{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T00:23:06Z","timestamp":1768350186559,"version":"3.49.0"},"reference-count":69,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T00:00:00Z","timestamp":1603065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T00:00:00Z","timestamp":1603065600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T00:00:00Z","timestamp":1603065600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,10,19]]},"DOI":"10.1109\/iv47402.2020.9304765","type":"proceedings-article","created":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T02:14:14Z","timestamp":1610244854000},"page":"1753-1758","source":"Crossref","is-referenced-by-count":5,"title":["Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specifications"],"prefix":"10.1109","author":[{"given":"Eric","family":"Wong","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Schneider","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joerg","family":"Schmitt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frank R.","family":"Schmidt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J. Zico","family":"Kolter","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"7717","article-title":"Attacks meet interpretability: Attribute-steered detection of adversarial samples","author":"tao","year":"0","journal-title":"Advances in neural information processing systems"},{"key":"ref38","author":"kannan","year":"2018","journal-title":"Adversarial logit pairing"},{"key":"ref33","author":"song","year":"2017","journal-title":"PixelDefend Leveraging generative models to understand and defend against adversarial examples"},{"key":"ref32","author":"buckman","year":"2018","journal-title":"Thermometer encoding One hot way to resist adversarial examples"},{"key":"ref31","author":"guo","year":"2017","journal-title":"Countering adversarial images using input transformations"},{"key":"ref30","article-title":"Fast is better than free: Revisiting adversarial training","author":"wong","year":"0","journal-title":"International Conference on Learning Representations"},{"key":"ref37","author":"lu","year":"2017","journal-title":"No need to worry about adversarial examples in object detection in autonomous vehicles"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref35","author":"feinman","year":"2017","journal-title":"Detecting adversarial samples from artifacts"},{"key":"ref34","author":"metzen","year":"2017","journal-title":"On detecting adversarial perturbations"},{"key":"ref60","author":"salman","year":"2019","journal-title":"Provably robust deep learning via adversarially trained smoothed classifiers"},{"key":"ref62","article-title":"Provable robustness of relu networks via maximization of linear regions","volume":"abs 1810 7481","author":"croce","year":"2018","journal-title":"CoRR"},{"key":"ref61","author":"xiao","year":"2018","journal-title":"Training for faster adversarial robustness verification via inducing relu stability"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/9.664155"},{"key":"ref28","author":"shafahi","year":"2019","journal-title":"Adversarial training for free!"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA.2010.5641220"},{"key":"ref27","author":"yang","year":"2019","journal-title":"Me-net Towards effective adversarial robustness with matrix estimation"},{"key":"ref65","first-page":"401","article-title":"On verification & validation of neural network based controllers","volume":"3","author":"schumann","year":"0","journal-title":"Proc Int Conf Eng Applications Neural Networks"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2004.1281757"},{"key":"ref29","author":"zhang","year":"2019","journal-title":"You only propagate once Painless adversarial training using maximal principle"},{"key":"ref67","first-page":"30","article-title":"Towards verification of artificial neural networks","author":"scheibler","year":"0","journal-title":"MBMV"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3302504.3311802"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/WACV.2017.58"},{"key":"ref2","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"0","journal-title":"International Conference on Learning Representations"},{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"0","journal-title":"International Conference on Learning Representations"},{"key":"ref20","article-title":"Differentiable abstract interpretation for provably robust neural networks","author":"mirman","year":"0","journal-title":"International Conference on Machine Learning (ICML)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1423"},{"key":"ref21","article-title":"On the effectiveness of interval bound propagation for training verifiably robust models","volume":"abs 1810 12715","author":"gowal","year":"2018","journal-title":"CoRR"},{"key":"ref24","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"0","journal-title":"ICLR Workshop"},{"key":"ref23","author":"tram\u00e8r","year":"2017","journal-title":"Ensemble adversarial training Attacks and defenses"},{"key":"ref26","author":"mosbach","year":"2018","journal-title":"Logit pairing methods can fool gradient-based attacks"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref50","first-page":"269","article-title":"Formal verification of piece-wise linear feed-forward neural networks","author":"ehlers","year":"0","journal-title":"International Symposium on Automated Technology for Verification and Analysis"},{"key":"ref51","author":"tjeng","year":"2017","journal-title":"Evaluating robustness of neural networks with mixed integer programming"},{"key":"ref59","author":"cohen","year":"2019","journal-title":"Certified adversarial robustness via randomized smoothing"},{"key":"ref58","author":"gowal","year":"2018","journal-title":"On the effectiveness of interval bound propagation for training verifiably robust models"},{"key":"ref57","first-page":"3575","article-title":"Differentiable abstract interpretation for provably robust neural networks","author":"mirman","year":"0","journal-title":"International Conference on Machine Learning"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00058"},{"key":"ref55","author":"raghunathan","year":"2018","journal-title":"Certified defenses against adversarial examples"},{"key":"ref54","author":"sinha","year":"2017","journal-title":"Certifying Some Distributional Robustness with Principled Adversarial Training"},{"key":"ref53","author":"salman","year":"2019","journal-title":"A convex relaxation barrier to tight robust verification of neural networks"},{"key":"ref52","first-page":"10877","article-title":"Semidefinite relaxations for certifying robustness to adversarial examples","author":"raghunathan","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref10","author":"li","year":"2019","journal-title":"Adversarial camera stickers A physical camera attack on deep learning classifier"},{"key":"ref11","author":"brown","year":"2017","journal-title":"Adversarial Patch"},{"key":"ref40","author":"carlini","year":"2016","journal-title":"Defensive distillation is not robust to adversarial examples"},{"key":"ref12","author":"wu","year":"2019","journal-title":"Making an invisibility cloak Real world adversarial attacks on object detectors"},{"key":"ref13","author":"sharif","year":"2017","journal-title":"Adversarial generative nets Neural network attacks on state-of-the-art face recognition"},{"key":"ref14","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume":"80","author":"athalye","year":"2018","journal-title":"Proceedings of the 35th International Conference on Machine Learning"},{"key":"ref15","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"0","journal-title":"International Conference on Learning Representations"},{"key":"ref16","author":"zhang","year":"2019","journal-title":"Theoretically principled trade-off between robustness and accuracy"},{"key":"ref17","first-page":"5283","article-title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","author":"wong","year":"0","journal-title":"International Conference on Machine Learning"},{"key":"ref18","first-page":"8410","article-title":"Scaling provable adversarial defenses","author":"wong","year":"0","journal-title":"Advances in Neural IInformation Processing Systems"},{"key":"ref19","first-page":"10900","article-title":"Semidefinite relaxations for certifying robustness to adversarial examples","author":"raghunathan","year":"0","journal-title":"Advances in Neural IInformation Processing Systems"},{"key":"ref4","author":"tram\u00e8r","year":"2019","journal-title":"Adversarial training and robustness for multiple perturbations"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00211"},{"key":"ref6","author":"engstrom","year":"2017","journal-title":"A Rotation and a Translation Suffice Fooling CNNs with Simple Transformations"},{"key":"ref5","author":"maini","year":"2019","journal-title":"Adversarial robustness against the union of multiple perturbation models"},{"key":"ref8","author":"wong","year":"2019","journal-title":"Wasserstein adversarial examples via projected sinkhorn iterations"},{"key":"ref7","author":"xiao","year":"2018","journal-title":"Spatially transformed adversarial examples"},{"key":"ref49","first-page":"3","article-title":"Safety verification of deep neural networks","author":"huang","year":"0","journal-title":"International Conference on Computer Aided Verification"},{"key":"ref9","author":"levine","year":"2019","journal-title":"Wasserstein smoothing Certified robustness against wasserstein adversarial attacks"},{"key":"ref46","author":"athalye","year":"2018","journal-title":"Obfuscated gradients give a false sense of security Circumventing defenses to adversarial examples"},{"key":"ref45","author":"uesato","year":"2018","journal-title":"Adversarial risk and the dangers of evaluating against weak attacks"},{"key":"ref48","first-page":"97","article-title":"Re-luplex: An efficient smt solver for verifying deep neural networks","author":"katz","year":"0","journal-title":"International Conference on Computer Aided Verification"},{"key":"ref47","author":"carlini","year":"2019","journal-title":"On evaluating adversarial robustness"},{"key":"ref42","author":"athalye","year":"2017","journal-title":"Synthesizing robust adversarial examples"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref44","author":"carlini","year":"2019","journal-title":"Is AmI (attacks meet interpretability) robust to adversarial examples?"},{"key":"ref43","author":"engstrom","year":"2018","journal-title":"Evaluating and Understanding the Robustness of Adversarial Logit Pairing"}],"event":{"name":"2020 IEEE Intelligent Vehicles Symposium (IV)","location":"Las Vegas, NV, USA","start":{"date-parts":[[2020,10,19]]},"end":{"date-parts":[[2020,11,13]]}},"container-title":["2020 IEEE Intelligent Vehicles Symposium (IV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9304518\/9304528\/09304765.pdf?arnumber=9304765","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,28]],"date-time":"2022-06-28T17:55:11Z","timestamp":1656438911000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9304765\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,19]]},"references-count":69,"URL":"https:\/\/doi.org\/10.1109\/iv47402.2020.9304765","relation":{},"subject":[],"published":{"date-parts":[[2020,10,19]]}}}