{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T19:08:15Z","timestamp":1761419295943},"reference-count":31,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,11]]},"DOI":"10.1109\/globalsip.2018.8646651","type":"proceedings-article","created":{"date-parts":[[2019,3,18]],"date-time":"2019-03-18T16:33:06Z","timestamp":1552926786000},"page":"1169-1173","source":"Crossref","is-referenced-by-count":3,"title":["Reinforced Adversarial Attacks on Deep Neural Networks Using ADMM"],"prefix":"10.1109","author":[{"given":"Pu","family":"Zhao","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kaidi","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tianyun","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Makan","family":"Fardad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanzhi","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xue","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"article-title":"Explaining and harnessing adversarial examples","year":"2014","author":"goodfellow","key":"ref30"},{"article-title":"A study of the effect of jpg compression on adversarial images","year":"2016","author":"dziugaite","key":"ref10"},{"article-title":"Mitigating adversarial effects through randomization","year":"2017","author":"xie","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"article-title":"Stochastic activation pruning for robust adversarial defense","year":"2018","author":"dhillon","key":"ref13"},{"key":"ref14","article-title":"Defensive Dropout for Hardening Deep Neural Networks under Adversarial Attacks","author":"wang","year":"2018","journal-title":"ArXiv e-prints"},{"article-title":"Detecting adversarial samples from artifacts","year":"2017","author":"feinman","key":"ref15"},{"article-title":"Intriguing properties of neural networks","year":"2013","author":"szegedy","key":"ref16"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240639"},{"article-title":"Ead: elastic-net attacks to deep neural networks via adversarial examples","year":"2017","author":"chen","key":"ref19"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref27","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2015","journal-title":"ICLR 2015"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref6","first-page":"513","article-title":"Hidden voice commands","author":"carlini","year":"2016","journal-title":"USENIX Security Symposium"},{"key":"ref29","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009","journal-title":"Master’s thesis"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1038\/nature16961"},{"article-title":"Adversarial examples in the physical world","year":"2016","author":"kurakin","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.220"},{"article-title":"Countering adversarial images using input transformations","year":"2017","author":"guo","key":"ref9"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","year":"2018","author":"athalye","key":"ref20"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-016-1034-2"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1561\/2200000016"},{"key":"ref26","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2018","journal-title":"2018 ICLR"},{"key":"ref25","first-page":"2816","article-title":"Bregman alternating direction method of multipliers","author":"wang","year":"2014","journal-title":"Advances in Neural Information Processing Systems 27"}],"event":{"name":"2018 IEEE Global Conference on Signal and Information Processing (GlobalSIP)","start":{"date-parts":[[2018,11,26]]},"location":"Anaheim, CA, USA","end":{"date-parts":[[2018,11,29]]}},"container-title":["2018 IEEE Global Conference on Signal and Information Processing (GlobalSIP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8637665\/8645964\/08646651.pdf?arnumber=8646651","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T01:22:08Z","timestamp":1598232128000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8646651\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11]]},"references-count":31,"URL":"https:\/\/doi.org\/10.1109\/globalsip.2018.8646651","relation":{},"subject":[],"published":{"date-parts":[[2018,11]]}}}