{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T05:58:09Z","timestamp":1780466289952,"version":"3.54.1"},"reference-count":75,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00164","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"1675-1685","source":"Crossref","is-referenced-by-count":1,"title":["Adversarial Training for Probabilistic Robustness"],"prefix":"10.1109","author":[{"given":"Yi","family":"Zhang","sequence":"first","affiliation":[{"name":"University of Warwick,WMG"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuhang","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Warwick,WMG"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Liverpool"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjie","family":"Ruan","sequence":"additional","affiliation":[{"name":"University of Liverpool"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaowei","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Liverpool"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siddartha","family":"Khastgir","sequence":"additional","affiliation":[{"name":"University of Warwick,WMG"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xingyu","family":"Zhao","sequence":"additional","affiliation":[{"name":"University of Warwick,WMG"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9206696"},{"key":"ref2","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"In Proc. of the 35th International Conference on Machine Learning","author":"Athalye"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref4","first-page":"1","article-title":"Adversarial training and provable defenses: Bridging the gap","volume-title":"In 8th International Conference on Learning Representations (ICLR\u2019 20\u201920)","author":"Balunovi\u0107"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00039"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/520"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0217"},{"key":"ref12","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"In International Conference on Machine Learning, pages 13101320. PMLR","author":"Cohen"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2021.04.037"},{"key":"ref14","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"In International conference on machine learning","author":"Croce"},{"key":"ref15","article-title":"Mma training: Direct input space margin maximization through adversarial training","volume-title":"In International Conference on Learning Representations","author":"Weiguang Ding"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3570918"},{"key":"ref17","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"In International Conference on Learning Representations","author":"Dosovitskiy"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2556"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338954"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00058"},{"key":"ref21","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"In International Conference on Learning Representations (ICLR\u201915)","author":"Goodfellow"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00494"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2021.3080664"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3625290"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00190"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_1"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2020.100270"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-024-10824-0"},{"key":"ref29","first-page":"3","article-title":"Adversarial logit pairing","author":"Kannan","year":"2018","journal-title":"arXiv preprint"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_5"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01972"},{"key":"ref33","article-title":"Discovering failure modes of text-guided diffusion models via adversarial search","volume-title":"In The 12th International Conference on Learning Representations","author":"Liu"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238202"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3179131"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i7.20768"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132785"},{"key":"ref43","first-page":"18667","article-title":"Pappas, and Hamed Hassani","volume-title":"Probabilistically robust learning: Balancing average and worst-case performance. In Int. Conference on Machine Learning","author":"Robey"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/368"},{"key":"ref45","author":"Ruder","year":"2016","journal-title":"An overview of gradient descent optimization algorithms"},{"key":"ref46","first-page":"5","volume":"32","author":"Shafahi","year":"2019","journal-title":"Adversarial training for free! Advances in neural information processing systems"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.04.027"},{"key":"ref48","article-title":"Intriguing properties of neural networks","volume-title":"In In Proc. of 2nd Int. Conf. on Learning Representations","author":"Szegedy"},{"key":"ref49","first-page":"9253","article-title":"Efficient statistical assessment of neural network corruption robustness","volume":"34","author":"Tit","year":"2021","journal-title":"NeurIPS\u201921"},{"key":"ref50","first-page":"323","article-title":"Teddy Furon, and Mathias Rousset. Gradientinformed neural network statistical robustness estimation","volume-title":"In Proc. of The 26th Int. Conf. on Artificial Intelligence and Statistics","author":"Karim"},{"key":"ref51","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"In International conference on machine learning","author":"Touvron"},{"key":"ref52","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"In International Conference on Learning Representations","author":"Tram\u00e8r"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-30164-8_690"},{"key":"ref54","first-page":"14421","article-title":"A pac-bayes analysis of adversarial robustness","volume":"34","author":"Viallard","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref55","first-page":"1735","article-title":"Statistically robust neural network classification","volume-title":"In Uncertainty in Artificial Intelligence","author":"Wang","year":"2021"},{"key":"ref56","first-page":"6586","article-title":"On the convergence and robustness of adversarial training","volume-title":"In ICML\u201919","author":"Wang","year":"2019"},{"key":"ref57","first-page":"3","article-title":"Improving adversarial robustness requires revisiting misclassified examples","volume-title":"In International conference on learning representations","author":"Wang"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02330"},{"key":"ref59","first-page":"1","article-title":"A statistical approach to assessing neural network robustness","volume-title":"In Int. Conf. on Learning Representations","author":"Webb"},{"key":"ref60","first-page":"67276736","article-title":"Proven: Verifying robustness of neural networks with a probabilistic approach","volume-title":"In Int. Conf. on Machine Learning","author":"Weng"},{"key":"ref61","article-title":"Evaluating the robustness of neural networks: An extreme value theory approach","volume-title":"In Int. Conf. on Learning Representations","author":"Wei Weng"},{"key":"ref62","first-page":"5","article-title":"Kolter","volume-title":"Fast is better than free: Revisiting adversarial training. In International Conference on Learning Representations","author":"Wong"},{"issue":"11","key":"ref63","doi-asserted-by":"crossref","first-page":"5777","DOI":"10.1109\/TNNLS.2018.2808470","article-title":"Johnson","volume":"29","author":"Xiang","year":"2018","journal-title":"Output reachable set estimation and verification for multilayer neural networks. IEEE Tran. on Neural Networks and Learning Systems"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30176"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref66","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"In International conference on machine learning","author":"Zhang"},{"key":"ref67","article-title":"Attacks which do not kill training make adversarial learning stronger","volume-title":"In International conference on machine learning, pages 1127811287. PMLR","author":"Zhang"},{"key":"ref68","first-page":"12479","article-title":"Progressive-scale boundary blackbox attack via projective gradient estimation","volume-title":"In Int. Conference on Machine Learning","author":"Zhang"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-26409-2_10"},{"key":"ref70","first-page":"559","article-title":"Prass: probabilistic risk-averse robust learning with stochastic search","volume-title":"In Proceedings of the 33rd International Joint Conference on Artificial Intelligence","author":"Zhang"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2026.104264"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73411-3_26"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-99447-0_15"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00236"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3648351"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11443348.pdf?arnumber=11443348","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T06:35:46Z","timestamp":1777530946000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11443348\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":75,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00164","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}