{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T10:47:03Z","timestamp":1781606823763,"version":"3.54.5"},"reference-count":194,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Open J. Commun. Soc."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/ojcoms.2021.3112939","type":"journal-article","created":{"date-parts":[[2021,9,20]],"date-time":"2021-09-20T20:32:03Z","timestamp":1632169923000},"page":"2243-2264","source":"Crossref","is-referenced-by-count":24,"title":["An RFML Ecosystem: Considerations for the Application of Deep Learning to Spectrum Situational Awareness"],"prefix":"10.1109","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5896-0176","authenticated-orcid":false,"given":"Lauren J.","family":"Wong","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William H.","family":"Clark","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1474-4732","authenticated-orcid":false,"given":"Bryse","family":"Flowers","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7196-1154","authenticated-orcid":false,"given":"R. Michael","family":"Buehrer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William C.","family":"Headley","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2437-3410","authenticated-orcid":false,"given":"Alan J.","family":"Michaels","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/PLANS.2018.8373500"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2013.6810502"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1109\/MDM.2019.00-49"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1109\/SIU.2019.8806336"},{"key":"ref173","year":"2018","journal-title":"DGX-2 Datasheet"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/JETCAS.2019.2950386"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2014.6974328"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2019.8852476"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/ICFPT47387.2019.00009"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2849324"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/CW.2019.00059"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2018.8599847"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9149195"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2019.2939314"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2017.8335463"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2017.8081223"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9020842"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICNC47757.2020.9049678"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/GCWkshps45667.2019.9024482"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2019.2940579"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9021087"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2817655"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/RADAR.2018.8378681"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC.2018.8301749"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2019.2955889"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1355"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.23919\/URSIAP-RASC.2019.8738332"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/DAC.2018.8465834"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/CCAAW.2019.8904903"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1145\/3126908.3126964"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC.2018.8547532"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/DySPAN.2017.7920754"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SPAWC.2018.8445938"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2015.7417537"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.25080\/Majora-7ddc1dd1-003"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT49239.2020.9225659"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2452414"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICMCIS.2015.7158696"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2017.8170853"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2018.2797022"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9021052"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9020949"},{"key":"ref50","author":"o\u2019shea","year":"2016","journal-title":"Recurrent neural radio anomaly detection"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1049\/iet-com:20050176"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858529"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014122"},{"key":"ref156","author":"vidovic","year":"2016","journal-title":"Feature importance measure for non-linear learning algorithms"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04174-7_45"},{"key":"ref150","article-title":"Uncertainty in deep learning","author":"gal","year":"2016"},{"key":"ref152","author":"yosinski","year":"2015","journal-title":"Understanding neural networks through deep visualization"},{"key":"ref151","first-page":"11826","article-title":"Attribution-based confidence metric for deep neural networks","volume":"32","author":"jha","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref146","author":"simonyan","year":"2013","journal-title":"Deep Inside Convolutional Networks Visualising Image Classification Models and Saliency Maps"},{"key":"ref147","author":"springenberg","year":"2014","journal-title":"Striving for simplicity The all convolutional net"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref59","author":"gaeddert","year":"2019","journal-title":"liquid-dsp"},{"key":"ref58","author":"clark","year":"2016","journal-title":"Efficient waveform spectrum aggregation for algorithm verification and validation"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1177\/1548512921991245"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SIU.2014.6830274"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2019.8727143"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2011.110812"},{"key":"ref53","article-title":"Deep learning for RF signal classification and fingerprinting","author":"chowdhury","year":"2019","journal-title":"Proc IEEE Military Commun Conf (MILCOM)"},{"key":"ref52","year":"2019","journal-title":"SignalEye AI Software for Automated Signal Classification—General Dynamics"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2903444"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/LAWP.2018.2869548"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.23919\/ITU-WT.2018.8597639"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/ATNAC.2017.8215379"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1109\/PCCC.2017.8280492"},{"key":"ref163","year":"2019","journal-title":"Enabling AI research for 5G networks with NI SDR"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1900031"},{"key":"ref161","author":"huang","year":"2018","journal-title":"Safety and trustworthiness of deep neural networks A survey"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1145\/3236386.3241340"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2926625"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2846401"},{"key":"ref6","first-page":"1","article-title":"A survey of machine learning in wireless sensor networks from networking and application perspectives","author":"di","year":"2007","journal-title":"Proc Int Conf Inf Commun Signal Process"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2320099"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2866942"},{"key":"ref159","author":"shwartz-ziv","year":"2017","journal-title":"Opening the black box of deep neural networks via information"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-018-0087-2"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2018.8403654"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1111\/0272-4332.00040"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-6875-1_54"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1016\/S0304-3800(02)00064-9"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/PLANS46316.2020.9109805"},{"key":"ref45","first-page":"1","article-title":"DeepTxFinder: Multiple transmitter localization by deep learning in crowdsourced spectrum sensing","author":"zubow","year":"2020","journal-title":"Proc 29th Int Conf Comput Commun Netw (ICCCN)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/LAWP.2019.2915047"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2018.2872827"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2018.8553233"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2908759"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2018.8422223"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2019.8685573"},{"key":"ref73","year":"2021","journal-title":"Machine Learning for Communications Emerging Technologies Initiative"},{"key":"ref72","author":"sankhe","year":"2020","journal-title":"Datasets for RF Fingerprinting of Bit-Similar USRP X310 Radios"},{"key":"ref71","year":"2020","journal-title":"RF DATASETS FOR MACHINE LEARNING"},{"key":"ref70","author":"torres-sospedra","year":"2020","journal-title":"UJIIndoorLoc Database"},{"key":"ref76","author":"qin","year":"2019","journal-title":"Imperceptible robust and targeted adversarial examples for automatic speech recognition"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/IPIN.2014.7275492"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00016"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref60","year":"2021","journal-title":"Matlab"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2007.4342823"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.352"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2018.2796446"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737463"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9020807"},{"key":"ref66","author":"le vine","year":"2013","journal-title":"Review of Measurements of the RF Spectrum of Radiation from Lightning"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1002\/2015RS005856"},{"key":"ref68","article-title":"SigMF: The signal metadata format","volume":"3","author":"hilburn","year":"2018","journal-title":"Proc GNU Radio Conf"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9021098"},{"key":"ref194","first-page":"1","article-title":"When is enough enough? ‘Just enough’ decision making with recurrent neural networks for radio frequency machine learning","author":"moore","year":"2020","journal-title":"Proc IEEE 39th Int Perform Comput Commun Conf (IPCCC)"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref190","author":"yan","year":"2019","journal-title":"When single event upset meets deep neural networks Observations explorations and remedies"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2018.00077"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/ATS47505.2019.000-8"},{"key":"ref91","author":"chakraborty","year":"2018","journal-title":"Adversarial Attacks and Defences A Survey"},{"key":"ref90","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.IR.8269-draft","article-title":"A taxonomy and terminology of adversarial machine learning","author":"tabassi","year":"2019"},{"key":"ref98","author":"goodfellow","year":"2015","journal-title":"Explaining and Harnessing Adversarial Examples"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref96","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","author":"tram\u00e8r","year":"2016","journal-title":"Proc 25th USENIX Conf Security Symp"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3324921.3328785"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/LWC.2018.2867459"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9020716"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/3324921.3328792"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/DySPAN.2019.8935782"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2934069"},{"key":"ref86","author":"hameed","year":"2019","journal-title":"Communication without interception Defense against deep-learning-based modulation detection"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2019.2901469"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/UCET.2019.8881843"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/3324921.3329695"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref127","first-page":"4790","article-title":"A unified view of piecewise linear neural network verification","author":"bunel","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_5"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.3390\/electronics8080832"},{"key":"ref124","author":"turek","year":"2019","journal-title":"Explainable artificial intelligence (xai)"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/824"},{"key":"ref128","first-page":"2","article-title":"A dual approach to scalable verification of deep networks","volume":"1","author":"dvijotham","year":"2018","journal-title":"Proc UAI"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2019.05.046"},{"key":"ref133","author":"sun","year":"2018","journal-title":"Testing Deep Neural Networks"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238172"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00058"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-6849-3"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236082"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238202"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2018.00021"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132785"},{"key":"ref139","author":"goodfellow","year":"2017","journal-title":"The challenge of verification and testing of machine learning"},{"key":"ref140","author":"mohseni","year":"2018","journal-title":"A survey of evaluation methods and measures for interpretable machine learning"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1145\/3359786"},{"key":"ref142","author":"bastani","year":"2017","journal-title":"Interpretability via model extraction"},{"key":"ref143","author":"bahdanau","year":"2014","journal-title":"Neural machine translation by jointly learning to align and translate"},{"key":"ref2","author":"rondeau","year":"2017","journal-title":"Radio Frequency Machine Learning Systems (RFMLS)"},{"key":"ref144","author":"molnar","year":"2019","journal-title":"Interpretable Machine Learning"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2942390"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0130140"},{"key":"ref109","author":"tram\u00e8r","year":"2017","journal-title":"Ensemble adversarial training Attacks and defenses"},{"key":"ref108","author":"shafahi","year":"2019","journal-title":"Adversarial training for free!"},{"key":"ref107","author":"madry","year":"2017","journal-title":"Towards deep learning models resistant to adversarial attacks"},{"key":"ref106","author":"kurakin","year":"2016","journal-title":"Adversarial machine learning at scale"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/GlobalSIP45357.2019.8969138"},{"key":"ref103","author":"akhtar","year":"2019","journal-title":"A Brief Survey of Adversarial Machine Learning and Defense Strategies"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref111","author":"carlini","year":"2019","journal-title":"On evaluating adversarial robustness"},{"key":"ref112","author":"papernot","year":"2016","journal-title":"cleverhans v2 0 0 an adversarial machine learning library"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ICMCIS.2019.8842663"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24540-9_66"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2007.4300983"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.3390\/s130911196"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2012.100412.00017"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2989870"},{"key":"ref15","first-page":"223","author":"erpek","year":"2020","journal-title":"Deep Learning for Wireless Communications"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2017.2758370"},{"key":"ref118","author":"kim","year":"2020","journal-title":"Channel-aware adversarial attacks against deep learning-based wireless signal classifiers"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2018.2881442"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2018.2884910"},{"key":"ref18","first-page":"1","article-title":"Radio machine learning dataset generation with GNU radio","volume":"1","author":"o\u2019shea","year":"2016","journal-title":"Proc GNU Radio Conf"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-4221-8.ch011"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/PIMRC48278.2020.9217343"},{"key":"ref114","author":"kim","year":"2020","journal-title":"Over-the-air adversarial attacks on deep learning based modulation classifier over wireless channels"},{"key":"ref113","author":"kurakin","year":"2016","journal-title":"Adversarial examples in the physical world"},{"key":"ref116","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","author":"jagielski","year":"2020","journal-title":"Proc 29th USENIX Security Symp (USENIX Security)"},{"key":"ref115","author":"carlini","year":"2018","journal-title":"The secret sharer Evaluating and testing unintended memorization in neural networks"},{"key":"ref120","author":"restuccia","year":"2020","journal-title":"Hacking the waveform Generalized wireless adversarial deep learning"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2018.8599832"},{"key":"ref122","author":"kania","year":"2020","journal-title":"‘AI Weapons’ in China’s Military Innovation"},{"key":"ref123","author":"neema","year":"2020","journal-title":"Assured Autonomy"}],"container-title":["IEEE Open Journal of the Communications Society"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8782661\/9309127\/09540909.pdf?arnumber=9540909","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:59:29Z","timestamp":1639771169000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9540909\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":194,"URL":"https:\/\/doi.org\/10.1109\/ojcoms.2021.3112939","relation":{},"ISSN":["2644-125X"],"issn-type":[{"value":"2644-125X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}