{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T06:14:19Z","timestamp":1763705659155,"version":"3.37.3"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Korea Government","award":["NRF-2019R1C1C1010249"],"award-info":[{"award-number":["NRF-2019R1C1C1010249"]}]},{"DOI":"10.13039\/501100010418","name":"Institute for Information and communications Technology Promotion","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100010418","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Korea Government (MSIT)","award":["2018-0-00765"],"award-info":[{"award-number":["2018-0-00765"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2937604","type":"journal-article","created":{"date-parts":[[2019,8,26]],"date-time":"2019-08-26T15:25:05Z","timestamp":1566833105000},"page":"124632-124640","source":"Crossref","is-referenced-by-count":6,"title":["Ensemble of Random Binary Output Encoding for Adversarial Robustness"],"prefix":"10.1109","volume":"7","author":[{"given":"Ye-Ji","family":"Mun","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1637-9479","authenticated-orcid":false,"given":"Je-Won","family":"Kang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Simultaneous adversarial training-learn from others mistakes","author":"liao","year":"2018","journal-title":"arXiv 1807 08108"},{"key":"ref38","article-title":"Ensemble methods as a defense to adversarial perturbations against deep neural networks","author":"strauss","year":"2017","journal-title":"arXiv 1709 03423"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref31","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2016","journal-title":"arXiv 1611 01236"},{"key":"ref30","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"srivastava","year":"2014","journal-title":"J Mach Learn Res"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2018.10.008"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/APSIPA.2017.8282260"},{"article-title":"Stochastic quantized activation: To prevent overfitting in fast adversarial training","year":"2018","author":"yoon","key":"ref35"},{"article-title":"Ensemble adversarial training: Attacks and defenses","year":"2018","author":"kurakin","key":"ref34"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2866197"},{"key":"ref40","article-title":"Improving adversarial robustness via promoting ensemble diversity","author":"pang","year":"2019","journal-title":"arXiv 1901 08846"},{"key":"ref11","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"xu","year":"2017","journal-title":"arXiv 1704 01155"},{"key":"ref12","article-title":"Reinforcing adversarial robustness using model confidence induced by adversarial training","author":"wu","year":"2017","journal-title":"arXiv 1711 08001"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-010-0007-7"},{"key":"ref14","article-title":"Mitigating adversarial effects through randomization","author":"xie","year":"2017","journal-title":"arXiv 1711 01991"},{"key":"ref15","article-title":"Breaking transferability of adversarial samples with randomness","author":"zhou","year":"2018","journal-title":"arXiv 1805 04613"},{"key":"ref16","first-page":"5040","article-title":"Disentangling factors of variation in deep representation using adversarial training","author":"mathieu","year":"2016","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref17","first-page":"2030","article-title":"Domain-adversarial training of neural networks","volume":"17","author":"ganin","year":"2015","journal-title":"J Mach Learn Res"},{"key":"ref18","article-title":"Improving the generalization of adversarial training with domain adaptation","author":"song","year":"2018","journal-title":"arXiv 1810 00740"},{"key":"ref19","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1705 07204"},{"key":"ref28","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref4","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref27","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref3","first-page":"387","article-title":"Evasion attacks against machine learning at test time","author":"biggio","year":"2013","journal-title":"Proc Eur Conf Mach Learn Knowl Discovery Databases"},{"key":"ref6","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016","journal-title":"arXiv 1605 07277"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref8","article-title":"Effects of loss functions and target representations on adversarial robustness","author":"saito","year":"2018","journal-title":"arXiv 1812 00181"},{"key":"ref7","article-title":"Multi-way encoding for robustness","author":"kim","year":"2019","journal-title":"arXiv 1906 02033"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref9","article-title":"Adversarial attacks and defences: A survey","author":"chakraborty","year":"2018","journal-title":"arXiv 1810 00069"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1989.1.4.541"},{"journal-title":"CIFAR-10 Dataset","year":"2014","author":"krizhevsky","key":"ref46"},{"key":"ref20","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"arXiv 1409 1556"},{"key":"ref45","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"xiao","year":"2017","journal-title":"ArXiv 1708 07747"},{"key":"ref48","article-title":"Wide residual networks","author":"zagoruyko","year":"2016","journal-title":"arXiv 1605 07146"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref42","article-title":"Improving adversarial robustness of ensembles with diversity training","author":"kariyappa","year":"2019","journal-title":"arXiv 1901 09981"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2017915495"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1561\/2200000044"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.imavis.2018.04.004"},{"journal-title":"The MNIST Database of Handwritten Digits","year":"1998","author":"lecun","key":"ref44"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2010.1043"},{"key":"ref43","first-page":"1","article-title":"Correcting misclassified image features with convolutional coding","author":"mun","year":"2018","journal-title":"Proc of The Korean Society of Broadcast Engineers"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICDAR.2009.144"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08813035.pdf?arnumber=8813035","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T11:31:35Z","timestamp":1641987095000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8813035\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2937604","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2019]]}}}