{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T17:04:45Z","timestamp":1780765485972,"version":"3.54.1"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2017YFB1002203"],"award-info":[{"award-number":["2017YFB1002203"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872329"],"award-info":[{"award-number":["61872329"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572451"],"award-info":[{"award-number":["61572451"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Startup Funding of Stevens Institute of Technology"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Image Process."],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/tip.2020.2975918","type":"journal-article","created":{"date-parts":[[2020,2,28]],"date-time":"2020-02-28T22:42:17Z","timestamp":1582929737000},"page":"4804-4815","source":"Crossref","is-referenced-by-count":44,"title":["Principal Component Adversarial Example"],"prefix":"10.1109","volume":"29","author":[{"given":"Yonggang","family":"Zhang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5952-8753","authenticated-orcid":false,"given":"Xinmei","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ya","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinchao","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7225-5449","authenticated-orcid":false,"given":"Dacheng","family":"Tao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"MagNet and ‘Efficient defenses against adversarial Attacks’ are not robust to adversarial examples","author":"carlini","year":"2017","journal-title":"arXiv 1711 08478"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref33","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref32","first-page":"2294","article-title":"The manifold tangent classifier","author":"rifai","year":"2011","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.50"},{"key":"ref30","first-page":"895","article-title":"Tangent prop-a formalism for specifying selected invariances in an adaptive network","author":"simard","year":"1992","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref37","article-title":"On the (statistical) detection of adversarial examples","author":"grosse","year":"2017","journal-title":"arXiv 1702 06280"},{"key":"ref36","first-page":"449","article-title":"Learning to find graph pre-images","author":"bak?r","year":"2004","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref35","first-page":"1","article-title":"Algorithms for manifold learning","volume":"12","author":"cayton","year":"2005"},{"key":"ref34","first-page":"849","article-title":"Manifold parzen windows","author":"vincent","year":"2003","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref10","article-title":"Adversarial manipulation of deep representations","author":"sabour","year":"2015","journal-title":"arXiv 1511 05122"},{"key":"ref40","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2016.58"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2016.7727230"},{"key":"ref13","article-title":"Analysis of classifiers’ robustness to adversarial perturbations","author":"fawzi","year":"2015","journal-title":"arXiv 1502 02590"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2015.84"},{"key":"ref15","article-title":"Towards deep neural network architectures robust to adversarial examples","author":"gu","year":"2014","journal-title":"arXiv 1412 5068 [cs]"},{"key":"ref16","first-page":"427","article-title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","author":"nguyen","year":"2015","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit (CVPR)"},{"key":"ref17","first-page":"1632","article-title":"Robustness of classifiers: From adversarial to random noise","author":"fawzi","year":"2016","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref18","article-title":"Analysis of universal adversarial perturbations","author":"moosavi-dezfooli","year":"2017","journal-title":"arXiv 1705 09554"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2740965"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2765833"},{"key":"ref27","article-title":"Generative adversarial trainer: Defense to adversarial perturbations with GAN","author":"lee","year":"2017","journal-title":"arXiv 1705 03387"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref8","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016","journal-title":"arXiv 1605 07277"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2754941"},{"key":"ref2","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"arXiv 1409 1556"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref1","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Proc Neural Inf Process Syst (NIPS)"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.5201\/ipol.2012.l-bm3d"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2710631"},{"key":"ref22","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2016.0045"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2647868.2654889"},{"key":"ref24","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2016","journal-title":"arXiv 1611 01236"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref23","article-title":"A boundary tilting persepective on the phenomenon of adversarial examples","author":"tanay","year":"2016","journal-title":"arXiv 1608 07690"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2688133"},{"key":"ref26","article-title":"PixelDefend: Leveraging generative models to understand and defend against adversarial examples","author":"song","year":"2017","journal-title":"arXiv 1710 10766"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref25","article-title":"Adversarial spheres","author":"gilmer","year":"2018","journal-title":"arXiv 1801 02774"}],"container-title":["IEEE Transactions on Image Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/83\/8835130\/09018372.pdf?arnumber=9018372","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T14:38:47Z","timestamp":1651070327000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9018372\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":46,"URL":"https:\/\/doi.org\/10.1109\/tip.2020.2975918","relation":{},"ISSN":["1057-7149","1941-0042"],"issn-type":[{"value":"1057-7149","type":"print"},{"value":"1941-0042","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}