{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T07:12:35Z","timestamp":1778051555796,"version":"3.51.4"},"reference-count":50,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T00:00:00Z","timestamp":1778025600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T00:00:00Z","timestamp":1778025600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"Innovation Funding of Institute of Computing Technology, Chinese Academy of Sciences","award":["E561090"],"award-info":[{"award-number":["E561090"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimedia Systems"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1007\/s00530-026-02343-5","type":"journal-article","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T06:16:44Z","timestamp":1778048204000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Semi-supervised adversarial training via disentangled contrastive learning"],"prefix":"10.1007","volume":"32","author":[{"given":"Ruize","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juan","family":"Cao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sheng","family":"Tang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,6]]},"reference":[{"key":"2343_CR1","unstructured":"Goodfellow, I., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: ICLR, pp. 1\u201311 (2015)"},{"key":"2343_CR2","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: ICLR, pp. 1\u201328 (2018)"},{"key":"2343_CR3","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., Li, J.: Boosting adversarial attacks with momentum. In: CVPR, pp. 1\u20139 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"2343_CR4","doi-asserted-by":"crossref","unstructured":"Xie, C., Zhang, Z., Zhou, Y., Bai, S., Wang, J., Ren, Z., Yuille, A.L.: Improving transferability of adversarial examples with input diversity. In: CVPR, pp. 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"2343_CR5","doi-asserted-by":"crossref","unstructured":"Zheng, H., Zhang, Z., Gu, J., Lee, H., Prakash, A.: Efficient adversarial training with transferable adversarial examples. In: CVPR, pp. 1\u201310 (2020)","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"2343_CR6","unstructured":"Kannan, H., Kurakin, A., Goodfellow, J.I.: Adversarial logit pairing. CoRR:abs\/1803.06373 (2018)"},{"key":"2343_CR7","doi-asserted-by":"crossref","unstructured":"Cui, J., Liu, S., Wang, L., Jia, J.: Learnable boundary guided adversarial training. In: ICCV, pp. 15721\u201315730 (2021)","DOI":"10.1109\/ICCV48922.2021.01543"},{"key":"2343_CR8","unstructured":"Zhang, H., Yu, Y., Jiao, J., Xing, E.P., Ghaoui, E.L., Jordan, I.M.: Theoretically principled trade-off between robustness and accuracy. In: ICML (2019)"},{"key":"2343_CR9","unstructured":"Tram\u00e9r, F., Kurakin, A., Papernot, N., Goodfellow, J.I., Boneh, D., McDaniel, D.P.: Ensemble adversarial training: Attacks and defenses. In: ICLR (2018)"},{"issue":"8","key":"2343_CR10","doi-asserted-by":"publisher","first-page":"1979","DOI":"10.1109\/TPAMI.2018.2858821","volume":"41","author":"T Miyato","year":"2019","unstructured":"Miyato, T., Maeda, S.-I., Koyama, M., Ishii, S.: Virtual adversarial training: A regularization method for supervised and semi-supervised learning. IEEE TPAMI 41(8), 1979\u20131993 (2019)","journal-title":"IEEE TPAMI"},{"key":"2343_CR11","unstructured":"Carmon, Y., Raghunathan, A., Schmidt, L., Duchi, J.C., Liang, P.S.: Unlabeled data improves adversarial robustness. In: NIPS, pp. 1\u201312 (2019)"},{"key":"2343_CR12","unstructured":"Alayrac, J.-B., Uesato, J., Huang, P.-S., Fawzi, A., Stanforth, R., Kohli, P.: Are labels required for improving adversarial robustness? In: NIPS, pp. 1\u201324 (2019)"},{"key":"2343_CR13","doi-asserted-by":"crossref","unstructured":"Zhang, L., Yang, N., Sun, Y., Philip, S.Y.: Provable unrestricted adversarial training without compromise with generalizability. IEEE TPAMI (2024)","DOI":"10.1109\/TPAMI.2024.3400988"},{"key":"2343_CR14","doi-asserted-by":"crossref","unstructured":"Zhang, L., Wu, C., Yang, N.: Weakly supervised contrastive adversarial training for learning robust features from semi-supervised data. In: CVPR, pp. 25718\u201325727 (2025)","DOI":"10.1109\/CVPR52734.2025.02395"},{"key":"2343_CR15","unstructured":"Jeff\u00a0Z, H., Wei, C., Gaidon, A., Ma, T.Y.: Provable guarantees for self-supervised deep learning with spectral contrastive loss. In: NIPS (2021)"},{"key":"2343_CR16","unstructured":"Wang, Y., Zhang, Q., Wang, Y., Yang, J., Lin, Z.: Chaos is a ladder: A new theoretical understanding of contrastive learning via augmentation overlap. In: ICLR (2022)"},{"key":"2343_CR17","unstructured":"Chen, X., Fan, H., Girshick, R., He, K.: Improved baselines with momentum contrastive learning. arXiv:2003.04297 (2020)"},{"key":"2343_CR18","unstructured":"Chen, T., Kornblith, S., Norouzi, M., Hinton, G.: A simple framework for contrastive learning of visual representations. In: PMLR, pp. 1597\u20131607 (2020)"},{"key":"2343_CR19","unstructured":"Grill, J.-B., Strub, F., Altch\u00e9, F., Tallec, C., Richemond, P., Buchatskaya, E., Doersch, C., Avila\u00a0Pires, B., Guo, Z., Gheshlaghi\u00a0Azar, M., Piot, B., kavukcuoglu, k., Munos, R., Valko, M.: Bootstrap your own latent - a new approach to self-supervised learning. In: NIPS, pp. 21271\u201321284 (2020)"},{"key":"2343_CR20","unstructured":"Chen, X., He, K.: Exploring simple siamese representation learning. arXiv:2011.10566v1 (2020)"},{"key":"2343_CR21","doi-asserted-by":"crossref","unstructured":"Peng, X., Wang, K., Zhu, Z., Wang, M., You, Y.: Crafting better contrastive views for siamese representation learning. In: CVPR, pp. 16031\u201316040 (2022)","DOI":"10.1109\/CVPR52688.2022.01556"},{"key":"2343_CR22","doi-asserted-by":"crossref","unstructured":"Dwibedi, D., Aytar, Y., Tompson, J., Sermanet, P., Zisserman, A.: With a little help from my friends: nearest-neighbor contrastive learning of visual representations. In: ICCV, pp. 9588\u20139597 (2021)","DOI":"10.1109\/ICCV48922.2021.00945"},{"key":"2343_CR23","doi-asserted-by":"crossref","unstructured":"Hu, Q., Wang, X., Hu, W., Qi, G.-J.: Adco: adversarial contrast for efficient learning of unsupervised representations from self-trained negative adversaries. In: CVPR, pp. 1074\u20131083 (2021)","DOI":"10.1109\/CVPR46437.2021.00113"},{"key":"2343_CR24","unstructured":"Khosla, P., Teterwak, P., Wang, C., Sarna, A., Tian, Y., Isola, P., Maschinot, A., Liu, C., Krishnan, D.: Supervised contrastive learning. In: NIPS, pp. 18661\u201318673 (2020)"},{"key":"2343_CR25","doi-asserted-by":"crossref","unstructured":"Yang, F., Wu, K., Zhang, S., Jiang, G., Liu, Y., Zheng, F., Zhang, W., Wang, C., Zeng, L.: Class-aware contrastive semi-supervised learning. In: CVPR, pp. 14421\u201314430 (2022)","DOI":"10.1109\/CVPR52688.2022.01402"},{"key":"2343_CR26","doi-asserted-by":"crossref","unstructured":"Li, S., Xia, X., Ge, S., Liu, T.: Selective-supervised contrastive learning with noisy labels. In: CVPR, pp. 316\u2013325 (2022)","DOI":"10.1109\/CVPR52688.2022.00041"},{"key":"2343_CR27","unstructured":"Kim, M., Tack, J., Hwang, S.J.: Adversarial self-supervised contrastive learning. In: NIPS, pp. 2983\u20132994 (2020)"},{"key":"2343_CR28","unstructured":"Jiang, Z., Chen, T., Chen, T., Wang, Z.: Robust pre-training by adversarial contrastive learning. In: NIPS, pp. 16199\u201316210 (2020)"},{"key":"2343_CR29","unstructured":"Fan, L., Liu, S., Chen, P.-Y., Zhang, G., Gan, C.: When does contrastive learning preserve adversarial robustness from pretraining to finetuning? In: NIPS, pp. 21480\u201321492 (2021)"},{"key":"2343_CR30","unstructured":"Luo, R., Wang, Y., Wang, Y.: Rethinking the Effect of data augmentation in Adversarial Contrastive Learning. arXiv:2303.01289. (2023)"},{"key":"2343_CR31","doi-asserted-by":"crossref","unstructured":"Xu, X., ZHANG, J., Liu, F., Sugiyama, M., Kankanhalli, M.S.: Enhancing adversarial contrastive learning via adversarial invariant regularization. In: NIPS, pp. 16783\u201316803 (2023)","DOI":"10.52202\/075280-0734"},{"key":"2343_CR32","doi-asserted-by":"crossref","unstructured":"Gupta, R., Akhtar, N., Mian, A., Shah, M.: Contrastive Self-Supervised Learning Leads to Higher Adversarial Susceptibility. arXiv:2207.10862 (2023)","DOI":"10.1609\/aaai.v37i12.26733"},{"key":"2343_CR33","doi-asserted-by":"crossref","unstructured":"Xie, Q., Luong, M.-T., Hovy, E., Le, V.Q.: Self-training with noisy student improves imagenet classification. In: CVPR, pp. 10687\u201310698 (2020)","DOI":"10.1109\/CVPR42600.2020.01070"},{"key":"2343_CR34","unstructured":"Lee, D.-H.: Pseudo-label: The simple and efficient semi-supervised learning method for deep neural networks. In: ICML Workshop on Challenges in Representation Learning (2013)"},{"key":"2343_CR35","unstructured":"Bachman, P., Alsharif, O., Precup, D.: Learning with pseudo-ensembles. In: NIPS, pp. 3365\u20133373 (2014)"},{"key":"2343_CR36","unstructured":"Sajjadi, M., Javanmardi, M., Tasdizen, T.: Regularization with stochastic transformations and perturbations for deep semi-supervised learning. In: NIPS (2016)"},{"key":"2343_CR37","unstructured":"Laine, S., Aila, T.: Temporal ensembling for semi-supervised learning. In: ICLR (2017)"},{"key":"2343_CR38","unstructured":"Sohn, K., Berthelot, D., Carlini, N., Zhang, Z., Zhang, H., Raffel, C.A., Cubuk, E.D., Kurakin, A., Li, C.-L.: Fixmatch: simplifying semi-supervised learning with consistency and confidence. In: NIPS, pp. 596\u2013608 (2020)"},{"key":"2343_CR39","unstructured":"Zhang, B., Wang, Y., Hou, W., WU, H., Wang, J., Okumura, M., Shinozaki, T.: Flexmatch: boosting semi-supervised learning with curriculum pseudo labeling. In: NIPS, pp. 18408\u201318419 (2021)"},{"key":"2343_CR40","doi-asserted-by":"crossref","unstructured":"Li, J., Xiong, C., Hoi, S.C.H.: Comatch: semi-supervised learning with contrastive graph regularization. In: ICCV, pp. 9475\u20139484 (2021)","DOI":"10.1109\/ICCV48922.2021.00934"},{"key":"2343_CR41","unstructured":"Xu, Y., Ding, J., Zhang, L., Zhou, S.: Dp-ssl: towards robust semi-supervised learning with a few labeled samples. In: NIPS, pp. 15895\u201315907 (2021)"},{"key":"2343_CR42","unstructured":"Tarvainen, A., Valpola, H.: Mean teachers are better role models: Weight-averaged consistency targets improve semi-supervised deep learning results. In: NIPS (2017)"},{"key":"2343_CR43","doi-asserted-by":"crossref","unstructured":"Yu, q., Lou, J., Zhan, X., Li, Q., Meng, Z., Liu, Y., Liu, J.: Adversarial contrastive learning via asymmetric infonce. In: ECCV (2022)","DOI":"10.1007\/978-3-031-20065-6_4"},{"key":"2343_CR44","doi-asserted-by":"crossref","unstructured":"Tack, J., Yu, S., Jeong, J., Kim, M., Hwang, S.J., Shin, J.: Consistency Regularization for Adversarial Robustness. arXiv:2103.04623. (2022)","DOI":"10.1609\/aaai.v36i8.20817"},{"key":"2343_CR45","doi-asserted-by":"crossref","unstructured":"M\u00fcller, S.G., Hutter, F.: Trivialaugment: Tuning-free yet state-of-the-art data augmentation. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 774\u2013782 (2021)","DOI":"10.1109\/ICCV48922.2021.00081"},{"key":"2343_CR46","unstructured":"Andriushchenko, M., Flammarion, N.: Understanding and improving fast adversarial training. In: NIPS (2020)"},{"key":"2343_CR47","doi-asserted-by":"crossref","unstructured":"Cubuk, E.D., Zoph, B., Mane, D., Vasudevan, V., Le, Q.V.: Autoaugment: Learning augmentation strategies from data. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2019)","DOI":"10.1109\/CVPR.2019.00020"},{"key":"2343_CR48","unstructured":"Wu, D., Xia, S.-t., Wang, Y.: Adversarial Weight Perturbation helps Robust Generalization. arXiv:2004.05884 (2020)"},{"key":"2343_CR49","doi-asserted-by":"crossref","unstructured":"Zagoruyko, S., Komodakis, N.: Wide residual networks. In: BMVC (2016)","DOI":"10.5244\/C.30.87"},{"key":"2343_CR50","unstructured":"Song, C., He, K., Lin, J., Wang, L., Hopcroft, E.J.: Robust local features for improving the generalization of adversarial training. In: ICLR (2020)"}],"container-title":["Multimedia Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-026-02343-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00530-026-02343-5","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-026-02343-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T06:17:39Z","timestamp":1778048259000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00530-026-02343-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,6]]},"references-count":50,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2026,8]]}},"alternative-id":["2343"],"URL":"https:\/\/doi.org\/10.1007\/s00530-026-02343-5","relation":{},"ISSN":["0942-4962","1432-1882"],"issn-type":[{"value":"0942-4962","type":"print"},{"value":"1432-1882","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,6]]},"assertion":[{"value":"30 December 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 March 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 May 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval and consent to participate"}},{"value":"All authors have given consent for publication.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}],"article-number":"308"}}