{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T05:40:03Z","timestamp":1745559603849,"version":"3.40.4"},"reference-count":34,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"JSPS Grant-in-Aid for Scientific Research","award":["23K11103"],"award-info":[{"award-number":["23K11103"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2025,5,1]]},"DOI":"10.1109\/jiot.2024.3520076","type":"journal-article","created":{"date-parts":[[2024,12,27]],"date-time":"2024-12-27T19:29:26Z","timestamp":1735327766000},"page":"11690-11697","source":"Crossref","is-referenced-by-count":0,"title":["Adversarial Robustness Encoder as a Service for Classifiers on Internet of Things Devices"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3462-1505","authenticated-orcid":false,"given":"Enting","family":"Guo","sequence":"first","affiliation":[{"name":"Division of Computer Science, University of Aizu, Fukushima, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hong","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyuan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1904-6557","authenticated-orcid":false,"given":"Shengli","family":"Pan","sequence":"additional","affiliation":[{"name":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6461-9684","authenticated-orcid":false,"given":"Chunhua","family":"Su","sequence":"additional","affiliation":[{"name":"Division of Computer Science, University of Aizu, Fukushima, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4981-0496","authenticated-orcid":false,"given":"Peng","family":"Li","sequence":"additional","affiliation":[{"name":"Division of Computer Science, University of Aizu, Fukushima, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2867917"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2946214"},{"key":"ref3","first-page":"1","article-title":"Adversarial training and provable defenses: Bridging the gap","volume-title":"Proc. ICLR","author":"Balunovi\u0107"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3296414"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24444"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3316830"},{"key":"ref7","first-page":"1597","article-title":"A simple framework for contrastive learning of visual representations","volume-title":"Proc. ICML","author":"Chen"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3051603"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"ref11","first-page":"3629","article-title":"PoisonedEncoder: Poisoning the unlabeled pre-training data in contrastive learning","volume-title":"Proc. USENIX Security","author":"Liu"},{"key":"ref12","first-page":"1","article-title":"Certified defenses against adversarial examples","volume-title":"Proc. ICLR","author":"Raghunathan"},{"key":"ref13","first-page":"1599","article-title":"Formal security analysis of neural networks using symbolic intervals","volume-title":"Proc. USENIX Security","author":"Wang"},{"key":"ref14","first-page":"1","article-title":"Towards stable and efficient training of verifiably robust neural networks","volume-title":"Proc. ICLR","author":"Zhang"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref16","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. ICML","author":"Cohen"},{"key":"ref17","first-page":"29909","article-title":"Beta-CROWN: Efficient bound propagation with perneuron split constraints for neural network robustness verification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Wang"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref19","first-page":"1","article-title":"Fast and complete: Enabling complete neural network verification with rapid and massively parallel incomplete verifiers","volume-title":"Proc. ICLR","author":"Xu"},{"key":"ref20","first-page":"1656","article-title":"General cutting planes for bound-propagation-based neural network verification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Zhang"},{"key":"ref21","first-page":"2983","article-title":"Adversarial self-supervised contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Kim"},{"key":"ref22","first-page":"16199","article-title":"Robust pre-training by adversarial contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Jiang"},{"key":"ref23","first-page":"18335","article-title":"Fast certified robust training with short warmup","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Shi"},{"key":"ref24","first-page":"2350","article-title":"Efficiently computing local Lipschitz constants of neural networks via bound propagation","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Shi"},{"key":"ref25","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. ICLR","author":"Goodfellow"},{"key":"ref26","first-page":"1129","article-title":"Automatic perturbation analysis for scalable certified robustness and beyond","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Xu"},{"key":"ref27","first-page":"1","article-title":"Efficient neural network robustness certification with general activation functions","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Zhang"},{"key":"ref28","first-page":"21945","article-title":"Denoised smoothing: A provable defense for pretrained classifiers","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Salman"},{"key":"ref29","first-page":"1","article-title":"Adversarial machine learning at scale","volume-title":"Proc. ICLR","author":"Kurakin"},{"key":"ref30","first-page":"1","article-title":"Adversarial training for free!","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Shafahi"},{"key":"ref31","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref32"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.2118\/18761-MS"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/10975848\/10817532.pdf?arnumber=10817532","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T05:26:27Z","timestamp":1745558787000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10817532\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,1]]},"references-count":34,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2024.3520076","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"type":"electronic","value":"2327-4662"},{"type":"electronic","value":"2372-2541"}],"subject":[],"published":{"date-parts":[[2025,5,1]]}}}