 (2023)","journal-title":"Inf. Process."},{"key":"3057_CR22","doi-asserted-by":"publisher","first-page":"108997","DOI":"10.1109\/ACCESS.2022.3213734","volume":"10","author":"F Nikfam","year":"2022","unstructured":"Nikfam, F., et al.: AccelAT: A framework for accelerating the adversarial training of deep neural networks through accuracy gradient. IEEE Access 10, 108997\u2013109007 (2022)","journal-title":"IEEE Access"},{"key":"3057_CR23","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1016\/j.neucom.2022.12.013","volume":"522","author":"Z Zhang","year":"2023","unstructured":"Zhang, Z., et al.: ASAT: Adaptively scaled adversarial training in time series. Neurocomputing 522, 11\u201323 (2023)","journal-title":"Neurocomputing"},{"key":"3057_CR24","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., Porikli, F.: Local gradients smoothing: defense against localized adversarial attacks. In: 2019 IEEE Winter Conference on Applications of Computer Vision (WACV). IEEE (2019)","DOI":"10.1109\/WACV.2019.00143"},{"key":"3057_CR25","doi-asserted-by":"crossref","unstructured":"Krishna, N.H., et al.: Defending against localized adversarial attacks on edge-deployed monocular depth estimators. In: 2020 19th IEEE International Conference on Machine Learning and Applications (ICMLA). IEEE (2020)","DOI":"10.1109\/ICMLA51294.2020.00201"},{"key":"3057_CR26","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., et al.: Universal adversarial perturbations. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (2017)","DOI":"10.1109\/CVPR.2017.17"},{"key":"3057_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cagd.2022.102122","volume":"97","author":"H Xu","year":"2022","unstructured":"Xu, H., et al.: D3AdvM: A direct 3D adversarial sample attack inside mesh data. Comput. Aided Geom. Des. 97, 102122 (2022)","journal-title":"Comput. Aided Geom. Des."},{"key":"3057_CR28","unstructured":"Zhang, D., et al.: You only propagate once: Accelerating adversarial training via maximal principle. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"key":"3057_CR29","unstructured":"Shafahi, A., et al.: Adversarial training for free!. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"key":"3057_CR30","doi-asserted-by":"crossref","unstructured":"Wu, B., et al.: Towards efficient adversarial training on vision transformers. In: Computer Vision-ECCV 2022: 17th European Conference, Part XIII. Springer Nature Switzerland, Cham (2022)","DOI":"10.1007\/978-3-031-19778-9_18"},{"key":"3057_CR31","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"3057_CR32","unstructured":"Huang, Z., et al.: Fast adversarial training with adaptive step size. arXiv preprint arXiv:2206.02417 (2022)"},{"key":"3057_CR33","unstructured":"Simonyan, K., Vedaldi, A., Zisserman, A.: Deep inside convolutional networks: visualising image classification models and saliency maps. arXiv preprint arXiv:1312.6034 (2013)"},{"key":"3057_CR34","doi-asserted-by":"crossref","unstructured":"Selvaraju, R.R., et al.: Grad-cam: Visual explanations from deep networks via gradient-based localization. In: Proceedings of the IEEE International Conference on Computer Vision (2017)","DOI":"10.1109\/ICCV.2017.74"},{"issue":"3","key":"3057_CR35","first-page":"1","volume":"1341","author":"D Erhan","year":"2009","unstructured":"Erhan, D., et al.: Visualizing higher-layer features of a deep network. Univ. Montr. 1341(3), 1 (2009)","journal-title":"Univ. Montr."},{"key":"3057_CR36","unstructured":"Zhang, H., et al.: Theoretically principled trade-off between robustness and accuracy. In: International Conference on Machine Learning. PMLR (2019)"},{"key":"3057_CR37","doi-asserted-by":"crossref","unstructured":"He, K., et al.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"3057_CR38","doi-asserted-by":"crossref","unstructured":"Zagoruyko, S., Komodakis, N.: Wide residual networks. arXiv preprint arXiv:1605.07146 (2016)","DOI":"10.5244\/C.30.87"},{"key":"3057_CR39","doi-asserted-by":"crossref","unstructured":"Huang, Q., et al.: Enhancing adversarial example transferability with an intermediate level attack. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision (2019)","DOI":"10.1109\/ICCV.2019.00483"},{"key":"3057_CR40","doi-asserted-by":"crossref","unstructured":"Xiong, Y., et al.: Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (2022)","DOI":"10.1109\/CVPR52688.2022.01456"},{"key":"3057_CR41","doi-asserted-by":"crossref","unstructured":"Long, Y., et al.: Frequency domain model augmentation for adversarial attack. In: Computer Vision-ECCV 2022: 17th European Conference, Part IV. Springer Nature Switzerland, Cham (2022)","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"3057_CR42","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Adversarial examples are not easily detected: bypassing ten detection methods. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security (2017)","DOI":"10.1145\/3128572.3140444"},{"key":"3057_CR43","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: International Conference on Machine Learning. PMLR (2020)"},{"key":"3057_CR44","unstructured":"Zhang, Y., et al.: Revisiting and advancing fast adversarial training through the lens of bi-level optimization. In: International Conference on Machine Learning. PMLR (2022)"},{"key":"3057_CR45","unstructured":"Wang, Yi., et al.: Improving adversarial robustness requires revisiting misclassified examples. In: International Conference on Learning Representations (2020)"},{"key":"3057_CR46","unstructured":"Zhang, J., et al.: Geometry-aware instance-reweighted adversarial training. arXiv preprint arXiv:2010.01736 (2020)"},{"key":"3057_CR47","unstructured":"Addepalli, S., Jain, S.: Efficient and effective augmentation strategy for adversarial training. Adv. Neural. Inf. Process. Syst. 35, 1488-1501 (2022)"}],"container-title":["The Visual Computer"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-023-03057-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00371-023-03057-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-023-03057-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,19]],"date-time":"2024-04-19T09:14:36Z","timestamp":1713518076000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00371-023-03057-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,24]]},"references-count":47,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2024,5]]}},"alternative-id":["3057"],"URL":"https:\/\/doi.org\/10.1007\/s00371-023-03057-9","relation":{},"ISSN":["0178-2789","1432-2315"],"issn-type":[{"value":"0178-2789","type":"print"},{"value":"1432-2315","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,8,24]]},"assertion":[{"value":"7 August 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 August 2023","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"All authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}