{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,12]],"date-time":"2026-05-12T06:50:52Z","timestamp":1778568652059,"version":"3.51.4"},"reference-count":34,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2951526","type":"journal-article","created":{"date-parts":[[2019,11,4]],"date-time":"2019-11-04T20:28:19Z","timestamp":1572899299000},"page":"160397-160407","source":"Crossref","is-referenced-by-count":54,"title":["DDSA: A Defense Against Adversarial Attacks Using Deep Denoising Sparse Autoencoder"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0502-8841","authenticated-orcid":false,"given":"Yassine","family":"Bakhti","sequence":"first","affiliation":[{"name":"National Institute of Telecommunications and ICT, Oran, Algeria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6453-8588","authenticated-orcid":false,"given":"Sid Ahmed","family":"Fezza","sequence":"additional","affiliation":[{"name":"National Institute of Telecommunications and ICT, Oran, Algeria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0143-1756","authenticated-orcid":false,"given":"Wassim","family":"Hamidouche","sequence":"additional","affiliation":[{"name":"INSA Rennes, CNRS, IETR - UMR CNRS 6164, Université de Rennes, Rennes, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0750-0959","authenticated-orcid":false,"given":"Olivier","family":"Deforges","sequence":"additional","affiliation":[{"name":"INSA Rennes, CNRS, IETR - UMR CNRS 6164, Université de Rennes, Rennes, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Robustifying models against adversarial attacks by Langevin dynamics","author":"srinivasan","year":"2018","journal-title":"arXiv 1805 12017"},{"key":"ref32","first-page":"506","article-title":"Practical black-box attacks against machine learning","author":"nicolas","year":"2017","journal-title":"Proc ACM Asia Conf Comput Commun Secur"},{"key":"ref31","article-title":"On evaluating adversarial robustness","author":"carlini","year":"2019","journal-title":"arXiv 1902 06705"},{"key":"ref30","article-title":"Defense-GAN: Protecting classifiers against adversarial attacks using generative models","author":"samangouei","year":"2018","journal-title":"arXiv 1805 06605"},{"key":"ref34","article-title":"Defense against adversarial attacks with saak transform","author":"song","year":"2018","journal-title":"arXiv 1808 01785"},{"key":"ref10","article-title":"Countering adversarial images using input transformations","author":"guo","year":"2017","journal-title":"arXiv 1711 00117"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00191"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref13","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref16","doi-asserted-by":"crossref","first-page":"909","DOI":"10.3390\/app9050909","article-title":"Review of artificial intelligence adversarial attack and defense technologies","volume":"9","author":"qiu","year":"2019","journal-title":"Appl Sci"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref18","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref19","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1705 07204"},{"key":"ref28","article-title":"Technical report on the CleverHans v2.1.0 adversarial examples library","author":"papernot","year":"2016","journal-title":"arXiv 1610 00768"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2017.94"},{"key":"ref27","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref3","article-title":"Houdini: Fooling deep structured prediction models","author":"cisse","year":"2017","journal-title":"arXiv 1707 05373"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/QoMEX.2019.8743213"},{"key":"ref29","author":"abadi","year":"2015","journal-title":"TensorFlow Large-Scale Machine Learning on Heterogeneous Systems"},{"key":"ref5","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2016","journal-title":"arXiv 1611 02770"},{"key":"ref8","first-page":"5","article-title":"La cryptographie militaire","volume":"9","author":"kerckhoffs","year":"1883","journal-title":"J Sci Militaires"},{"key":"ref7","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016","journal-title":"arXiv 1605 07277"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1949.tb00928.x"},{"key":"ref1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref22","article-title":"Distilling the knowledge in a neural network","author":"hinton","year":"2015","journal-title":"ArXiv 1503 02531"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref24","first-page":"899","article-title":"Generalized denoising auto-encoders as generative models","author":"bengio","year":"2013","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref25","article-title":"Provably minimally-distorted adversarial examples","author":"carlini","year":"2018","journal-title":"arXiv 1709 10207v2"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08890816.pdf?arnumber=8890816","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,8]],"date-time":"2022-09-08T20:06:48Z","timestamp":1662667608000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8890816\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2951526","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}