{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T07:10:14Z","timestamp":1737443414219,"version":"3.33.0"},"reference-count":42,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,10,6]],"date-time":"2024-10-06T00:00:00Z","timestamp":1728172800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,10,6]],"date-time":"2024-10-06T00:00:00Z","timestamp":1728172800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,10,6]]},"DOI":"10.1109\/smc54092.2024.10831979","type":"proceedings-article","created":{"date-parts":[[2025,1,20]],"date-time":"2025-01-20T18:39:20Z","timestamp":1737398360000},"page":"1137-1142","source":"Crossref","is-referenced-by-count":0,"title":["RoPAR: Enhancing Adversarial Robustness with Progressive Image Aggregation and Reordering Noise"],"prefix":"10.1109","author":[{"given":"Jong-Hyun","family":"An","sequence":"first","affiliation":[{"name":"Korea University,Department of Artificial Intelligence,Seoul,Korea,02841"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jung-Ho","family":"Hong","sequence":"additional","affiliation":[{"name":"Korea University,Department of Artificial Intelligence,Seoul,Korea,02841"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hee-Dong","family":"Kim","sequence":"additional","affiliation":[{"name":"Korea University,Department of Artificial Intelligence,Seoul,Korea,02841"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seong-Whan","family":"Lee","sequence":"additional","affiliation":[{"name":"Korea University,Department of Artificial Intelligence,Seoul,Korea,02841"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-022-28451-0"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00614"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3006907"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/EMBC44109.2020.9175874"},{"key":"ref5","article-title":"Deep Reinforcement Learning in Continuous Action Spaces: a Case Study in the Game of Simulated Curling","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Lee","year":"2018"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.10.081"},{"key":"ref7","article-title":"Explaining and Harnessing Adversarial Examples","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Goodfellow","year":"2015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SMC53992.2023.10393964"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref10","article-title":"Glow: Generative Flow with Invertible 1x1 Convolutions","author":"Kingma","year":"2018","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref11","article-title":"Adversarial Purification with Score-based Generative Models","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Yoon","year":"2021"},{"key":"ref12","article-title":"Better Diffusion Models Further Improve Adversarial Training","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Wang","year":"2023"},{"key":"ref13","article-title":"Certified Adversarial Robust-ness via Randomized Smoothing","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Cohen","year":"2019"},{"key":"ref14","article-title":"Guided Diffusion Model for Adversarial Purification","author":"Wang","year":"2022","journal-title":"arXiv preprint"},{"key":"ref15","article-title":"Diffusion Models for Adversarial Purification","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Nie","year":"2022"},{"key":"ref16","article-title":"Guided Diffusion Model for Adversarial Purification from Random Noise","author":"Wu","year":"2022","journal-title":"arXiv preprint"},{"key":"ref17","article-title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Ran-domness","author":"Zhang","year":"2023","journal-title":"arXiv preprint"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/647"},{"key":"ref19","article-title":"(Certified!!) Adversarial Robustness for Free!","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Carlini","year":"2023"},{"key":"ref20","article-title":"Online Adversarial Purification based on Self-supervision","author":"Shi","year":"2021","journal-title":"arXiv preprint"},{"key":"ref21","article-title":"Score-based Generative Modeling through Stochastic Differential Equations","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Song","year":"2021"},{"key":"ref22","article-title":"Elucidating The Design Space of Diffusion-based Generative Models","author":"Karras","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref23","article-title":"Theoretically Principled Trade-off between Robust-ness and Accuracy","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Zhang","year":"2019"},{"key":"ref24","article-title":"ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Yang","year":"2019"},{"key":"ref25","article-title":"PixeIDe-fend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Song","year":"2018"},{"key":"ref26","article-title":"Implicit Generation and Modeling with Energy based Models","author":"Du","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref27","article-title":"Your Classifier Is Secretly an Energy based Model and You Should Treat It like One","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Grathwohl","year":"2020"},{"key":"ref28","article-title":"Stochastic Security: Adversarial Defense Using Long-run Dynamics of Energy-based Models","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Hill","year":"2021"},{"key":"ref29","article-title":"DISCO: Adversarial Defense with Local Implicit Functions","author":"Ho","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00445"},{"key":"ref31","article-title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Ding","year":"2020"},{"key":"ref32","article-title":"Overfitting in Adversarially Robust Deep Learning","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Rice","year":"2020"},{"key":"ref33","article-title":"Adversarial Weight Perturbation Helps Robust Generalization","author":"Wu","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref34","article-title":"Uncovering The Limits of Adversarial Training against Norm-bounded Adversarial Examples","author":"Gowal","year":"2020","journal-title":"arXiv preprint"},{"key":"ref35","article-title":"DPM-Solver: A Fast ODE Solver for Diffusion Prob-abilistic Model Sampling in Around 10 Steps","author":"Lu","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"},{"key":"ref36","article-title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","volume-title":"Int. Conf. Learn. Represent. (ICLR)","author":"Hendrycks","year":"2019"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref38","article-title":"Adversarial Risk and The Dangers of Evaluating against Weak Attacks","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Uesato","year":"2018"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref40","article-title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","volume-title":"Int. Conf. Mach. Learn. (ICML)","author":"Athalye","year":"2018"},{"key":"ref41","article-title":"Robust Evaluation of Diffusion-based Adver-sarial Purification","volume-title":"IEEE Int. Conf. Comput. Vis. (ICCV)","author":"Lee","year":"2023"},{"key":"ref42","article-title":"Unlabeled Data Improves Adversarial Robustness","author":"Carmon","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst. (NeurIPS)"}],"event":{"name":"2024 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","start":{"date-parts":[[2024,10,6]]},"location":"Kuching, Malaysia","end":{"date-parts":[[2024,10,10]]}},"container-title":["2024 IEEE International Conference on Systems, Man, and Cybernetics (SMC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10830919\/10830920\/10831979.pdf?arnumber=10831979","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T06:33:28Z","timestamp":1737441208000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10831979\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,6]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/smc54092.2024.10831979","relation":{},"subject":[],"published":{"date-parts":[[2024,10,6]]}}}