{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T11:12:29Z","timestamp":1778238749653,"version":"3.51.4"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2022,12,1]],"date-time":"2022-12-01T00:00:00Z","timestamp":1669852800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,12,1]],"date-time":"2022-12-01T00:00:00Z","timestamp":1669852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,12,1]],"date-time":"2022-12-01T00:00:00Z","timestamp":1669852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"SmartMore"},{"name":"ITF Partnership Research Programme","award":["PRP\/65\/20FX"],"award-info":[{"award-number":["PRP\/65\/20FX"]}]},{"DOI":"10.13039\/501100002920","name":"Research Grants Council of Hong Kong","doi-asserted-by":"publisher","award":["CUHK14209420"],"award-info":[{"award-number":["CUHK14209420"]}],"id":[{"id":"10.13039\/501100002920","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2022,12]]},"DOI":"10.1109\/tcad.2022.3166112","type":"journal-article","created":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T19:26:32Z","timestamp":1649445992000},"page":"5193-5206","source":"Crossref","is-referenced-by-count":4,"title":["Counteracting Adversarial Attacks in Autonomous Driving"],"prefix":"10.1109","volume":"41","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5153-6698","authenticated-orcid":false,"given":"Qi","family":"Sun","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, SAR, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xufeng","family":"Yao","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, SAR, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arjun Ashok","family":"Rao","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, SAR, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6406-4810","authenticated-orcid":false,"given":"Bei","family":"Yu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, SAR, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2512-0634","authenticated-orcid":false,"given":"Shiyan","family":"Hu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Electronic Engineering, University of Southampton, Southampton, U.K"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093429"},{"key":"ref38","first-page":"1","article-title":"Adversarial training methods for semi-supervised text classification","author":"miyato","year":"2017","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16394"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.211"},{"key":"ref31","first-page":"2672","article-title":"Generative adversarial nets","author":"goodfellow","year":"2014","journal-title":"Proc Conf Neural Inf Process Syst (NIPS)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.56"},{"key":"ref37","article-title":"Searching for activation functions","author":"ramachandran","year":"2017","journal-title":"arXiv 1710 05941"},{"key":"ref36","article-title":"Gaussian error linear units (GELUs)","author":"hendrycks","year":"2016","journal-title":"arXiv 1606 08415"},{"key":"ref35","article-title":"Fast and accurate deep network learning by exponential linear units (ELUs)","author":"clevert","year":"2015","journal-title":"arXiv 1511 07289"},{"key":"ref34","first-page":"472","article-title":"Incorporating second-order functional knowledge for better option pricing","volume":"13","author":"dugas","year":"2001","journal-title":"Proc Conf Neural Inf Process Syst (NIPS)"},{"key":"ref60","first-page":"1","article-title":"A closer look at accuracy vs. robustness","author":"yang","year":"2020","journal-title":"Proc Conf Neural Inf Process Syst (NIPS)"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-0599-9"},{"key":"ref28","first-page":"1","article-title":"Mitigating adversarial effects through randomization","author":"xie","year":"2018","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref29","article-title":"Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression","author":"das","year":"2017","journal-title":"arXiv 1705 02900"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2019.2892405"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3400302.3415758"},{"key":"ref20","first-page":"52","article-title":"ShapeShifter: Robust physical adversarial attack on faster R-CNN object detector","author":"chen","year":"2018","journal-title":"Proc Eur Conf Mach Learn Knowl Discovery Databases"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01291"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"ref23","article-title":"Adversarial t-shirt! Evading person detectors in a physical world","author":"xu","year":"2019","journal-title":"arXiv 1910 11099"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref25","first-page":"284","article-title":"Synthesizing robust adversarial examples","author":"athalye","year":"2018","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2012.6248074"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298925"},{"key":"ref59","first-page":"6586","article-title":"On the convergence and robustness of adversarial training","volume":"97","author":"wang","year":"2019","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref58","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","author":"zhang","year":"2019","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref57","first-page":"1","article-title":"Robustness may be at odds with accuracy","author":"tsipras","year":"2019","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01093"},{"key":"ref55","article-title":"Adversarial defense via local flatness regularization","author":"xu","year":"2019","journal-title":"arXiv 1910 12165"},{"key":"ref54","first-page":"13842","article-title":"Adversarial robustness through local linearization","author":"qin","year":"2019","journal-title":"Proc Conf Neural Inf Process Syst (NIPS)"},{"key":"ref53","first-page":"507","article-title":"Large-margin softmax loss for convolutional neural networks","volume":"2","author":"liu","year":"2016","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00643"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00203"},{"key":"ref11","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref40","article-title":"Smooth adversarial training","author":"xie","year":"2020","journal-title":"arXiv 2006 14536"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref14","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1705 07204"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"ref16","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv 1607 02533"},{"key":"ref17","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref18","first-page":"231","article-title":"Robust adversarial perturbation on deep proposal-based models","author":"li","year":"2018","journal-title":"Proc Brit Mach Vis Conf (BMVC)"},{"key":"ref19","first-page":"218","article-title":"Exploring the vulnerability of single shot module in object detectors via imperceptible background patches","author":"li","year":"2019","journal-title":"Proc Brit Mach Vis Conf (BMVC)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2706685"},{"key":"ref3","first-page":"91","article-title":"Faster R-CNN: Towards real-time object detection with region proposal networks","author":"ren","year":"2015","journal-title":"Proc Int Conf Adv Neural Inf Process Syst"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00567"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01216-8_40"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00783"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00448"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01543"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01255"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00392"},{"key":"ref45","first-page":"383","article-title":"Private adaptive gradient methods for convex optimization","author":"asi","year":"2021","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486878"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/130"},{"key":"ref42","article-title":"RAB: Provable robustness against backdoor attacks","author":"weber","year":"2020","journal-title":"arXiv 2003 08904"},{"key":"ref41","first-page":"8230","article-title":"Certified robustness to label-flipping attacks via randomized smoothing","author":"rosenfeld","year":"2020","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref44","first-page":"152","article-title":"On learnability via gradient method for two-layer ReLU neural networks in teacher-student setting","author":"akiyama","year":"2021","journal-title":"Proc Int Conf Mach Learn (ICML)"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2975654"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9956950\/09751711.pdf?arnumber=9751711","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:43:22Z","timestamp":1670874202000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9751711\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12]]},"references-count":61,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2022.3166112","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"value":"0278-0070","type":"print"},{"value":"1937-4151","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,12]]}}}