{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T16:35:33Z","timestamp":1777566933417,"version":"3.51.4"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"16","license":[{"start":{"date-parts":[[2023,2,16]],"date-time":"2023-02-16T00:00:00Z","timestamp":1676505600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,2,16]],"date-time":"2023-02-16T00:00:00Z","timestamp":1676505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimed Tools Appl"],"published-print":{"date-parts":[[2023,7]]},"DOI":"10.1007\/s11042-023-14608-6","type":"journal-article","created":{"date-parts":[[2023,2,16]],"date-time":"2023-02-16T08:02:51Z","timestamp":1676534571000},"page":"25235-25251","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Adversarial example detection by predicting adversarial noise in the frequency domain"],"prefix":"10.1007","volume":"82","author":[{"given":"Seunghwan","family":"Jung","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7503-3307","authenticated-orcid":false,"given":"Minyoung","family":"Chung","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yeong-Gil","family":"Shin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,2,16]]},"reference":[{"key":"14608_CR1","doi-asserted-by":"publisher","first-page":"484","DOI":"10.1007\/978-3-030-58592-1_29","volume-title":"Computer vision \u2013 ECCV 2020","author":"M Andriushchenko","year":"2020","unstructured":"Andriushchenko M, Croce F, Flammarion N, Hein M (2020) Square attack: a query-efficient black-box adversarial attack via random search. In: Vedaldi A, Bischof H, Brox T, Frahm J-M (eds) Computer vision \u2013 ECCV 2020. Springer, Cham, pp 484\u2013501"},{"key":"14608_CR2","unstructured":"Athalye A, Carlini N, Wagner DA (2018) Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. In: ICML, pp. 274\u2013283. http:\/\/proceedings.mlr.press\/v80\/athalye18a. html"},{"key":"14608_CR3","unstructured":"Athalye A, Engstrom L, Ilyas A, Kwok K (2018) Synthesizing robust adversarial examples. In: international conference on machine learning. pp. 284\u2013293"},{"key":"14608_CR4","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Adversarial examples are not easily detected: Bypassing ten detection methods. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp. 3\u201314","DOI":"10.1145\/3128572.3140444"},{"key":"14608_CR5","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: 2017 Ieee symposium on security and privacy (sp), pp. 39\u201357. IEEE","DOI":"10.1109\/SP.2017.49"},{"key":"14608_CR6","doi-asserted-by":"publisher","unstructured":"Chen P-Y, Zhang H, Sharma Y, Yi J, Hsieh C-J (2017) Zoo. Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security. https:\/\/doi.org\/10.1145\/3128572.3140448","DOI":"10.1145\/3128572.3140448"},{"key":"14608_CR7","unstructured":"Cisse M, Bojanowski P, Grave E, Dauphin Y, Usunier N (2017) Parseval networks: improving robustness to adversarial examples. In: international conference on machine learning, pp. 854\u2013863. PMLR"},{"key":"14608_CR8","doi-asserted-by":"publisher","unstructured":"Collobert R, Weston J (2008) A unified architecture for natural language processing: Deep neural networks with multitask learning. In: Proceedings of the 25th International Conference on Machine Learning. ICML \u201808, pp. 160\u2013167. Association for Computing Machinery, New York, NY, USA. https:\/\/doi.org\/10.1145\/1390156.1390177","DOI":"10.1145\/1390156.1390177"},{"key":"14608_CR9","unstructured":"Croce F, Hein M (2020) Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: international conference on machine learning. pp. 2206\u20132216"},{"key":"14608_CR10","unstructured":"Croce F, Hein M (2020) Minimally distorted adversarial examples with a fast adaptive boundary attack. In: international conference on machine learning, pp. 2196\u20132205"},{"key":"14608_CR11","doi-asserted-by":"crossref","unstructured":"Dong Y, Fu Q-A, Yang X, Pang T, Su H, Xiao Z, Zhu J (2020) Benchmarking adversarial robustness on image classification. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 321\u2013331","DOI":"10.1109\/CVPR42600.2020.00040"},{"key":"14608_CR12","unstructured":"Dziugaite GK, Ghahramani Z, Roy DM (2016) A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853"},{"key":"14608_CR13","unstructured":"Gong Z, Wang W, Ku W (2017) Adversarial and clean data are not twins. CoRR abs\/1704.04960 https:\/\/arxiv.org\/abs\/1704.04960"},{"key":"14608_CR14","unstructured":"Goodfellow I, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples. CoRR abs\/1412.6572"},{"key":"14608_CR15","doi-asserted-by":"crossref","unstructured":"Gu T, Dolan JM, Lee J-W (2016) Human-like planning of swerve maneuvers for autonomous vehicles. In: 2016 IEEE intelligent vehicles symposium (IV), pp. 716\u2013721. IEEE","DOI":"10.1109\/IVS.2016.7535466"},{"key":"14608_CR16","unstructured":"Guo C, Rana M, Cisse M, Van Der Maaten L (2017) Countering adversarial images using input transformations. arXiv preprint arXiv:1711.00117"},{"key":"14608_CR17","doi-asserted-by":"crossref","unstructured":"Harder P, Pfreundt F-J, Keuper M, Keuper J (2021) Spectraldefense: Detecting adversarial attacks on cnns in the fourier domain. 2021 International Joint Conference on Neural Networks (IJCNN). 1\u20138","DOI":"10.1109\/IJCNN52387.2021.9533442"},{"key":"14608_CR18","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"14608_CR19","unstructured":"Hein M, Andriushchenko M (2017) Formal guarantees on the robustness of a classifier against adversarial manipulation. arXiv preprint arXiv:1705.08475"},{"key":"14608_CR20","unstructured":"Hendrycks D, Gimpel K (2016) Visible progress on adversarial images and a new saliency map. CoRR abs\/1608.00530 https:\/\/arxiv.org\/abs\/1608.00530"},{"issue":"8","key":"14608_CR21","doi-asserted-by":"publisher","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","volume":"9","author":"S Hochreiter","year":"1997","unstructured":"Hochreiter S, Schmidhuber J (1997) https:\/\/arxiv.org\/abs\/https:\/\/direct.mit.edu\/neco\/article-pdf\/9\/8\/1735\/813796\/neco.1997.9.8.1735.pdf) Long short-term memory. Neural Comput 9(8):1735\u20131780. https:\/\/doi.org\/10.1162\/neco.1997.9.8.1735","journal-title":"Neural Comput"},{"key":"14608_CR22","unstructured":"Kannan H, Kurakin A, Goodfellow IJ (2018) Adversarial logit pairing. CoRR abs\/1803.06373 https:\/\/arxiv.org\/abs\/1803.06373"},{"issue":"6","key":"14608_CR23","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1145\/3065386","volume":"60","author":"A Krizhevsky","year":"2017","unstructured":"Krizhevsky A, Sutskever I, Hinton GE (2017) Imagenet classification with deep convolutional neural networks. Commun ACM 60(6):84\u201390. https:\/\/doi.org\/10.1145\/3065386","journal-title":"Commun ACM"},{"key":"14608_CR24","unstructured":"Kurakin A, Goodfellow IJ, Bengio S (2016) Adversarial examples in the physical world. CoRR abs\/1607.02533 https:\/\/arxiv.org\/abs\/1607.02533"},{"key":"14608_CR25","unstructured":"Lee K, Lee K, Lee H, Shin J (2018) A simple unified framework for detecting out-of-distribution samples and adversarial attacks. In: Proceedings of the 32nd International Conference on Neural Information Processing Systems. NIPS\u201918, pp. 7167\u20137177. Curran Associates Inc., Red Hook, NY, USA"},{"key":"14608_CR26","doi-asserted-by":"crossref","unstructured":"Liao F, Liang M, Dong Y, Pang T, Hu X, Zhu J (2018) Defense against adversarial attacks using high-level representation guided denoiser. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. pp. 1778\u20131787","DOI":"10.1109\/CVPR.2018.00191"},{"key":"14608_CR27","unstructured":"Ma X, Li B, Wang Y, Erfani SM, Wijewickrema SNR, Houle ME, Schoenebeck G, Song D, Bailey J (2018) Characterizing adversarial subspaces using local intrinsic dimensionality. CoRR abs\/1801.02613 https:\/\/arxiv.org\/abs\/1801.02613"},{"key":"14608_CR28","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2018) Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=rJzIBfZAb"},{"key":"14608_CR29","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli S-M, Fawzi A, Frossard P (2016) Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. pp. 2574\u20132582","DOI":"10.1109\/CVPR.2016.282"},{"key":"14608_CR30","unstructured":"Pang T, Xu K, Zhu J (2019) Mixup inference: Better exploiting mixup to defend adversarial attacks. arXiv preprint arXiv:1909.11515"},{"key":"14608_CR31","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Goodfellow I, Jha S, Celik ZB, Swami A (2017) Practical black-box attacks against machine learning. In: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security. pp. 506\u2013519","DOI":"10.1145\/3052973.3053009"},{"key":"14608_CR32","doi-asserted-by":"crossref","unstructured":"Ronneberger O, Fischer P, Brox T (2015) U-net: convolutional networks for biomedical image segmentation. In: international conference on medical image computing and computer-assisted intervention, pp. 234\u2013241. Springer","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"14608_CR33","unstructured":"Samangouei P, Kabkab M, Chellappa R (2018) Defense-gan: Protecting classifiers against adversarial attacks using generative models. arXiv preprint arXiv:1805.06605"},{"key":"14608_CR34","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus, R (2015) Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199"},{"key":"14608_CR35","doi-asserted-by":"crossref","unstructured":"Xu W, Evans D, Qi Y (2017) Feature squeezing: Detecting adversarial examples in deep neural networks. arXiv preprint arXiv:1704.01155","DOI":"10.14722\/ndss.2018.23198"}],"container-title":["Multimedia Tools and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-023-14608-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11042-023-14608-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-023-14608-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,23]],"date-time":"2023-06-23T18:49:36Z","timestamp":1687546176000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11042-023-14608-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,16]]},"references-count":35,"journal-issue":{"issue":"16","published-print":{"date-parts":[[2023,7]]}},"alternative-id":["14608"],"URL":"https:\/\/doi.org\/10.1007\/s11042-023-14608-6","relation":{},"ISSN":["1380-7501","1573-7721"],"issn-type":[{"value":"1380-7501","type":"print"},{"value":"1573-7721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,2,16]]},"assertion":[{"value":"30 October 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 September 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 February 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 February 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"All authors including Seunghwan Jung, Minyoung Chung, and Yeong-Gil Shin agreed the submission of this manuscript.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Author agreement"}}]}}