{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T19:58:41Z","timestamp":1784231921548,"version":"3.55.0"},"reference-count":80,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["91418206"],"award-info":[{"award-number":["91418206"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61802413"],"award-info":[{"award-number":["61802413"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672523"],"award-info":[{"award-number":["61672523"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61472429"],"award-info":[{"award-number":["61472429"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Science and Technology Major Project of China","award":["2012ZX01039-004"],"award-info":[{"award-number":["2012ZX01039-004"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2021,1,1]]},"DOI":"10.1109\/tdsc.2018.2874243","type":"journal-article","created":{"date-parts":[[2018,10,5]],"date-time":"2018-10-05T19:10:52Z","timestamp":1538766652000},"page":"72-85","source":"Crossref","is-referenced-by-count":180,"title":["Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4818-7164","authenticated-orcid":false,"given":"Bin","family":"Liang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongcheng","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miaoqiang","family":"Su","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xirong","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5160-1223","authenticated-orcid":false,"given":"Wenchang","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaofeng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/585"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517320"},{"key":"ref71","article-title":"Feature weighting for improved classifier robustness","author":"ko?cz","year":"2009","journal-title":"Proc 6th Conf Email Anti-Spam"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143889"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref74","first-page":"62","article-title":"Adversarial examples for malware detection","author":"grosse","year":"2017","journal-title":"Eur Symp Research in Computer Security"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-7970-4"},{"key":"ref75","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv 1607 02533"},{"key":"ref38","year":"0"},{"key":"ref78","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"0"},{"key":"ref79","article-title":"Learning adversary-resistant deep neural networks","author":"wang","year":"2016"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6639343"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2986035.2986039"},{"key":"ref31","doi-asserted-by":"crossref","DOI":"10.1038\/nature21056","article-title":"Dermatologist-level classification of skin cancer with deep neural networks","volume":"542","author":"esteva","year":"2017","journal-title":"Nature"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref37","year":"0"},{"key":"ref36","article-title":"cleverhans v2.0.0: an adversarial machine learning library","author":"papernot","year":"2016"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s10278-007-9044-5"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.1980.4766994"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23115"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.32"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020495"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref64","first-page":"2617","article-title":"Static prediction games for adversarial learning problems","volume":"13","author":"br\u00fcckner","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref27","first-page":"37","article-title":"Evaluation: From precision, recall and f-measure to ROC, informedness, markedness and correlation","volume":"2","author":"powers","year":"2011","journal-title":"J Mach Learn Technol"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ICSMC.2011.6083796"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvlc.2009.01.010"},{"key":"ref29","first-page":"387","article-title":"Evasion attacks against machine learning at test time","author":"biggio","year":"2017","journal-title":"Proc Eur Conf Mach Learn Knowl Discovery Databases"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02326-2_14"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-010-0007-7"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12127-2_8"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2010.5537907"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2016.12.038"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1989.1.4.541"},{"key":"ref21","first-page":"646","article-title":"Measuring invariances in deep networks","author":"goodfellow","year":"2009","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref24","year":"0"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2647868.2654889"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref25","first-page":"248","article-title":"ImageNet: A large-scale hierarchical image database","author":"jia","year":"2009","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit"},{"key":"ref50","article-title":"Adversarial and clean data are not twins","author":"gong","year":"2017"},{"key":"ref51","article-title":"On short interval expansion of rényi entropy","volume":"11","author":"chen","year":"2013","journal-title":"J High Energy Phys"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2872427.2883060"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref57","first-page":"197","article-title":"Practical evasion of a learning-based classifier: A case study","author":"laskov","year":"2014","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484327"},{"key":"ref55","first-page":"1","article-title":"Exploiting machine learning to subvert your spam filter","author":"nelson","year":"2008","journal-title":"USENIX Workshop on Large-scale Exploits and Emergent Threats"},{"key":"ref54","first-page":"125","article-title":"Good word attacks on statistical spam filters","author":"lowd","year":"2005","journal-title":"Proc 2nd Conf Email Anti-Spam"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref10","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2005.1561863"},{"key":"ref12","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"0"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2015.2478068"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref17","article-title":"Detecting adversarial samples from artifacts","author":"feinman","year":"0"},{"key":"ref18","article-title":"On detecting adversarial perturbations","author":"metzen","year":"2017"},{"key":"ref19","article-title":"On the (statistical) detection of adversarial examples","author":"grosse","year":"2017"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098158"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TASL.2011.2134090"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1390156.1390177"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.244"},{"key":"ref7","first-page":"649","article-title":"Character-level convolutional networks for text classification","author":"zhang","year":"2015","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CISS.2018.8362326"},{"key":"ref9","first-page":"1988","article-title":"Deep learning face representation by joint identification-verification","author":"sun","year":"2014","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref46","year":"0"},{"key":"ref45","article-title":"A study of the effect of JPG compression on adversarial images","author":"dziugaite","year":"2016"},{"key":"ref48","article-title":"Early methods for detecting adversarial images","author":"hendrycks","year":"2016"},{"key":"ref47","first-page":"5775","article-title":"Adversarial examples detection in deep networks with convolutional filter statistics","author":"li","year":"2016","journal-title":"ICCV"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.14257\/ijseia.2013.7.5.11"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.7472\/jksii.2012.13.3.61"},{"key":"ref44","article-title":"Non-uniform quantization of detail components in wavelet transformed image for lossy JPEG2000 compression","author":"srivastava","year":"2012"},{"key":"ref43","first-page":"174","article-title":"Digital image processing techniques","volume":"2","author":"ekstrom","year":"2012"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9316344\/08482346.pdf?arnumber=8482346","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T12:41:24Z","timestamp":1643200884000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8482346\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,1]]},"references-count":80,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2018.2874243","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,1]]}}}