{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T12:47:19Z","timestamp":1763988439794,"version":"3.37.3"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CCF-1841190","CCF-1907786"],"award-info":[{"award-number":["CCF-1841190","CCF-1907786"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000735","name":"University of Cambridge","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000735","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Inform. Theory"],"published-print":{"date-parts":[[2024,1]]},"DOI":"10.1109\/tit.2023.3303221","type":"journal-article","created":{"date-parts":[[2023,8,7]],"date-time":"2023-08-07T17:58:22Z","timestamp":1691431102000},"page":"550-570","source":"Crossref","is-referenced-by-count":3,"title":["The Many Faces of Adversarial Risk: An Expanded Study"],"prefix":"10.1109","volume":"70","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0311-150X","authenticated-orcid":false,"given":"Muni Sreenivas","family":"Pydi","sequence":"first","affiliation":[{"name":"LAMSADE Research Center, Université Paris Dauphine-PSL, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Varun","family":"Jog","sequence":"additional","affiliation":[{"name":"Department of Pure Mathematics and Mathematical Statistics, University of Cambridge, Cambridge, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref2","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Cohen"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref7","article-title":"The robust manifold defense: Adversarial training using generative models","author":"Jalal","year":"2017","journal-title":"arXiv:1712.09196"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1002\/rob.21918"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3032227"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2016.2553401"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107332"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10278-021-00507-5"},{"key":"ref13","first-page":"1","article-title":"Law and adversarial machine learning","volume-title":"Proc. NIPS","author":"Kumar"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s10506-018-9238-9"},{"key":"ref15","first-page":"5025","article-title":"Adversarial risk and the dangers of evaluating against weak attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Uesato"},{"key":"ref16","first-page":"10359","article-title":"Adversarial risk and robustness: General definitions and implications for the uniform distribution","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","volume":"31","author":"Diochnos"},{"issue":"1","key":"ref17","first-page":"12521","article-title":"On the hardness of robust classification","volume":"22","author":"Gourdeau","year":"2021","journal-title":"J. Mach. Learn. Res."},{"key":"ref18","first-page":"7717","article-title":"Randomization matters how to defend against strong adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Pinot"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2021.3100107"},{"key":"ref20","first-page":"7677","article-title":"Mixed Nash equilibria in the adversarial examples game","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Meunier"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.04.027"},{"key":"ref22","first-page":"7814","article-title":"Adversarial risk via optimal transport and optimal couplings","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Pydi"},{"key":"ref23","first-page":"7496","article-title":"Lower bounds on adversarial robustness from optimal transport","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Bhagoji"},{"key":"ref24","first-page":"1646","article-title":"Generalized no free lunch theorem for adversarial robustness","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dohmatob"},{"key":"ref25","article-title":"Classifier-independent lower-bounds for adversarial robustness","author":"Dohmatob","year":"2020","journal-title":"arXiv:2006.09989"},{"key":"ref26","first-page":"1","article-title":"Distributionally robust deep learning as a generalization of adversarial training","volume-title":"Proc. NIPS","author":"Staib"},{"key":"ref27","first-page":"1","article-title":"Certifying some distributional robustness with principled adversarial training","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Sinha"},{"key":"ref28","first-page":"1","article-title":"Theoretical analysis of adversarial learning: A minimax approach","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Tu"},{"key":"ref29","first-page":"8921","article-title":"Adversarial example games","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Bose"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2016.2593488"},{"key":"ref31","volume-title":"Stochastic Optimal Control: The Discrete-Time Case","volume":"5","author":"Bertsekas","year":"1996"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1137\/0315056"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.5802\/aif.53"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1176342363"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177700153"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1090\/gsm\/058"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33014536"},{"key":"ref38","first-page":"10000","article-title":"The many faces of adversarial risk","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Pydi"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1090\/S0002-9939-1970-0260958-1"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.4064\/fm-1-1-105-111"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1307\/mmj\/1029003026"},{"key":"ref42","first-page":"2331","article-title":"Revisiting adversarial risk","volume-title":"Proc. 22nd Int. Conf. Artif. Intell. Statist.","author":"Suggala"},{"key":"ref43","first-page":"832","article-title":"When are non-parametric methods robust?","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Bhattacharjee"},{"key":"ref44","first-page":"509","article-title":"On \u03c3-porous sets in abstract spaces","volume-title":"Abstract and Applied Analysis","author":"Zajicek","year":"2005"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1090\/S0273-0979-02-00941-2"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-021-01673-8"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5821-1_4"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1214\/aop\/1176996763"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2018.2857763"},{"key":"ref50","article-title":"Asymptotics for Strassen\u2019s optimal transport problem","author":"Yu","year":"2019","journal-title":"arXiv:1912.02051"},{"issue":"1","key":"ref51","first-page":"8486","article-title":"Adversarial classification: Necessary conditions and geometric flows","volume":"23","author":"Trillos","year":"2022","journal-title":"J. Mach. Learn. Res."},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00283"},{"key":"ref53","first-page":"577","article-title":"Learning to defend by learning to attack","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Jiang"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00132"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.10.034"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.57262\/die\/1391091363"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-34514-5"},{"volume-title":"Understanding and Using Linear Programming","year":"2007","author":"Matousek","key":"ref58"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1002\/SERIES1345"}],"container-title":["IEEE Transactions on Information Theory"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/18\/10375320\/10210607-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/18\/10375320\/10210607.pdf?arnumber=10210607","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T23:52:21Z","timestamp":1705017141000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10210607\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1]]},"references-count":59,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tit.2023.3303221","relation":{},"ISSN":["0018-9448","1557-9654"],"issn-type":[{"type":"print","value":"0018-9448"},{"type":"electronic","value":"1557-9654"}],"subject":[],"published":{"date-parts":[[2024,1]]}}}