{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T01:25:58Z","timestamp":1782437158308,"version":"3.54.5"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Serv. Comput."],"published-print":{"date-parts":[[2022,11,1]]},"DOI":"10.1109\/tsc.2021.3090365","type":"journal-article","created":{"date-parts":[[2021,6,18]],"date-time":"2021-06-18T19:30:55Z","timestamp":1624044655000},"page":"3184-3197","source":"Crossref","is-referenced-by-count":8,"title":["Defending Adversarial Attacks via Semantic Feature Manipulation"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8938-2364","authenticated-orcid":false,"given":"Shuo","family":"Wang","sequence":"first","affiliation":[{"name":"CSIRO's Data61 & Cybersecurity CRC, Eveleigh, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3289-6599","authenticated-orcid":false,"given":"Surya","family":"Nepal","sequence":"additional","affiliation":[{"name":"CSIRO's Data61 & Cybersecurity CRC, Eveleigh, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9050-5675","authenticated-orcid":false,"given":"Carsten","family":"Rudolph","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6933-0145","authenticated-orcid":false,"given":"Marthie","family":"Grobler","sequence":"additional","affiliation":[{"name":"CSIRO's Data61 & Cybersecurity CRC, Eveleigh, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shangyu","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Melbourne, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianle","family":"Chen","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zike","family":"An","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, BC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref38","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016"},{"key":"ref33","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"xiao","year":"2017"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC48688.2020.0-224"},{"key":"ref30","first-page":"1105","article-title":"Learning deep energy models","author":"ng","year":"2011","journal-title":"Int Conf Mach Learn"},{"key":"ref37","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.50"},{"key":"ref40","article-title":"Foolbox: A python toolbox to benchmark the robustness of machine learning models","author":"rauber","year":"2017"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref14","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref16","article-title":"Distilling the knowledge in a neural network","author":"hinton","year":"2015"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref18","article-title":"Understanding adversarial training: Increasing local stability of neural nets through robust optimization","author":"shaham","year":"2015"},{"key":"ref19","article-title":"Explaining and harnessing adversarial examples (2014)","author":"goodfellow","year":"2014"},{"key":"ref28","article-title":"Deep unsupervised clustering with Gaussian mixture variational autoencoders","author":"dilokthanakul","year":"2016"},{"key":"ref4","article-title":"On detecting adversarial perturbations","author":"metzen","year":"2017"},{"key":"ref27","article-title":"Disentangling by factorising","author":"kim","year":"2018"},{"key":"ref3","article-title":"On the (statistical) detection of adversarial examples","author":"grosse","year":"2017"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01247"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11828"},{"key":"ref8","article-title":"Defense-GAN: Protecting classifiers against adversarial attacks using generative models","author":"samangouei","year":"2018"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref2","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2016"},{"key":"ref9","article-title":"Featurized bidirectional GAN: Adversarial defense via adversarially learned semantic inference","author":"bao","year":"2018"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00348"},{"key":"ref22","article-title":"There is no free lunch in adversarial robustness (but there are unexpected benefits)","author":"tsipras","year":"2018"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01446"},{"key":"ref42","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","author":"heusel","year":"2017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3105238"},{"key":"ref41","article-title":"Differentiable augmentation for data-efficient GAN training","author":"zhao","year":"2020"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2940533"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1147\/rd.41.0066"},{"key":"ref25","article-title":"beta-VAE: Learning basic visual concepts with a constrained variational framework","author":"higgins","year":"2017","journal-title":"Proc Int Conf Lear Representations"}],"container-title":["IEEE Transactions on Services Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4629386\/9985445\/09460767.pdf?arnumber=9460767","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,9]],"date-time":"2023-01-09T21:17:14Z","timestamp":1673299034000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9460767\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,1]]},"references-count":42,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tsc.2021.3090365","relation":{},"ISSN":["1939-1374","2372-0204"],"issn-type":[{"value":"1939-1374","type":"electronic"},{"value":"2372-0204","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,11,1]]}}}