{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T10:00:13Z","timestamp":1740132013392,"version":"3.37.3"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Plan","award":["2016YFB1000203"],"award-info":[{"award-number":["2016YFB1000203"]}]},{"DOI":"10.13039\/501100011227","name":"State Key Laboratory of Computer Architecture","doi-asserted-by":"publisher","award":["3509"],"award-info":[{"award-number":["3509"]}],"id":[{"id":"10.13039\/501100011227","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Natural Science Foundation of USA","doi-asserted-by":"publisher","award":["CCF-1744082","CCF-1717657"],"award-info":[{"award-number":["CCF-1744082","CCF-1717657"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006510","name":"Duke University and Chinese Scholarship Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006510","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2020,12]]},"DOI":"10.1109\/tcad.2020.2969982","type":"journal-article","created":{"date-parts":[[2020,1,28]],"date-time":"2020-01-28T22:47:15Z","timestamp":1580251635000},"page":"4791-4804","source":"Crossref","is-referenced-by-count":1,"title":["FCDM: A Methodology Based on Sensor Pattern Noise Fingerprinting for Fast Confidence Detection to Adversarial Attacks"],"prefix":"10.1109","volume":"39","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2166-1938","authenticated-orcid":false,"given":"Yazhu","family":"Lan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kent W.","family":"Nixon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3587-634X","authenticated-orcid":false,"given":"Qingli","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guohe","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuanchao","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3228-6544","authenticated-orcid":false,"given":"Hai","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1486-8412","authenticated-orcid":false,"given":"Yiran","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Foveation-based mechanisms alleviate adversarial examples","year":"2015","author":"luo","key":"ref39"},{"journal-title":"Robust physical-world attacks on machine learning models","year":"2017","author":"evtimov","key":"ref38"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.56"},{"journal-title":"Distributionally adversarial attack","year":"2018","author":"zheng","key":"ref32"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"journal-title":"Keeping the bad guys out Protecting and vaccinating deep learning with JPEG compression","year":"2017","author":"das","key":"ref30"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2006.873602"},{"article-title":"EagleEye: Attack-agnostic defense against adversarial inputs (technical report)","year":"2018","author":"ji","key":"ref36"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"journal-title":"Feature squeezing Detecting adversarial examples in deep neural networks","year":"2017","author":"xu","key":"ref34"},{"journal-title":"Explaining and Harnessing Adversarial Examples","year":"2014","author":"goodgellow","key":"ref28"},{"journal-title":"On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses","year":"2018","author":"athalye","key":"ref27"},{"journal-title":"Dimensionality reduction as a defense against evasion attacks on machine learning classifiers","year":"2017","author":"bhagoji","key":"ref29"},{"key":"ref2","first-page":"173","article-title":"Deep Speech2: End-to-end speech recognition in English and Mandarin","author":"amodei","year":"2016","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.169"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3289602.3293975"},{"journal-title":"Adversarial examples in the physical world","year":"2016","author":"kurakin","key":"ref22"},{"journal-title":"Adversarial machine learning at scale","year":"2016","author":"kurakin","key":"ref21"},{"journal-title":"Towards deep learning models resistant to adversarial attacks","year":"2017","author":"madry","key":"ref24"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"journal-title":"Black-box Adversarial Attacks with Limited Queries and Information","year":"2018","author":"ilyas","key":"ref26"},{"journal-title":"One pixel attack for fooling deep neural networks","year":"2017","author":"su","key":"ref25"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240603"},{"journal-title":"Adversarial attack type I Generating false positives","year":"2018","author":"tang","key":"ref11"},{"key":"ref40","first-page":"104","article-title":"A digital watermarking algorithm based on DCT and DWT","author":"jiansheng","year":"2009","journal-title":"Proc Int Symp Web Inf Syst Appl (WISA)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240791"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ASPDAC.2018.8297407"},{"journal-title":"On detecting adversarial perturbations","year":"2017","author":"metzen","key":"ref16"},{"journal-title":"A multi-strength adversarial training method to mitigate adversarial attacks","year":"2017","author":"song","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2007.916285"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.3390\/s18041296"},{"journal-title":"Generative adversarial examples","year":"2018","author":"song","key":"ref4"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref6","first-page":"2040","article-title":"Robust deep reinforcement learning with adversarial attacks","author":"pattanaik","year":"2018","journal-title":"Proc 7th Int Conf Auton Agents Multiagent Syst"},{"journal-title":"Adversarial attack on graph structured data","year":"2018","author":"dai","key":"ref5"},{"key":"ref8","first-page":"2672","article-title":"Generative adversarial nets","author":"goodfellow","year":"2014","journal-title":"Proc Adv Neural Inf Process Syst"},{"journal-title":"Intriguing properties of neural networks","year":"2013","author":"szegedy","key":"ref7"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23415"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"journal-title":"Defense-GAN Protecting classifiers against adversarial attacks using generative models","year":"2018","author":"samangouei","key":"ref46"},{"journal-title":"On the (statistical) detection of adversarial examples","year":"2017","author":"grosse","key":"ref45"},{"key":"ref48","first-page":"7728","article-title":"Attacks meet interpretability: Attribute-steered detection of adversarial samples","author":"tao","year":"2018","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref47","first-page":"4584","article-title":"Towards robust detection of adversarial examples","author":"pang","year":"2018","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00296-0_5"},{"key":"ref41","doi-asserted-by":"crossref","first-page":"280","DOI":"10.1109\/TIFS.2010.2046268","article-title":"Source camera identification using enhanced sensor pattern noise","volume":"5","author":"li","year":"2010","journal-title":"IEEE Trans Inf Forensics Security"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2013.2276869"},{"key":"ref43","first-page":"3253","article-title":"Spatially adaptive statistical modeling of wavelet image coefficients and its application to denoising","volume":"6","author":"mihcak","year":"1999","journal-title":"Proc IEEE Int Conf Acoust Speech Signal Process"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/43\/9265421\/8972580-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9265421\/08972580.pdf?arnumber=8972580","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T14:06:25Z","timestamp":1651068385000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8972580\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12]]},"references-count":49,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2020.2969982","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"type":"print","value":"0278-0070"},{"type":"electronic","value":"1937-4151"}],"subject":[],"published":{"date-parts":[[2020,12]]}}}