{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T15:05:02Z","timestamp":1772204702396,"version":"3.50.1"},"reference-count":90,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"DFG Priority Programme","award":["DFG-SPP 1798"],"award-info":[{"award-number":["DFG-SPP 1798"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2023,1,1]]},"DOI":"10.1109\/tpami.2022.3148324","type":"journal-article","created":{"date-parts":[[2022,2,4]],"date-time":"2022-02-04T20:42:25Z","timestamp":1644007345000},"page":"1119-1134","source":"Crossref","is-referenced-by-count":83,"title":["Solving Inverse Problems With Deep Neural Networks \u2013 Robustness Included?"],"prefix":"10.1109","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2133-2579","authenticated-orcid":false,"given":"Martin","family":"Genzel","sequence":"first","affiliation":[{"name":"Mathematical Institute, Utrecht University, CS Utrecht, The Netherlands"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6657-7481","authenticated-orcid":false,"given":"Jan","family":"Macdonald","sequence":"additional","affiliation":[{"name":"Institute of Mathematics, Technical University of Berlin, Berlin, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6623-2467","authenticated-orcid":false,"given":"Maximilian","family":"Marz","sequence":"additional","affiliation":[{"name":"Institute of Mathematics, Technical University of Berlin, Berlin, Germany"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1088\/1361-6420\/aa9581"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1093\/imaiai\/iau005"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref70","first-page":"9562","article-title":"Differentiable convex optimization layers","author":"agrawal","year":"2019","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref76","article-title":"Pytorch implementation of scikit-image's radon function, version 0.1.4","author":"ernst","year":"2020"},{"key":"ref77","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1088\/0031-9155\/53\/17\/021"},{"key":"ref39","article-title":"Total deep variation: A stable regularizer for inverse problems","author":"kobler","year":"2020"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2017.2760978"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TCI.2016.2644865"},{"key":"ref79","author":"kaipio","year":"2006","journal-title":"Statistical and Computational Inverse Problems"},{"key":"ref33","article-title":"A complete list of all (arXiv) adversarial example papers","author":"carlini","year":"2020"},{"key":"ref32","article-title":"Automatic differentiation in PyTorch","author":"paszke","year":"2017"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1148\/ryai.2020190007"},{"key":"ref30","article-title":"fastMRI: An open dataset and benchmarks for accelerated MRI","author":"zbontar","year":"2018"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1137\/0524069"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2019.2919707"},{"key":"ref35","article-title":"Optimism in the face of adversity: Understanding and improving deep learning through adversarial robustness","author":"ortiz-jimenez","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/0167-2789(92)90242-F"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1017\/S0962492918000016"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s002110050258"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2005.862083"},{"key":"ref28","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2017"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2013.2264681"},{"key":"ref27","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1137\/140978569"},{"key":"ref66","article-title":"Compressed sensing with 1D total variation: Breaking sample complexity barriers via non-uniform recovery","author":"genzel","year":"2021","journal-title":"Inf Inference"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref67","first-page":"41","article-title":"Sur l’approximation, par éléments finis d’ordre un, et la résolution, par pénalisation-dualité d’une classe de problèmes de Dirichlet non linéaires","volume":"9","author":"glowinski","year":"1975","journal-title":"RAIRO Math Model Num"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/0898-1221(76)90003-1"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.914732"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.914728"},{"key":"ref20","article-title":"Deep, deep trouble: Deep learning's impact on image processing, mathematics, and humanity","author":"elad","year":"2017"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TCI.2020.2990299"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2017.2715284"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1907377117"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00928-1_17"},{"key":"ref26","first-page":"7932","article-title":"Improving robustness of deep-learning-based image reconstruction","author":"raj","year":"2020","journal-title":"Proc 37th Int Conf Mach Learn"},{"key":"ref25","article-title":"The troublesome kernel: Why deep learning for inverse problems is typically unstable","author":"gottschling","year":"2020"},{"key":"ref50","article-title":"dAUTOMAP: Decomposing AUTOMAP to achieve scalability and enhance performance","author":"schlemper","year":"2019"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2018.2865356"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaw4399"},{"key":"ref59","first-page":"3371","article-title":"Stacked denoising autoencoders: Learning useful representations in a deep network with a local denoising criterion","volume":"11","author":"vincent","year":"2010","journal-title":"J Mach Learn Res"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1995.7.1.108"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/72.105415"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/0893-6080(91)90033-2"},{"key":"ref55","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2014"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3012955"},{"key":"ref53","article-title":"$\\Sigma$?-net: Systematic evaluation of iterative deep neural networks for fast parallel MR Image reconstruction","author":"hammernik","year":"2019"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2018.2799231"},{"key":"ref10","first-page":"10","article-title":"Deep ADMM-net for compressive sensing MRI","author":"yang","year":"2016","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2015.2439281"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s10851-019-00911-1"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1002\/mp.12344"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2713099"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1002\/mrm.26977"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1364\/BOE.8.000679"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-69802-1_6"},{"key":"ref16","first-page":"537","article-title":"Compressed sensing using generative models","author":"bora","year":"2017","journal-title":"Proc 34th Int Conf Mach Learn"},{"key":"ref81","article-title":"Can stable and accurate neural networks be computed? On the barriers of deep learning and Smale's 18th problem","author":"antun","year":"2021"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1038\/nature25988"},{"key":"ref84","article-title":"Adversarial machine learning in image classification: A survey towards the defender's perspective","author":"machado","year":"2020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1088\/1361-6420\/ab10ca"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1137\/16M1059205"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1017\/S0962492919000059"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972344"},{"key":"ref89","first-page":"121","article-title":"Addressing the false negative problem of deep learning MRI reconstruction models by adversarial attacks and robust training","author":"cheng","year":"2020","journal-title":"Proc 3rd Conf Med Imag Deep Learn"},{"key":"ref4","first-page":"159","article-title":"Inverse problems = quest for information","volume":"50","author":"tarantola","year":"1981","journal-title":"J Geophys"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1086\/342606"},{"key":"ref6","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref5","doi-asserted-by":"crossref","DOI":"10.1007\/978-0-8176-4948-7","author":"foucart","year":"2013","journal-title":"A Mathematical Introduction to Compressive Sensing"},{"key":"ref85","first-page":"9446","article-title":"Deep image prior","author":"ulyanov","year":"2018","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit"},{"key":"ref8","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1088\/1361-6420\/ab6d57"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"lecun","year":"2015","journal-title":"Nature"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1002\/mrm.28338"},{"key":"ref88","article-title":"State-of-the-art machine learning MRI reconstruction in 2020: Results of the second fastMRI challenge","author":"muckley","year":"2020"},{"key":"ref9","first-page":"399","article-title":"Learning fast approximations of sparse coding","author":"gregor","year":"2010","journal-title":"Proc 27th Int Conf Int Conf Mach Learn"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2017.2708987"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.156"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2018.2827462"},{"key":"ref42","first-page":"16","article-title":"Limitations of the Lipschitz constant as a defense against adversarial examples","author":"huster","year":"2018","journal-title":"Proc Eur Conf Mach Learn Knowl Discovery Databases"},{"key":"ref41","first-page":"3839","article-title":"Lipschitz regularity of deep neural networks: Analysis and efficient estimation","author":"virmaux","year":"2018","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref44","first-page":"234","article-title":"U-Net: Convolutional networks for biomedical image segmentation","author":"ronneberger","year":"2015","journal-title":"Proc Int Conf Med Image Comput Comput Assist Interv"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/JSAIT.2020.2991563"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/9970415\/09705105.pdf?arnumber=9705105","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,26]],"date-time":"2022-12-26T19:14:07Z","timestamp":1672082047000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9705105\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,1]]},"references-count":90,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2022.3148324","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,1]]}}}