{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T07:11:17Z","timestamp":1779001877752,"version":"3.51.4"},"reference-count":40,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,4,18]],"date-time":"2022-04-18T00:00:00Z","timestamp":1650240000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,4,18]],"date-time":"2022-04-18T00:00:00Z","timestamp":1650240000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1007\/s10489-022-03159-2","type":"journal-article","created":{"date-parts":[[2022,4,18]],"date-time":"2022-04-18T05:03:21Z","timestamp":1650258201000},"page":"423-439","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["Defense against adversarial examples based on wavelet domain analysis"],"prefix":"10.1007","volume":"53","author":[{"given":"Armaghan","family":"Sarvar","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maryam","family":"Amirmazlaghani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,4,18]]},"reference":[{"key":"3159_CR1","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus R (2013) Intriguing properties of neural networks. arXiv:1312.6199"},{"key":"3159_CR2","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Maiorca D, Nelson B, \u0160rndi\u0107 N, Laskov P, Giacinto G, Roli F (2013) Evasion attacks against machine learning at test time. In: Joint European conference on machine learning and knowledge discovery in databases. Springer, pp 387\u2013402","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"3159_CR3","unstructured":"Papernot N, McDaniel P, Goodfellow I (2016) Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. arXiv:1605.07277"},{"key":"3159_CR4","unstructured":"Gu S, Rigazio L (2014) Towards deep neural network architectures robust to adversarial examples. arXiv:1412.5068"},{"key":"3159_CR5","unstructured":"Goodfellow I J, Shlens J, Szegedy C (2014) Explaining and harnessing adversarial examples. arXiv:1412.6572"},{"key":"3159_CR6","unstructured":"Das N, Shanbhogue M, Chen S-T, Hohman F, Chen L, Kounavis M E, Chau D H (2017) Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression. arXiv:1705.02900"},{"key":"3159_CR7","unstructured":"Armi L, Fekri-Ershad S (2019) Texture image analysis and texture classification methods-a review. arXiv:1904.06554"},{"key":"3159_CR8","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Wu X, Jha S, Swami A (2016) Distillation as a defense to adversarial perturbations against deep neural networks. In: 2016 IEEE symposium on security and privacy (SP). IEEE, pp 582\u2013597","DOI":"10.1109\/SP.2016.41"},{"issue":"9","key":"3159_CR9","doi-asserted-by":"publisher","first-page":"2805","DOI":"10.1109\/TNNLS.2018.2886017","volume":"30","author":"X Yuan","year":"2019","unstructured":"Yuan X, He P, Zhu Q, Li X (2019) Adversarial examples: Attacks and defenses for deep learning. IEEE Trans Neural Netw Learn Syst 30(9):2805\u20132824","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"key":"3159_CR10","unstructured":"Kurakin A, Goodfellow I, Bengio S, et al. (2016) Adversarial examples in the physical world"},{"key":"3159_CR11","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2017) Towards deep learning models resistant to adversarial attacks. 1706.06083"},{"key":"3159_CR12","doi-asserted-by":"crossref","unstructured":"Liu J, Zhang W, Zhang Y, Hou D, Liu Y, Zha H, Yu N (2019) Detection based defense against adversarial examples from the steganalysis point of view. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 4825\u20134834","DOI":"10.1109\/CVPR.2019.00496"},{"key":"3159_CR13","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S-M, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"3159_CR14","unstructured":"Dziugaite G K, Ghahramani Z, Roy D M (2016) A study of the effect of jpg compression on adversarial images. arXiv:1608.00853"},{"key":"3159_CR15","unstructured":"Guo C, Rana M, Cisse M, Van Der Maaten L (2017) Countering adversarial images using input transformations. arXiv:1711.00117"},{"key":"3159_CR16","unstructured":"Gong Z, Wang W, Ku W-S (2017) Adversarial and clean data are not twins. arXiv:1704.04960"},{"key":"3159_CR17","unstructured":"Grosse K, Manoharan P, Papernot N, Backes M, McDaniel P (2017) On the (statistical) detection of adversarial examples. arXiv:1702.06280"},{"key":"3159_CR18","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Adversarial examples are not easily detected: Bypassing ten detection methods. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp 3\u201314","DOI":"10.1145\/3128572.3140444"},{"key":"3159_CR19","unstructured":"Carlini N, Wagner D (2017) Magnet and\u201d efficient defenses against adversarial attacks\u201d are not robust to adversarial examples. arXiv:1711.08478"},{"key":"3159_CR20","doi-asserted-by":"crossref","unstructured":"Meng D, Chen H (2017) Magnet: a two-pronged defense against adversarial examples. In: Proceedings of the 2017 ACM SIGSAC conference on computer and communications security, pp 135\u2013147","DOI":"10.1145\/3133956.3134057"},{"key":"3159_CR21","unstructured":"Samangouei P, Kabkab M, Chellappa R (2018) Defense-gan: Protecting classifiers against adversarial attacks using generative models. arXiv:1805.06605"},{"key":"3159_CR22","unstructured":"Arjovsky M, Chintala S, Bottou L (2017) Wasserstein generative adversarial networks. In: International conference on machine learning. PMLR, pp 214\u2013223"},{"key":"3159_CR23","unstructured":"Goodfellow I (2016) Nips 2016 tutorial: Generative adversarial networks. arXiv:1701.00160"},{"key":"3159_CR24","unstructured":"Sun K, Zhu Z, Lin Z (2019) Enhancing the robustness of deep neural networks by boundary conditional gan. arXiv:1902.11029"},{"key":"3159_CR25","unstructured":"Gonzalez R C, Woods R E, et al. (2002) Digital image processing. Prentice Hall, Upper Saddle River"},{"issue":"1","key":"3159_CR26","first-page":"213","volume":"8","author":"SK Mohideen","year":"2008","unstructured":"Mohideen S K, Perumal S A, Sathik M M (2008) Image de-noising using discrete wavelet transform. Int J Comput Sci Netw Secur 8(1):213\u2013216","journal-title":"Int J Comput Sci Netw Secur"},{"issue":"3","key":"3159_CR27","doi-asserted-by":"publisher","first-page":"613","DOI":"10.1109\/18.382009","volume":"41","author":"DL Donoho","year":"1995","unstructured":"Donoho D L (1995) De-noising by soft-thresholding. IEEE Trans Inf Theory 41(3):613\u2013627","journal-title":"IEEE Trans Inf Theory"},{"issue":"3","key":"3159_CR28","doi-asserted-by":"publisher","first-page":"425","DOI":"10.1093\/biomet\/81.3.425","volume":"81","author":"DL Donoho","year":"1994","unstructured":"Donoho D L, Johnstone J M (1994) Ideal spatial adaptation by wavelet shrinkage. Biometrika 81(3):425\u2013455","journal-title":"Biometrika"},{"key":"3159_CR29","unstructured":"LeCun Y (1998) The mnist database of handwritten digits. http:\/\/yannlecuncom\/exdb\/mnist\/"},{"key":"3159_CR30","unstructured":"Krizhevsky A, Hinton G, et al. (2009) Learning multiple layers of features from tiny images. Master\u2019s thesis, Department of Computer Science, University of Toronto"},{"key":"3159_CR31","unstructured":"Papernot N, Goodfellow I, Sheatsley R, Feinman R, McDaniel P (2016) cleverhans v2. 0.0: an adversarial machine learning library. arXiv:1610.0076810"},{"key":"3159_CR32","unstructured":"Ford N, Gilmer J, Carlini N, Cubuk D (2019) Adversarial examples are a natural consequence of test error in noise. arXiv:1901.10513"},{"key":"3159_CR33","unstructured":"Shaham U, Garritano J, Yamada Y, Weinberger E, Cloninger A, Cheng X, Stanton K, Kluger Y (2018) Defending against adversarial images using basis functions transformations. arXiv:1803.10840"},{"key":"3159_CR34","doi-asserted-by":"crossref","unstructured":"Zheng Q, Qiu H, Zhang T, Memmi G, Qiu M, Lu J (2020) Resisting adversarial examples via wavelet extension and denoising.. In: SmartCom, pp 204\u2013214","DOI":"10.1007\/978-3-030-74717-6_22"},{"key":"3159_CR35","doi-asserted-by":"crossref","unstructured":"Prakash A, Moran N, Garber S, DiLillo A, Storer J (2018) Deflecting adversarial attacks with pixel deflection. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 8571\u20138580","DOI":"10.1109\/CVPR.2018.00894"},{"key":"3159_CR36","doi-asserted-by":"crossref","unstructured":"Xie C, Zhang Z, Zhou Y, Bai S, Wang J, Ren Z, Yuille A (2019) Improving transferability of adversarial examples with input diversity. In: Computer Vision and Pattern Recognition. IEEE","DOI":"10.1109\/CVPR.2019.00284"},{"key":"3159_CR37","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T, Hu X, Zhu J (2017) Discovering adversarial examples with momentum. CoRR arXiv:1710.06081","DOI":"10.1109\/CVPR.2018.00957"},{"key":"3159_CR38","doi-asserted-by":"crossref","unstructured":"Bai T, Zhao J, Zhu J, Han S, Chen J, Li B, Kot A (2021) Ai-gan: Attack-inspired generation of adversarial examples. In: 2021 IEEE International Conference on Image Processing (ICIP). IEEE, pp 2543\u20132547","DOI":"10.1109\/ICIP42928.2021.9506278"},{"key":"3159_CR39","doi-asserted-by":"crossref","unstructured":"Stallkamp J, Schlipsing M, Salmen J, Igel C (2011) The German Traffic Sign Recognition Benchmark: A multi-class classification competition. In: IEEE International Joint Conference on Neural Networks, pp 1453\u20131460","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"3159_CR40","unstructured":"Alessio C (2019) \u201canimals-10 dataset\u201d. https:\/\/www.kaggle.com\/alessiocorrado99\/animals10"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03159-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10489-022-03159-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03159-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,3]],"date-time":"2023-01-03T04:38:54Z","timestamp":1672720734000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10489-022-03159-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,18]]},"references-count":40,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1]]}},"alternative-id":["3159"],"URL":"https:\/\/doi.org\/10.1007\/s10489-022-03159-2","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,4,18]]},"assertion":[{"value":"29 December 2021","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 April 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no conflicts of interest to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"<!--Emphasis Type='Bold' removed-->Conflict of Interest"}}]}}