{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T09:49:44Z","timestamp":1780480184969,"version":"3.54.1"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2021,8,20]],"date-time":"2021-08-20T00:00:00Z","timestamp":1629417600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,8,20]],"date-time":"2021-08-20T00:00:00Z","timestamp":1629417600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61673396"],"award-info":[{"award-number":["61673396"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772344"],"award-info":[{"award-number":["61772344"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Mach. Learn. & Cyber."],"published-print":{"date-parts":[[2021,12]]},"DOI":"10.1007\/s13042-021-01374-w","type":"journal-article","created":{"date-parts":[[2021,8,20]],"date-time":"2021-08-20T18:04:55Z","timestamp":1629482695000},"page":"3437-3447","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["An Adversarial sample defense method based on multi-scale GAN"],"prefix":"10.1007","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7323-5896","authenticated-orcid":false,"given":"Mingwen","family":"Shao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuqi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ran","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gaozhi","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,8,20]]},"reference":[{"key":"1374_CR1","unstructured":"Arjovsky M, Chintala SB (2017) Wasserstein generative adversarial networks. In: International conference on learning representations (ICLR)"},{"key":"1374_CR2","doi-asserted-by":"crossref","unstructured":"Bai T, Zhao J, Zhu J, Han S, Chen J, Li B (2020) Ai-gan: attack-inspired generation of adversarial examples. arXiv:2002.02196","DOI":"10.1109\/ICIP42928.2021.9506278"},{"key":"1374_CR3","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (SP), pp. 39\u201357. IEEE","DOI":"10.1109\/SP.2017.49"},{"key":"1374_CR4","unstructured":"Pang T, Yang X, Dong Y, Hang S, Zhu J (2021) Bag of tricks for adversarial training. In: International conference on learning representations"},{"key":"1374_CR5","doi-asserted-by":"crossref","unstructured":"Co Kenneth\u00a0T, Mu\u00f1oz-Gonz\u00e1lez L, de Maupeou S, Lupu EC (2019) Procedural noise adversarial examples for black-box attacks on deep convolutional networks. In: ACM SIGSAC Conference on Computer and Communications Security, pp 275\u2013289. ACM","DOI":"10.1145\/3319535.3345660"},{"key":"1374_CR6","doi-asserted-by":"crossref","unstructured":"Ding Z, Guo Y, Lei Z, Yun F (2018) One-shot face recognition via generative learning. In: 2018 13th IEEE International Conference on Automatic Face and Gesture Recognition (FG 2018)","DOI":"10.1109\/FG.2018.00011"},{"key":"1374_CR7","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T, Hang S, Zhu J, Xiaolin H, Li J (2018) Boosting adversarial attacks with momentum. In: IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp 9185\u20139193","DOI":"10.1109\/CVPR.2018.00957"},{"key":"1374_CR8","doi-asserted-by":"crossref","unstructured":"Duan Ranjie, Ma Xingjun, Wang Yisen, Bailey James, Qin A.\u00a0Kai, Yang Yun (2020) Adversarial camouflage: Hiding physical-world attacks with natural styles. CoRR, arXiv:2003.08757","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"1374_CR9","doi-asserted-by":"crossref","unstructured":"Eykholt Kevin, Evtimov Ivan, Fernandes Earlence, Li Bo, Rahmati Amir, Xiao Chaowei, Prakash Atul, Kohno Tadayoshi, Song Dawn (2018) Robust physical-world attacks on deep learning visual classification. In: IEEE Conference on Computer Vision and Pattern Recognition(CVPR), pages 1625\u20131634","DOI":"10.1109\/CVPR.2018.00175"},{"issue":"6433","key":"1374_CR10","doi-asserted-by":"publisher","first-page":"1287","DOI":"10.1126\/science.aaw4399","volume":"363","author":"SG Finlayson","year":"2019","unstructured":"Finlayson SG, Bowers JD, Ito J, Zittrain JL, Beam AL, Kohane IS (2019) Adversarial attacks on medical machine learning. Science 363(6433):1287\u20131289","journal-title":"Science"},{"key":"1374_CR11","unstructured":"Goodfellow Ian\u00a0J, Shlens Jonathon, Szegedy Christian (2015) Explaining and harnessing adversarial examples. In: International Conference on Learning Representations(ICLR)"},{"issue":"4","key":"1374_CR12","doi-asserted-by":"publisher","first-page":"815","DOI":"10.1109\/TPAMI.2018.2815688","volume":"41","author":"Q Hou","year":"2019","unstructured":"Hou Q, Cheng M-M, Xiaowei H, Borji A, Zhuowen T, Torr PHS (2019) Deeply supervised salient object detection with short connections. IEEE Trans Pattern Anal Mach Intell 41(4):815\u2013828","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"issue":"11","key":"1374_CR13","doi-asserted-by":"publisher","first-page":"1254","DOI":"10.1109\/34.730558","volume":"20","author":"L Itti","year":"1998","unstructured":"Itti L, Koch C, Niebur E (1998) A model of saliency-based visual attention for rapid scene analysis. IEEE Trans Pattern Anal Mach Intell 20(11):1254\u20131259","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"1374_CR14","doi-asserted-by":"crossref","unstructured":"Jandial Surgan, Mangla Puneet, Varshney Sakshi, Balasubramanian Vineeth (2019) Advgan++: Harnessing latent layers for adversary generation. In: ICCV Workshops, pages 2045\u20132048. IEEE","DOI":"10.1109\/ICCVW.2019.00257"},{"key":"1374_CR15","doi-asserted-by":"crossref","unstructured":"Jin Guoqing, Shen Shiwei, Zhang Dongming, Dai Feng, Zhang Yongdong (2019) Ape-gan: Adversarial perturbation elimination with gan. In: International Conference on Acoustics, Speech and Signal Processing (ICASSP), pages 3842\u20133846. IEEE","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"1374_CR16","unstructured":"Karnewar Animesh, Wang Oliver, Iyengar Raghu\u00a0Sesha (2019) Msg-gan: Multi-scale gradient gan for stable image synthesis. CoRR, arXiv:1903.06048"},{"key":"1374_CR17","unstructured":"Krizhevsky Alex, Sutskever Ilya, Hinton Geoffrey\u00a0E (2012) Imagenet classification with deep convolutional neural networks. In: Advances in Neural Information Processing Systems, pages 1097\u20131105"},{"key":"1374_CR18","doi-asserted-by":"crossref","unstructured":"Kurakin Alexey, Goodfellow Ian\u00a0J, Bengio Samy (2017) Adversarial examples in the physical world. In: International Conference on Learning Representations(ICLR)","DOI":"10.1201\/9781351251389-8"},{"key":"1374_CR19","unstructured":"Madry Aleksander, Makelov Aleksandar, Schmidt Ludwig, Tsipras Dimitris, Vladu Adrian (2018) Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations(ICLR)"},{"key":"1374_CR20","unstructured":"Mei Yiqun, Fan Yuchen, Zhang Yulun, Jiahui Yu, Zhou Yuqian, Liu Ding, Yun Fu, Huang Thomas S, Shi Honghui (2020) Pyramid attention networks for image restoration. CoRR, arXiv:2004.13824"},{"key":"1374_CR21","doi-asserted-by":"crossref","unstructured":"Meng Dongyu, Chen Hao (2017) Magnet: a two-pronged defense against adversarial examples. In: ACM SIGSAC Conference on Computer and Communications Security, pages 135\u2013147","DOI":"10.1145\/3133956.3134057"},{"key":"1374_CR22","doi-asserted-by":"crossref","unstructured":"Metzen Jan\u00a0Hendrik, Kumar Mummadi\u00a0Chaithanya, Brox Thomas, Fischer Volker (2017) Universal adversarial perturbations against semantic image segmentation. In: ICCV, pages 2774\u20132783. IEEE Computer Society","DOI":"10.1109\/ICCV.2017.300"},{"key":"1374_CR23","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli Seyed-Mohsen, Fawzi Alhussein, Frossard Pascal (2016) Deepfool: A simple and accurate method to fool deep neural networks. In: IEEE Conference on Computer Vision and Pattern Recognition(CVPR), pages 2574\u20132582. IEEE Computer Society","DOI":"10.1109\/CVPR.2016.282"},{"key":"1374_CR24","unstructured":"Mukherjee Prerana, Sharma Manoj, Makwana Megh, Singh Ajay\u00a0Pratap, Upadhyay Avinash, Trivedi Akkshita, Lall Brejesh, Chaudhury Santanu (2019) Dsal-gan: Denoising based saliency prediction with generative adversarial networks. CoRR, arXiv:1904.01215"},{"key":"1374_CR25","doi-asserted-by":"crossref","unstructured":"Papernot Nicolas, McDaniel Patrick, Jha Somesh, Fredrikson Matt, Celik Z\u00a0Berkay, Swami Ananthram (2016) The limitations of deep learning in adversarial settings. In: IEEE Symposium on Security and Privacy (SP), pages 372\u2013387. IEEE","DOI":"10.1109\/EuroSP.2016.36"},{"key":"1374_CR26","unstructured":"Samangouei Pouya, Kabkab Maya, Chellappa Rama (2018) Defense-gan: Protecting classifiers against adversarial attacks using generative models. In: International Conference on Learning Representations(ICLR)"},{"issue":"2","key":"1374_CR27","doi-asserted-by":"publisher","first-page":"894","DOI":"10.1109\/TGRS.2013.2245509","volume":"52","author":"H Shen","year":"2014","unstructured":"Shen H, Li X, Zhang L, Tao D, Zeng C (2014) Compressed sensing-based inpainting of aqua moderate resolution imaging spectroradiometer band 6 using adaptive spectrum-weighted sparse bayesian dictionary learning. IEEE Trans Geosci Remote Sens 52(2):894\u2013906","journal-title":"IEEE Trans Geosci Remote Sens"},{"issue":"5","key":"1374_CR28","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"S Jiawei","year":"2019","unstructured":"Jiawei S, Vargas DV, Sakurai K (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evol Comput 23(5):828\u2013841","journal-title":"IEEE Trans Evol Comput"},{"key":"1374_CR29","unstructured":"Szegedy Christian, Zaremba Wojciech, Sutskever Ilya, Bruna Joan, Erhan Dumitru, Goodfellow Ian\u00a0J, Fergus Rob (2014) Intriguing properties of neural networks. In: Yoshua Bengio and Yann LeCun, editors, International Conference on Learning Representations(ICLR)"},{"key":"1374_CR30","doi-asserted-by":"crossref","unstructured":"Wang Lijun, Huchuan Lu, Ruan Xiang, Yang Ming-Hsuan (2015) Deep networks for saliency detection via local estimation and global search. In: CVPR, pages 3183\u20133192. IEEE Computer Society","DOI":"10.1109\/CVPR.2015.7298938"},{"key":"1374_CR31","doi-asserted-by":"crossref","unstructured":"Wang Ting-Chun, Liu Ming-Yu, Zhu Jun-Yan, Tao Andrew, Kautz Jan, Catanzaro Bryan (2018) High-resolution image synthesis and semantic manipulation with conditional gans. In: CVPR, pages 8798\u20138807. IEEE Computer Society","DOI":"10.1109\/CVPR.2018.00917"},{"key":"1374_CR32","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1016\/j.ins.2020.12.013","volume":"554","author":"Mingwen Shao","year":"2021","unstructured":"Mingwen S, Gaozhi Z, Wangmeng Z, Deyu M (2021) Target attack on biomedical image segmentation model based on multi-scale gradients. Inf Sci 554:33\u201346","journal-title":"Inf Sci"}],"container-title":["International Journal of Machine Learning and Cybernetics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-021-01374-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s13042-021-01374-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-021-01374-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,25]],"date-time":"2021-10-25T18:27:29Z","timestamp":1635186449000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s13042-021-01374-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,20]]},"references-count":32,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2021,12]]}},"alternative-id":["1374"],"URL":"https:\/\/doi.org\/10.1007\/s13042-021-01374-w","relation":{},"ISSN":["1868-8071","1868-808X"],"issn-type":[{"value":"1868-8071","type":"print"},{"value":"1868-808X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,8,20]]},"assertion":[{"value":"9 January 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 July 2021","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 August 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}