{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T22:12:31Z","timestamp":1778278351272,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,11,5]],"date-time":"2018-11-05T00:00:00Z","timestamp":1541376000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,11,5]]},"DOI":"10.1145\/3240765.3240791","type":"proceedings-article","created":{"date-parts":[[2018,11,6]],"date-time":"2018-11-06T13:36:57Z","timestamp":1541511417000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":33,"title":["DeepFense"],"prefix":"10.1145","author":[{"given":"Bita Darvish","family":"Rouhani","sequence":"first","affiliation":[{"name":"University of California San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammad","family":"Samragh","sequence":"additional","affiliation":[{"name":"University of California San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mojan","family":"Javaheripi","sequence":"additional","affiliation":[{"name":"University of California San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tara","family":"Javidi","sequence":"additional","affiliation":[{"name":"University of California San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Farinaz","family":"Koushanfar","sequence":"additional","affiliation":[{"name":"University of California San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,11,5]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.51"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1561\/2000000039"},{"key":"e_1_3_2_1_3_1","unstructured":"E. Knorr \"How paypal beats the bad guys with machine learning \" 2015."},{"key":"e_1_3_2_1_4_1","first-page":"39","volume-title":"IEEE","author":"Carlini N.","year":"2017","unstructured":"N. Carlini and D. Wagner, \"Towards evaluating the robustness of neural networks,\" in IEEE Symposium on Security and Privacy (SP). IEEE, 2017, pp. 39--57."},{"key":"e_1_3_2_1_5_1","volume-title":"Explaining and harnessing adversarial examples,\" arXiv preprint arXiv:1412.6572","author":"Goodfellow I. J.","year":"2014","unstructured":"I. J. Goodfellow, J. Shlens, and C. Szegedy, \"Explaining and harnessing adversarial examples,\" arXiv preprint arXiv:1412.6572, 2014."},{"key":"e_1_3_2_1_6_1","volume-title":"Adversarial examples in the physical world,\" arXiv preprint arXiv:1607.02533","author":"Kurakin A.","year":"2016","unstructured":"A. Kurakin, I. Goodfellow, and S. Bengio, \"Adversarial examples in the physical world,\" arXiv preprint arXiv:1607.02533, 2016."},{"key":"e_1_3_2_1_7_1","first-page":"2574","article-title":"Deepfool: a simple and accurate method to fool deep neural networks","author":"Moosavi-Dezfooli S.-M.","year":"2016","unstructured":"S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, \"Deepfool: a simple and accurate method to fool deep neural networks,\" in IEEE Conference on Computer Vision and Pattern Recognition, 2016, pp. 2574--2582.","journal-title":"IEEE Conference on Computer Vision and Pattern Recognition"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140449"},{"key":"e_1_3_2_1_10_1","article-title":"Ape-gan: Adversarial perturbation elimination with gan","author":"Shen S.","year":"2017","unstructured":"S. Shen, G. Jin, K. Gao, and Y. Zhang, \"Ape-gan: Adversarial perturbation elimination with gan,\" ICLR Submission, available on OpenReview, 2017.","journal-title":"ICLR Submission, available on OpenReview"},{"key":"e_1_3_2_1_11_1","volume-title":"Magnet and\" efficient defenses against adversarial attacks\" are not robust to adversarial examples,\" arXiv preprint arXiv:1711.08478","author":"Carlini N.","year":"2017","unstructured":"N. Carlini and D. Wagner, \"Magnet and\" efficient defenses against adversarial attacks\" are not robust to adversarial examples,\" arXiv preprint arXiv:1711.08478, 2017."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2684746.2689060"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2644865.2541967"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/3195638.3195659"},{"key":"e_1_3_2_1_15_1","volume-title":"Customizing neural networks for efficient fpga implementation,\" in Field-Programmable Custom Computing Machines (FCCM)","author":"Samragh M.","year":"2017","unstructured":"M. Samragh, M. Ghasemzadeh, and F. Koushanfar, \"Customizing neural networks for efficient fpga implementation,\" in Field-Programmable Custom Computing Machines (FCCM). IEEE, 2017."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3061639.3062225"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2007.909108"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/2074473.2074485"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM.2015.56"},{"key":"e_1_3_2_1_20_1","volume-title":"Towards deep neural network architectures robust to adversarial examples,\" arXiv preprint arXiv:1412.5068","author":"Gu S.","year":"2014","unstructured":"S. Gu and L. Rigazio, \"Towards deep neural network architectures robust to adversarial examples,\" arXiv preprint arXiv:1412.5068, 2014."},{"key":"e_1_3_2_1_21_1","volume-title":"Understanding adversarial training: Increasing local stability of neural nets through robust optimization,\" arXiv preprint arXiv:1511.05432","author":"Shaham U.","year":"2015","unstructured":"U. Shaham, Y. Yamada, and S. Negahban, \"Understanding adversarial training: Increasing local stability of neural nets through robust optimization,\" arXiv preprint arXiv:1511.05432, 2015."},{"key":"e_1_3_2_1_22_1","volume-title":"Intriguing properties of neural networks,\" arXiv preprint arXiv:1312.6199","author":"Szegedy C.","year":"2013","unstructured":"C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, \"Intriguing properties of neural networks,\" arXiv preprint arXiv:1312.6199, 2013."},{"key":"e_1_3_2_1_23_1","volume-title":"Distributional smoothing with virtual adversarial training,\" arXiv preprint arXiv:1507.00677","author":"Miyato T.","year":"2015","unstructured":"T. Miyato, S.-i. Maeda, M. Koyama, K. Nakae, and S. Ishii, \"Distributional smoothing with virtual adversarial training,\" arXiv preprint arXiv:1507.00677, 2015."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"e_1_3_2_1_25_1","volume-title":"Defensive distillation is not robust to adversarial examples,\" arXiv preprint","author":"Carlini N.","year":"2016","unstructured":"N. Carlini and D. Wagner, \"Defensive distillation is not robust to adversarial examples,\" arXiv preprint, 2016."}],"event":{"name":"ICCAD '18: IEEE\/ACM INTERNATIONAL CONFERENCE ON COMPUTER-AIDED DESIGN","location":"San Diego California","acronym":"ICCAD '18","sponsor":["IEEE-EDS Electronic Devices Society","IEEE CAS","IEEE CEDA"]},"container-title":["Proceedings of the International Conference on Computer-Aided Design"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3240765.3240791","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3240765.3240791","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:57:33Z","timestamp":1750208253000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3240765.3240791"}},"subtitle":["online accelerated defense against adversarial deep learning"],"short-title":[],"issued":{"date-parts":[[2018,11,5]]},"references-count":25,"alternative-id":["10.1145\/3240765.3240791","10.1145\/3240765"],"URL":"https:\/\/doi.org\/10.1145\/3240765.3240791","relation":{},"subject":[],"published":{"date-parts":[[2018,11,5]]},"assertion":[{"value":"2018-11-05","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}