{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T20:12:55Z","timestamp":1783714375423,"version":"3.55.0"},"reference-count":143,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2022,1,6]],"date-time":"2022-01-06T00:00:00Z","timestamp":1641427200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,6]],"date-time":"2022-01-06T00:00:00Z","timestamp":1641427200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100011697","name":"R\u00e9gion Bretagne","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100011697","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006021","name":"Direction G\u00e9n\u00e9rale de l\u2019Armement","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100006021","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Artif Intell Rev"],"published-print":{"date-parts":[[2022,8]]},"DOI":"10.1007\/s10462-021-10125-w","type":"journal-article","created":{"date-parts":[[2022,1,6]],"date-time":"2022-01-06T14:02:48Z","timestamp":1641477768000},"page":"4403-4462","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":168,"title":["Adversarial example detection for DNN models: a review and experimental comparison"],"prefix":"10.1007","volume":"55","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7624-5253","authenticated-orcid":false,"given":"Ahmed","family":"Aldahdooh","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wassim","family":"Hamidouche","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sid Ahmed","family":"Fezza","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Olivier","family":"D\u00e9forges","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,1,6]]},"reference":[{"key":"10125_CR1","unstructured":"Aigrain J, Detyniecki M (2019) Detecting adversarial examples and other misclassifications in neural networks by introspection. CoRR, abs\/1905.09186"},{"key":"10125_CR2","doi-asserted-by":"publisher","first-page":"14410","DOI":"10.1109\/ACCESS.2018.2807385","volume":"6","author":"N Akhtar","year":"2018","unstructured":"Akhtar N, Mian A (2018) Threat of adversarial attacks on deep learning in computer vision: a survey. IEEE Access 6:14410\u201314430","journal-title":"IEEE Access"},{"key":"10125_CR3","doi-asserted-by":"crossref","unstructured":"Aldahdooh A, Hamidouche W, D\u00e9forges O (2021) Revisiting model\u2019s uncertainty and confidences for adversarial example detection. arXiv preprint arXiv:2103.05354","DOI":"10.1007\/s10489-022-03373-y"},{"key":"10125_CR4","unstructured":"Athalye A, Engstrom L, Ilyas A, Kwok K (2018a) Synthesizing robust adversarial examples. In: International conference on machine learning, PMLR, pp 284\u2013293"},{"key":"10125_CR5","unstructured":"Athalye A, Carlini N, Wagner DA (2018b) Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples. In: Dy JG, Krause A (eds) Proceedings of the 35th international conference on machine learning, ICML 2018, proceedings of machine learning research, PMLR, vol 80, Stockholmsm\u00e4ssan, Stockholm, Sweden, 10\u201315 July 2018, pp 274\u2013283"},{"key":"10125_CR6","unstructured":"Bahdanau D, Cho K, Bengio Y (2015) Neural machine translation by jointly learning to align and translate. In: Bengio Y, LeCun Y (eds) 3rd International conference on learning representations, ICLR 2015, conference track proceedings, San Diego, CA, USA, 7\u20139 May 2015"},{"key":"10125_CR7","doi-asserted-by":"publisher","first-page":"160397","DOI":"10.1109\/ACCESS.2019.2951526","volume":"7","author":"Y Bakhti","year":"2019","unstructured":"Bakhti Y, Fezza SA, Hamidouche W, D\u00e9forges O (2019) DDSA: a defense against adversarial attacks using deep denoising sparse autoencoder. IEEE Access 7:160397\u2013160407","journal-title":"IEEE Access"},{"key":"10125_CR8","unstructured":"Baluja S, Fischer I (2017) Adversarial transformation networks: learning to generate adversarial examples. CoRR, abs\/1703.09387"},{"key":"10125_CR9","doi-asserted-by":"crossref","unstructured":"Bertinetto L, Valmadre J, Henriques JF, Vedaldi A, Torr PHS (2016) Fully-convolutional Siamese networks for object tracking. In: European conference on computer vision. Springer, pp 850\u2013865","DOI":"10.1007\/978-3-319-48881-3_56"},{"key":"10125_CR11","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1016\/j.patcog.2018.07.023","volume":"84","author":"B Biggio","year":"2018","unstructured":"Biggio B, Roli F (2018) Wild patterns: ten years after the rise of adversarial machine learning. Pattern Recognit 84:317\u2013331","journal-title":"Pattern Recognit"},{"key":"10125_CR12","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Maiorca D, Nelson B, \u0160rndi\u0107 N, Laskov P, Giacinto G, Roli F (2013) Evasion attacks against machine learning at test time. In: Joint European conference on machine learning and knowledge discovery in databases, pp 387\u2013402. Springer","DOI":"10.1007\/978-3-642-40994-3_25"},{"issue":"07","key":"10125_CR10","doi-asserted-by":"publisher","first-page":"1460002","DOI":"10.1142\/S0218001414600027","volume":"28","author":"B Biggio","year":"2014","unstructured":"Biggio B, Fumera G, Roli F (2014a) Pattern recognition systems under attack: design issues and research challenges. Int J Pattern Recognit Artif Intell 28(07):1460002","journal-title":"Int J Pattern Recognit Artif Intell"},{"key":"10125_CR13","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Nelson B, Rubinstein BIP, Maiorca D, Fumera G, Giacinto G, Roli F (2014b) Security evaluation of support vector machines in adversarial environments. In: Support vector machines applications. Springer, pp 105\u2013153","DOI":"10.1007\/978-3-319-02300-7_4"},{"key":"10125_CR14","doi-asserted-by":"crossref","unstructured":"Borkar T, Heide F, Karam L (2020) Defending against universal attacks through selective feature regeneration. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 709\u2013719","DOI":"10.1109\/CVPR42600.2020.00079"},{"key":"10125_CR15","unstructured":"Brendel W, Rauber J, Bethge M (2018) Decision-based adversarial attacks: reliable attacks against black-box machine learning models. In: 6th International conference on learning representations, ICLR 2018, conference track proceedings, Vancouver, BC, Canada, 30 April\u20133 May 2018. OpenReview.net"},{"key":"10125_CR16","doi-asserted-by":"publisher","first-page":"132330","DOI":"10.1109\/ACCESS.2020.3010274","volume":"8","author":"S Bulusu","year":"2020","unstructured":"Bulusu S, Kailkhura B, Li B, Varshney PK, Song D (2020) Anomalous example detection in deep learning: a survey. IEEE Access 8:132330\u2013132347","journal-title":"IEEE Access"},{"key":"10125_CR20","unstructured":"Carlini N, Wagner DA (2016) Defensive distillation is not robust to adversarial examples. CoRR, abs\/1607.04311"},{"key":"10125_CR17","unstructured":"Carlini N, Wagner DA (2017a) MagNet and \u201cefficient defenses against adversarial attacks\u201d are not robust to adversarial examples. CoRR, abs\/1711.08478"},{"key":"10125_CR18","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017b) Adversarial examples are not easily detected: bypassing ten detection methods. In: Proceedings of the 10th ACM workshop on artificial intelligence and security, pp 3\u201314","DOI":"10.1145\/3128572.3140444"},{"key":"10125_CR19","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017c) Towards evaluating the robustness of neural networks. In: 2017 IEEE symposium on security and privacy (SP). IEEE, pp 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"10125_CR22","doi-asserted-by":"crossref","unstructured":"Carrara F, Falchi F, Caldelli R, Amato G, Fumarola R, Becarelli R (2017) Detecting adversarial example attacks to deep neural networks. In: Proceedings of the 15th international workshop on content-based multimedia indexing, pp 1\u20137","DOI":"10.1145\/3095713.3095753"},{"key":"10125_CR21","doi-asserted-by":"crossref","unstructured":"Carrara F, Becarelli R, Caldelli R, Falchi F, Amato G (2018) Adversarial examples detection in features distance spaces. In: Proceedings of the European conference on computer vision (ECCV)","DOI":"10.1007\/978-3-030-11012-3_26"},{"key":"10125_CR23","unstructured":"Chakraborty A, Alam M, Dey V, Chattopadhyay A, Mukhopadhyay D (2018) Adversarial attacks and defences: a survey. CoRR, abs\/1810.00069"},{"key":"10125_CR24","doi-asserted-by":"crossref","unstructured":"Chen P-Y, Zhang H, Sharma Y, Yi J, Hsieh C-J (2017) ZOO: zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: Proceedings of the 10th ACM workshop on artificial intelligence and security, pp 15\u201326","DOI":"10.1145\/3128572.3140448"},{"key":"10125_CR25","doi-asserted-by":"crossref","unstructured":"Chen J, Jordan MI, Wainwright MJ (2020) HopSkipJump attack: a query-efficient decision-based attack. In: 2020 IEEE symposium on security and privacy (SP). IEEE, pp 1277\u20131294","DOI":"10.1109\/SP40000.2020.00045"},{"key":"10125_CR26","doi-asserted-by":"crossref","unstructured":"Cohen G, Sapiro G, Giryes R (2020) Detecting adversarial samples using influence functions and nearest neighbors. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 14453\u201314462","DOI":"10.1109\/CVPR42600.2020.01446"},{"key":"10125_CR27","unstructured":"Croce F, Hein M (2020) Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proceedings of the 37th international conference on machine learning, ICML 2020, proceedings of machine learning research, PMLR, vol 119, virtual event, 13\u201318 July 2020, pp 2206\u20132216"},{"key":"10125_CR28","doi-asserted-by":"crossref","unstructured":"Danelljan M, Bhat G, Shahbaz Khan F, Felsberg M (2017) ECO: efficient convolution operators for tracking. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 6638\u20136646","DOI":"10.1109\/CVPR.2017.733"},{"issue":"2","key":"10125_CR29","first-page":"31","volume":"40","author":"P Dasgupta","year":"2019","unstructured":"Dasgupta P, Collins J (2019) A survey of game theoretic approaches for adversarial machine learning in cybersecurity tasks. AI Mag 40(2):31\u201343","journal-title":"AI Mag"},{"key":"10125_CR30","doi-asserted-by":"crossref","unstructured":"Deng J, Dong W, Socher R, Li L-J, Li K, Fei-Fei L (2009) ImageNet: a large-scale hierarchical image database. In: CVPR09","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"10125_CR31","unstructured":"Devlin J, Chang M-W, Lee K, Toutanova K (2019) BERT: pre-training of deep bidirectional transformers for language understanding. In: Proceedings of the 2019 conference of the North American Chapter of the Association for Computational Linguistics: human language technologies, NAACL-HLT 2019, long and short papers, vol 1, Minneapolis, MN, USA, 2\u20137 June 2019. Association for Computational Linguistics, pp 4171\u20134186"},{"key":"10125_CR32","unstructured":"Engstrom L, Tran B, Tsipras D, Schmidt L, Madry A (2019) Exploring the landscape of spatial robustness. In: International conference on machine learning, pp 1802\u20131811"},{"key":"10125_CR33","unstructured":"Eniser HF, Christakis M, W\u00fcstholz V (2020) RAID: randomized adversarial-input detection for neural networks. CoRR, abs\/2002.02776"},{"key":"10125_CR34","doi-asserted-by":"crossref","unstructured":"Evtimov I, Eykholt K, Fernandes E, Kohno T, Li B, Prakash A, Rahmati A, Song D (2017) Robust physical-world attacks on machine learning models. CoRR, abs\/1707.08945","DOI":"10.1109\/CVPR.2018.00175"},{"key":"10125_CR35","unstructured":"Feinman R, Curtin RR, Shintre S, Gardner AB (2017) Detecting adversarial samples from artifacts. CoRR, abs\/1703.00410"},{"key":"10125_CR36","unstructured":"Finlayson SG, Kohane IS, Beam AL (2018) Adversarial attacks against medical deep learning systems. CoRR, abs\/1804.05296"},{"key":"10125_CR37","doi-asserted-by":"crossref","unstructured":"Freitas S, Chen S-T, Wang ZJ, Chau DH (2020) UnMask: adversarial detection and defense through robust feature alignment. In: IEEE international conference on big data, Big Data 2020, Atlanta, GA, USA, 10\u201313 December 2020. IEEE, pp 1081\u20131088","DOI":"10.1109\/BigData50022.2020.9378303"},{"key":"10125_CR38","unstructured":"Geifman Y, El-Yaniv R (2019) SelectiveNet: a deep neural network with an integrated reject option. CoRR, abs\/1901.09192"},{"key":"10125_CR40","doi-asserted-by":"crossref","unstructured":"Girshick RB (2015) Fast R-CNN. In: 2015 IEEE international conference on computer vision, ICCV 2015, Santiago, Chile, 7\u201313 December 2015. IEEE Computer Society, pp 1440\u20131448","DOI":"10.1109\/ICCV.2015.169"},{"key":"10125_CR39","doi-asserted-by":"crossref","unstructured":"Girshick R, Donahue J, Darrell T, Malik J (2014) Rich feature hierarchies for accurate object detection and semantic segmentation. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 580\u2013587","DOI":"10.1109\/CVPR.2014.81"},{"key":"10125_CR41","unstructured":"Gong Z, Wang W, Ku W-S (2017) Adversarial and clean data are not twins. CoRR, abs\/1704.04960"},{"key":"10125_CR42","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In: Bengio Y, LeCun Y (eds) 3rd International conference on learning representations, ICLR 2015, conference track proceedings, San Diego, CA, USA, 7\u20139 May 2015"},{"issue":"1","key":"10125_CR43","first-page":"723","volume":"13","author":"A Gretton","year":"2012","unstructured":"Gretton A, Borgwardt KM, Rasch MJ, Sch\u00f6lkopf B, Smola A (2012) A kernel two-sample test. J Mach Learn Res 13(1):723\u2013773","journal-title":"J Mach Learn Res"},{"key":"10125_CR45","doi-asserted-by":"crossref","unstructured":"Grosse K, Papernot N, Manoharan P, Backes M, McDaniel PD (2016) Adversarial perturbations against deep neural networks for malware classification. CoRR, abs\/1606.04435","DOI":"10.1109\/SP.2016.41"},{"key":"10125_CR44","unstructured":"Grosse K, Manoharan P, Papernot N, Backes M, McDaniel PD (2017) On the (statistical) detection of adversarial examples. CoRR, abs\/1702.06280"},{"key":"10125_CR47","unstructured":"Gu S, Rigazio L(2015) Towards deep neural network architectures robust to adversarial examples. In: Bengio Y, LeCun Y (eds) 3rd International conference on learning representations, ICLR 2015, workshop track proceedings, San Diego, CA, USA, 7\u20139 May 2015"},{"key":"10125_CR46","unstructured":"Gu T, Dolan-Gavitt B, Garg S (2017) BadNets: identifying vulnerabilities in the machine learning model supply chain. CoRR, abs\/1708.06733"},{"key":"10125_CR48","unstructured":"Hannun AY, Case C, Casper J, Catanzaro B, Diamos G, Elsen E, Prenger R, Satheesh S, Sengupta S, Coates A, Ng AY (2014) Deep speech: scaling up end-to-end speech recognition. CoRR, abs\/1412.5567"},{"key":"10125_CR49","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016a) Identity mappings in deep residual networks. In: European conference on computer vision. Springer, pp 630\u2013645","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"10125_CR50","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016b) Deep residual learning for image recognition. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"10125_CR51","unstructured":"Hendrycks D, Gimpel K (2017a) A baseline for detecting misclassified and out-of-distribution examples in neural networks. In: 5th International conference on learning representations, ICLR 2017, conference track proceedings, Toulon, France, 24\u201326 April 2017. OpenReview.net"},{"key":"10125_CR52","unstructured":"Hendrycks D, Gimpel K (2017b) Early methods for detecting adversarial images. In: 5th International conference on learning representations, ICLR 2017, workshop track proceedings, Toulon, France, 24\u201326 April 2017. OpenReview.net"},{"key":"10125_CR53","unstructured":"Hosseini H, Chen Y, Kannan S, Zhang B, Poovendran R (2017) Blocking transferability of adversarial examples in black-box learning systems. CoRR, abs\/1703.04318"},{"key":"10125_CR54","unstructured":"Howard AG, Zhu M, Chen B, Kalenichenko D, Wang W, Weyand T, Andreetto M, Adam H (2017) MobileNets: efficient convolutional neural networks for mobile vision applications. CoRR, abs\/1704.04861"},{"key":"10125_CR55","doi-asserted-by":"crossref","unstructured":"Huang G, Liu Z, Van Der Maaten L, Weinberger KQ (2017) Densely connected convolutional networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 4700\u20134708","DOI":"10.1109\/CVPR.2017.243"},{"key":"10125_CR56","unstructured":"Ilyas A, Santurkar S, Tsipras D, Engstrom L, Tran B, Madry A (2019) Adversarial examples are not bugs, they are features. In: Advances in neural information processing systems, pp 125\u2013136"},{"key":"10125_CR57","doi-asserted-by":"publisher","first-page":"9375","DOI":"10.1109\/ACCESS.2017.2788044","volume":"6","author":"J Ker","year":"2017","unstructured":"Ker J, Wang L, Rao J, Lim T (2017) Deep learning applications in medical image analysis. IEEE Access 6:9375\u20139389","journal-title":"IEEE Access"},{"key":"10125_CR58","doi-asserted-by":"crossref","unstructured":"Kherchouche A, Fezza SA, Hamidouche W, D\u00e9forges O (2020) Detection of adversarial examples in deep neural networks with natural scene statistics. In: 2020 International joint conference on neural networks (IJCNN). IEEE, pp 1\u20137","DOI":"10.1109\/IJCNN48605.2020.9206959"},{"key":"10125_CR59","unstructured":"Kotyan S, Vargas DV (2019) Adversarial robustness assessment: why both $$l_{0}$$ and $$l_{\\infty} $$ attacks are necessary, p 1906. arXiv e-prints"},{"key":"10125_CR61","unstructured":"Krizhevsky A, Hinton G (2009) Learning multiple layers of features from tiny images. Master\u2019s Thesis, Department of Computer Science, University of Toronto"},{"key":"10125_CR60","unstructured":"Krizhevsky A, Sutskever I, Hinton GE (2012) ImageNet classification with deep convolutional neural networks. In: Advances in neural information processing systems, pp 1097\u20131105"},{"issue":"1","key":"10125_CR62","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1214\/aoms\/1177729694","volume":"22","author":"S Kullback","year":"1951","unstructured":"Kullback S, Leibler RA (1951) On information and sufficiency. Ann Math Stat 22(1):79\u201386","journal-title":"Ann Math Stat"},{"key":"10125_CR63","doi-asserted-by":"crossref","unstructured":"Kurakin A, Goodfellow I, Bengio S (2017) Adversarial examples in the physical world. In: ICLR workshop","DOI":"10.1201\/9781351251389-8"},{"key":"10125_CR64","unstructured":"Lan Z, Chen M, Goodman S, Gimpel K, Sharma P, Soricut R (2020) ALBERT: a lite BERT for self-supervised learning of language representations. In: 8th International conference on learning representations, ICLR 2020, Addis Ababa, Ethiopia, 26\u201330 April 2020. OpenReview.net"},{"issue":"11","key":"10125_CR65","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324","journal-title":"Proc IEEE"},{"key":"10125_CR66","unstructured":"Lee K, Lee K, Lee H, Shin J (2018) A simple unified framework for detecting out-of-distribution samples and adversarial attacks. In: Advances in neural information processing systems, pp 7167\u20137177"},{"key":"10125_CR67","doi-asserted-by":"crossref","unstructured":"Li X, Li F (2017) Adversarial examples detection in deep networks with convolutional filter statistics. In: Proceedings of the IEEE international conference on computer vision, pp 5764\u20135772","DOI":"10.1109\/ICCV.2017.615"},{"key":"10125_CR69","doi-asserted-by":"crossref","unstructured":"Li D, Vargas DV, Kouichi S (2019) Universal rules for fooling deep neural networks based text classification. In: IEEE congress on evolutionary computation, CEC 2019, Wellington, New Zealand, 10\u201313 June 2019. IEEE, pp 2221\u20132228","DOI":"10.1109\/CEC.2019.8790213"},{"key":"10125_CR68","unstructured":"Li Y, Wu B, Jiang Y, Li Z, Xia S-T (2020) Backdoor learning: a survey. arXiv preprint arXiv:2007.08745"},{"issue":"1","key":"10125_CR70","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/TDSC.2018.2874243","volume":"18","author":"B Liang","year":"2021","unstructured":"Liang B, Li H, Miaoqiang S, Li X, Shi W, Wang X (2021) Detecting adversarial image examples in deep neural networks with adaptive noise reduction. IEEE Trans Depend Secur Comput 18(1):72\u201385","journal-title":"IEEE Trans Depend Secur Comput"},{"key":"10125_CR71","doi-asserted-by":"crossref","unstructured":"Liao F, Liang M, Dong Y, Pang T, Hu X, Zhu J (2018) Defense against adversarial attacks using high-level representation guided denoiser. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 1778\u20131787","DOI":"10.1109\/CVPR.2018.00191"},{"issue":"1\u20133","key":"10125_CR72","doi-asserted-by":"publisher","first-page":"503","DOI":"10.1007\/BF01589116","volume":"45","author":"DC Liu","year":"1989","unstructured":"Liu DC, Nocedal J (1989) On the limited memory BFGS method for large scale optimization. Math Program 45(1\u20133):503\u2013528","journal-title":"Math Program"},{"key":"10125_CR73","unstructured":"Liu Y, Chen X, Liu C, Song D (2017) Delving into transferable adversarial examples and black-box attacks. In: 5th International conference on learning representations, ICLR 2017, conference track proceedings, Toulon, France, 24\u201326 April 2017. OpenReview.net"},{"key":"10125_CR74","doi-asserted-by":"crossref","unstructured":"Long J, Shelhamer E, Darrell T (2015) Fully convolutional networks for semantic segmentation. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 3431\u20133440","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"10125_CR75","unstructured":"Lu J, Sibai H, Fabry E, Forsyth DA (2017a) NO need to worry about adversarial examples in object detection in autonomous vehicles. CoRR, abs\/1707.03501"},{"key":"10125_CR76","doi-asserted-by":"crossref","unstructured":"Lu J, Issaranon T, Forsyth D (2017b) SafetyNet: detecting and rejecting adversarial examples robustly. In: Proceedings of the IEEE international conference on computer vision, pp 446\u2013454","DOI":"10.1109\/ICCV.2017.56"},{"key":"10125_CR77","unstructured":"Lust J, Condurache AP (2020) GraN: an efficient gradient-norm based detector for adversarial and misclassified examples. In: 28th European symposium on artificial neural networks, computational intelligence and machine learning, ESANN 2020, Bruges, Belgium, 2\u20134 October 2020, pp 7\u201312"},{"key":"10125_CR79","doi-asserted-by":"crossref","unstructured":"Ma S, Liu Y (2019) NIC: detecting adversarial samples with neural network invariant checking. In: Proceedings of the 26th network and distributed system security symposium (NDSS 2019)","DOI":"10.14722\/ndss.2019.23415"},{"key":"10125_CR78","unstructured":"Ma X, Li B, Wang Y, Erfani SM, Wijewickrema SNR, Schoenebeck G, Song D, Houle ME, Bailey J (2018) Characterizing adversarial subspaces using local intrinsic dimensionality. In: 6th International conference on learning representations, ICLR 2018, conference track proceedings, Vancouver, BC, Canada, 30 April\u20133 May 2018. OpenReview.net"},{"key":"10125_CR80","unstructured":"Machado GR, Silva E, Goldschmidt RR (2020) Adversarial machine learning in image classification: a survey towards the defender\u2019s perspective. CoRR, abs\/2009.03728"},{"key":"10125_CR81","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2018) Towards deep learning models resistant to adversarial attacks. In: 6th International conference on learning representations, ICLR 2018, conference track proceedings, Vancouver, BC, Canada, 30 April\u20133 May 2018. OpenReview.net"},{"key":"10125_CR82","doi-asserted-by":"crossref","unstructured":"Maksym A, Francesco C, Nicolas F, Matthias H (2020) Square attack: a query-efficient black-box adversarial attack via random search. In: Vedaldi A, Bischof H, Brox T, Frahm J-M (eds) Computer vision\u2014ECCV 2020\u201416th European conference, proceedings, Part XXIII. Lecture notes in computer science, vol 12368, Glasgow, UK, 23\u201328 August 2020. Springer, pp 484\u2013501","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"10125_CR83","doi-asserted-by":"crossref","unstructured":"Mao X, Chen Y, Li Y, He Y, Xue H (2020) Learning to characterize adversarial subspaces. In: ICASSP 2020\u20142020 IEEE international conference on acoustics, speech and signal processing (ICASSP). IEEE, pp 2438\u20132442","DOI":"10.1109\/ICASSP40776.2020.9052933"},{"key":"10125_CR84","doi-asserted-by":"crossref","unstructured":"Melis M, Demontis A, Biggio B, Brown G, Fumera G, Roli F (2017) Is deep learning safe for robot vision? Adversarial examples against the iCub humanoid. In: Proceedings of the IEEE international conference on computer vision workshops, pp 751\u2013759","DOI":"10.1109\/ICCVW.2017.94"},{"key":"10125_CR85","doi-asserted-by":"crossref","unstructured":"Meng D, Chen H (2017) MagNet: a two-pronged defense against adversarial examples. In: Proceedings of the 2017 ACM SIGSAC conference on computer and communications security, pp 135\u2013147","DOI":"10.1145\/3133956.3134057"},{"key":"10125_CR86","unstructured":"Metzen JH, Genewein T, Fischer V, Bischoff B (2017) On detecting adversarial perturbations. In: 5th International conference on learning representations, ICLR 2017, conference track proceedings, Toulon, France, 24\u201326 April 2017. OpenReview.net"},{"issue":"8","key":"10125_CR87","doi-asserted-by":"publisher","first-page":"1624","DOI":"10.1162\/neco_a_01209","volume":"31","author":"D Miller","year":"2019","unstructured":"Miller D, Wang Y, Kesidis G (2019) When not to classify: anomaly detection of attacks (ADA) on DNN classifiers at test time. Neural Comput 31(8):1624\u20131670","journal-title":"Neural Comput"},{"issue":"3","key":"10125_CR88","doi-asserted-by":"publisher","first-page":"402","DOI":"10.1109\/JPROC.2020.2970615","volume":"108","author":"DJ Miller","year":"2020","unstructured":"Miller DJ, Xiang Z, Kesidis G (2020) Adversarial learning targeting deep neural network classification: a comprehensive review of defenses against attacks. Proc IEEE 108(3):402\u2013433","journal-title":"Proc IEEE"},{"issue":"12","key":"10125_CR89","doi-asserted-by":"publisher","first-page":"4695","DOI":"10.1109\/TIP.2012.2214050","volume":"21","author":"A Mittal","year":"2012","unstructured":"Mittal A, Moorthy AK, Bovik AC (2012) No-reference image quality assessment in the spatial domain. IEEE Trans Image Process 21(12):4695\u20134708","journal-title":"IEEE Trans Image Process"},{"key":"10125_CR90","doi-asserted-by":"crossref","unstructured":"Monteiro J, Albuquerque I, Akhtar Z, Falk TH (2019) Generalizable adversarial examples detection based on bi-model decision mismatch. In: 2019 IEEE international conference on systems, man and cybernetics (SMC). IEEE, pp 2839\u20132844","DOI":"10.1109\/SMC.2019.8913861"},{"key":"10125_CR91","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S-M, Fawzi A, Frossard P (2016) DeepFool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"10125_CR92","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S-M, Fawzi A, Fawzi O, Frossard P (2017) Universal adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 1765\u20131773","DOI":"10.1109\/CVPR.2017.17"},{"key":"10125_CR93","doi-asserted-by":"publisher","first-page":"1711","DOI":"10.1109\/TIP.2019.2940533","volume":"29","author":"A Mustafa","year":"2019","unstructured":"Mustafa A, Khan SH, Hayat M, Shen J, Shao L (2019) Image super-resolution as a defense against adversarial attacks. IEEE Trans Image Process 29:1711\u20131724","journal-title":"IEEE Trans Image Process"},{"key":"10125_CR94","unstructured":"Nayebi A, Ganguli S (2017) Biologically inspired protection of deep networks from adversarial attacks. CoRR, abs\/1703.09202"},{"key":"10125_CR95","unstructured":"Netzer Y, Wang T, Coates A, Bissacco A, Wu B, Ng AY (2011) Reading digits in natural images with unsupervised feature learning. In: NIPS workshop on deep learning and unsupervised feature learning 2011, Granada, Spain"},{"key":"10125_CR96","doi-asserted-by":"crossref","unstructured":"Nguyen A, Yosinski J, Clune J (2015) Deep neural networks are easily fooled: high confidence predictions for unrecognizable images. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 427\u2013436","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"10125_CR97","unstructured":"Nicolae M-I, Sinn M, Tran MN, Buesser B, Rawat A, Wistuba M, Zantedeschi V, Baracaldo N, Chen B, Ludwig H, Molloy IM, Edwards B (2019) Adversarial robustness toolbox v1.0.0, 2019"},{"issue":"5","key":"10125_CR99","doi-asserted-by":"publisher","first-page":"635","DOI":"10.1109\/JPROC.2021.3050042","volume":"109","author":"G Ortiz-Jim\u00e9nez","year":"2021","unstructured":"Ortiz-Jim\u00e9nez G, Modas A, Moosavi-Dezfooli S-M, Frossard P (2021) Optimism in the face of adversity: understanding and improving deep learning through adversarial robustness. Proc IEEE 109(5):635\u2013659","journal-title":"Proc IEEE"},{"key":"10125_CR100","unstructured":"O\u2019Shea K, Nash R (2015) An introduction to convolutional neural networks. arXiv preprint arXiv:1511.08458"},{"key":"10125_CR101","unstructured":"Pang T, Du C, Dong Y, Zhu J (2018) Towards robust detection of adversarial examples. In: Advances in neural information processing systems, pp 4579\u20134589"},{"key":"10125_CR103","unstructured":"Papernot N, McDaniel PD, Goodfellow IJ (2016a) Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. CoRR, abs\/1605.07277"},{"key":"10125_CR104","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Wu X, Jha S, Swami A (2016b) Distillation as a defense to adversarial perturbations against deep neural networks. In: 2016 IEEE symposium on security and privacy (SP). IEEE, pp 582\u2013597","DOI":"10.1109\/SP.2016.41"},{"key":"10125_CR105","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Jha S, Fredrikson M, Celik ZB, Swami A (2016c) The limitations of deep learning in adversarial settings. In: 2016 IEEE European symposium on security and privacy (EuroS&P). IEEE, pp 372\u2013387","DOI":"10.1109\/EuroSP.2016.36"},{"key":"10125_CR102","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Goodfellow I, Jha S, Celik ZB, Swami A (2017) Practical black-box attacks against machine learning. In: Proceedings of the 2017 ACM on Asia conference on computer and communications security, pp 506\u2013519","DOI":"10.1145\/3052973.3053009"},{"key":"10125_CR106","unstructured":"Pertigkiozoglou S, Maragos P (2018) Detecting adversarial examples in convolutional neural networks. CoRR, abs\/1812.03303"},{"key":"10125_CR107","doi-asserted-by":"publisher","first-page":"100199","DOI":"10.1016\/j.cosrev.2019.100199","volume":"34","author":"N Pitropakis","year":"2019","unstructured":"Pitropakis N, Panaousis E, Giannetsos T, Anastasiadis E, Loukas G (2019) A taxonomy and survey of attacks against machine learning. Comput Sci Rev 34:100199","journal-title":"Comput Sci Rev"},{"key":"10125_CR108","doi-asserted-by":"crossref","unstructured":"Prakash A, Moran N, Garber S, DiLillo A, Storer J (2018) Deflecting adversarial attacks with pixel deflection. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 8571\u20138580","DOI":"10.1109\/CVPR.2018.00894"},{"key":"10125_CR109","doi-asserted-by":"crossref","unstructured":"Redmon J, Divvala SK, Girshick RB, Farhadi A (2016) You only look once: unified, real-time object detection. In: 2016 IEEE conference on computer vision and pattern recognition, CVPR 2016, Las Vegas, NV, USA, 27\u201330 June 2016. IEEE Computer Society, pp 779\u2013788","DOI":"10.1109\/CVPR.2016.91"},{"key":"10125_CR111","unstructured":"Ren S, He K, Girshick R, Sun J (2015) Faster R-CNN: towards real-time object detection with region proposal networks. In: Advances in neural information processing systems, pp 91\u201399"},{"key":"10125_CR110","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s13042-020-01103-9","volume":"12","author":"H Ren","year":"2021","unstructured":"Ren H, Huang T, Yan H (2021) Adversarial examples: attacks and defenses in the physical world. Int J Mach Learn Cybern 12:1\u201312","journal-title":"Int J Mach Learn Cybern"},{"key":"10125_CR112","unstructured":"Sabour S, Cao Y, Faghri F, Fleet DJ (2016) Adversarial manipulation of deep representations. In: Bengio Y, LeCun Y (eds) 4th International conference on learning representations, ICLR 2016, conference track proceedings, San Juan, Puerto Rico, 2\u20134 May 2016"},{"key":"10125_CR113","unstructured":"Sarkar S, Bansal A, Mahbub U, Chellappa R (2017) UPSET and ANGRI: breaking high performance image classifiers. CoRR, abs\/1707.01159"},{"key":"10125_CR114","unstructured":"Schmidt L, Santurkar S, Tsipras D, Talwar K, Madry A (2018) Adversarially robust generalization requires more data. In: Advances in neural information processing systems 31: annual conference on neural information processing systems 2018, NeurIPS 2018, 3\u20138 December 2018, Montr\u00e9al, Canada, pp 5019\u20135031"},{"key":"10125_CR115","doi-asserted-by":"crossref","unstructured":"Selvaraju RR, Cogswell M, Das A, Vedantam R, Parikh D, Batra D (2017) Grad-CAM: visual explanations from deep networks via gradient-based localization. In: IEEE international conference on computer vision, ICCV 2017, Venice, Italy, 22\u201329 October 2017. IEEE Computer Society, pp 618\u2013626","DOI":"10.1109\/ICCV.2017.74"},{"issue":"3","key":"10125_CR116","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3398394","volume":"53","author":"A Serban","year":"2020","unstructured":"Serban A, Poll E, Visser J (2020) Adversarial examples on object recognition: a comprehensive survey. ACM Comput Surv 53(3):1\u201338","journal-title":"ACM Comput Surv"},{"key":"10125_CR117","doi-asserted-by":"crossref","unstructured":"Sheikholeslami F, Jain S, Giannakis GB (2020) Minimum uncertainty based detection of adversaries in deep neural networks. In: Information theory and applications workshop, ITA 2020, San Diego, CA, USA, 2\u20137 February 2020. IEEE, pp 1\u201316","DOI":"10.1109\/ITA50056.2020.9244964"},{"key":"10125_CR118","unstructured":"Simonyan K, Zisserman A (2015) Very deep convolutional networks for large-scale image recognition. In: Bengio Y, LeCun Y (eds) 3rd International conference on learning representations, ICLR 2015, conference track proceedings, San Diego, CA, USA, 7\u20139 May 2015"},{"key":"10125_CR119","unstructured":"Smith L, Gal Y (2018) Understanding measures of uncertainty for adversarial example detection. In: Globerson A, Silva R (eds) Proceedings of the thirty-fourth conference on uncertainty in artificial intelligence, UAI 2018, Monterey, California, USA, 6\u201310 August 2018. AUAI Press, pp 560\u2013569"},{"key":"10125_CR120","unstructured":"Song Y, Kim T, Nowozin S, Ermon S, Kushman N (2018) PixelDefend: leveraging generative models to understand and defend against adversarial examples. In: 6th International conference on learning representations, ICLR 2018, conference track proceedings, Vancouver, BC, Canada, 30 April\u20133 May 2018. OpenReview.net"},{"key":"10125_CR121","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-020-00105-y","author":"A Sotgiu","year":"2020","unstructured":"Sotgiu A, Demontis A, Melis M, Biggio B, Fumera G, Feng X, Roli F (2020) Deep neural rejection against adversarial examples. EURASIP J Inf Secur. https:\/\/doi.org\/10.1186\/s13635-020-00105-y","journal-title":"EURASIP J Inf Secur"},{"issue":"1","key":"10125_CR122","first-page":"1929","volume":"15","author":"N Srivastava","year":"2014","unstructured":"Srivastava N, Hinton G, Krizhevsky A, Sutskever I, Salakhutdinov R (2014) Dropout: a simple way to prevent neural networks from overfitting. J Mach Learn Res 15(1):1929\u20131958","journal-title":"J Mach Learn Res"},{"issue":"5","key":"10125_CR123","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su J, Vargas DV, Kouichi S (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evol Comput 23(5):828\u2013841","journal-title":"IEEE Trans Evol Comput"},{"key":"10125_CR124","unstructured":"Sun L, Hashimoto K, Yin W, Asai A, Li J, Yu PS, Xiong C (2020) Adv-BERT: BERT is not robust on misspellings! Generating nature adversarial samples on BERT. CoRR, abs\/2003.04985"},{"key":"10125_CR127","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow IJ, Fergus R (2014) Intriguing properties of neural networks. In: Bengio Y, LeCun Y (eds) 2nd International conference on learning representations, ICLR 2014, conference track proceedings, Banff, AB, Canada, 14\u201316 April 2014"},{"key":"10125_CR125","doi-asserted-by":"crossref","unstructured":"Szegedy C, Vanhoucke V, Ioffe S, Shlens J, Wojna Z (2015) Rethinking the inception architecture for computer vision. 2015. arXiv preprint arXiv:1512.00567","DOI":"10.1109\/CVPR.2016.308"},{"key":"10125_CR126","doi-asserted-by":"crossref","unstructured":"Szegedy C, Vanhoucke V, Ioffe S, Shlens J, Wojna Z (2016) Rethinking the inception architecture for computer vision. In: 2016 IEEE conference on computer vision and pattern recognition, CVPR 2016, Las Vegas, NV, USA, 27\u201330 June 2016. IEEE Computer Society, pp 2818\u20132826","DOI":"10.1109\/CVPR.2016.308"},{"key":"10125_CR128","unstructured":"Tobias SJ, Alexey D, Thomas B, Riedmiller MA (2015) Striving for simplicity: the all convolutional net. In: Bengio Y, LeCun Y (eds) 3rd International conference on learning representations, ICLR 2015. Workshop track proceedings, San Diego, CA, USA, 7\u20139 May 2015"},{"key":"10125_CR129","unstructured":"Tram\u00e8r F, Kurakin A, Papernot N, Goodfellow IJ, Boneh D, McDaniel PD (2018) Ensemble adversarial training: attacks and defenses. In: 6th International conference on learning representations, ICLR 2018, conference track proceedings, Vancouver, BC, Canada, 30 April\u20133 May 2018. OpenReview.net"},{"key":"10125_CR98","first-page":"4790","volume":"29","author":"A Van den Oord","year":"2016","unstructured":"Van den Oord A, Kalchbrenner N, Espeholt L, Vinyals O, Graves A et al (2016) Conditional image generation with PixelCNN decoders. Adv Neural Inf Process Syst 29:4790\u20134798","journal-title":"Adv Neural Inf Process Syst"},{"key":"10125_CR130","unstructured":"Vaswani A, Shazeer N, Parmar N, Uszkoreit J, Jones L, Gomez AN, Kaiser L, Polosukhin I (2017) Attention is all you need. In: Advances in neural information processing systems 30: annual conference on neural information processing systems 2017, 4\u20139 December 2017, Long Beach, CA, USA, pp 5998\u20136008"},{"key":"10125_CR131","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1016\/j.jpdc.2019.03.003","volume":"130","author":"X Wang","year":"2019","unstructured":"Wang X, Li J, Kuang X, Tan Y, Li J (2019) The security of machine learning in an adversarial setting: a survey. J Parallel Distrib Comput 130:12\u201323","journal-title":"J Parallel Distrib Comput"},{"key":"10125_CR132","doi-asserted-by":"crossref","unstructured":"Wang D, Wang R, Dong L, Yan D, Zhang X, Gong Y (2020) Adversarial examples attack and countermeasure for speech recognition system: a survey. In: International conference on security and privacy in digital economy. Springer, pp 443\u2013468","DOI":"10.1007\/978-981-15-9129-7_31"},{"key":"10125_CR133","doi-asserted-by":"crossref","unstructured":"Xie C, Wang J, Zhang Z, Zhou Y, Xie L, Yuille AL (2017) Adversarial examples for semantic segmentation and object detection. In: IEEE international conference on computer vision, ICCV 2017, Venice, Italy, 22\u201329 October 2017. IEEE Computer Society, pp 1378\u20131387","DOI":"10.1109\/ICCV.2017.153"},{"key":"10125_CR135","doi-asserted-by":"crossref","unstructured":"Xie C, Wu Y, van der Maaten L, Yuille AL, He K (2019) Feature denoising for improving adversarial robustness. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 501\u2013509","DOI":"10.1109\/CVPR.2019.00059"},{"key":"10125_CR134","unstructured":"Xie C, Tan M, Gong B, Yuille AL, Le QV (2020) Smooth adversarial training. CoRR, abs\/2006.14536"},{"key":"10125_CR137","doi-asserted-by":"crossref","unstructured":"Xu W, Evans D, Qi Y (2018) Feature squeezing: detecting adversarial examples in deep neural networks. In: 25th Annual network and distributed system security symposium, NDSS 2018, San Diego, California, USA, 18\u201321 February 2018. The Internet Society","DOI":"10.14722\/ndss.2018.23198"},{"issue":"2","key":"10125_CR136","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s11633-019-1211-x","volume":"17","author":"H Xu","year":"2020","unstructured":"Xu H, Ma Y, Liu H, Deb D, Liu H, Tang J, Jain AK (2020) Adversarial attacks and defenses in images, graphs and text: a review. Int J Autom Comput 17(2):151\u2013178","journal-title":"Int J Autom Comput"},{"key":"10125_CR138","unstructured":"Yang Z, Dai Z, Yang Y, Carbonell JG, Salakhutdinov R, Le QV (2019) XLNet: generalized autoregressive pretraining for language understanding. In: Advances in neural information processing systems 32: annual conference on neural information processing systems 2019, NeurIPS 2019, 8\u201314 December 2019, Vancouver, BC, Canada, pp 5754\u20135764"},{"issue":"5","key":"10125_CR139","first-page":"8","volume":"2","author":"L Yao","year":"2015","unstructured":"Yao L, Miller J (2015) Tiny ImageNet classification with convolutional neural networks. CS 231N 2(5):8","journal-title":"CS 231N"},{"issue":"9","key":"10125_CR140","doi-asserted-by":"publisher","first-page":"2805","DOI":"10.1109\/TNNLS.2018.2886017","volume":"30","author":"X Yuan","year":"2019","unstructured":"Yuan X, He P, Zhu Q, Li X (2019) Adversarial examples: attacks and defenses for deep learning. IEEE Trans Neural Netw Learn Syst 30(9):2805\u20132824","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"issue":"3","key":"10125_CR141","first-page":"1","volume":"11","author":"WE Zhang","year":"2020","unstructured":"Zhang WE, Sheng QZ, Alhazmi A, Li C (2020) Adversarial attacks on deep-learning models in natural language processing: a survey. ACM Trans Intell Syst Technol (TIST) 11(3):1\u201341","journal-title":"ACM Trans Intell Syst Technol (TIST)"},{"key":"10125_CR142","unstructured":"Zheng Z, Hong P (2018) Robust detection of adversarial attacks by modeling the intrinsic properties of deep neural networks. In: Advances in neural information processing systems, pp 7913\u20137922"},{"key":"10125_CR143","doi-asserted-by":"crossref","unstructured":"Zuo F, Zeng Q (2021) Exploiting the sensitivity of L2 adversarial examples to erase-and-restore. In: Cao J, Au MH, Lin Z, Yung M, (eds) ASIA CCS \u201921: ACM Asia conference on computer and communications security, virtual event, Hong Kong, 7\u201311 June 2021. ACM, pp 40\u201351","DOI":"10.1145\/3433210.3437529"}],"container-title":["Artificial Intelligence Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-021-10125-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10462-021-10125-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-021-10125-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T17:46:54Z","timestamp":1657734414000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10462-021-10125-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,1,6]]},"references-count":143,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2022,8]]}},"alternative-id":["10125"],"URL":"https:\/\/doi.org\/10.1007\/s10462-021-10125-w","relation":{},"ISSN":["0269-2821","1573-7462"],"issn-type":[{"value":"0269-2821","type":"print"},{"value":"1573-7462","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,1,6]]},"assertion":[{"value":"17 December 2021","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 January 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}