{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,29]],"date-time":"2024-10-29T19:47:37Z","timestamp":1730231257988,"version":"3.28.0"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,6,4]],"date-time":"2023-06-04T00:00:00Z","timestamp":1685836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,6,4]],"date-time":"2023-06-04T00:00:00Z","timestamp":1685836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,6,4]]},"DOI":"10.1109\/icassp49357.2023.10095871","type":"proceedings-article","created":{"date-parts":[[2023,5,5]],"date-time":"2023-05-05T17:28:30Z","timestamp":1683307710000},"page":"1-5","source":"Crossref","is-referenced-by-count":1,"title":["Optimization for Robustness Evaluation Beyond \u2113<sub>p<\/sub> Metrics"],"prefix":"10.1109","author":[{"given":"Hengyue","family":"Liang","sequence":"first","affiliation":[{"name":"University of Minnesota,Electrical &#x0026; Computer Engineering,Minneapolis,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Buyun","family":"Liang","sequence":"additional","affiliation":[{"name":"University of Minnesota,Computer Science &#x0026; Engineering,Minneapolis,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ying","family":"Cui","sequence":"additional","affiliation":[{"name":"University of Minnesota,Industrial &#x0026; Systems Engineering,Minneapolis,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Mitchell","sequence":"additional","affiliation":[{"name":"City University of New York,Queens College,New York City,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ju","family":"Sun","sequence":"additional","affiliation":[{"name":"University of Minnesota,Computer Science &#x0026; Engineering,Minneapolis,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"article-title":"Intriguing properties of neural networks","year":"2013","author":"Szegedy","key":"ref1"},{"article-title":"Explaining and harnessing adversarial examples","volume-title":"International Conference on Learning Representations","author":"Goodfellow","key":"ref2"},{"article-title":"Benchmarking neural network robustness to common corruptions and perturbations","volume-title":"International Conference on Learning Representations","author":"Hendrycks","key":"ref3"},{"key":"ref4","first-page":"1802","article-title":"Exploring the landscape of spatial robustness","volume-title":"Proceedings of the 36th International Conference on Machine Learning","volume":"97","author":"Engstrom"},{"article-title":"Spatially transformed adversarial examples","volume-title":"International Conference on Learning Representations","author":"Xiao","key":"ref5"},{"article-title":"Wasserstein adversarial examples via projected sinkhorn iterations","year":"2019","author":"Wong","key":"ref6"},{"key":"ref7","article-title":"Functional adversarial attacks","volume":"32","author":"Laidlaw","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00212"},{"issue":"3","key":"ref9","article-title":"Big but imperceptible adversarial perturbations via semantic manipulation","volume":"1","author":"Bhattad","year":"2019"},{"article-title":"Towards deep learning models resistant to adversarial attacks","year":"2017","author":"Madry","key":"ref10"},{"article-title":"Perceptual adversarial robustness: Defense against unseen threat models","volume-title":"ICLR","author":"Laidlaw","key":"ref11"},{"key":"ref12","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proceedings of the 37th International Conference on Machine Learning","author":"Croce"},{"key":"ref13","article-title":"Fast and effective robustness certification","volume":"31","author":"Singh","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref14","first-page":"2196","article-title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","volume-title":"International Conference on Machine Learning","author":"Croce"},{"key":"ref15","article-title":"Fast minimum-norm adversarial attacks through adaptive norm constraints","volume":"34","author":"Pintor","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"article-title":"Revisiting and advancing fast adversarial training through the lens of bi-level optimization","year":"2021","author":"Zhang","key":"ref16"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1080\/10556788.2016.1208749"},{"article-title":"NCVX: A user-friendly and scalable package for nonconvex optimization in machine learning","year":"2021","author":"Liang","key":"ref18"},{"key":"ref19","article-title":"Optimization and optimizers for adversarial robustness","author":"Liang","year":"2023","journal-title":"Forthcoming"},{"volume-title":"Nonlinear Programming","year":"2016","author":"Bertsekas","key":"ref20"},{"key":"ref21","doi-asserted-by":"crossref","DOI":"10.1007\/0-387-30065-1","volume-title":"Large-scale nonlinear optimization","volume":"83","author":"Pillo","year":"2006"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-004-0559-y"},{"key":"ref23","article-title":"Geno\u2013 generic optimization for classical machine learning","volume":"32","author":"Laue","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-34910-3_6"},{"article-title":"On structural optimization using constraint aggregation","volume-title":"VI World Congress on Structural and Multidisciplinary Optimization WCSMO6, Rio de Janeiro, Brasil","author":"Martins","key":"ref25"},{"key":"ref26","first-page":"6640","article-title":"Adversarial robustness against the union of multiple perturbation models","volume-title":"International Conference on Machine Learning","author":"Maini"},{"article-title":"Uncovering the limits of adversarial training against norm-bounded adversarial examples","year":"2020","author":"Gowal","key":"ref27"},{"article-title":"On evaluating adversarial robustness","year":"2019","author":"Carlini","key":"ref28"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"}],"event":{"name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","start":{"date-parts":[[2023,6,4]]},"location":"Rhodes Island, Greece","end":{"date-parts":[[2023,6,10]]}},"container-title":["ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10094559\/10094560\/10095871.pdf?arnumber=10095871","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,12]],"date-time":"2024-01-12T02:05:00Z","timestamp":1705025100000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10095871\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,4]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/icassp49357.2023.10095871","relation":{},"subject":[],"published":{"date-parts":[[2023,6,4]]}}}