{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:18:24Z","timestamp":1783437504507,"version":"3.54.6"},"reference-count":82,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,4,19]],"date-time":"2022-04-19T00:00:00Z","timestamp":1650326400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,4,19]],"date-time":"2022-04-19T00:00:00Z","timestamp":1650326400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1007\/s10489-022-03373-y","type":"journal-article","created":{"date-parts":[[2022,4,19]],"date-time":"2022-04-19T01:02:33Z","timestamp":1650330153000},"page":"509-531","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":31,"title":["Revisiting model\u2019s uncertainty and confidences for adversarial example detection"],"prefix":"10.1007","volume":"53","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7624-5253","authenticated-orcid":false,"given":"Ahmed","family":"Aldahdooh","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wassim","family":"Hamidouche","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Olivier","family":"D\u00e9forges","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,4,19]]},"reference":[{"key":"3373_CR1","unstructured":"Krizhevsky A, Sutskever I, Hinton G E (2012) Imagenet classification with deep convolutional neural networks. In: Advances in neural information processing systems, pp 1097\u20131105"},{"key":"3373_CR2","unstructured":"Simonyan K, Zisserman A (2015) Very deep convolutional networks for large-scale image recognition. In: Bengio Y, LeCun Y (eds) 3rd International Conference on Learning Representations, ICLR 2015, Conference Track Proceedings, San Diego"},{"key":"3373_CR3","unstructured":"Ren S, He K, Girshick R, Sun J (2015) Faster r-cnn: Towards real-time object detection with region proposal networks. In: Advances in neural information processing systems, pp 91\u201399"},{"issue":"7553","key":"3373_CR4","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","volume":"521","author":"Y LeCun","year":"2015","unstructured":"LeCun Y, Bengio Y, Hinton G (2015) Deep learning. Nature 521(7553):436\u2013444","journal-title":"Nature"},{"key":"3373_CR5","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1146\/annurev-bioeng-071516-044442","volume":"19","author":"D Shen","year":"2017","unstructured":"Shen D, Wu G, Suk H-I (2017) Deep learning in medical image analysis. Ann Rev Biomed Eng 19:221\u2013248","journal-title":"Ann Rev Biomed Eng"},{"key":"3373_CR6","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I J, Fergus R (2014) Intriguing properties of neural networks. In: Bengio Y, LeCun Y (eds) 2nd International Conference on Learning Representations, ICLR 2014, Conference Track Proceedings, Banff"},{"key":"3373_CR7","unstructured":"Goodfellow I J, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In: Bengio Y, LeCun Y (eds) 3rd International Conference on Learning Representations, ICLR 2015, Conference Track Proceedings, San Diego"},{"key":"3373_CR8","doi-asserted-by":"crossref","unstructured":"Guo W, Mu D, Xu J, Su P, Wang G, Xing X (2018) Lemna: Explaining deep learning based security applications. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, pp 364\u2013379","DOI":"10.1145\/3243734.3243792"},{"key":"3373_CR9","doi-asserted-by":"publisher","first-page":"14410","DOI":"10.1109\/ACCESS.2018.2807385","volume":"6","author":"N Akhtar","year":"2018","unstructured":"Akhtar N, Mian A (2018) Threat of adversarial attacks on deep learning in computer vision: A survey. IEEE Access 6:14410\u201314430","journal-title":"IEEE Access"},{"issue":"2","key":"3373_CR10","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s11633-019-1211-x","volume":"17","author":"HXYM Hao-Chen","year":"2020","unstructured":"Hao-Chen H X Y M, Deb L D, Anil H L J-L T, Jain K (2020) Adversarial attacks and defenses in images, graphs and text: A review. Int J Autom Comput 17(2):151\u2013178","journal-title":"Int J Autom Comput"},{"key":"3373_CR11","doi-asserted-by":"crossref","unstructured":"Kurakin A, Goodfellow I, Bengio S (2017) Adversarial examples in the physical world. ICLR Workshop","DOI":"10.1201\/9781351251389-8"},{"key":"3373_CR12","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S-M, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"3373_CR13","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: 2017 ieee symposium on security and privacy (sp). IEEE, pp 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"3373_CR14","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2018) Towards deep learning models resistant to adversarial attacks. In: 6th International Conference on Learning Representations, ICLR 2018, Conference Track Proceedings. OpenReview.net, Vancouver"},{"key":"3373_CR15","unstructured":"Papernot N, McDaniel P D, Goodfellow I J (2016) Transferability in machine learning: from phenomena to black-box attacks using adversarial samples. CoRR arXiv:1605.07277"},{"key":"3373_CR16","doi-asserted-by":"crossref","unstructured":"Chen P-Y, Zhang H, Sharma Y, Yi J, Hsieh C-J (2017) Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp 15\u201326","DOI":"10.1145\/3128572.3140448"},{"key":"3373_CR17","unstructured":"Engstrom L, Tran B, Tsipras D, Schmidt L, Madry A (2019) Exploring the landscape of spatial robustness. In: International Conference on Machine Learning, pp 1802\u20131811"},{"issue":"5","key":"3373_CR18","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su J, Vargas D V, Sakurai K (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evol Comput 23(5):828\u2013841","journal-title":"IEEE Trans Evol Comput"},{"key":"3373_CR19","unstructured":"Kotyan S, Vasconcellos Vargas D (2019) Adversarial robustness assessment: Why both l0 and $l_{\\infty }$ attacks are necessary, pp arXiv\u20131906"},{"key":"3373_CR20","unstructured":"Gal Y, Ghahramani Z (2016) Dropout as a bayesian approximation: Representing model uncertainty in deep learning. In: International Conference on Machine Learning. PMLR, pp 1050\u20131059"},{"issue":"1","key":"3373_CR21","first-page":"1929","volume":"15","author":"N Srivastava","year":"2014","unstructured":"Srivastava N, Hinton G, Krizhevsky A, Sutskever I, Salakhutdinov R (2014) Dropout: a simple way to prevent neural networks from overfitting. J Mach Learn Res 15(1):1929\u20131958","journal-title":"J Mach Learn Res"},{"key":"3373_CR22","unstructured":"Feinman R, Curtin R R, Shintre S, Gardner A B (2017) Detecting adversarial samples from artifacts. CoRR arXiv:1703.00410"},{"key":"3373_CR23","unstructured":"Smith L, Gal Y (2018) Understanding measures of uncertainty for adversarial example detection. In: Globerson A, Silva R (eds) Proceedings of the Thirty-Fourth Conference on Uncertainty in Artificial Intelligence, UAI 2018. AUAI Press, Monterey, pp 560\u2013569"},{"key":"3373_CR24","doi-asserted-by":"crossref","unstructured":"Sheikholeslami F, Jain S, Giannakis G B (2020) Minimum uncertainty based detection of adversaries in deep neural networks. In: Information Theory and Applications Workshop, ITA 2020. IEEE, San Diego, pp 1\u201316","DOI":"10.1109\/ITA50056.2020.9244964"},{"key":"3373_CR25","unstructured":"Geifman Y, El-Yaniv R (2019) Selectivenet: A deep neural network with an integrated reject option. CoRR arXiv:1901.09192"},{"key":"3373_CR26","unstructured":"Hendrycks D, Gimpel K (2017) A baseline for detecting misclassified and out-of-distribution examples in neural networks. In: 5th International Conference on Learning Representations, ICLR 2017, Toulon, France, April 24-26, 2017, Conference Track Proceedings. OpenReview.net"},{"key":"3373_CR27","unstructured":"Aigrain J, Detyniecki M (2019) Detecting adversarial examples and other misclassifications in neural networks by introspection. CoRR arXiv:1905.09186"},{"key":"3373_CR28","doi-asserted-by":"crossref","unstructured":"Monteiro J, Albuquerque I, Akhtar Z, Falk T H (2019) Generalizable adversarial examples detection based on bi-model decision mismatch. In: 2019 IEEE International Conference on Systems, Man and Cybernetics (SMC). IEEE, pp 2839\u20132844","DOI":"10.1109\/SMC.2019.8913861"},{"key":"3373_CR29","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s13635-020-0101-7","volume":"2020","author":"A Sotgiu","year":"2020","unstructured":"Sotgiu A, Demontis A, Melis M, Biggio B, Fumera G, Feng X, Roli F (2020) Deep neural rejection against adversarial examples. EURASIP J Inf Secur 2020:1\u201310","journal-title":"EURASIP J Inf Secur"},{"key":"3373_CR30","doi-asserted-by":"crossref","unstructured":"Xu W, Evans D, Qi Y (2018) Feature squeezing: Detecting adversarial examples in deep neural networks. In: 25th Annual Network and Distributed System Security Symposium, NDSS 2018. The Internet Society, San Diego","DOI":"10.14722\/ndss.2018.23198"},{"key":"3373_CR31","unstructured":"Athalye A, Carlini N, Wagner D A (2018) Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. In: Dy JG, Krause A (eds) Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\u00e4ssan. Proceedings of Machine Learning Research, vol 80. PMLR, Stockholm, pp 274\u2013283"},{"key":"3373_CR32","unstructured":"Carlini N, Wagner D A (2017) Magnet and \u201cefficient defenses against adversarial attacks\u201d are not robust to adversarial examples. CoRR arXiv:1711.08478"},{"key":"3373_CR33","doi-asserted-by":"publisher","first-page":"132330","DOI":"10.1109\/ACCESS.2020.3010274","volume":"8","author":"S Bulusu","year":"2020","unstructured":"Bulusu S, Kailkhura B, Li B, Varshney P K, Song D (2020) Anomalous example detection in deep learning: A survey. IEEE Access 8:132330\u2013132347","journal-title":"IEEE Access"},{"key":"3373_CR34","unstructured":"Lust J, Condurache A P (2020) Gran: An efficient gradient-norm based detector for adversarial and misclassified examples. In: 28th European Symposium on Artificial Neural Networks, Computational Intelligence and Machine Learning, ESANN 2020, Bruges, pp 7\u201312"},{"key":"3373_CR35","doi-asserted-by":"crossref","unstructured":"Ma S, Liu Y (2019) Nic: Detecting adversarial samples with neural network invariant checking. In: Proceedings of the 26th Network and Distributed System Security Symposium (NDSS 2019)","DOI":"10.14722\/ndss.2019.23415"},{"key":"3373_CR36","unstructured":"Gao Y, Doan B G, Zhang Z, Ma S, Zhang J, Fu A, Nepal S, Kim H (2020) Backdoor attacks and countermeasures on deep learning: A comprehensive review. CoRR aRxiv:https:\/\/arxiv.org\/abs\/2007.10760"},{"key":"3373_CR37","doi-asserted-by":"crossref","unstructured":"Melis M, Demontis A, Biggio B, Brown G, Fumera G, Roli F (2017) Is deep learning safe for robot vision? adversarial examples against the icub humanoid. In: Proceedings of the IEEE International Conference on Computer Vision Workshops, pp 751\u2013759","DOI":"10.1109\/ICCVW.2017.94"},{"key":"3373_CR38","doi-asserted-by":"crossref","unstructured":"Lu J, Issaranon T, Forsyth D (2017) Safetynet: Detecting and rejecting adversarial examples robustly. In: Proceedings of the IEEE International Conference on Computer Vision, pp 446\u2013454","DOI":"10.1109\/ICCV.2017.56"},{"key":"3373_CR39","doi-asserted-by":"crossref","unstructured":"Wang F, Jiang M, Qian C, Yang S, Li C, Zhang H, Wang X, Tang X (2017) Residual attention network for image classification. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 3156\u20133164","DOI":"10.1109\/CVPR.2017.683"},{"key":"3373_CR40","doi-asserted-by":"crossref","unstructured":"Liu S, Johns E, Davison A J (2019) End-to-end multi-task learning with attention. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 1871\u20131880","DOI":"10.1109\/CVPR.2019.00197"},{"key":"3373_CR41","doi-asserted-by":"crossref","unstructured":"Lecuyer M, Atlidakis V, Geambasu R, Hsu D, Jana S (2019) Certified robustness to adversarial examples with differential privacy. In: 2019 IEEE Symposium on Security and Privacy (SP). IEEE, pp 656\u2013672","DOI":"10.1109\/SP.2019.00044"},{"key":"3373_CR42","doi-asserted-by":"crossref","unstructured":"Liu X, Cheng M, Zhang H, Hsieh C-J (2018) Towards robust neural networks via random self-ensemble. In: Proceedings of the European Conference on Computer Vision (ECCV), pp 369\u2013 385","DOI":"10.1007\/978-3-030-01234-2_23"},{"key":"3373_CR43","doi-asserted-by":"crossref","unstructured":"Liu X, Xiao T, Si S, Cao Q, Kumar S, Hsieh C-J (2020) How does noise help robustness? explanation and exploration under the neural sde framework. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 282\u2013290","DOI":"10.1109\/CVPR42600.2020.00036"},{"key":"3373_CR44","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Deep residual learning for image recognition. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"issue":"11","key":"3373_CR45","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324","journal-title":"Proc IEEE"},{"key":"3373_CR46","unstructured":"Krizhevsky A, Hinton G (2009) Learning multiple layers of features from tiny images. Master\u2019s thesis, Department of Computer Science, University of Toronto"},{"key":"3373_CR47","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Adversarial examples are not easily detected: Bypassing ten detection methods. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp 3\u201314","DOI":"10.1145\/3128572.3140444"},{"key":"3373_CR48","unstructured":"Ma X, Li B, Wang Y, Erfani S M, Wijewickrema S N R, Schoenebeck G, Song D, Houle M E, Bailey J (2018) Characterizing adversarial subspaces using local intrinsic dimensionality. In: 6th International Conference on Learning Representations, ICLR 2018, Conference Track Proceedings. OpenReview.net, Vancouver"},{"key":"3373_CR49","unstructured":"Xie C, Tan M, Gong B, Yuille A L, Le Q V (2020) Smooth adversarial training. CoRR arXiv:https:\/\/arxiv.org\/abs\/2006.14536"},{"key":"3373_CR50","unstructured":"Tram\u00e8r F, Kurakin A, Papernot N, Goodfellow I J, Boneh D, McDaniel P D (2018) Ensemble adversarial training: Attacks and defenses. In: 6th International Conference on Learning Representations, ICLR 2018, Conference Track Proceedings. OpenReview.net, Vancouver"},{"key":"3373_CR51","doi-asserted-by":"crossref","unstructured":"Xie C, Wu Y, van der Maaten L, Yuille A L, He K (2019) Feature denoising for improving adversarial robustness. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 501\u2013509","DOI":"10.1109\/CVPR.2019.00059"},{"key":"3373_CR52","doi-asserted-by":"crossref","unstructured":"Borkar T, Heide F, Karam L (2020) Defending against universal attacks through selective feature regeneration. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 709\u2013719","DOI":"10.1109\/CVPR42600.2020.00079"},{"key":"3373_CR53","doi-asserted-by":"crossref","unstructured":"Liao F, Liang M, Dong Y, Pang T, Hu X, Zhu J (2018) Defense against adversarial attacks using high-level representation guided denoiser. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp 1778\u20131787","DOI":"10.1109\/CVPR.2018.00191"},{"key":"3373_CR54","doi-asserted-by":"publisher","first-page":"1711","DOI":"10.1109\/TIP.2019.2940533","volume":"29","author":"A Mustafa","year":"2019","unstructured":"Mustafa A, Khan S H, Hayat M, Shen J, Shao L (2019) Image super-resolution as a defense against adversarial attacks. IEEE Trans Image Process 29:1711\u20131724","journal-title":"IEEE Trans Image Process"},{"key":"3373_CR55","doi-asserted-by":"crossref","unstructured":"Prakash A, Moran N, Garber S, DiLillo A, Storer J (2018) Deflecting adversarial attacks with pixel deflection. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 8571\u20138580","DOI":"10.1109\/CVPR.2018.00894"},{"key":"3373_CR56","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Wu X, Jha S, Swami A (2016) Distillation as a defense to adversarial perturbations against deep neural networks. In: 2016 IEEE Symposium on Security and Privacy (SP). IEEE, pp 582\u2013597","DOI":"10.1109\/SP.2016.41"},{"key":"3373_CR57","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Goodfellow I, Jha S, Celik Z B, Swami A (2017) Practical black-box attacks against machine learning. In: Proceedings of the 2017 ACM on Asia conference on computer and communications security, pp 506\u2013519","DOI":"10.1145\/3052973.3053009"},{"key":"3373_CR58","unstructured":"Gu S, Rigazio L (2015) Towards deep neural network architectures robust to adversarial examples. In: Bengio Y, LeCun Y (eds) 3rd International Conference on Learning Representations, ICLR 2015, Workshop Track Proceedings, San Diego"},{"key":"3373_CR59","unstructured":"Nayebi A, Ganguli S (2017) Biologically inspired protection of deep networks from adversarial attacks. CoRR arXiv:1703.09202"},{"key":"3373_CR60","doi-asserted-by":"crossref","unstructured":"Nguyen A, Yosinski J, Clune J (2015) Deep neural networks are easily fooled: High confidence predictions for unrecognizable images. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 427\u2013436","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"3373_CR61","unstructured":"Grosse K, Manoharan P, Papernot N, Backes M, McDaniel P D (2017) On the (statistical) detection of adversarial examples. CoRR arXiv:1702.06280"},{"key":"3373_CR62","unstructured":"Metzen J H, Genewein T, Fischer V, Bischoff B (2017) On detecting adversarial perturbations. In: 5th International Conference on Learning Representations, ICLR 2017, Conference Track Proceedings. OpenReview.net, Toulon"},{"key":"3373_CR63","doi-asserted-by":"crossref","unstructured":"Wang S, Gong Y (2021) Adversarial example detection based on saliency map features. Appl Intell:1\u201314","DOI":"10.1007\/s10489-021-02759-8"},{"key":"3373_CR64","unstructured":"Eniser H F, Christakis M, W\u00fcstholz V (2020) RAID: randomized adversarial-input detection for neural networks. CoRR arXiv:https:\/\/arxiv.org\/abs\/2002.02776"},{"key":"3373_CR65","doi-asserted-by":"crossref","unstructured":"Meng D, Chen H (2017) Magnet: a two-pronged defense against adversarial examples. In: Proceedings of the 2017 ACM SIGSAC conference on computer and communications security, pp 135\u2013147","DOI":"10.1145\/3133956.3134057"},{"issue":"1-2","key":"3373_CR66","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1016\/S0377-0427(00)00433-7","volume":"124","author":"FA Potra","year":"2000","unstructured":"Potra F A, Wright S J (2000) Interior-point methods. J Comput Appl Math 124(1-2):281\u2013302","journal-title":"J Comput Appl Math"},{"key":"3373_CR67","doi-asserted-by":"crossref","unstructured":"Bendale A, Boult T E (2016) Towards open set deep networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 1563\u20131572","DOI":"10.1109\/CVPR.2016.173"},{"key":"3373_CR68","unstructured":"Ruder S (2017) An overview of multi-task learning in deep neural networks. CoRR arXiv:1706.05098"},{"key":"3373_CR69","unstructured":"Vandenhende S, Georgoulis S, Proesmans M, Dai D, Gool L V (2020) Revisiting multi-task learning in the deep learning era. CoRR arXiv:https:\/\/arxiv.org\/abs\/2004.13379"},{"key":"3373_CR70","unstructured":"Kendall A, Gal Y, Cipolla R (2018) Multi-task learning using uncertainty to weigh losses for scene geometry and semantics. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 7482\u20137491"},{"key":"3373_CR71","unstructured":"Chen Z, Badrinarayanan V, Lee C-Y, Rabinovich A (2018) Gradnorm: Gradient normalization for adaptive loss balancing in deep multitask networks. In: Dy J G, Krause A (eds) Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Proceedings of Machine Learning Research, vol 80. PMLR, Stockholmsm\u00e4ssan, pp 793\u2013802"},{"key":"3373_CR72","doi-asserted-by":"crossref","unstructured":"Guo M, Haque A, Huang D-A, Yeung S, Fei-Fei L (2018) Dynamic task prioritization for multitask learning. In: Proceedings of the European Conference on Computer Vision (ECCV), pp 270\u2013287","DOI":"10.1007\/978-3-030-01270-0_17"},{"key":"3373_CR73","unstructured":"Sener O, Koltun V (2018) Multi-task learning as multi-objective optimization. In: Advances in Neural Information Processing Systems, pp 527\u2013538"},{"key":"3373_CR74","unstructured":"Zhang L, Tan Z, Song J, Chen J, Bao C, Ma K (2019) Scan: A scalable neural networks framework towards compact and efficient models. In: Advances in Neural Information Processing Systems, pp 4027\u20134036"},{"key":"3373_CR75","doi-asserted-by":"crossref","unstructured":"Zhang L, Yu M, Chen T, Shi Z, Bao C, Ma K (2020) Auxiliary training: Towards accurate and robust models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp 372\u2013381","DOI":"10.1109\/CVPR42600.2020.00045"},{"key":"3373_CR76","doi-asserted-by":"crossref","unstructured":"Zhang L, Song J, Gao A, Chen J, Bao C, Ma K (2019) Be your own teacher: Improve the performance of convolutional neural networks via self distillation. In: Proceedings of the IEEE International Conference on Computer Vision, pp 3713\u20133722","DOI":"10.1109\/ICCV.2019.00381"},{"key":"3373_CR77","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Maiorca D, Nelson B, \u0160rndi\u0107 N, Laskov P, Giacinto G, Roli F (2013) Evasion attacks against machine learning at test time. In: Joint European conference on machine learning and knowledge discovery in databases. Springer, pp 387\u2013402","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"3373_CR78","doi-asserted-by":"crossref","unstructured":"Andriushchenko M, Croce F, Flammarion N, Hein M (2020) Square attack: a query-efficient black-box adversarial attack via random search. In: European Conference on Computer Vision. Springer, pp 484\u2013501","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"3373_CR79","doi-asserted-by":"crossref","unstructured":"Chen J, Jordan M I, Wainwright M J (2020) Hopskipjumpattack: A query-efficient decision-based attack. In: 2020 ieee symposium on security and privacy (sp). IEEE, pp 1277\u20131294","DOI":"10.1109\/SP40000.2020.00045"},{"issue":"4","key":"3373_CR80","doi-asserted-by":"publisher","first-page":"341","DOI":"10.1023\/A:1008202821328","volume":"11","author":"R Storn","year":"1997","unstructured":"Storn R, Price K V (1997) Differential evolution - A simple and efficient heuristic for global optimization over continuous spaces. J Glob Optim 11(4):341\u2013359","journal-title":"J Glob Optim"},{"key":"3373_CR81","unstructured":"Pang T, Du C, Dong Y, Zhu J (2018) Towards robust detection of adversarial examples. In: Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, Montr\u00e9al, pp 4584\u20134594"},{"key":"3373_CR82","doi-asserted-by":"crossref","unstructured":"Aldahdooh A, Hamidouche W, Fezza S A, D\u00e9forges O (2022) Adversarial example detection for dnn models: A review and experimental comparison. Artif Intell Rev","DOI":"10.1007\/s10462-021-10125-w"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03373-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10489-022-03373-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03373-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,3]],"date-time":"2023-01-03T04:41:06Z","timestamp":1672720866000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10489-022-03373-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,19]]},"references-count":82,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1]]}},"alternative-id":["3373"],"URL":"https:\/\/doi.org\/10.1007\/s10489-022-03373-y","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,4,19]]},"assertion":[{"value":"9 February 2022","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 April 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}