{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:45:00Z","timestamp":1772041500064,"version":"3.50.1"},"reference-count":46,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179316","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"1384-1400","source":"Crossref","is-referenced-by-count":7,"title":["On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks"],"prefix":"10.1109","author":[{"given":"Salijona","family":"Dyrmishi","sequence":"first","affiliation":[{"name":"University of Luxembourg"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Salah","family":"Ghamizi","sequence":"additional","affiliation":[{"name":"University of Luxembourg"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thibault","family":"Simonetto","sequence":"additional","affiliation":[{"name":"University of Luxembourg"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yves Le","family":"Traon","sequence":"additional","affiliation":[{"name":"University of Luxembourg"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maxime","family":"Cordy","sequence":"additional","affiliation":[{"name":"University of Luxembourg"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2987435"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2805680"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409739"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24310"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"ref6","article-title":"Adversarial examples in constrained domains","author":"Sheatsley","year":"2020"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437513"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1316"},{"key":"ref9","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"International conference on machine learning","author":"Athalye"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS51040.2020.00064"},{"key":"ref11","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3544746"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00040"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref16","article-title":"Adversarial attacks for tabular data: Application to fraud detection and imbalanced data","author":"Cartella","year":"2021"},{"key":"ref17","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref18","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3374664.3375728"},{"key":"ref20","article-title":"A simple fine-tuning is all you need: Towards robust deep learning via adversarial fine-tuning","author":"Jeddi","year":"2020"},{"key":"ref21","first-page":"11278","article-title":"Attacks which do not kill training make adversarial learning stronger","volume-title":"International Conference on Machine Learning","author":"Zhang"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.341"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1103"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-demos.16"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2006.322210"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s12065-019-00310-w"},{"key":"ref27","article-title":"Adversarial robustness toolbox v1. 0.0","author":"Nicolae","year":"2018"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.11.001"},{"key":"ref29","article-title":"A unified framework for adversarial attack and defense in constrained feature space","author":"Simonetto","year":"2021"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427276"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-57321-8_17"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484570"},{"key":"ref36","article-title":"Evading classifiers in discrete domains with provable optimality guarantees","author":"Kulynych","year":"2018"},{"key":"ref37","article-title":"Not all datasets are born equal: On heterogeneous data and adversarial examples","author":"Levy","year":"2020"},{"key":"ref38","article-title":"Learning to evade static pe machine learning malware models via reinforcement learning","author":"Anderson","year":"2018"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23138"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1561"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.500"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3115\/1219840.1219855"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.148"},{"key":"ref44","article-title":"Character-level convolutional networks for text classification","author":"Zhang","year":"2015","journal-title":"NIPS"},{"key":"ref45","article-title":"Distilbert, a distilled version of bert: smaller, faster, cheaper and lighter","author":"Sanh","year":"2019"},{"key":"ref46","article-title":"On designing machine learning models for malicious network traffic classification","author":"Ongun","year":"2019"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179316.pdf?arnumber=10179316","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:15:16Z","timestamp":1721452516000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179316\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":46,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179316","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}