{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T16:36:43Z","timestamp":1774629403148,"version":"3.50.1"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Shaanxi Key Research and Development Program","award":["2021ZDLGY01-04"],"award-info":[{"award-number":["2021ZDLGY01-04"]}]},{"name":"Shaanxi Key Research and Development Program","award":["2022ZDLGY03-04"],"award-info":[{"award-number":["2022ZDLGY03-04"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Emerg. Top. Comput. Intell."],"published-print":{"date-parts":[[2024,8]]},"DOI":"10.1109\/tetci.2024.3370004","type":"journal-article","created":{"date-parts":[[2024,3,18]],"date-time":"2024-03-18T20:23:53Z","timestamp":1710793433000},"page":"3129-3140","source":"Crossref","is-referenced-by-count":3,"title":["VTFR-AT: Adversarial Training With Visual Transformation and Feature Robustness"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1984-2983","authenticated-orcid":false,"given":"Xiang","family":"Li","sequence":"first","affiliation":[{"name":"School of Electronics and Information, Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1971-6768","authenticated-orcid":false,"given":"Changfei","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Electronics and Information, Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8181-7001","authenticated-orcid":false,"given":"Xinyang","family":"Deng","sequence":"additional","affiliation":[{"name":"School of Electronics and Information, Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5429-2748","authenticated-orcid":false,"given":"Wen","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Electronics and Information, Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2020.3041019"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2784878"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2019.2960546"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SPW54247.2022.9833874"},{"key":"ref5","first-page":"1","article-title":"Skip connections matter: On the transferability of adversarial examples generated with resnets","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Wu","year":"2020"},{"key":"ref6","article-title":"Targeted attack against deep neural networks via flipping limited weight bits","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Bai","year":"2021"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58595-2_7"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3207917"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref10","first-page":"6586","article-title":"On the convergence and robustness of adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wang","year":"2019"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2020.2968933"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2019.2961157"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108472"},{"key":"ref14","first-page":"2958","article-title":"Adversarial weight perturbation helps robust generalization","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wu","year":"2020"},{"key":"ref15","first-page":"8093","article-title":"Overfitting in adversarially robust deep learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Rice","year":"2020"},{"key":"ref16","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang","year":"2019"},{"key":"ref17","first-page":"11278","article-title":"Attacks which do not kill training make adversarial learning stronger","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang","year":"2020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01304"},{"key":"ref19","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ilyas","year":"2019"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1126\/science.aav9436"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICAICE54393.2021.00146"},{"key":"ref22","first-page":"2135","article-title":"Biologically inspired mechanisms for adversarial robustness","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Vuyyuru","year":"2020"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref24","article-title":"Intriguing properties of neural networks","volume-title":"Proc. 2nd Int. Conf. Learn. Representations","author":"Szegedy","year":"2013"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref26","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow","year":"2015"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref29","first-page":"1","article-title":"Improving adversarial robustness requires revisiting misclassified examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Wang","year":"2020"},{"key":"ref30","first-page":"1","article-title":"Geometry-aware instance-reweighted adversarial training","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zhang","year":"2020"},{"key":"ref31","first-page":"11693","article-title":"Cifs: Improving adversarial robustness of CNNs via channel-wise importance-based feature selection","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yan","year":"2021"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00025"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19778-9_18"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00238"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00095"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00669"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2940533"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3092582"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00357"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3201294"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref43","article-title":"Detecting adversarial samples from artifacts","author":"Feinman","year":"2017"},{"key":"ref44","first-page":"1","article-title":"Provable robustness against all adversarial $l_{p}$-perturbations for $p\\geq 1$","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Croce","year":"2020"},{"key":"ref45","first-page":"1","article-title":"Certified robustness for top-k predictions against adversarial perturbations via randomized smoothing","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Jia","year":"2019"},{"key":"ref46","first-page":"8404","article-title":"Certified defense to image transformations via randomized smoothing","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Fischer","year":"2020"},{"key":"ref47","first-page":"1","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref48","first-page":"1","article-title":"Perceptual adversarial robustness: Defense against unseen threat models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Laidlaw","year":"2020"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref51","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce","year":"2020"},{"key":"ref52","first-page":"2196","article-title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce","year":"2020"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"}],"container-title":["IEEE Transactions on Emerging Topics in Computational Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7433297\/10607834\/10474405.pdf?arnumber=10474405","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,26]],"date-time":"2024-11-26T18:56:15Z","timestamp":1732647375000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10474405\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8]]},"references-count":53,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tetci.2024.3370004","relation":{},"ISSN":["2471-285X"],"issn-type":[{"value":"2471-285X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,8]]}}}