{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T16:40:54Z","timestamp":1778258454657,"version":"3.51.4"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"11","license":[{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2018AAA0102004"],"award-info":[{"award-number":["2018AAA0102004"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936219"],"award-info":[{"award-number":["U1936219"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62141607"],"award-info":[{"award-number":["62141607"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Beijing Academy of Artificial Intelligence"},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20387"],"award-info":[{"award-number":["U20A20387"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62006207"],"award-info":[{"award-number":["62006207"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Program of China","award":["2021YFC3340300"],"award-info":[{"award-number":["2021YFC3340300"]}]},{"name":"Young Elite Scientists Sponsorship Program by CAST","award":["2021QNRC001"],"award-info":[{"award-number":["2021QNRC001"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["72171131"],"award-info":[{"award-number":["72171131"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Tsinghua University Initiative Scientific Research","award":["2019THZWJC11"],"award-info":[{"award-number":["2019THZWJC11"]}]},{"name":"Technology and Innovation Major Project of the Ministry of Science and Technology of China","award":["2020AAA0108400"],"award-info":[{"award-number":["2020AAA0108400"]}]},{"name":"Technology and Innovation Major Project of the Ministry of Science and Technology of China","award":["2020AAA0108403"],"award-info":[{"award-number":["2020AAA0108403"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2023,11,1]]},"DOI":"10.1109\/tkde.2022.3224056","type":"journal-article","created":{"date-parts":[[2022,11,24]],"date-time":"2022-11-24T19:36:17Z","timestamp":1669318577000},"page":"11288-11300","source":"Crossref","is-referenced-by-count":7,"title":["Distributionally Robust Learning With Stable Adversarial Training"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9159-1752","authenticated-orcid":false,"given":"Jiashuo","family":"Liu","sequence":"first","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zheyan","family":"Shen","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2957-8511","authenticated-orcid":false,"given":"Peng","family":"Cui","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5978-4602","authenticated-orcid":false,"given":"Linjun","family":"Zhou","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7024-9790","authenticated-orcid":false,"given":"Kun","family":"Kuang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5599-8857","authenticated-orcid":false,"given":"Bo","family":"Li","sequence":"additional","affiliation":[{"name":"School of Economics and Management, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"Certifying some distributional robustness with principled adversarial training","author":"sinha","year":"2018","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-017-1125-8"},{"key":"ref12","first-page":"6892","article-title":"Bayesian adversarial learning","author":"ye","year":"2018","journal-title":"Proc 32nd Int Conf Neural Inf Process Syst"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1287\/opre.1090.0741"},{"key":"ref15","article-title":"Learning models with uniform performance via distributionally robust optimization","author":"duchi","year":"2018"},{"key":"ref37","article-title":"Distributionally robust logistic regression","author":"abadeh","year":"2015"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s10107-017-1172-1"},{"key":"ref36","first-page":"2208","article-title":"Stochastic gradient methods for distributionally robust optimization with F-divergences","author":"namkoong","year":"2016","journal-title":"Proc Neural Inf Process Syst"},{"key":"ref31","article-title":"Invariant risk minimization","author":"arjovsky","year":"2019"},{"key":"ref30","first-page":"36:1","article-title":"Invariant models for causal transfer learning","volume":"19","author":"rojas-carulla","year":"2018","journal-title":"J Mach Learn Res"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-022-00445-z"},{"key":"ref10","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220082"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2011.5995347"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1613\/jair.1872"},{"key":"ref17","article-title":"Distributionally robust neural networks for group shifts: On the importance of regularization for worst-case generalization","author":"sagawa","year":"2019"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220082"},{"key":"ref16","article-title":"Incorporating unlabeled data into distributionally robust learning","author":"frogner","year":"2019"},{"key":"ref38","first-page":"2029","article-title":"Does distributionally robust supervised learning give robust classifiers?","author":"hu","year":"2016","journal-title":"Proc 35th Int Conf Mach Learn"},{"key":"ref19","article-title":"Big but imperceptible adversarial perturbations via semantic manipulation","author":"bhattad","year":"2019","journal-title":"CoRR"},{"key":"ref18","article-title":"The caltech-UCSD birds-200–2011 dataset","author":"wah","year":"2011"},{"key":"ref24","first-page":"323","article-title":"Correcting sample selection bias in maximum entropy density estimation","author":"dud\u00edk","year":"2005","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref46","article-title":"UCI machine learning repository","author":"dua","year":"2017"},{"key":"ref23","first-page":"2137","article-title":"Discriminative learning under covariate shift","volume":"10","author":"bickel","year":"2009","journal-title":"J Mach Learn Res"},{"key":"ref45","first-page":"8346","article-title":"An investigation of why overparameterization exacerbates spurious correlations","author":"sagawa","year":"2020","journal-title":"Proc 37th Int Conf Mach Learn"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2013.368"},{"key":"ref25","first-page":"601","article-title":"Correcting sample selection bias by unlabeled data","author":"huang","year":"2006","journal-title":"Proc Adv Neural Inf Process Syst Proc 20th Annu Conf Neural Inf Process Syst"},{"key":"ref20","article-title":"Can attention masks improve adversarial robustness?","author":"vaishnavi","year":"2019"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-9868.2011.00771.x"},{"key":"ref41","first-page":"463","article-title":"Rademacher and gaussian complexities: Risk bounds and structural results","volume":"3","author":"bartlett","year":"2002","journal-title":"J Mach Learn Res"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/S0378-3758(00)00115-4"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240577"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2009.191"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1080\/00401706.1970.10488635"},{"key":"ref28","first-page":"-10i","article-title":"Domain generalization via invariant feature representation","author":"muandet","year":"2013","journal-title":"Proc 30th Int Conf Mach Learn"},{"key":"ref27","first-page":"1180","article-title":"Unsupervised domain adaptation by backpropagation","author":"ganin","year":"2015","journal-title":"Proc 32nd Int Conf Mach Learn"},{"key":"ref29","first-page":"947","article-title":"Causal inference using invariant prediction: Identification and confidence intervals","volume":"78","author":"peters","year":"2015","journal-title":"Statist"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1287\/moor.23.4.769"},{"key":"ref7","article-title":"An empirical evaluation of deep learning on highway driving","author":"huval","year":"2015"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/S0933-3657(03)00043-5"},{"key":"ref3","article-title":"Stable learning via sample reweighting","author":"shen","year":"2019"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1287\/inte.2018.0957"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1177\/0049124118782533"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5876"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/69\/10273671\/09961896.pdf?arnumber=9961896","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,30]],"date-time":"2023-10-30T19:30:41Z","timestamp":1698694241000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9961896\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,1]]},"references-count":46,"journal-issue":{"issue":"11"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2022.3224056","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"value":"1041-4347","type":"print"},{"value":"1558-2191","type":"electronic"},{"value":"2326-3865","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,11,1]]}}}