{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T18:44:17Z","timestamp":1782240257235,"version":"3.54.5"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2023YFE0209800"],"award-info":[{"award-number":["2023YFE0209800"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["T2341003"],"award-info":[{"award-number":["T2341003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62376210"],"award-info":[{"award-number":["62376210"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62161160337"],"award-info":[{"award-number":["62161160337"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62132011"],"award-info":[{"award-number":["62132011"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U21B2018"],"award-info":[{"award-number":["U21B2018"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20177"],"award-info":[{"award-number":["U20A20177"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62206217"],"award-info":[{"award-number":["62206217"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shaanxi Province Key Industry Innovation Program","award":["2023-ZDLGY-38"],"award-info":[{"award-number":["2023-ZDLGY-38"]}]},{"name":"Hong Kong Research Grants Council (RGC) General Research Fund (GRF) Projects","award":["12202922"],"award-info":[{"award-number":["12202922"]}]},{"name":"Hong Kong Research Grants Council (RGC) General Research Fund (GRF) Projects","award":["15238724"],"award-info":[{"award-number":["15238724"]}]},{"name":"Shenzhen Science and Technology Program","award":["JCYJ20230807140412025"],"award-info":[{"award-number":["JCYJ20230807140412025"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2024.3516554","type":"journal-article","created":{"date-parts":[[2024,12,12]],"date-time":"2024-12-12T19:09:06Z","timestamp":1734030546000},"page":"350-363","source":"Crossref","is-referenced-by-count":8,"title":["Hard Adversarial Example Mining for Improving Robust Fairness"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6265-7345","authenticated-orcid":false,"given":"Chenhao","family":"Lin","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiang","family":"Ji","sequence":"additional","affiliation":[{"name":"School of Software Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-9738-8417","authenticated-orcid":false,"given":"Yulong","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1073-7810","authenticated-orcid":false,"given":"Qian","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0745-4294","authenticated-orcid":false,"given":"Zhengyu","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6674-1640","authenticated-orcid":false,"given":"Zhe","family":"Peng","sequence":"additional","affiliation":[{"name":"Department of Industrial and Systems Engineering, The Hong Kong Polytechnic University, Hung Hom, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2842-5137","authenticated-orcid":false,"given":"Run","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1420-2047","authenticated-orcid":false,"given":"Liming","family":"Fang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6959-0569","authenticated-orcid":false,"given":"Chao","family":"Shen","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014","journal-title":"arXiv:1312.6199"},{"key":"ref2","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015","journal-title":"arXiv:1412.6572"},{"key":"ref3","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref4","first-page":"11492","article-title":"To be robust or to be fair: Towards fairness in adversarial training","volume-title":"Proc. ICML","author":"Xu"},{"key":"ref5","article-title":"Imbalanced adversarial training with reweighting","author":"Wang","year":"2021","journal-title":"arXiv:2107.13639"},{"key":"ref6","article-title":"Improving robust fairness via balance adversarial training","author":"Sun","year":"2022","journal-title":"arXiv:2209.07534"},{"key":"ref7","first-page":"1","article-title":"On the tradeoff between robustness and fairness","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ma"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.89"},{"key":"ref9","article-title":"An empirical study of example forgetting during deep neural network learning","author":"Toneva","year":"2018","journal-title":"arXiv:1812.05159"},{"key":"ref10","article-title":"Geometry-aware instance-reweighted adversarial training","author":"Zhang","year":"2020","journal-title":"arXiv:2010.01736"},{"key":"ref11","first-page":"1","article-title":"Improving adversarial robustness requires revisiting misclassified examples","volume-title":"Proc. ICLR","author":"Wang"},{"key":"ref12","article-title":"Adversarial weight perturbation helps robust generalization","author":"Wu","year":"2020","journal-title":"arXiv:2004.05884"},{"key":"ref13","first-page":"8093","article-title":"Overfitting in adversarially robust deep learning","volume-title":"Proc. ICML","author":"Rice"},{"key":"ref14","article-title":"Theoretically principled trade-off between robustness and accuracy","author":"Zhang","year":"2019","journal-title":"arXiv:1901.08573"},{"key":"ref15","first-page":"1","article-title":"Entropy weighted adversarial training","volume-title":"Proc. ICML Workshop Adversarial Mach. Learn.","author":"Kim"},{"key":"ref16","first-page":"1","article-title":"Reducing excessive margin to achieve a better accuracy vs. robustness trade-off","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Rade"},{"key":"ref17","first-page":"7520","article-title":"Enhance the visual representation via discrete adversarial training","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Mao"},{"key":"ref18","first-page":"36246","article-title":"Better diffusion models further improve adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Wang"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01578"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02364"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02307"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00030"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i12.26749"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02337"},{"key":"ref25","first-page":"227","article-title":"You only propagate once: Accelerating adversarial training via maximal principle","volume-title":"Proc. NeurIPS","volume":"32","author":"Zhang"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i12.17278"},{"key":"ref28","first-page":"3353","article-title":"Adversarial training for free","volume-title":"Proc. NeurIPS","volume":"32","author":"Shafahi"},{"key":"ref29","article-title":"Fast is better than free: Revisiting adversarial training","author":"Wong","year":"2020","journal-title":"arXiv:2001.03994"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.81"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2389824"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01572"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00176"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00141"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2858826"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00949"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3263619"},{"key":"ref38","first-page":"1","article-title":"Reading digits in natural images with unsupervised feature learning","volume-title":"Proc. NIPS","author":"Netzer"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref40","article-title":"Bag of tricks for adversarial training","author":"Pang","year":"2020","journal-title":"arXiv:2010.00467"},{"key":"ref41","article-title":"Boosting adversarial training with hypersphere embedding","author":"Pang","year":"2020","journal-title":"arXiv:2002.08619"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref43","first-page":"8193","article-title":"CFA: Class-wise calibrated fair adversarial training","volume-title":"Proc. IEEE\/CVF Conf. Comput. Vis. Pattern Recognit. (CVPR)","author":"Wei"},{"key":"ref44","first-page":"1561","article-title":"Analysis and applications of class-wise robustness in adversarial training","volume-title":"Proc. 27th ACM SIGKDD Conf. Knowl. Discovery Data Mining","author":"Tian"},{"key":"ref45","first-page":"325","article-title":"Robustness may be at odds with fairness: An empirical study on class-wise accuracy","volume-title":"Proc. NeurIPS Workshop Pre-Registration Mach. Learn.","author":"Benz"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3442188.3445910"},{"key":"ref47","first-page":"1","article-title":"Revisiting adversarial robustness distillation from the perspective of robust fairness","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","author":"Yue"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10795188.pdf?arnumber=10795188","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T07:16:02Z","timestamp":1735715762000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10795188\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3516554","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}