{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,29]],"date-time":"2024-10-29T10:49:22Z","timestamp":1730198962615,"version":"3.28.0"},"reference-count":21,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,1]]},"DOI":"10.1109\/asp-dac47756.2020.9045107","type":"proceedings-article","created":{"date-parts":[[2020,3,27]],"date-time":"2020-03-27T12:27:10Z","timestamp":1585312030000},"page":"157-162","source":"Crossref","is-referenced-by-count":4,"title":["Mitigating Adversarial Attacks for Deep Neural Networks by Input Deformation and Augmentation"],"prefix":"10.1109","author":[{"given":"Pengfei","family":"Qiu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongsheng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongqiang","family":"Lyu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhaojun","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gang","family":"Qu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"International Conference on Learning Representations"},{"key":"ref11","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"Proceedings of the 35th International Conference on Machine Learning ICML 2018"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ASPDAC.2018.8297407"},{"key":"ref13","first-page":"2096","article-title":"Domain-adversarial training of neural networks","volume":"17","author":"ganin","year":"2016","journal-title":"The Journal of Machine Learning Research"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.241"},{"key":"ref15","article-title":"Defending against adversarial images using basis functions transformations","author":"shaham","year":"2018","journal-title":"arXiv preprint arXiv 1803 10840"},{"key":"ref16","article-title":"Mitigating adversarial effects through randomization","volume":"abs 1711 1991","author":"xie","year":"2017","journal-title":"CoRR"},{"key":"ref17","article-title":"Countering adversarial images using input transformations","volume":"abs 1711 117","author":"guo","year":"2017","journal-title":"CoRR"},{"key":"ref18","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"International Conference on Learning Representations"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","article-title":"Adversarial examples in the physical world","volume":"abs 1607 2533","author":"kurakin","year":"2017","journal-title":"CoRR"},{"key":"ref3","article-title":"Adversarial examples in the physical world","volume":"abs 1607 2533","author":"kurakin","year":"2017","journal-title":"CoRR"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref5","first-page":"arxiv:1412.6572","article-title":"Explaining and Harnessing Adversarial Examples","author":"goodfellow","year":"2014","journal-title":"ArXiv e-prints"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3264699"},{"key":"ref9","article-title":"On the effectiveness of defensive distillation","volume":"abs 1607 5113","author":"papernot","year":"2016","journal-title":"CoRR"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2017.2657381"},{"key":"ref21","first-page":"1","article-title":"Under-standing data augmentation for classification: when to warp?","author":"wong","year":"2016","journal-title":"2016 International Conference on Digital Image Computing Techniques and Applications (DICTA)"}],"event":{"name":"2020 25th Asia and South Pacific Design Automation Conference (ASP-DAC)","start":{"date-parts":[[2020,1,13]]},"location":"Beijing, China","end":{"date-parts":[[2020,1,16]]}},"container-title":["2020 25th Asia and South Pacific Design Automation Conference (ASP-DAC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9036752\/9045099\/09045107.pdf?arnumber=9045107","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T15:45:24Z","timestamp":1656344724000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9045107\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,1]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/asp-dac47756.2020.9045107","relation":{},"subject":[],"published":{"date-parts":[[2020,1]]}}}