{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T17:26:52Z","timestamp":1773250012617,"version":"3.50.1"},"reference-count":72,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["92167106"],"award-info":[{"award-number":["92167106"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62103362"],"award-info":[{"award-number":["62103362"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61833014"],"award-info":[{"award-number":["61833014"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004731","name":"Natural Science Foundation of Zhejiang Province","doi-asserted-by":"publisher","award":["LR18F030001"],"award-info":[{"award-number":["LR18F030001"]}],"id":[{"id":"10.13039\/501100004731","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Ind. Inf."],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1109\/tii.2022.3197190","type":"journal-article","created":{"date-parts":[[2022,8,8]],"date-time":"2022-08-08T19:55:38Z","timestamp":1659988538000},"page":"5-19","source":"Crossref","is-referenced-by-count":35,"title":["Attack and Defense: Adversarial Security of Data-Driven FDC Systems"],"prefix":"10.1109","volume":"19","author":[{"given":"Yue","family":"Zhuo","sequence":"first","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5850-2941","authenticated-orcid":false,"given":"Zhenqin","family":"Yin","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2071-4380","authenticated-orcid":false,"given":"Zhiqiang","family":"Ge","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}]}],"member":"263","reference":[{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00714"},{"key":"ref71","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","author":"ilyas","year":"0","journal-title":"Proc Adv Neural Inf Process Syst 32 Annu Conf Neural Inf Process Syst"},{"key":"ref70","article-title":"Towards deep neural network architectures robust to adversarial examples","author":"gu","year":"0","journal-title":"Proc 3rd Int Conf Learn Representations"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CogSIMA.2013.6523858"},{"key":"ref38","article-title":"Evaluating robustness of neural networks with mixed integer programming","author":"tjeng","year":"0","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2908992"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00205"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.441"},{"key":"ref30","article-title":"Robustbench: A standardized adversarial robustness benchmark","author":"croce","year":"0","journal-title":"Proc Neural Inf Process Syst Track Datasets Benchmarks"},{"key":"ref37","first-page":"1","article-title":"Variational autoencoder based anomaly detection using reconstruction probability","volume":"2","author":"an","year":"2015","journal-title":"Special lecture"},{"key":"ref36","volume":"1","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2950272"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2796068"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataSecurity-HPSC-IDS49724.2020.00027"},{"key":"ref62","article-title":"Countering adversarial images using input transformations","author":"guo","year":"0","journal-title":"Proc 6th Int Conf Learn Representations"},{"key":"ref61","article-title":"FenceBox: A platform for defeating adversarial examples with data augmentation techniques","author":"qiu","year":"2020"},{"key":"ref63","article-title":"Distilling the knowledge in a neural network","author":"hinton","year":"0","journal-title":"Proc NIPS Deep Learn Representation Learn Workshop"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1215"},{"key":"ref65","article-title":"Sparse DNNs with improved adversarial robustness","volume":"31","author":"guo","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref66","article-title":"Training for faster adversarial robustness verification via inducing ReLU stability","author":"xiao","year":"0","journal-title":"Proc 7th Int Conf Learn Representations"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00040"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11504"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1561\/9781601982957"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SNPD.2017.8022700"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2021.3053128"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2013.2243743"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref22","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3117608"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2019.11.001"},{"key":"ref23","article-title":"IMDb Datasets","year":"0"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-60239-0_19"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/0098-1354(93)80018-I"},{"key":"ref50","article-title":"SoK: Certified robustness for deep neural networks","author":"li","year":"2020","journal-title":"arXiv 2009 04131"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68167-2_18"},{"key":"ref59","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref58","first-page":"833","article-title":"Contractive auto-encoders: Explicit invariance during feature extraction","author":"rifai","year":"0","journal-title":"Proc 28th Int Conf Mach Learn"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.mlwa.2020.100017"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00494"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2016.7798400"},{"key":"ref52","first-page":"3578","article-title":"Differentiable abstract interpretation for provably robust neural networks","volume":"80","author":"mirman","year":"0","journal-title":"Proc 35th Int Conf Mach Learn"},{"key":"ref10","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"0","journal-title":"Proc 6th Int Conf Learn Representations"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.procir.2016.07.038"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2013.2266831"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2014.2300753"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.120"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref16","article-title":"The threat of adversarial attacks on machine learning in network security-A survey","author":"ibitoye","year":"2019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1800573"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3447556.3447566"},{"key":"ref19","article-title":"A survey of adversarial learning on graphs","author":"chen","year":"2020"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2866403"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2852491"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/INDIN.2017.8104910"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2943898"},{"key":"ref8","article-title":"Adversarial attacks and defences: A survey","author":"chakraborty","year":"2018"},{"key":"ref7","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"0","journal-title":"Proc 2nd Int Conf Learn Representations"},{"key":"ref49","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"0","journal-title":"Proc 5th Int Conf Learn Representations"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"0","journal-title":"Proc 3rd Int Conf Learn Representations"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref47","first-page":"5025","article-title":"Adversarial risk and the dangers of evaluating against weak attacks","volume":"80","author":"uesato","year":"0","journal-title":"Proc 35th Int Conf Mach Learn"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2805680"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.3390\/electronics9060893","article-title":"Wireless sensor network for ignitions detection: An IoT approach","volume":"9","author":"brito","year":"2020","journal-title":"Electronics"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2020.2984868"}],"container-title":["IEEE Transactions on Industrial Informatics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9424\/9944026\/09852307.pdf?arnumber=9852307","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,2]],"date-time":"2025-04-02T17:52:58Z","timestamp":1743616378000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9852307\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1]]},"references-count":72,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tii.2022.3197190","relation":{},"ISSN":["1551-3203","1941-0050"],"issn-type":[{"value":"1551-3203","type":"print"},{"value":"1941-0050","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1]]}}}