{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T18:36:12Z","timestamp":1780511772519,"version":"3.54.1"},"reference-count":70,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2018AAA0100100"],"award-info":[{"award-number":["2018AAA0100100"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302010"],"award-info":[{"award-number":["62302010"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62136008"],"award-info":[{"award-number":["62136008"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276001"],"award-info":[{"award-number":["62276001"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62206003"],"award-info":[{"award-number":["62206003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U21A20512"],"award-info":[{"award-number":["U21A20512"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003995","name":"Natural Science Foundation of Anhui Province","doi-asserted-by":"publisher","award":["2308085J03"],"award-info":[{"award-number":["2308085J03"]}],"id":[{"id":"10.13039\/501100003995","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2023M740015"],"award-info":[{"award-number":["2023M740015"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Emerg. Top. Comput. Intell."],"published-print":{"date-parts":[[2024,8]]},"DOI":"10.1109\/tetci.2024.3400867","type":"journal-article","created":{"date-parts":[[2024,5,29]],"date-time":"2024-05-29T17:34:05Z","timestamp":1717004045000},"page":"2919-2934","source":"Crossref","is-referenced-by-count":8,"title":["Hybrid Architecture-Based Evolutionary Robust Neural Architecture Search"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0837-5424","authenticated-orcid":false,"given":"Shangshang","family":"Yang","sequence":"first","affiliation":[{"name":"Key Laboratory of Intelligent Computing and Signal Processing of Ministry of Education, School of Artificial Intelligence, Anhui University, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4018-0891","authenticated-orcid":false,"given":"Xiangkun","family":"Sun","sequence":"additional","affiliation":[{"name":"Key Laboratory of Intelligent Computing and Signal Processing of Ministry of Education, School of Artificial Intelligence, Anhui University, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6266-4257","authenticated-orcid":false,"given":"Ke","family":"Xu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Intelligent Computing and Signal Processing of Ministry of Education, School of Artificial Intelligence, Anhui University, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7959-3712","authenticated-orcid":false,"given":"Yuanchao","family":"Liu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Synthetical Automation for Process Industries, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3487-5126","authenticated-orcid":false,"given":"Ye","family":"Tian","sequence":"additional","affiliation":[{"name":"Information Materials and Intelligent Sensing Laboratory of Anhui Province, School of Computer Science and Technology, Anhui University, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5052-000X","authenticated-orcid":false,"given":"Xingyi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Information Materials and Intelligent Sensing Laboratory of Anhui Province, School of Computer Science and Technology, Anhui University, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2601099"},{"key":"ref4","article-title":"One-shot learning for semantic segmentation","volume-title":"Proc. Brit. Mach. Vis. Conf.","author":"Shaban","year":"47, 2017"},{"key":"ref5","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. 3rd Int. Conf. Learn. Representations","author":"Goodfellow","year":"79, 2015"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2021.3122467"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2015.84"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3193373"},{"key":"ref10","first-page":"15","article-title":"Adversarial example defenses: Ensembles of weak defenses are not strong","volume-title":"Proc. 11th USENIX Conf. Offensive Technol.","author":"He","year":"2017"},{"key":"ref11","article-title":"Pixeldefend: Leveraging generative models to understand and defend against adversarial examples","author":"Song","year":"2017"},{"key":"ref12","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tramr","year":"2017"},{"key":"ref13","article-title":"Unlabeled data improves adversarial robustness","author":"Carmon","year":"2019"},{"key":"ref14","article-title":"Towards deep learning models resistant to adversarial attacks","volume-title":"Proc. 6th Int. Conf. Learn. Representations","author":"Madry","year":"2018"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00793"},{"key":"ref16","article-title":"Intriguing properties of adversarial training at scale","volume-title":"Proc. 8th Int. Conf. Learn. Representations","author":"Xie","year":"2630, 2020"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01173"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-05318-5_3"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3155230"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2023.3289974"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3096658"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3233364"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/tevc.2023.3348475"},{"key":"ref24","article-title":"Intriguing properties of adversarial examples","volume-title":"Proc. 6th Int. Conf. Learn. Representations","author":"Cubuk","year":"2018"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00907"},{"key":"ref26","article-title":"Evolving robust neural architectures to defend from adversarial attacks","author":"Vargas","year":"2019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00071"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01210"},{"key":"ref29","article-title":"Generalizable lightweight proxy for robust NAS against diverse perturbations","volume":"36","author":"Ha","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.04.111"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref32","article-title":"An empirical study on the robustness of NAS based architectures","author":"Devaguptapu","year":"2020"},{"key":"ref33","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01007"},{"key":"ref35","article-title":"On the adversarial robustness of vision transformers","author":"Shao","year":"2021"},{"key":"ref36","first-page":"24261","article-title":"Mlp-mixer: An all-mlp architecture for vision","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Tolstikhin","year":"2021"},{"key":"ref37","first-page":"25","article-title":"Adversarial robustness comparison of vision transformer and mlp-mixer to CNNs","volume-title":"Proc. 32nd Brit. Mach. Vis. Conf.","author":"Benz","year":"2225, 2021"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3214627"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_39"},{"key":"ref45","first-page":"27378","article-title":"Understanding the robustness in vision transformers","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhou","year":"2022"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3321707.3321729"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2020.3040272"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN54540.2023.10191955"},{"key":"ref49","article-title":"Dynamic routing between capsules","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Sabour","year":"2017"},{"key":"ref50","first-page":"26831","article-title":"Are transformers more robust than CNNs?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Bai","year":"2021"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3206148"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01625"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-72062-9_39"},{"key":"ref56","first-page":"24646","article-title":"Analyzing and mitigating interference in neural architecture search","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xu","year":"2022"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58601-0_5"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2023.3240221"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2018.2872055"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2918140"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892654"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2021.3137377"},{"key":"ref63","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref64","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. 3rd Int. Conf. Learn. Representations","author":"Simonyan","year":"79, 2015"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_8"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1117\/12.2520589"},{"key":"ref69","article-title":"Fast is better than free: Revisiting adversarial training","volume-title":"Proc. 8th Int. Conf. Learn. Representations","author":"Wong","year":"2630, 2020"},{"key":"ref70","article-title":"SignSGD via zeroth-order oracle","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Liu","year":"2019"}],"container-title":["IEEE Transactions on Emerging Topics in Computational Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7433297\/10607834\/10541069.pdf?arnumber=10541069","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,7]],"date-time":"2024-09-07T05:59:58Z","timestamp":1725688798000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10541069\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8]]},"references-count":70,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tetci.2024.3400867","relation":{},"ISSN":["2471-285X"],"issn-type":[{"value":"2471-285X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,8]]}}}