{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T19:23:53Z","timestamp":1740165833576,"version":"3.37.3"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61825203","62332007","U22B2028","61976120"],"award-info":[{"award-number":["61825203","62332007","U22B2028","61976120"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFC3303200"],"award-info":[{"award-number":["2022YFC3303200"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100021171","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"publisher","award":["2023A1515012111"],"award-info":[{"award-number":["2023A1515012111"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Projects in Guangzhou","award":["202201011734"],"award-info":[{"award-number":["202201011734"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Major Project of Tibetan Autonomous Region of China","award":["XZ202201ZD0006G"],"award-info":[{"award-number":["XZ202201ZD0006G"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2025,2]]},"DOI":"10.1109\/tnnls.2024.3359269","type":"journal-article","created":{"date-parts":[[2024,2,7]],"date-time":"2024-02-07T18:50:04Z","timestamp":1707331804000},"page":"2118-2132","source":"Crossref","is-referenced-by-count":0,"title":["A Statistical Physics Perspective: Understanding the Causality Behind Convolutional Neural Network Adversarial Vulnerability"],"prefix":"10.1109","volume":"36","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2460-7758","authenticated-orcid":false,"given":"Ke","family":"Wang","sequence":"first","affiliation":[{"name":"Engineering Research Center of Trustworthy AI, Ministry of Education, and the College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2216-0902","authenticated-orcid":false,"given":"Mingjia","family":"Zhu","sequence":"additional","affiliation":[{"name":"College of Information and Science, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4438-8740","authenticated-orcid":false,"given":"Zicong","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Information and Science, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4067-8230","authenticated-orcid":false,"given":"Jian","family":"Weng","sequence":"additional","affiliation":[{"name":"National Joint Engineering Research Center of Network Security Detection and Protection Technology, the Guangdong Key Laboratory of Data Security and Privacy Preserving, the Guangdong Hong Kong Joint Laboratory for Data Security and Privacy Protection, and the Engineering Research Center of Trustworthy AI, Ministry of Education, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0874-5010","authenticated-orcid":false,"given":"Ming","family":"Li","sequence":"additional","affiliation":[{"name":"College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3975-8500","authenticated-orcid":false,"given":"Siu-Ming","family":"Yiu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, The University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3180-7347","authenticated-orcid":false,"given":"Weiping","family":"Ding","sequence":"additional","affiliation":[{"name":"School of Information and Science, Nantong University, Nantong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1593-1292","authenticated-orcid":false,"given":"Tianlong","family":"Gu","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Trustworthy AI, Ministry of Education, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref3","first-page":"1632","article-title":"Robustness of classifiers: From adversarial to random noise","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Fawzi"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-017-5663-3"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2020.3030418"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.23915\/distill.00015"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2693418"},{"key":"ref8","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.319"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093360"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00910"},{"key":"ref14","first-page":"2668","article-title":"Interpretability beyond feature attribution: Quantitative testing with concept activation vectors (TCAV)","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Kim"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3089943"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3106831"},{"key":"ref17","article-title":"Mathematics of deep learning","author":"Vidal","year":"2017","journal-title":"arXiv:1712.04741"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3131377"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3131234"},{"key":"ref20","first-page":"7064","article-title":"Understanding geometry of encoder\u2013decoder CNNs","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ye"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-020-14578-5"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1088\/0256-307X\/38\/3\/038701"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2023.3321606"},{"key":"ref24","article-title":"An exact mapping between the variational renormalization group and deep learning","author":"Mehta","year":"2014","journal-title":"arXiv:1410.3831"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ITW.2015.7133169"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1146\/annurev-conmatphys-031119-050745"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevLett.124.248302"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3027428"},{"key":"ref29","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref30","article-title":"The space of transferable adversarial examples","author":"Tram\u00e8r","year":"2017","journal-title":"arXiv:1704.03453"},{"key":"ref31","first-page":"1","article-title":"Adversarial sphere","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Gilmer"},{"key":"ref32","article-title":"Adversarial examples are not bugs, they are features","volume-title":"Advances in Neural Information Processing Systems","volume":"32","author":"Ilyas","year":"2019"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3042083"},{"key":"ref34","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Ilyas"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2019.2934659"},{"key":"ref36","article-title":"PCACE: A statistical approach to ranking neurons for CNN interpretability","author":"Casacuberta","year":"2021","journal-title":"arXiv:2112.15571"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403272"},{"key":"ref38","article-title":"Topology and geometry of data manifold in deep learning","author":"Magai","year":"2022","journal-title":"arXiv:2204.08624"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1097\/00005373-199511000-00016"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3007259"},{"issue":"1","key":"ref41","first-page":"3327","article-title":"Phase diagram for twolayer ReLU neural networks at infinite-width limit","volume":"22","author":"Luo","year":"2021","journal-title":"J. Mach. Learn. Res."},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3202950"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109745"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3108520"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1201\/9781315274386"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.carbon.2021.01.158"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.ensm.2021.01.023"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.cemconres.2023.107235"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.chaos.2020.110077"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-21483-y"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.4324\/9781410605337-29"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3010287"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.compbiomed.2021.104319"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref55","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3054824"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5962385\/10877690\/10423791.pdf?arnumber=10423791","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,7]],"date-time":"2025-02-07T18:43:05Z","timestamp":1738953785000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10423791\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2]]},"references-count":56,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2024.3359269","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"type":"print","value":"2162-237X"},{"type":"electronic","value":"2162-2388"}],"subject":[],"published":{"date-parts":[[2025,2]]}}}