{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T23:45:32Z","timestamp":1775173532815,"version":"3.50.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["DMS-2113642"],"award-info":[{"award-number":["DMS-2113642"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["ECCS-2020246"],"award-info":[{"award-number":["ECCS-2020246"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF1910483"],"award-info":[{"award-number":["W911NF1910483"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"DARPA","doi-asserted-by":"publisher","award":["FA8750-20-2-0502"],"award-info":[{"award-number":["FA8750-20-2-0502"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000181","name":"Air Force Office for Scientific Research","doi-asserted-by":"publisher","award":["FA9550-21-1-0231"],"award-info":[{"award-number":["FA9550-21-1-0231"]}],"id":[{"id":"10.13039\/100000181","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Control Syst. Lett."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/lcsys.2022.3150719","type":"journal-article","created":{"date-parts":[[2022,2,10]],"date-time":"2022-02-10T20:27:08Z","timestamp":1644524828000},"page":"2341-2346","source":"Crossref","is-referenced-by-count":9,"title":["Robustness Against Adversarial Attacks in Neural Networks Using Incremental Dissipativity"],"prefix":"10.1109","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5761-3711","authenticated-orcid":false,"given":"Bernardo","family":"Aquino","sequence":"first","affiliation":[{"name":"Department of Electrical Engineering, University of Notre Dame, Notre Dame, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9434-7870","authenticated-orcid":false,"given":"Arash","family":"Rahnama","sequence":"additional","affiliation":[{"name":"Amazon Inc, New York, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3423-1109","authenticated-orcid":false,"given":"Peter","family":"Seiler","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7913-2780","authenticated-orcid":false,"given":"Lizhen","family":"Lin","sequence":"additional","affiliation":[{"name":"Department of Applied Computational Mathematics and Statistics, University of Notre Dame, Notre Dame, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7060-3956","authenticated-orcid":false,"given":"Vijay","family":"Gupta","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering, University of Notre Dame, Notre Dame, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref38","article-title":"Neural network training under semidefinite constraints","author":"pauli","year":"2022","journal-title":"arXiv 2201 00632"},{"key":"ref33","article-title":"The singular values of convolutional layers","author":"sedghi","year":"2018","journal-title":"arXiv 1805 10408"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/BF00276494"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/9.273341"},{"key":"ref30","author":"bao","year":"2007","journal-title":"Process Control The Passive Systems Approach"},{"key":"ref37","article-title":"Empirical evaluation of rectified activations in convolutional network","author":"xu","year":"2015","journal-title":"arXiv 1505 00853"},{"key":"ref36","article-title":"Block diagonal dominance and the design of decentralized compensation","author":"bennett","year":"1979"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.2140\/pjm.1962.12.1241"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2010.5717648"},{"key":"ref10","article-title":"On the effectiveness of defensive distillation","author":"papernot","year":"2016","journal-title":"arXiv 1607 05113"},{"key":"ref40","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2021.3069388"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/LCSYS.2021.3077861"},{"key":"ref13","article-title":"Efficient and accurate estimation of Lipschitz constants for deep neural networks","author":"fazlyab","year":"2019","journal-title":"arXiv 1906 04893"},{"key":"ref14","article-title":"Lipschitz constant estimation of neural networks via sparse polynomial optimization","author":"latorre","year":"2020","journal-title":"arXiv 2004 08688"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1137\/19M1272780"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/LCSYS.2021.3050444"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2020.3046193"},{"key":"ref18","article-title":"Recurrent equilibrium networks: Flexible dynamic models with guaranteed stability and robustness","author":"revay","year":"2021","journal-title":"arXiv 2104 05942"},{"key":"ref19","first-page":"265","article-title":"TensorFlow: A system for large-scale machine learning","author":"abadi","year":"2016","journal-title":"Proc 12th USENIX Symp Oper Syst Des Implement (OSDI)"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-0507-7"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref27","article-title":"Cross-entropy loss and low-rank features have responsibility for adversarial examples","author":"nar","year":"2019","journal-title":"arXiv 1901 08360"},{"key":"ref3","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref6","article-title":"Adversarial training for free!","author":"shafahi","year":"2019","journal-title":"arXiv 1904 12843"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1976.1101352"},{"key":"ref5","first-page":"2030","article-title":"Domain-adversarial training of neural networks","volume":"17","author":"ganin","year":"2016","journal-title":"J Mach Learn Res"},{"key":"ref8","article-title":"Adversarial robustness with semi-infinite constrained learning","author":"robey","year":"2021","journal-title":"arXiv 2110 15767"},{"key":"ref7","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1705 07204"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref20","article-title":"Spectral norm regularization for improving the generalizability of deep learning","author":"yoshida","year":"2017","journal-title":"arXiv 1705 10941"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2005.849023"},{"key":"ref21","article-title":"Spectral normalization for generative adversarial networks","author":"miyato","year":"2018","journal-title":"arXiv 1802 05957"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00820"},{"key":"ref41","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Proc 25th Int Conf Neural Inf Process Syst Vol 1"},{"key":"ref23","doi-asserted-by":"crossref","first-page":"325","DOI":"10.1109\/TCSII.2009.2015399","article-title":"Passivity analysis of neural networks with time-varying delays","volume":"56","author":"xu","year":"2009","journal-title":"IEEE Trans Circuits Syst II Exp Briefs"},{"key":"ref26","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref25","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"}],"container-title":["IEEE Control Systems Letters"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/7782633\/9462165\/9709605-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7782633\/9462165\/09709605.pdf?arnumber=9709605","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,9]],"date-time":"2022-05-09T19:48:12Z","timestamp":1652125692000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9709605\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/lcsys.2022.3150719","relation":{},"ISSN":["2475-1456"],"issn-type":[{"value":"2475-1456","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}