{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:46:09Z","timestamp":1783439169623,"version":"3.54.6"},"reference-count":308,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"Foundation for Innovative Research Groups of the National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61921003"],"award-info":[{"award-number":["61921003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada (NSERC) under Discovery","doi-asserted-by":"publisher","award":["RGPIN-2019-05870"],"award-info":[{"award-number":["RGPIN-2019-05870"]}],"id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2128448"],"award-info":[{"award-number":["CNS-2128448"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"publisher","award":["ECCS-2335876"],"award-info":[{"award-number":["ECCS-2335876"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/comst.2023.3319492","type":"journal-article","created":{"date-parts":[[2023,9,26]],"date-time":"2023-09-26T18:00:37Z","timestamp":1695751237000},"page":"2245-2298","source":"Crossref","is-referenced-by-count":134,"title":["Adversarial Attacks and Defenses in Machine Learning-Empowered Communication Systems and Networks: A Contemporary Survey"],"prefix":"10.1109","volume":"25","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0759-2208","authenticated-orcid":false,"given":"Yulong","family":"Wang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tong","family":"Sun","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shenghong","family":"Li","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9167-1613","authenticated-orcid":false,"given":"Xin","family":"Yuan","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4933-594X","authenticated-orcid":false,"given":"Wei","family":"Ni","sequence":"additional","affiliation":[{"name":"Data61, Commonwealth Science and Industrial Research Organisation, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5932-6887","authenticated-orcid":false,"given":"Ekram","family":"Hossain","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, University of Manitoba, Winnipeg, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2062-131X","authenticated-orcid":false,"given":"H.","family":"Vincent Poor","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Princeton University, Princeton, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/DSA56465.2022.00163"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747508"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500374"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS53615.2022.9668448"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2021.3137084"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2023.e13520"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103285"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3231293"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3484824.3484889"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3297021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2023.3283502"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-022-03486-4"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3513142.3513194"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3202687"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-srw.21"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3477498"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-022-10183-8"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-022-03504-5"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3548772"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/5GWF52925.2021.00019"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3487890"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533561"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01580"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SECON55815.2022.9918564"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC51071.2022.9771571"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3425780"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512212"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3491199"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162827"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467432"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/MVT.2023.3263329"},{"key":"ref35","article-title":"Empowering reconfigurable intelligent surfaces with artificial intelligence to secure air-to-ground Internet-of-Things","author":"Yuan","journal-title":"IEEE Int. Things Mag."},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3470493"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3546790.3546819"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3034899"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3545948.3545982"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467145"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3440084.3441213"},{"issue":"10","key":"ref42","first-page":"100","article-title":"A survey of attack and defense on human\u2013computer interaction security","volume":"35","author":"Kaiqiang","year":"2019","journal-title":"Telecommun. Sci."},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445304"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2021.3124855"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2020.3032744"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2022.3207348"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.23919\/JCC.2021.12.006"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2022.3167368"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2020.3010330"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484777"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3229906"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3110480"},{"key":"ref54","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Goodfellow"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2023.3259432"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.aeue.2022.154478"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3236314"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2021.3095663"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2022.3159659"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2022.3206115"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2021.3114154"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2022.3213371"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SPAWC51304.2022.9833926"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3215188"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2021.3069240"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICC45855.2022.9838836"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500424"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103257"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2022.103398"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3052888"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3164354"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref74","first-page":"1","article-title":"Adversarial machine learning at scale","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Kurakin"},{"key":"ref75","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Szegedy"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC55113.2022.9824151"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3154244"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2022.3195685"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103103"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.001.2000325"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2022.3225137"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2022.08.011"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2022.02.019"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3188930"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2021.3069426"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2021.05.025"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3258255"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2019.2929198"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3073285"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3036801"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.113816"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3568160.3570224"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2022.3166112"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2927266"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3321408.3326647"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.14778\/3352063.3352126"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/3404983.3405508"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/3543829.3544513"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3183083"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/3508398.3511524"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2805680"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/3561613.3561622"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/3524067"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-018-0012-9"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.3390\/app9050909"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/4907754"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11081283"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108889"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1007\/s00371-022-02660-6"},{"key":"ref117","article-title":"Physically adversarial attacks and defenses in computer vision: A survey","author":"Wei","year":"2022","journal-title":"arxiv.abs\/2211.01671"},{"key":"ref118","article-title":"A survey on physical adversarial attack in computer vision","author":"Wang","year":"2022","journal-title":"arxiv.abs\/2209.14262"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102933"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3490354.3494367"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1111\/jofi.12498"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00337"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.naacl-main.321"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-394435-1.00020-X"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00568"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3050303"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534190"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/ICICSP55539.2022.10050592"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3033291"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/3404835.3462915"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1145\/3502223.3502238"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2020.3004059"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3078755"},{"key":"ref135","first-page":"1123","article-title":"Adversarial attack on graph structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2016.63"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-020-00696-7"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/FG52635.2021.9667076"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3032061"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1162\/089976602760128018"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2020.3012005"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1145\/3511808.3557238"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534316"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00891"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3126733"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01488"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3138616"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3153060"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107637"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/TSIPN.2018.2866318"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534119"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3226905"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3047752"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3187406"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00108"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3182119"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3232845"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2018.2882908"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3106044"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00664"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.2975918"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00741"},{"key":"ref164","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19839-7_30"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3102492"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011028"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401525"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3127849"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01171"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3124815"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58601-0_24"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01612"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747896"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/CW52790.2021.00057"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_39"},{"key":"ref180","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Simonyan"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.446"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3168874"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3127439"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534397"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01613"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533589"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/ISPACS48206.2019.8986271"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1145\/3422337.3447841"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00068"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1145\/3459992"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2021.3116426"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2022.3183538"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2021.3124420"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3117608"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2021.3130970"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2022.3147203"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2021.3120290"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3188044"},{"key":"ref201","first-page":"1","article-title":"Turbo autoencoder: Deep learning based channel codes for point-to-point communication channels","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Jiang"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00015"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1145\/3473039"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-57805-3_8"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2018.2867459"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2934069"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1800819"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2020.3030061"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3120197"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484589"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108267"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1109\/CISS48834.2020.1570617416"},{"key":"ref213","first-page":"1","article-title":"Adversarial examples in the physical world","volume-title":"Proc. 5th Int. Conf. Learn. Rep.","author":"Kurakin"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2957786"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2020.2969784"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2023.3274538"},{"key":"ref217","first-page":"1","article-title":"A baseline for detecting misclassified and out-of-distribution examples in neural networks","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Hendrycks"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2019.2914099"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.26599\/TST.2020.9010038"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2019.00028"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3076792"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1109\/cvidliccea56201.2022.9825039"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1109\/BigData50022.2020.9378303"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP42928.2021.9506292"},{"key":"ref225","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9052913"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1109\/CACML55074.2022.00112"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3225918"},{"key":"ref228","first-page":"1","article-title":"PixelDefend: Leveraging generative models to understand and defend against adversarial examples","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Song"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00095"},{"key":"ref230","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00023"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533322"},{"key":"ref232","article-title":"A study of the effect of JPG compression on adversarial images","author":"Dziugaite","year":"2016","journal-title":"arxiv.abs\/1608.00853"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00778"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3024660"},{"key":"ref236","first-page":"2613","article-title":"Measuring neural net robustness with constraints","volume-title":"Proc. Conf. Workshop Neural Inf. Process. Syst.","author":"Bastani"},{"key":"ref237","first-page":"1823","article-title":"On the connection between adversarial robustness and saliency map interpretability","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"97","author":"Etmann"},{"key":"ref238","first-page":"14059","article-title":"Provable certificates for adversarial examples: Fitting a ball in the union of Polytopes","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Jordan"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533949"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2940533"},{"key":"ref241","article-title":"Threat model-agnostic adversarial defense using diffusion models","author":"Blau","year":"2022","journal-title":"arxiv.abs\/2207.08089"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1109\/IPCCC51483.2021.9679424"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1007\/s10957-022-02048-5"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-020-01310-5"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-06841-7"},{"key":"ref246","article-title":"SmoothGrad: Removing noise by adding noise","author":"Smilkov","year":"2017","journal-title":"arxiv.abs\/1706.03825"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2019.2948348"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533868"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3121150"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00516"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533755"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534294"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00250"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2021.3061771"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01542"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01462"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00612"},{"key":"ref258","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2022.3146388"},{"key":"ref259","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00051"},{"key":"ref260","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00743"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3082317"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.1109\/ICC45855.2022.9838452"},{"key":"ref263","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3042083"},{"key":"ref264","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533815"},{"key":"ref265","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533363"},{"key":"ref266","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00740"},{"key":"ref267","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534346"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1214\/12-AOS994"},{"key":"ref269","doi-asserted-by":"publisher","DOI":"10.1145\/1374376.1374452"},{"key":"ref270","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00053"},{"key":"ref271","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3118977"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3101395"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01210"},{"key":"ref274","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01197"},{"key":"ref275","first-page":"2266","article-title":"Formal guarantees on the robustness of a classifier against adversarial manipulation","volume-title":"Proc. Conf. Workshop Neural Inf. Process. Syst.","author":"Hein"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00057"},{"key":"ref277","first-page":"1","article-title":"Towards deep neural network architectures robust to adversarial examples","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Gu"},{"key":"ref278","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i2.20018"},{"key":"ref279","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00756"},{"key":"ref280","first-page":"478","article-title":"Metric learning for adversarial robustness","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Mao"},{"key":"ref281","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00673"},{"key":"ref282","first-page":"1829","article-title":"Defense against adversarial attacks using feature scattering-based adversarial training","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref283","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-022-00644-0"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3144988"},{"key":"ref285","doi-asserted-by":"publisher","DOI":"10.1145\/3406325.3451030"},{"key":"ref286","doi-asserted-by":"publisher","DOI":"10.1145\/3549206.3549284"},{"key":"ref287","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.2978474"},{"key":"ref288","first-page":"72","article-title":"Batch-wise Logit-similarity: Generalizing Logit-squeezing and label-smoothing","volume-title":"Proc. Brit. Mach. Vis. Conf.","author":"Shafahi"},{"key":"ref289","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9533777"},{"key":"ref290","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3111892"},{"key":"ref291","first-page":"1","article-title":"Adversarial training and provable defenses: Bridging the gap","volume-title":"Proc. Int. Conf. Learn. Rep.","author":"Balunovic"},{"key":"ref292","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3048120"},{"key":"ref293","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00140"},{"key":"ref294","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2021.3060417"},{"key":"ref295","first-page":"721","article-title":"Adversarial examples generation algorithm based on decision boundary search","volume":"51","author":"Liu","year":"2022","journal-title":"J. Electron. Sci. Technol."},{"key":"ref296","article-title":"Dataset obfuscation: Its applications to and impacts on edge machine learning","author":"Yu","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"ref297","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3086014"},{"key":"ref298","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2022.3188502"},{"key":"ref299","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3232360"},{"key":"ref300","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401165"},{"key":"ref301","first-page":"1","article-title":"Robustness may be at odds with accuracy","volume-title":"Proc. 7th Int. Conf. Learn. Rep.","author":"Tsipras"},{"key":"ref302","doi-asserted-by":"publisher","DOI":"10.1017\/S0308210500000421"},{"key":"ref303","first-page":"13773","article-title":"Understanding gradient clipping in private SGD: A geometric perspective","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chen"},{"key":"ref304","first-page":"21545","article-title":"On the periodic Behavior of neural network training with batch normalization and weight decay","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Lobacheva"},{"key":"ref305","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2019.2913829"},{"key":"ref306","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3229767"},{"issue":"6","key":"ref307","first-page":"1315","article-title":"Survey on detecting and defending adversarial examples for image data","volume":"59","author":"Zhang","year":"2022","journal-title":"J. Comput. Res. Dev."},{"key":"ref308","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2019.8766353"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/9739\/10324457\/10263803-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/10324457\/10263803.pdf?arnumber=10263803","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,2]],"date-time":"2024-03-02T06:49:18Z","timestamp":1709362158000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10263803\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":308,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2023.3319492","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}