{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T18:22:17Z","timestamp":1791483737513,"version":"4.3.4"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2011260"],"award-info":[{"award-number":["CNS-2011260"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-2011236"],"award-info":[{"award-number":["CCF-2011236"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-2006748"],"award-info":[{"award-number":["CCF-2006748"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1109\/tnnls.2021.3089128","type":"journal-article","created":{"date-parts":[[2021,6,28]],"date-time":"2021-06-28T21:16:38Z","timestamp":1624914998000},"page":"3-14","source":"Crossref","is-referenced-by-count":12,"title":["Model Compression Hardens Deep Neural Networks: A New Perspective to Prevent Adversarial Attacks"],"prefix":"10.1109","volume":"34","author":[{"given":"Qi","family":"Liu","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Lehigh University, Bethlehem, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0011-0675","authenticated-orcid":false,"given":"Wujie","family":"Wen","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Lehigh University, Bethlehem, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"ref3","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref4","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref5","article-title":"Realistic adversarial examples in 3D meshes","volume-title":"arXiv:1810.05206","author":"Yang","year":"2018"},{"key":"ref6","first-page":"1","article-title":"Characterizing audio adversarial examples using temporal dependency","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Yang"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00095"},{"key":"ref12","first-page":"1","article-title":"On detecting adversarial perturbations","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Metzen"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.284"},{"key":"ref15","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","volume-title":"Proc. 6th Int. Conf. Learn. Represent. (ICLR)","author":"Tram\u00e8r"},{"key":"ref16","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Simonyan"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref20","first-page":"1","article-title":"Adversarial machine learning at scale","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kurakin"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref23","article-title":"Defensive distillation is not robust to adversarial examples","volume-title":"arXiv:1607.04311","author":"Carlini","year":"2016"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11302"},{"key":"ref25","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref27","first-page":"1135","article-title":"Learning both weights and connections for efficient neural network","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Han"},{"key":"ref28","article-title":"Deep compression: Compressing deep neural networks with pruning, trained quantization and Huffman coding","volume-title":"arXiv:1510.00149","author":"Han","year":"2015"},{"key":"ref29","first-page":"2285","article-title":"Compressing neural networks with the hashing trick","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Chen"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.598"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00673"},{"key":"ref32","first-page":"3358","article-title":"Adversarial training for free!","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Shafahi"},{"key":"ref33","first-page":"1","article-title":"You only propagate once: Painless adversarial training using maximal principle","volume-title":"Proc. 33rd Conf. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref34","first-page":"1","article-title":"Towards deep neural network architectures robust to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Gu"},{"key":"ref35","first-page":"1285","article-title":"Model compression with adversarial robustness: A unified optimization framework","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Gui"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00020"},{"key":"ref37","first-page":"1","article-title":"Interpreting adversarial robustness: A view from decision surface in input space","volume-title":"Proc. 28th Int. Joint Conf. Artif. Intell. (IJCAI)","author":"Yu"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_32"},{"key":"ref39","article-title":"Adversarial logit pairing","volume-title":"arXiv:1803.06373","author":"Kannan","year":"2018"},{"key":"ref40","article-title":"Cleverhans v2. 0.0: An adversarial machine learning library","volume-title":"arXiv:1610.00768","author":"Papernot","year":"2016"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref42","article-title":"Attacking the Madry defense model with L\u2081-based adversarial examples","volume-title":"arXiv:1710.10733","author":"Sharma","year":"2017"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/5962385\/10007736\/9466420-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5962385\/10007736\/09466420.pdf?arnumber=9466420","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T23:58:42Z","timestamp":1705017522000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9466420\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1]]},"references-count":42,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2021.3089128","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"value":"2162-237X","type":"print"},{"value":"2162-2388","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1]]}}}