{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T15:19:13Z","timestamp":1777389553520,"version":"3.51.4"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172090"],"award-info":[{"award-number":["62172090"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62202438"],"award-info":[{"award-number":["62202438"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Start-Up Research Fund of Southeast University","award":["RF1028623097"],"award-info":[{"award-number":["RF1028623097"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3554041","type":"journal-article","created":{"date-parts":[[2025,3,24]],"date-time":"2025-03-24T18:00:03Z","timestamp":1742839203000},"page":"3772-3787","source":"Crossref","is-referenced-by-count":11,"title":["Improving Fast Adversarial Training via Self-Knowledge Guidance"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1681-8128","authenticated-orcid":false,"given":"Chengze","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junkai","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-1717-818X","authenticated-orcid":false,"given":"Minjing","family":"Dong","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9450-1759","authenticated-orcid":false,"given":"Jie","family":"Gui","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering and the Engineering Research Center of Blockchain Application, Supervision and Management, Ministry of Education, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4443-608X","authenticated-orcid":false,"given":"Xinli","family":"Shi","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1445-8210","authenticated-orcid":false,"given":"Yuan","family":"Cao","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Ocean University of China, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6887-130X","authenticated-orcid":false,"given":"Yuan Yan","family":"Tang","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Macau, Macau, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4828-8248","authenticated-orcid":false,"given":"James Tin-Yau","family":"Kwok","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3152247"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01173"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3220849"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3336527"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00414"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3390609"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3201243"},{"key":"ref8","first-page":"17222","article-title":"Adversarial examples are not real features","volume-title":"Proc. NeurIPS","author":"Li"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2024.3372456"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3326398"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00791"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3359820"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3184262"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3297791"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref16","first-page":"13931","article-title":"Revisiting adversarial training for ImageNet: Architectures, training and generalization across threat models","volume-title":"Proc. NeurIPS","author":"Singh"},{"key":"ref17","first-page":"5849","article-title":"Fast is better than free: Revisiting adversarial training","volume-title":"Proc. ICLR","author":"Wong"},{"key":"ref18","first-page":"12881","article-title":"Make some noise: Reliable and efficient single-step adversarial training","volume-title":"Proc. NeurIPS","author":"Jorge"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00766"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01305"},{"key":"ref21","first-page":"26693","article-title":"Revisiting and advancing fast adversarial training through the lens of bi-level optimization","volume-title":"Proc. ICML","author":"Zhang"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3593042"},{"key":"ref23","first-page":"30390","article-title":"Revisiting adversarial robustness distillation from the perspective of robust fairness","volume-title":"Proc. NeurIPS","volume":"36","author":"Yue"},{"key":"ref24","first-page":"11492","article-title":"To be robust or to be fair: Towards fairness in adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xu"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00792"},{"key":"ref26","first-page":"2664","article-title":"DAFA: Distance-aware fair adversarial training","volume-title":"Proc. ICLR","author":"Lee"},{"key":"ref27","first-page":"12464","article-title":"Adversarial training and provable defenses: Bridging the gap","volume-title":"Proc. ICLR","author":"Balunovi\u0107"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01543"},{"key":"ref29","first-page":"36246","article-title":"Better diffusion models further improve adversarial training","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","volume":"202","author":"Wang"},{"key":"ref30","first-page":"7779","article-title":"Boosting adversarial training with hypersphere embedding","volume-title":"Proc. NeurIPS","author":"Pang"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00435"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3371008"},{"key":"ref33","first-page":"11821","article-title":"Towards efficient and effective adversarial training","volume-title":"Proc. NeurIPS","volume":"34","author":"Sriramanan"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3420128"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i9.16989"},{"key":"ref36","first-page":"16048","article-title":"Understanding and improving fast adversarial training","volume-title":"Proc. NeurIPS","author":"Andriushchenko"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00126"},{"key":"ref38","first-page":"6950","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. ICLR","author":"Goodfellow"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3184255"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_33"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i12.26749"},{"key":"ref42","first-page":"20297","article-title":"Guided adversarial attack for evaluating and enhancing adversarial defenses","volume-title":"Proc. NeurIPS","author":"Sriramanan"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref46","first-page":"17258","article-title":"Robustness and accuracy could be reconcilable by (proper) definition","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Pang"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i6.28330"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00020"},{"key":"ref49","first-page":"1","article-title":"On the over-memorization during natural, robust and catastrophic overfitting","volume-title":"Proc. ICLR","author":"Lin"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3442188.3445910"},{"key":"ref51","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3381180"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01304"},{"key":"ref56","first-page":"8909","article-title":"Improving adversarial robustness requires revisiting misclassified examples","volume-title":"Proc. ICLR","author":"Wang"},{"key":"ref57","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. 36th Int. Conf. Mach. Learn. (ICML)","volume":"97","author":"Zhang"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref60","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce"},{"key":"ref61","article-title":"Torchattacks: A PyTorch repository for adversarial attacks","author":"Kim","year":"2020","journal-title":"arXiv:2010.01950"},{"key":"ref62","first-page":"70141","article-title":"Boosting adversarial transferability by achieving flat local maxima","volume-title":"Proc. NeurIPS","volume":"36","author":"Ge"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref64","first-page":"366","article-title":"Free lunch for domain adversarial training: Environment label smoothing","volume-title":"Proc. ICLR","author":"Zhang"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10937724.pdf?arnumber=10937724","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,14]],"date-time":"2025-04-14T17:37:18Z","timestamp":1744652238000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10937724\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":64,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3554041","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}