{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T15:35:20Z","timestamp":1771515320411,"version":"3.50.1"},"reference-count":50,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"the Major Research Plan of the National Natural Science Foundation of China","award":["92167203"],"award-info":[{"award-number":["92167203"]}]},{"DOI":"10.13039\/501100011440","name":"Zhejiang Provincial Key Laboratory of Wood Science and Technology","doi-asserted-by":"publisher","award":["LZ22F020007"],"award-info":[{"award-number":["LZ22F020007"]}],"id":[{"id":"10.13039\/501100011440","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2024,1]]},"DOI":"10.1007\/s10489-023-05253-5","type":"journal-article","created":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T10:02:19Z","timestamp":1705140139000},"page":"1672-1690","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Adversarial perturbation denoising utilizing common characteristics in deep feature space"],"prefix":"10.1007","volume":"54","author":[{"given":"Jianchang","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yinyao","family":"Dai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fang","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhaoquan","family":"Gu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Boyang","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4056-9755","authenticated-orcid":false,"given":"Yaguan","family":"Qian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,1,13]]},"reference":[{"issue":"2","key":"5253_CR1","doi-asserted-by":"publisher","first-page":"854","DOI":"10.1007\/s10489-020-01829-7","volume":"51","author":"A Abbas","year":"2021","unstructured":"Abbas A, Abdelsamea MM, Gaber MM (2021) Classification of COVID-19 in chest x-ray images using detrac deep convolutional neural network. Appl Intell 51(2):854\u2013864","journal-title":"Appl Intell"},{"key":"5253_CR2","unstructured":"Szegedy C, Zaremba W, Sutskever I, et\u00a0al (2014) Intriguing properties of neural networks. In: Proc Int Conf Learn Represent (ICLR)"},{"issue":"8","key":"5253_CR3","doi-asserted-by":"publisher","first-page":"5809","DOI":"10.1007\/s10489-020-02155-8","volume":"51","author":"AB Tamou","year":"2021","unstructured":"Tamou AB, Benzinou A, Nasreddine K (2021) Multi-stream fish detection in unconstrained underwater videos by the fusion of two convolutional neural network detectors. Appl Intell 51(8):5809\u20135821","journal-title":"Appl Intell"},{"issue":"7","key":"5253_CR4","doi-asserted-by":"publisher","first-page":"4305","DOI":"10.1007\/s10489-020-02156-7","volume":"51","author":"M Liu","year":"2021","unstructured":"Liu M, Zhang Y, Xu J et al (2021) Deep bi-directional interaction network for sentence matching. Appl Intell 51(7):4305\u20134329","journal-title":"Appl Intell"},{"key":"5253_CR5","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR6","doi-asserted-by":"publisher","first-page":"58443","DOI":"10.1109\/ACCESS.2020.2983149","volume":"8","author":"E Yurtsever","year":"2020","unstructured":"Yurtsever E, Lambert J, Carballo A et al (2020) A survey of autonomous driving: common practices and emerging technologies. IEEE Access 8:58443\u201358469","journal-title":"IEEE Access"},{"key":"5253_CR7","doi-asserted-by":"crossref","unstructured":"Pham Q, Sevestre P, Pahwa RS, et\u00a0al (2020) A*3d dataset: Towards autonomous driving in challenging environments. In: 2020 IEEE international conference on robotics and automation, ICRA 2020, Paris, France, May 31 - August 31, 2020. IEEE, pp\u00a02267\u20132273","DOI":"10.1109\/ICRA40945.2020.9197385"},{"issue":"5","key":"5253_CR8","doi-asserted-by":"publisher","first-page":"5497","DOI":"10.1007\/s10489-021-02728-1","volume":"52","author":"NV Hoai","year":"2022","unstructured":"Hoai NV, Nguyen HM, Pham C (2022) Masked face recognition with convolutional neural networks and local binary patterns. Appl Intell 52(5):5497\u20135512","journal-title":"Appl Intell"},{"key":"5253_CR9","doi-asserted-by":"crossref","unstructured":"Xu K, Zhang G, Liu S, et\u00a0al (2020) Adversarial t-shirt! evading person detectors in a physical world. In: Proceeding European Conference Computer Vision (ECCV), Lecture Notes in Computer Science, vol 12350. Springer, pp 665\u2013681","DOI":"10.1007\/978-3-030-58558-7_39"},{"issue":"4","key":"5253_CR10","doi-asserted-by":"publisher","first-page":"4364","DOI":"10.1007\/s10489-021-02523-y","volume":"52","author":"J Ho","year":"2022","unstructured":"Ho J, Lee B, Kang D (2022) Attack-less adversarial training for a robust adversarial defense. Appl Intell 52(4):4364\u20134381","journal-title":"Appl Intell"},{"key":"5253_CR11","unstructured":"Tram\u00e8r F, Kurakin A, Papernot N, et\u00a0al (2018) Ensemble adversarial training: attacks and defenses. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR12","doi-asserted-by":"publisher","first-page":"4417","DOI":"10.1109\/TIP.2022.3184255","volume":"31","author":"X Jia","year":"2022","unstructured":"Jia X, Zhang Y, Wu B et al (2022) Boosting fast adversarial training with learnable adversarial initialization. IEEE Trans Image Process 31:4417\u20134430","journal-title":"IEEE Trans Image Process"},{"key":"5253_CR13","unstructured":"Madry A, Makelov A, Schmidt L, et\u00a0al (2018) Towards deep learning models resistant to adversarial attacks. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR14","unstructured":"Gu S, Rigazio L (2015) Towards deep neural network architectures robust to adversarial examples. In: Proc Int Conf Learn Represent (ICLR)"},{"issue":"6","key":"5253_CR15","doi-asserted-by":"publisher","first-page":"6262","DOI":"10.1007\/s10489-021-02759-8","volume":"52","author":"S Wang","year":"2022","unstructured":"Wang S, Gong Y (2022) Adversarial example detection based on saliency map features. Appl Intell 52(6):6262\u20136275","journal-title":"Appl Intell"},{"issue":"1","key":"5253_CR16","doi-asserted-by":"publisher","first-page":"423","DOI":"10.1007\/s10489-022-03159-2","volume":"53","author":"A Sarvar","year":"2023","unstructured":"Sarvar A, Amirmazlaghani M (2023) Defense against adversarial examples based on wavelet domain analysis. Appl Intell 53(1):423\u2013439","journal-title":"Appl Intell"},{"key":"5253_CR17","unstructured":"Guo C, Rana M, Ciss\u00e9 M, et\u00a0al (2018) Countering adversarial images using input transformations. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR18","doi-asserted-by":"crossref","unstructured":"Liao F, Liang M, Dong Y, et\u00a0al (2018) Defense against adversarial attacks using high-level representation guided denoiser. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE Computer Society, pp 1778\u20131787","DOI":"10.1109\/CVPR.2018.00191"},{"key":"5253_CR19","doi-asserted-by":"crossref","unstructured":"Xu W, Evans D, Qi Y (2018) Feature squeezing: Detecting adversarial examples in deep neural networks. In: 25th annual network and distributed system security symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018. The Internet Society","DOI":"10.14722\/ndss.2018.23198"},{"key":"5253_CR20","first-page":"14","volume-title":"11th USENIX Workshop on Offensive Technologies, WOOT 2017","author":"W He","year":"2017","unstructured":"He W, Wei J, Chen X et al (2017) (2017) Adversarial example defense: ensembles of weak defenses are not strong. In: Enck W, Mulliner C (eds) 11th USENIX Workshop on Offensive Technologies, WOOT 2017. BC, Canada, August, Vancouver, pp 14\u201315"},{"key":"5253_CR21","unstructured":"Samangouei P, Kabkab M, Chellappa R (2018) Defense-gan: Protecting classifiers against adversarial attacks using generative models. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR22","doi-asserted-by":"crossref","unstructured":"Jin G, Shen S, Zhang D, et\u00a0al (2019) APE-GAN: adversarial perturbation elimination with GAN. In: IEEE international conference on acoustics, speech and signal processing, ICASSP 2019, Brighton, United Kingdom, May 12-17, 2019. IEEE, pp 3842\u20133846","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"5253_CR23","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T, et\u00a0al (2018) Boosting adversarial attacks with momentum. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE Computer Society, pp 9185\u20139193","DOI":"10.1109\/CVPR.2018.00957"},{"key":"5253_CR24","doi-asserted-by":"crossref","unstructured":"Meng D, Chen H (2017) Magnet: A two-pronged defense against adversarial examples. In: Thuraisingham B, Evans D, Malkin T, et\u00a0al (eds) Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017. ACM, pp\u00a0135\u2013147","DOI":"10.1145\/3133956.3134057"},{"key":"5253_CR25","unstructured":"Carlini N, Wagner DA (2017) Magnet and \u201cefficient defenses against adversarial attacks\u201d are not robust to adversarial examples. arXiv:1711.08478"},{"key":"5253_CR26","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T, et\u00a0al (2018) Boosting adversarial attacks with momentum. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE Computer Society, pp 9185\u20139193","DOI":"10.1109\/CVPR.2018.00957"},{"key":"5253_CR27","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). IEEE Computer Society, pp 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"5253_CR28","doi-asserted-by":"crossref","unstructured":"Rony J, Hafemann LG, Oliveira LS, et\u00a0al (2019) Decoupling direction and norm for efficient gradient-based L2 adversarial attacks and defenses. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE, pp 4322\u20134330","DOI":"10.1109\/CVPR.2019.00445"},{"key":"5253_CR29","unstructured":"Croce F, Hein M (2020) Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: Proc Int Conf Mach Learn (ICML), Proceedings of Machine Learning Research, vol 119. PMLR, pp 2206\u20132216"},{"key":"5253_CR30","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner DA (2017) Towards evaluating the robustness of neural networks. In: 2017 IEEE symposium on security and privacy, SP 2017, San Jose, CA, USA, May 22-26, 2017. IEEE Computer Society, pp 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"5253_CR31","doi-asserted-by":"crossref","unstructured":"Dong Y, Pang T, Su H, et\u00a0al (2019) Evading defenses to transferable adversarial examples by translation-invariant attacks. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE, pp 4312\u20134321","DOI":"10.1109\/CVPR.2019.00444"},{"key":"5253_CR32","doi-asserted-by":"crossref","unstructured":"Xie C, Zhang Z, Zhou Y, et\u00a0al (2019) Improving transferability of adversarial examples with input diversity. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE, pp 2730\u20132739","DOI":"10.1109\/CVPR.2019.00284"},{"key":"5253_CR33","unstructured":"Wu K, Wang AH, Yu Y (2020) Stronger and faster wasserstein adversarial attacks. In: Proc Int Conf Mach Learn (ICML), Proceedings of Machine Learning Research, vol 119. PMLR, pp 10377\u201310387"},{"key":"5253_CR34","unstructured":"Xiao C, Zhu J, Li B, et\u00a0al (2018) Spatially transformed adversarial examples. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR35","unstructured":"Tram\u00e8r F, Kurakin A, Papernot N, et\u00a0al (2018) Ensemble adversarial training: Attacks and defenses. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR36","unstructured":"Yan Z, Guo Y, Zhang C (2018) Deep defense: Training dnns with improved adversarial robustness. In: Bengio S, Wallach HM, Larochelle H, et\u00a0al (eds) Proc Adv Neural Inf Process Syst (NeurIPS), pp 417\u2013426"},{"key":"5253_CR37","unstructured":"Xie C, Wang J, Zhang Z, et\u00a0al (2018) Mitigating adversarial effects through randomization. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR38","doi-asserted-by":"crossref","unstructured":"Jia X, Wei X, Cao X, et\u00a0al (2019) Comdefend: An efficient image compression model to defend adversarial examples. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE, pp 6084\u20136092","DOI":"10.1109\/CVPR.2019.00624"},{"key":"5253_CR39","doi-asserted-by":"crossref","unstructured":"Xie C, Wu Y, van\u00a0der Maaten L, et\u00a0al (2019) Feature denoising for improving adversarial robustness. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). Computer Vision Foundation \/ IEEE, pp 501\u2013509","DOI":"10.1109\/CVPR.2019.00059"},{"key":"5253_CR40","doi-asserted-by":"crossref","unstructured":"Zhou D, Wang N, Peng C, et\u00a0al (2021) Removing adversarial noise in class activation feature space. In: Proc IEEE\/CVF Int Conf Comput Vis (ICCV). IEEE, pp 7858\u20137867","DOI":"10.1109\/ICCV48922.2021.00778"},{"key":"5253_CR41","unstructured":"Zhang H, Yu Y, Jiao J, et\u00a0al (2019) Theoretically principled trade-off between robustness and accuracy. In: Proc Int Conf Mach Learn (ICML), Proceedings of Machine Learning Research, vol\u00a097. PMLR, pp 7472\u20137482"},{"key":"5253_CR42","unstructured":"Netzer Y, Wang T, Coates A, et\u00a0al (2011) Reading digits in natural images with unsupervised feature learning. nips workshop on deep learning & unsupervised feature learning"},{"key":"5253_CR43","doi-asserted-by":"crossref","unstructured":"Deng J, Dong W, Socher R, et\u00a0al (2009) Imagenet: a large-scale hierarchical image database. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR). IEEE Computer Society, pp 248\u2013255","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"5253_CR44","unstructured":"Lin J, Song C, He K, et\u00a0al (2020) Nesterov accelerated gradient and scale invariance for adversarial attacks. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR45","doi-asserted-by":"crossref","unstructured":"Wang X, He K (2021) Enhancing the transferability of adversarial attacks through variance tuning. In: Proc IEEE Conf Comput Vis Pattern Recognit (CVPR), pp 1924\u20131933","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"5253_CR46","unstructured":"Wu T, Tong L, Vorobeychik Y (2020) Defending against physically realizable attacks on image classification. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR47","unstructured":"Simonyan K, Zisserman A (2015) Very deep convolutional networks for large-scale image recognition. In: Proc Int Conf Learn Represent (ICLR)"},{"key":"5253_CR48","unstructured":"Kim H (2020) Torchattacks : a pytorch repository for adversarial attacks. arXiv:2010.01950"},{"key":"5253_CR49","unstructured":"Ding GW, Wang L, Jin X (2019) advertorch v0.1: an adversarial robustness toolbox based on pytorch. arXiv:1902.07623"},{"key":"5253_CR50","unstructured":"Athalye A, Carlini N, Wagner DA (2018) Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples. In: Dy JG, Krause A (eds) Proc Int Conf Mach Learn (ICML), pp 274\u2013283"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-023-05253-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10489-023-05253-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-023-05253-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,16]],"date-time":"2024-02-16T12:25:32Z","timestamp":1708086332000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10489-023-05253-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1]]},"references-count":50,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,1]]}},"alternative-id":["5253"],"URL":"https:\/\/doi.org\/10.1007\/s10489-023-05253-5","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,1]]},"assertion":[{"value":"23 December 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 January 2024","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration"}},{"value":"The authors declare that there are no conflicts of interest regarding the publication of this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}},{"value":"The data used in this paper do not involve ethical issues.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics Approval"}}]}}