{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T02:23:59Z","timestamp":1730255039549,"version":"3.28.0"},"reference-count":41,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,1,10]]},"DOI":"10.1109\/icpr48806.2021.9412663","type":"proceedings-article","created":{"date-parts":[[2021,5,6]],"date-time":"2021-05-06T02:15:54Z","timestamp":1620267354000},"page":"5302-5309","source":"Crossref","is-referenced-by-count":5,"title":["Attack Agnostic Adversarial Defense via Visual Imperceptible Bound"],"prefix":"10.1109","author":[{"given":"Saheb","family":"Chhabra","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Akshay","family":"Agarwal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richa","family":"Singh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mayank","family":"Vatsa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"8","article-title":"Tiny imagenet classification with convolutional neural networks","volume":"2","author":"yao","year":"2015","journal-title":"CS 231N"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref33","first-page":"3358","article-title":"Adversarial training for free!","author":"shafahi","year":"0","journal-title":"NeurIPS"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"ref31","first-page":"10877","article-title":"Semidefinite relaxations for certifying robustness to adversarial examples","author":"raghunathan","year":"0","journal-title":"NeurIPS"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref37","first-page":"1","article-title":"Mitigating adversarial effects through randomization","author":"xie","year":"0","journal-title":"ICLRE"},{"key":"ref36","first-page":"8400","article-title":"Scaling provable adversarial defenses","author":"wong","year":"0","journal-title":"NeurIPS"},{"key":"ref35","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"0","journal-title":"ICLRE"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i09.7085"},{"key":"ref10","article-title":"Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates","author":"ghiasi","year":"0","journal-title":"ICLRE"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00341"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS46853.2019.9185999"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00019"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2018.8698567"},{"journal-title":"Explaining and harnessing adversarial examples (2014)","year":"2014","author":"goodfellow","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-019-01160-w"},{"key":"ref17","first-page":"6829","article-title":"Unravelling robustness of deep learning based face recognition against adversarial attacks","author":"goswami","year":"0","journal-title":"AAAI"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00283"},{"journal-title":"Learning multiple layers of features from tiny images Technical report","year":"2009","author":"krizhevsky","key":"ref19"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00348"},{"key":"ref4","article-title":"Noise is inside me! generating adversarial perturbations with noise derived from natural filters","author":"agarwal","year":"0","journal-title":"cvprw"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00331"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00488"},{"key":"ref29","article-title":"Adversarial robustness toolbox v0.3.0","volume":"1807 1069","author":"nicolae","year":"2018","journal-title":"CoRR"},{"key":"ref5","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"0","journal-title":"ICML"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"journal-title":"On evaluating adversarial robustness","year":"2019","author":"carlini","key":"ref7"},{"key":"ref2","first-page":"1","article-title":"Image transformation based defense against adversarial perturbation on deep learning models","author":"agarwal","year":"0","journal-title":"IEEE TDSC"},{"key":"ref9","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","author":"cohen","year":"0","journal-title":"ICML"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2018.8698548"},{"key":"ref20","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2017","journal-title":"ICLRE"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00496"},{"key":"ref21","first-page":"2","author":"lecun","year":"2010","journal-title":"MNIST Handwritten Digit Database"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.56"},{"key":"ref41","article-title":"The limitations of adversarial training and the blind-spot attack","author":"zhang","year":"0","journal-title":"ICLRE"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01234-2_23"},{"journal-title":"Robust or private? adversarial training makes models more vulnerable to privacy attacks","year":"2019","author":"mejia","key":"ref26"},{"key":"ref25","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"0","journal-title":"ICLRE"}],"event":{"name":"2020 25th International Conference on Pattern Recognition (ICPR)","start":{"date-parts":[[2021,1,10]]},"location":"Milan, Italy","end":{"date-parts":[[2021,1,15]]}},"container-title":["2020 25th International Conference on Pattern Recognition (ICPR)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9411940\/9411911\/09412663.pdf?arnumber=9412663","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T15:40:43Z","timestamp":1652197243000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9412663\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,10]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/icpr48806.2021.9412663","relation":{},"subject":[],"published":{"date-parts":[[2021,1,10]]}}}