{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T10:25:37Z","timestamp":1778408737769,"version":"3.51.4"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2021,4,1]],"date-time":"2021-04-01T00:00:00Z","timestamp":1617235200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,4,1]],"date-time":"2021-04-01T00:00:00Z","timestamp":1617235200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,4,1]],"date-time":"2021-04-01T00:00:00Z","timestamp":1617235200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,4,1]],"date-time":"2021-04-01T00:00:00Z","timestamp":1617235200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61876095"],"award-info":[{"award-number":["61876095"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Beijing Academy of Artificial Intelligence"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2021,4,1]]},"DOI":"10.1109\/tpami.2019.2948348","type":"journal-article","created":{"date-parts":[[2019,10,21]],"date-time":"2019-10-21T23:40:45Z","timestamp":1571701245000},"page":"1129-1139","source":"Crossref","is-referenced-by-count":7,"title":["Adversarial Margin Maximization Networks"],"prefix":"10.1109","volume":"43","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1941-3537","authenticated-orcid":false,"given":"Ziang","family":"Yan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0709-4877","authenticated-orcid":false,"given":"Yiwen","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8088-367X","authenticated-orcid":false,"given":"Changshui","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-2545-2"},{"key":"ref33","article-title":"Max-margin adversarial (mma) training: Direct input space margin maximization through adversarial training","author":"ding","year":"2018","journal-title":"arXiv 1812 02637"},{"key":"ref32","first-page":"842","article-title":"Large margin deep networks for classification","author":"elsayed","year":"2018","journal-title":"Adv Neural Inf Process Syst"},{"key":"ref31","article-title":"On the margin theory of feedforward neural networks","author":"wei","year":"2018","journal-title":"arXiv 1810 05369"},{"key":"ref30","first-page":"2822","article-title":"The implicit bias of gradient descent on separable data","volume":"19","author":"soudry","year":"2018","journal-title":"J Mach Learn Res"},{"key":"ref37","article-title":"TensorFlow: Large-scale machine learning on heterogeneous systems","author":"abadi","year":"2015"},{"key":"ref36","article-title":"Automatic differentiation in pytorch","author":"paszke","year":"2017","journal-title":"Proc Conf Neural Inf Process Syst Workshop"},{"key":"ref35","first-page":"854","article-title":"Parseval networks: Improving robustness to adversarial examples","volume":"70","author":"cisse","year":"2017","journal-title":"Proc 34th Int Conf Mach Learn"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.713"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00552"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref22","first-page":"45","article-title":"Support vector machine active learning with applications to text classification","volume":"2","author":"tong","year":"2001","journal-title":"J Mach Learn Res"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.1997.609310"},{"key":"ref24","first-page":"207","article-title":"Distance metric learning for large margin nearest neighbor classification","volume":"10","author":"weinberger","year":"2009","journal-title":"J Mach Learn Res"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1023\/A:1012487302797"},{"key":"ref26","first-page":"2066","article-title":"On the depth of deep neural networks: A theoretical view","author":"sun","year":"2016","journal-title":"Proc AAAI"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.123"},{"key":"ref51","first-page":"1613","article-title":"Weight uncertainty in neural network","volume":"37","author":"blundell","year":"2015","journal-title":"Proc 32nd Int Conf Int Conf Mach Learn"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01261-8_1"},{"key":"ref52","first-page":"1058","article-title":"Regularization of neural networks using dropconnect","volume":"28","author":"wan","year":"2013","journal-title":"Proc 30th Int Conf Int Conf Mach Learn"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-011-5268-1"},{"key":"ref11","first-page":"417","article-title":"Deep defense: Training dnns with improved adversarial robustness","author":"yan","year":"2018","journal-title":"Proc 32nd Int Conf Neural Inf Process Syst"},{"key":"ref40","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref12","first-page":"615","article-title":"On convergence proofs on perceptrons","author":"novikoff","year":"1962","journal-title":"Proc Symp Math Theory Automata"},{"key":"ref13","article-title":"Deep learning using linear support vector machines","author":"tang","year":"2013","journal-title":"Proc Int Conf Mach Learn Workshop"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.242"},{"key":"ref15","first-page":"507","article-title":"Large-margin softmax loss for convolutional neural networks","volume":"48","author":"liu","year":"2016","journal-title":"Proc 33rd Int Conf Int Conf Mach Learn"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/138"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.289"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2017.2708039"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","first-page":"399","article-title":"Towards the science of security and privacy in machine learning","author":"papernot","year":"2018","journal-title":"Proc IEEE Symp on Security and Privacy"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2858821"},{"key":"ref5","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/72.788640"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994018"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref9","first-page":"547","article-title":"Large margin dags for multiclass classification","author":"platt","year":"2000","journal-title":"Proc 12th Int Conf Neural Inf Process Syst"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.415"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.634"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.514"},{"key":"ref41","article-title":"Reading digits in natural images with unsupervised feature learning","volume":"2011","author":"netzer","year":"2011","journal-title":"Proc NIPS Workshop Deep Learn Unsupervised Feature Learn"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref43","article-title":"Network in network","author":"lin","year":"2014","journal-title":"Proc Int Conf Learn Representations"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/34\/9370031\/8877866-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/9370031\/08877866.pdf?arnumber=8877866","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:49:13Z","timestamp":1652194153000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8877866\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,1]]},"references-count":53,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2019.2948348","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,1]]}}}