{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T03:20:38Z","timestamp":1740108038152,"version":"3.37.3"},"reference-count":56,"publisher":"Springer Science and Business Media LLC","issue":"25","license":[{"start":{"date-parts":[[2023,6,10]],"date-time":"2023-06-10T00:00:00Z","timestamp":1686355200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,6,10]],"date-time":"2023-06-10T00:00:00Z","timestamp":1686355200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62062023"],"award-info":[{"award-number":["62062023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Comput & Applic"],"published-print":{"date-parts":[[2023,9]]},"DOI":"10.1007\/s00521-023-08688-6","type":"journal-article","created":{"date-parts":[[2023,6,10]],"date-time":"2023-06-10T03:27:01Z","timestamp":1686367621000},"page":"18623-18639","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Joint contrastive learning and frequency domain defense against adversarial examples"],"prefix":"10.1007","volume":"35","author":[{"given":"Jin","family":"Yang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhi","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuaiwei","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Hong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weidong","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,6,10]]},"reference":[{"key":"8688_CR1","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S., Sun J (2016) Deep residual learning for image recognition. In: Conference on computer vision and pattern recognition, pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"issue":"11","key":"8688_CR2","doi-asserted-by":"publisher","first-page":"3325","DOI":"10.1007\/s13042-020-01242-z","volume":"12","author":"H Ren","year":"2021","unstructured":"Ren H, Huang T, Yan H (2021) Adversarial examples: attacks and defenses in the physical world. Int J Mach Learn Cybern 12(11):3325\u20133336","journal-title":"Int J Mach Learn Cybern"},{"key":"8688_CR3","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow IJ, Fergus R (2014) Intriguing properties of neural networks. In: International Conference on Learning Representations"},{"key":"8688_CR4","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In International conference on learning representations"},{"key":"8688_CR5","doi-asserted-by":"crossref","unstructured":"Xu K, Zhang G, Liu S, Fan Q, Sun M, Chen H, Chen P-Y, Wang Y, Lin X (2020) Adversarial t-shirt! evading person detectors in a physical world. In: European conference on computer vision. Springer, pp 665-681","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"8688_CR6","doi-asserted-by":"crossref","unstructured":"Eykholt K, Evtimov I, Fernandes E, Li B, Rahmati A, Xiao C, Prakash A, Kohno T, Song D (2018) Robust physical-world attacks on deep learning visual classification. In: Conference on computer vision and pattern recognition","DOI":"10.1109\/CVPR.2018.00175"},{"key":"8688_CR7","doi-asserted-by":"crossref","unstructured":"Minervini P, Demeester T, Rocktaschel T, Riedel S (2017) Adversarial sets for regularising neural link predictors. In: Proceedings of the 33rd conference on uncertainty in artificial intelligence (UAI)","DOI":"10.18653\/v1\/K18-1007"},{"key":"8688_CR8","doi-asserted-by":"crossref","unstructured":"Jia R, Liang P (2017) Adversarial examples for evaluating reading comprehension systems. arXiv preprint arXiv:1707.07328","DOI":"10.18653\/v1\/D17-1215"},{"key":"8688_CR9","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2018) Towards deep learning models resistant to adversarial attacks. In: 6th International conference on learning representations"},{"key":"8688_CR10","unstructured":"Tramer F, Kurakin A, Papernot N et al. (2018) Ensemble adversarial training: attacks and defenses. In: Proceedings of the international conference on learning representations, pp 1\u201320"},{"key":"8688_CR11","doi-asserted-by":"publisher","first-page":"685","DOI":"10.1007\/s10994-021-06049-9","volume":"111","author":"N Liao","year":"2022","unstructured":"Liao N, Wang S, Xiang L et al (2022) Achieving adversarial robustness via sparsity. Mach Learn 111:685\u2013711","journal-title":"Mach Learn"},{"key":"8688_CR12","unstructured":"Dziugaite GK,Ghahramani Z, Roy DM A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853,2016"},{"key":"8688_CR13","unstructured":"Xie C, Wang J, Zhang Z et al. (2018) Mitigating adversarial effects through randomization. In: Proceedings of the international conference on learning representations, pp 1\u201316"},{"key":"8688_CR14","unstructured":"Luo Y, Boix X, Roig G, et al. Foveation-based mechanisms alleviate adversarial examples[C].Proceedings of the International Conference on Learning Representations,2016: 1-25"},{"key":"8688_CR15","unstructured":"Samangouei P, Kabkab M, Chellappa R et al. (2018) Defense-GAN: protecting classifiers against adversarial attacks using generative models. arXiv: Computer Vision and Pattern Recognition, pp 3842\u20133846"},{"key":"8688_CR16","doi-asserted-by":"crossref","unstructured":"Jin G, Shen S, Zhang D et al. (2019) APE-GAN: adversarial perturbation elimination with GAN. In: Proceedings of the IEEE international conference on acoustics, speech and signal processing, pp 3842\u20133846","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"8688_CR17","unstructured":"Zhou D, Liu T, Han B, Wang N, Peng C, Gao X (2021) Towards defending against adversarial examples via attack-invariant features. In: Proceedings of the38th international conference on machine learning, pp 12835\u201312845"},{"key":"8688_CR18","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-06812-y","author":"X Echeberria-Barrio","year":"2022","unstructured":"Echeberria-Barrio X, Gil-Lerchundi A, Egana-Zubia J et al (2022) Understanding deep learning defenses against adversarial examples through visualizations for dynamic risk assessment. Neural Comput Appl. https:\/\/doi.org\/10.1007\/s00521-021-06812-y","journal-title":"Neural Comput Appl"},{"key":"8688_CR19","doi-asserted-by":"crossref","unstructured":"Liao F, Liang M,Dong Y et al. (2018) Defense against adversarial attacks using high-level representation guided denoiser. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 1778\u20131787","DOI":"10.1109\/CVPR.2018.00191"},{"key":"8688_CR20","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-06330-x","author":"A Kherchouche","year":"2021","unstructured":"Kherchouche A, Fezza SA, Hamidouche W (2021) Detect and defense against adversarial examples in deep learning using natural scene statistics and adaptive denoising. Neural Comput Appl. https:\/\/doi.org\/10.1007\/s00521-021-06330-x","journal-title":"Neural Comput Appl"},{"key":"8688_CR21","doi-asserted-by":"crossref","unstructured":"Kurakin A,Goodfellow I, Bengio S (2018) Adversarial examples in the physical world. In: Proceedings of the international conference on learning representations workshop, pp 1\u201314","DOI":"10.1201\/9781351251389-8"},{"key":"8688_CR22","unstructured":"Madry A, Makelov A, Schmidt L et al. (2018) Towards deep learning models resistant to adversarial attacks. In: Proceedings of the international conference on learning representations, pp 1\u201327"},{"key":"8688_CR23","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T et al. (2018) Boosting adversarial attacks with momentum. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 9185\u20139193","DOI":"10.1109\/CVPR.2018.00957"},{"key":"8688_CR24","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Jha S et al. (2016) The limitations of deep learning in adversarial settings. In: Proceedings of the IEEE European symposium on security and privacy, pp 372\u2013387","DOI":"10.1109\/EuroSP.2016.36"},{"key":"8688_CR25","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: Proceedings of the IEEE symposium on security and privacy, pp 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"8688_CR26","doi-asserted-by":"crossref","unstructured":"Rony J, Hafemann LG, Oliveira LS, Ayed IB, Sabourin R, Granger E (2019) Decoupling direction and norm for efficient gradient-based L2 adversarial attacks and defenses. In: Conference on computer vision and pattern recognition, pp 4322\u20134330","DOI":"10.1109\/CVPR.2019.00445"},{"key":"8688_CR27","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"8688_CR28","unstructured":"Croce F, Hein M (2020) Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proceedings of the 37th international conference on machine learning"},{"key":"8688_CR29","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-022-07387-y","author":"K Sooksatra","year":"2022","unstructured":"Sooksatra K, Rivas P (2022) Evaluation of adversarial attacks sensitivity of classifiers with occluded input data. Neural Comput Appl. https:\/\/doi.org\/10.1007\/s00521-022-07387-y","journal-title":"Neural Comput Appl"},{"key":"8688_CR30","doi-asserted-by":"crossref","unstructured":"Meng D, Chen H (2017) MagNet: a two-pronged defense against adversarial examples. In: Proceedings of the conference on computer and communications security, pp 135\u2013147","DOI":"10.1145\/3133956.3134057"},{"key":"8688_CR31","unstructured":"Yin D, Gontijo Lopes R, Shlens J et al. (2019) A fourier perspective on model robustness in computer vision. Adv Neural Inf Proc Syst 32"},{"key":"8688_CR32","unstructured":"Zhang Z, Jung C, Liang X (2019) Adversarial defense by suppressing high-frequency components. arXiv preprint arXiv:1908.06566"},{"key":"8688_CR33","doi-asserted-by":"publisher","unstructured":"Olivier R, Raj B, Shah M (2021) High-frequency adversarial defense for speech and audio. In: ICASSP 2021\u20132021 IEEE international conference on acoustics, speech and signal processing (ICASSP), pp 2995\u20132999. https:\/\/doi.org\/10.1109\/ICASSP39728.2021.9414525","DOI":"10.1109\/ICASSP39728.2021.9414525"},{"key":"8688_CR34","unstructured":"Henaff OJ, Srinivas A, De Fauw J, Razavi A, Doersch C, Eslami SM, van den Oord A (2019) Data-efficient image recognition with contrastive predictive coding. arXiv preprint arXiv:1905.09272"},{"key":"8688_CR35","doi-asserted-by":"crossref","unstructured":"Sermanet P, Lynch C, Chebotar Y, Hsu J, Jang E, Schaal S, Levine S, Google Brain (2018) Time-contrastive networks: self-supervised learning from video. In: ICRA, pp 1134\u20131141","DOI":"10.1109\/ICRA.2018.8462891"},{"key":"8688_CR36","unstructured":"Rim, Daniela N, Heo D, Choi H (2021) Adversarial training with contrastive learning in NLP. arXiv preprint arXiv:2109.09075"},{"key":"8688_CR37","doi-asserted-by":"crossref","unstructured":"Park T, Efros AA, Zhang R et al. (2020) Contrastive learning for unpaired image-to-image translation. In: European conference on computer vision. Springer, Cham, pp 319\u2013345","DOI":"10.1007\/978-3-030-58545-7_19"},{"key":"8688_CR38","doi-asserted-by":"crossref","unstructured":"Ding C, Wang M, Zhou Z, Huang T, Wang X, Li J (2022) Siamese transformer network-based similarity metric learning for cross-source remote sensing image retrieval. Neural Comput. Appl 1\u201318","DOI":"10.1007\/s00521-022-08092-6"},{"key":"8688_CR39","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.107287","volume":"228","author":"Z Zhou","year":"2021","unstructured":"Zhou Z et al (2021) Residual visualization-guided explainable copy-relationship learning for image copy detection in social networks. Knowl-Based Syst 228:107287","journal-title":"Knowl-Based Syst"},{"key":"8688_CR40","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3199919","author":"Z Zhou","year":"2022","unstructured":"Zhou Z et al (2022) GAN-siamese network for cross-domain vehicle re-identification in intelligent transport systems. IEEE Trans Netw Sci Eng. https:\/\/doi.org\/10.1109\/TNSE.2022.3199919","journal-title":"IEEE Trans Netw Sci Eng"},{"key":"8688_CR41","unstructured":"Simonyan, Karen, Zisserman A (2014) Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556"},{"key":"8688_CR42","unstructured":"Tanay T, Griffin L (2016) A boundary tilting persepective on the phenomenon of adversarial examples. arXiv preprint arXiv:1608.07690"},{"key":"8688_CR43","unstructured":"Feinman R, Curtin RR, Shintre S et al. (2017) Detecting adversarial samples from artifacts. arXiv preprint arXiv:1703.00410"},{"key":"8688_CR44","unstructured":"Jinyu T, Jiantao Z, Yuanman L, Jia D (2021) Detecting adversarial examples from sensitivity inconsistency of spatial-transform domain. In: AAAI conference on artificial intelligence"},{"issue":"2","key":"8688_CR45","doi-asserted-by":"publisher","first-page":"328","DOI":"10.1109\/TPAMI.2007.1166","volume":"30","author":"H Hirschmuller","year":"2007","unstructured":"Hirschmuller H (2007) Stereo processing by semiglobal matching and mutual information. IEEE Trans Pattern Anal Mach Intell 30(2):328\u2013341","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"issue":"11","key":"8688_CR46","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324","journal-title":"Proc IEEE"},{"issue":"7","key":"8688_CR47","doi-asserted-by":"publisher","first-page":"1800","DOI":"10.1109\/TITS.2015.2509509","volume":"17","author":"MB Jensen","year":"2016","unstructured":"Jensen MB, Philipsen MP, M\u00f8gelmose A, Moeslund TB, Trivedi MM (2016) Vision for looking at traffic lights: issues, survey, and perspectives. IEEE Trans Intell Transp Syst 17(7):1800\u20131815","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"8688_CR48","doi-asserted-by":"publisher","unstructured":"Fei-Fei L, Fergus R, Perona P (2004) Learning generative visual models from few training examples: an incremental bayesian approach tested on 101 object categories. In: 2004 Conference on computer vision and pattern recognition workshop, pp 178\u2013178. https:\/\/doi.org\/10.1109\/CVPR.2004.383.","DOI":"10.1109\/CVPR.2004.383."},{"key":"8688_CR49","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Deep residual learning for image recognition. In: Conference on computer vision and pattern recognition, pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"8688_CR50","unstructured":"Krizhevsky A, Sutskever I, Hinton GE (2012) Imagenet classification with deep convolutional neural networks. Adv Neural Inf Process Syst 25"},{"key":"8688_CR51","unstructured":"Kurakin A, Goodfellow IJ, Bengio S (2016) Adversarial examples in the physical world. CoRR, abs\/1607.02533"},{"key":"8688_CR52","doi-asserted-by":"crossref","unstructured":"Xie C, Wu Y, Maaten LVd, Yuille AL, He K (2019) Feature denoising for improving adversarial robustness. In: CVPR","DOI":"10.1109\/CVPR.2019.00059"},{"issue":"4","key":"8688_CR53","doi-asserted-by":"publisher","first-page":"1070","DOI":"10.1007\/s11263-022-01581-0","volume":"130","author":"R Shao","year":"2022","unstructured":"Shao R, Perera P, Yuen PC, Patel VM (2022) Open-set adversarial defense with clean-adversarial mutual learning. Int J Comput Vis 130(4):1070\u201387","journal-title":"Int J Comput Vis"},{"key":"8688_CR54","unstructured":"Guo C, Rana M, Cisse M, van der Maaten L (2018) Countering adversarial images using input transformations. In: ICLR"},{"key":"8688_CR55","doi-asserted-by":"crossref","unstructured":"Prakash A, Moran N, Garber S, DiLillo A, Storer J (2018) Detecting adversarial attacks with pixel detection. In: CVPR 2018","DOI":"10.1109\/CVPR.2018.00894"},{"key":"8688_CR56","doi-asserted-by":"crossref","unstructured":"Sun B, Tsai NH, Liu F, Yu R, Su H (2019) Adversarial defense by stratified convolutional sparse coding. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 11447\u201311456","DOI":"10.1109\/CVPR.2019.01171"}],"container-title":["Neural Computing and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-08688-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00521-023-08688-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-08688-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,22]],"date-time":"2023-08-22T08:19:21Z","timestamp":1692692361000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00521-023-08688-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,10]]},"references-count":56,"journal-issue":{"issue":"25","published-print":{"date-parts":[[2023,9]]}},"alternative-id":["8688"],"URL":"https:\/\/doi.org\/10.1007\/s00521-023-08688-6","relation":{},"ISSN":["0941-0643","1433-3058"],"issn-type":[{"type":"print","value":"0941-0643"},{"type":"electronic","value":"1433-3058"}],"subject":[],"published":{"date-parts":[[2023,6,10]]},"assertion":[{"value":"8 August 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 May 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 June 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Confict of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent to participate"}},{"value":"Not applicable.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}]}}