{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,29]],"date-time":"2026-08-29T16:18:24Z","timestamp":1788020304208,"version":"build-2784847793"},"reference-count":38,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,12,17]],"date-time":"2022-12-17T00:00:00Z","timestamp":1671235200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,12,17]],"date-time":"2022-12-17T00:00:00Z","timestamp":1671235200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,12,17]]},"DOI":"10.1109\/bigdata55660.2022.10020474","type":"proceedings-article","created":{"date-parts":[[2023,1,26]],"date-time":"2023-01-26T19:35:23Z","timestamp":1674761723000},"page":"1515-1524","source":"Crossref","is-referenced-by-count":3,"title":["Defending Evasion Attacks via Adversarially Adaptive Training"],"prefix":"10.1109","author":[{"given":"Minh-Hao","family":"Van","sequence":"first","affiliation":[{"name":"University of Arkansas,Fayetteville,AR,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Du","sequence":"additional","affiliation":[{"name":"University of Arkansas,Fayetteville,AR,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xintao","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Arkansas,Fayetteville,AR,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas,Dallas,TX,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aidong","family":"Lu","sequence":"additional","affiliation":[{"name":"University of North Carolina at Charlotte,Charlotte,NC,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00035"},{"key":"ref5","article-title":"Adaptive risk minimization: Learning to adapt to domain shift","author":"Zhang","year":"2021","journal-title":"NeurIPS"},{"key":"ref6","article-title":"Domain generalization by marginal transfer learning","author":"Blanchard","year":"2021","journal-title":"J. Mach. Learn. Res"},{"key":"ref7","article-title":"Tent: Fully test-time adaptation by entropy minimization","author":"Wang","year":"2021","journal-title":"ICLR"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-021-06119-y"},{"key":"ref9","article-title":"Poisoning attacks with generative adversarial nets","volume":"abs\/1906.07773","author":"Mu\u00f1oz-Gonz\u00e1lez","year":"2019","journal-title":"CoRR"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00230"},{"key":"ref11","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tramer","year":"2018","journal-title":"ICLR (Poster)"},{"key":"ref12","article-title":"Fast is better than free: Revisiting adversarial training","author":"Wong","year":"2020","journal-title":"ICLR"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref17","article-title":"Towards adversarial robustness via transductive learning","volume":"abs\/2106.08387","author":"Chen","year":"2021","journal-title":"CoRR"},{"key":"ref18","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2018","journal-title":"ICLR (Poster)"},{"key":"ref19","article-title":"Imperceptible adversarial attacks on tabular data","volume":"abs\/1911.03274","author":"Ballet","year":"2019","journal-title":"CoRR"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134635"},{"key":"ref22","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015","journal-title":"ICLR (Poster)"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00847"},{"key":"ref28","article-title":"Adversarial attacks for optical flow-based action recognition classifiers","volume":"abs\/1811.11875","author":"Inkawhich","year":"2018","journal-title":"CoRR"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref30","article-title":"Exploring the landscape of spatial robustness","author":"Engstrom","year":"2019","journal-title":"ICML"},{"key":"ref31","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014","journal-title":"ICLR (Poster)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref33","article-title":"Compas dataset","author":"Larson","year":"2017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref35","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","author":"Chen","year":"2019","journal-title":"SafeAI@AAAI"},{"key":"ref36","article-title":"Spectral signatures in backdoor attacks","author":"Tran","year":"2018","journal-title":"NeurIPS"},{"key":"ref37","article-title":"Adversarial robustness toolbox v1.2.0","volume":"1807.01069","author":"Nicolae","year":"2018","journal-title":"CoRR"},{"key":"ref38","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","volume":"abs\/1712.05526","author":"Chen","year":"2017","journal-title":"CoRR"}],"event":{"name":"2022 IEEE International Conference on Big Data (Big Data)","location":"Osaka, Japan","start":{"date-parts":[[2022,12,17]]},"end":{"date-parts":[[2022,12,20]]}},"container-title":["2022 IEEE International Conference on Big Data (Big Data)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10020192\/10020156\/10020474.pdf?arnumber=10020474","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T06:24:00Z","timestamp":1707805440000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10020474\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,17]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/bigdata55660.2022.10020474","relation":{},"subject":[],"published":{"date-parts":[[2022,12,17]]}}}