{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T06:56:56Z","timestamp":1774594616883,"version":"3.50.1"},"reference-count":53,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,26]],"date-time":"2025-10-26T00:00:00Z","timestamp":1761436800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,26]],"date-time":"2025-10-26T00:00:00Z","timestamp":1761436800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,26]]},"DOI":"10.1109\/ieeeconf67917.2025.11443939","type":"proceedings-article","created":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T19:47:37Z","timestamp":1774554457000},"page":"105-112","source":"Crossref","is-referenced-by-count":0,"title":["Spectral regularization for adversarially-robust representation learning"],"prefix":"10.1109","author":[{"given":"Sheng","family":"Yang","sequence":"first","affiliation":[{"name":"Harvard University,SEAS,Cambridge,MA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jacob A.","family":"Zavatone-Veth","sequence":"additional","affiliation":[{"name":"Harvard University,Center for Brain Science,Cambridge,MA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cengiz","family":"Pehlevan","sequence":"additional","affiliation":[{"name":"Harvard University,SEAS,Cambridge,MA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref2","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref3","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-023-40499-0"},{"key":"ref5","article-title":"Adv-bnn: Improved adversarial defense through robust bayesian neural network","volume-title":"International Conference on Learning Representations","author":"Liu"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1080\/00031305.2021.2006781"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref8","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"International conference on machine learning","author":"Athalye"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref10","article-title":"Convergence of adversarial training in overparametrized neural networks","volume":"32","author":"Gao","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref11","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2017"},{"key":"ref12","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"international conference on machine learning","author":"Cohen"},{"key":"ref13","first-page":"12 310","article-title":"Barlow twins: Self-supervised learning via redundancy reduction","volume-title":"International conference on machine learning","author":"Zbontar"},{"key":"ref14","first-page":"1597","article-title":"A simple framework for contrastive learning of visual representations","volume-title":"Proceedings of the 37th International Conference on Machine Learning","volume":"119","author":"Chen"},{"key":"ref15","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"Proceedings of the 38th International Conference on Machine Learning","volume":"139","author":"Radford"},{"key":"ref16","article-title":"Scaling laws for transfer","author":"Hernandez","year":"2021"},{"key":"ref17","article-title":"Formal guarantees on the robustness of a classifier against adversarial manipulation","volume":"30","author":"Hein","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref18","article-title":"Spectral norm regularization for improving the generalizability of deep learning","author":"Yoshida","year":"2017"},{"key":"ref19","article-title":"Generalizable adversarial training via spectral normalization","volume-title":"International Conference on Learning Representations","author":"Farnia"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref21","first-page":"8543","article-title":"Bad global minima exist and sgd can reach them","volume":"33","author":"Liu","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref22","volume-title":"Machine learning under a modern optimization lens","author":"Bertsimas","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/b978-0-12-824114-1.00021-4"},{"key":"ref24","article-title":"Lower bounds on adversarial robustness from optimal transport","volume":"32","author":"Bhagoji","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref25","article-title":"Classifier-independent lower-bounds for adversarial robustness","author":"Dohmatob","year":"2020"},{"key":"ref26","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00499"},{"key":"ref30","article-title":"Policy-driven attack: Learning to query for hard-label black-box adversarial examples","volume-title":"International Conference on Learning Representations","author":"Yan"},{"key":"ref31","first-page":"19 288","article-title":"Finding optimal tangent points for reducing distortions of hard-label attacks","volume":"34","author":"Ma","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00018"},{"key":"ref33","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"International conference on machine learning","author":"Zhang"},{"key":"ref34","article-title":"Under-standing and mitigating the tradeoff between robustness and accuracy","author":"Raghunathan","year":"2020"},{"key":"ref35","article-title":"Spectral regularization for adversarially-robust representation learning","author":"Yang","year":"2024"},{"key":"ref36","article-title":"Robust learning with jacobian regularization","author":"Hoffman","year":"2019"},{"key":"ref37","article-title":"Neural networks learn to magnify areas near decision boundaries","author":"Zavatone-Veth","year":"2023"},{"key":"ref38","article-title":"The singular values of convolutional layers","author":"Sedghi","year":"2018"},{"key":"ref39","first-page":"10 918","article-title":"Towards practical control of singular values of convolutional layers","volume":"35","author":"Senderovich","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref40","article-title":"MNIST handwritten digit database","volume-title":"ATT Labs [Online]","volume":"2","author":"LeCun","year":"2010"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref42","article-title":"Learning multiple layers of features from tiny images","volume-title":"University of Toronto, Tech. Rep","author":"Krizhevsky","year":"2009"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref44","article-title":"Catastrophic forgetting meets negative transfer: Batch spectral shrinkage for safe transfer learning","volume":"32","author":"Chen","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref45","article-title":"Novel dataset for fine-grained image categorization","volume-title":"First Workshop on Fine-Grained Visual Categorization, IEEE Conference on Computer Vision and Pattern Recognition","author":"Khosla"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICVGIP.2008.47"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206537"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-020-05929-w"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1460"},{"key":"ref50","doi-asserted-by":"crossref","DOI":"10.23915\/distill.00024","article-title":"Thread: Circuits","volume-title":"Distill","author":"Cammarata","year":"2020"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1038\/s41593-023-01442-0"},{"key":"ref52","article-title":"A separability-based approach to quantifying generalization: which layer is best?","author":"Dyballa","year":"2024"},{"key":"ref53","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017"}],"event":{"name":"2025 59th Asilomar Conference on Signals, Systems, and Computers","location":"Pacific Grove, CA, USA","start":{"date-parts":[[2025,10,26]]},"end":{"date-parts":[[2025,10,29]]}},"container-title":["2025 59th Asilomar Conference on Signals, Systems, and Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443114\/11443296\/11443939.pdf?arnumber=11443939","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T05:26:34Z","timestamp":1774589194000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11443939\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,26]]},"references-count":53,"URL":"https:\/\/doi.org\/10.1109\/ieeeconf67917.2025.11443939","relation":{},"subject":[],"published":{"date-parts":[[2025,10,26]]}}}