{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:44:39Z","timestamp":1782798279314,"version":"3.54.5"},"reference-count":46,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/infocom59046.2026.11571679","type":"proceedings-article","created":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T19:38:15Z","timestamp":1782761895000},"page":"1-10","source":"Crossref","is-referenced-by-count":0,"title":["ACS-Boot: Efficient Randomized Smoothing for Robustness Certification on Resource-Constrained Edge Devices"],"prefix":"10.1109","author":[{"given":"Miao","family":"Lin","sequence":"first","affiliation":[{"name":"Old Dominion University,Department of Computer Science,Norfolk,VA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junrui","family":"Zhang","sequence":"additional","affiliation":[{"name":"Old Dominion University,Department of Computer Science,Norfolk,VA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jian","family":"Li","sequence":"additional","affiliation":[{"name":"Old Dominion University,Department of Computer Science,Norfolk,VA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Yu","sequence":"additional","affiliation":[{"name":"University of Texas at El Paso,Department of Mathematical Sciences,El Paso,TX,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lusi","family":"Li","sequence":"additional","affiliation":[{"name":"Old Dominion University,Department of Computer Science,Norfolk,VA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chunsheng","family":"Xin","sequence":"additional","affiliation":[{"name":"Iowa State University,Department of Computer Science,Ames,IA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongyi","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Arizona,Department of Electrical and Computer Engineering,Tucson,AZ,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rui","family":"Ning","sequence":"additional","affiliation":[{"name":"Old Dominion University,Department of Computer Science,Norfolk,VA,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3623402"},{"key":"ref2","article-title":"Natural language processing advancements by deep learning: A survey","author":"Torfi","year":"2020"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2024.3363016"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/635"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.09.004"},{"key":"ref6","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref7","article-title":"Fast is better than free: Revisiting adversarial training","author":"Wong","year":"2020"},{"key":"ref8","article-title":"Pixel-defend: Leveraging generative models to understand and defend against adversarial examples","author":"Song","year":"2017"},{"key":"ref9","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","author":"Chen","year":"2018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00103"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2025.3565827"},{"key":"ref13","article-title":"On adaptive attacks to adversarial example defenses","volume-title":"Proceedings of Neural Information Processing Systems (NeurIPS)","author":"Tram\u00e8r"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01468"},{"key":"ref15","article-title":"On the effectiveness of interval bound propagation for training verifiably robust models","author":"Gowal","year":"2018"},{"key":"ref16","article-title":"Certified defenses for adversarial patches","author":"Chiang","year":"2020"},{"key":"ref17","article-title":"Scaling provable adversarial defenses","volume-title":"Proceedings of Neural Information Processing Systems (NeurIPS)","author":"Wong"},{"key":"ref18","first-page":"854","article-title":"Parseval networks: Improving robustness to adversarial examples","volume-title":"Proceedings of International Conference on Machine Learning (ICML)","author":"Cisse"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.2307\/2331986"},{"key":"ref20","article-title":"Provably robust deep learning via adversarially trained smoothed classifiers","volume-title":"Proceedings of Neural Information Processing Systems (NeurIPS)","author":"Salman"},{"key":"ref21","article-title":"Consistency regularization for certified robustness of smoothed classifiers","volume-title":"Proceedings of Neural Information Processing Systems (NeurIPS)","author":"Jeong"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i6.20579"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5798"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1214\/ss\/1009213286"},{"key":"ref25","article-title":"Adversarial training for free!","volume-title":"Proceedings of Neural Information Processing Systems (NeurIPS)","author":"Shafahi"},{"key":"ref26","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref27","article-title":"Adversarial patch","author":"Brown","year":"2017"},{"key":"ref28","article-title":"Adversarial attacks can deceive AI systems, leading to misclassification or incorrect decisions","author":"Radanliev","year":"2023","journal-title":"ACM Computing Surveys"},{"key":"ref29","first-page":"697","article-title":"Hard-label black-box universal adversarial patch attack","volume-title":"Proceedings of USENIX Security Symposium (USENIX Security 23)","author":"Tao"},{"key":"ref30","article-title":"On physical adversarial patches for object detection","author":"Lee","year":"2019"},{"key":"ref31","first-page":"2725","article-title":"ASSET: Robust backdoor data detection across a multiplicity of deep learning paradigms","volume-title":"Proceedings of USENIX Security Symposium (USENIX Security 23)","author":"Pan"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref33","first-page":"5025","article-title":"Adversarial risk and the dangers of evaluating against weak attacks","volume-title":"Proceedings of International Conference on Machine Learning (ICML)","author":"Uesato"},{"key":"ref34","first-page":"5286","article-title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","volume-title":"Proceedings of International Conference on Machine Learning (ICML)","author":"Wong"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref36","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proceedings of International Conference on Machine Learning (ICML)","author":"Cohen"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1098\/rsta.1933.0009"},{"key":"ref38","first-page":"10693","article-title":"Randomized smoothing of all shapes and sizes","volume-title":"Proceedings of International Conference on Machine Learning (ICML)","author":"Yang"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.3233\/FAIA240792"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.4324\/9780203041352"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.2307\/2685469"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1080\/00949650701749356"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1201\/9780429246593"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1176350933"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-4384-7"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1176345636"}],"event":{"name":"IEEE INFOCOM 2026 - IEEE Conference on Computer Communications","location":"Tokyo, Japan","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["IEEE INFOCOM 2026 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11571071\/11571169\/11571679.pdf?arnumber=11571679","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:13:23Z","timestamp":1782796403000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11571679\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":46,"URL":"https:\/\/doi.org\/10.1109\/infocom59046.2026.11571679","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}