{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T20:23:42Z","timestamp":1740169422155,"version":"3.37.3"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"Cisco Faculty Award and the National Science Foundation","doi-asserted-by":"publisher","award":["1934568","2008173","2048280","2113605","2134107","2152289","2210388","2331966"],"award-info":[{"award-number":["1934568","2008173","2048280","2113605","2134107","2152289","2210388","2331966"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/access.2024.3446834","type":"journal-article","created":{"date-parts":[[2024,8,21]],"date-time":"2024-08-21T23:38:17Z","timestamp":1724283497000},"page":"117872-117883","source":"Crossref","is-referenced-by-count":0,"title":["Uncovering Distortion Differences: A Study of Adversarial Attacks and Machine Discriminability"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-8324-2070","authenticated-orcid":false,"given":"Xiawei","family":"Wang","sequence":"first","affiliation":[{"name":"Graduate Group in BioStatistics, University of California, Davis, Davis, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7195-5774","authenticated-orcid":false,"given":"Yao","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Statistics and Operation Research, The University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cho-Jui","family":"Hsieh","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of California at Los Angeles, Los Angeles, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7067-405X","authenticated-orcid":false,"given":"Thomas C. M.","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Statistics, University of California at Davis, Davis, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref4","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref5","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11302"},{"key":"ref8","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. 36th Int. Conf. Mach. Learn. (ICML)","author":"Zhang"},{"key":"ref9","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2017","journal-title":"arXiv:1711.01991"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2020.2968933"},{"key":"ref12","article-title":"On detecting adversarial perturbations","author":"Hendrik Metzen","year":"2017","journal-title":"arXiv:1702.04267"},{"key":"ref13","article-title":"Adversarial and clean data are not twins","author":"Gong","year":"2017","journal-title":"arXiv:1704.04960"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.615"},{"key":"ref15","first-page":"1","article-title":"Robust detection of adversarial attacks by modeling the intrinsic properties of deep neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Zheng"},{"key":"ref16","article-title":"Detecting adversarial samples from artifacts","author":"Feinman","year":"2017","journal-title":"arXiv:1703.00410"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2023.3235662"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403241"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2021.4.MWSF-300"},{"key":"ref20","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref21","article-title":"Reverse engineering of imperceptible adversarial image perturbations","author":"Gong","year":"2022","journal-title":"arXiv:2203.14145"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref22"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref25","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","author":"Ilyas"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3214627"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2021.3122467"},{"key":"ref29","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017","journal-title":"arXiv:1712.04248"},{"key":"ref30","article-title":"Sign-OPT: A query-efficient hard-label adversarial attack","author":"Cheng","year":"2019","journal-title":"arXiv:1909.10773"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref32","article-title":"Adversarial robustness toolbox v1.0.0","author":"Nicolae","year":"2018","journal-title":"arXiv:1807.01069"},{"key":"ref33","first-page":"2196","article-title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce"},{"key":"ref34","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce"},{"issue":"1","key":"ref35","first-page":"949","article-title":"Natural evolution strategies","volume":"15","author":"Wierstra","year":"2014","journal-title":"J. Mach. Learn. Res."}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/10380310\/10643066-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10380310\/10643066.pdf?arnumber=10643066","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T04:19:04Z","timestamp":1725164344000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10643066\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":35,"URL":"https:\/\/doi.org\/10.1109\/access.2024.3446834","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2024]]}}}