{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:30:38Z","timestamp":1750221038362,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,11,5]],"date-time":"2018-11-05T00:00:00Z","timestamp":1541376000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,11,5]]},"DOI":"10.1145\/3240765.3267502","type":"proceedings-article","created":{"date-parts":[[2018,11,6]],"date-time":"2018-11-06T13:36:57Z","timestamp":1541511417000},"page":"1-6","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Efficient utilization of adversarial training towards robust machine learners and its analysis"],"prefix":"10.1145","author":[{"given":"Sai Manoj P","family":"D","sequence":"first","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sairaj","family":"Amberkar","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Setareh","family":"Rafatirad","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Houman","family":"Homayoun","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,11,5]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2857080"},{"key":"e_1_3_2_1_2_1","unstructured":"E. Ackerman \"How drive.ai is mastering autonomous driving with deep learning \" accessed August 2018. {Online}. Available: https:\/\/spectrum.ieee.org\/cars-that-think\/transportation\/self-driving\/how-driveai-is-mastering-autonomous-driving-with-deep-learning"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/2999134.2999257"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2485922.2485970"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2016.09.014"},{"key":"e_1_3_2_1_6_1","volume-title":"EnsembleHMD: Accurate hardware malware detectors with specialized ensemble classifiers","author":"Khasawneh K. N.","year":"2018","unstructured":"K. N. Khasawneh, M. Ozsoy, C. Donovick, N. Abu-Ghazaleh, and D. Ponomarev, \"EnsembleHMD: Accurate hardware malware detectors with specialized ensemble classifiers,\" 2018."},{"key":"e_1_3_2_1_7_1","unstructured":"F. Brasser and et al \"Hardware-assisted security: Understanding security vulnerabilities and emerging attacks for better defenses\" in International Conference on Compilers Architecture and Synthesis for Embedded Systems (CASES) 2018."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196047"},{"key":"e_1_3_2_1_9_1","volume-title":"Intriguing properties of neural networks,\" in International Conference on Learning Representations (ICLR)","author":"Szegedy C.","year":"2014","unstructured":"C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I.J. Goodfellow, and R. Fergus, \"Intriguing properties of neural networks,\" in International Conference on Learning Representations (ICLR), 2014."},{"key":"e_1_3_2_1_10_1","volume-title":"Explaining and harnessing adversarial examples,\" in International Conference on Learning Representations (ICLR)","author":"Goodfellow I. J.","year":"2015","unstructured":"I. J. Goodfellow, J. Shlens, and C. Szegedy, \"Explaining and harnessing adversarial examples,\" in International Conference on Learning Representations (ICLR), 2015."},{"key":"e_1_3_2_1_11_1","volume-title":"The limitations of deep learning in adversarial settings,\" in IEEE European Symposium on Security and Privacy (Euro S&P)","author":"Papernot N.","year":"2016","unstructured":"N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, \"The limitations of deep learning in adversarial settings,\" in IEEE European Symposium on Security and Privacy (Euro S&P), 2016."},{"key":"e_1_3_2_1_12_1","volume-title":"Delving into transferable adversarial examples and black-box attacks,\" in International Conference on Learning Representations (ICLR)","author":"Liu Y.","year":"2017","unstructured":"Y. Liu, X. Chen, C. Liu, and D. Song, \"Delving into transferable adversarial examples and black-box attacks,\" in International Conference on Learning Representations (ICLR), 2017."},{"key":"e_1_3_2_1_13_1","volume-title":"Mnist digit dataset,\" accessed","author":"LeCun Y.","year":"2018","unstructured":"Y. LeCun, C. Cortes, and C. J. Burges, \"Mnist digit dataset,\" accessed August 2018. {Online}. Available: http:\/\/yann.lecun.com\/exdb\/mnist\/"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"e_1_3_2_1_16_1","volume-title":"Impact of artificial \"gummy\" fingers on fingerprint systems","author":"Matsumoto T.","year":"2002","unstructured":"T. Matsumoto, H. Matsumoto, K. Yamada, and S. Hoshino, \"Impact of artificial \"gummy\" fingers on fingerprint systems.\" vol. 26, 04 2002."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.5555\/1387709.1387716"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/3042573.3042761"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/3045118.3045298"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"e_1_3_2_1_22_1","volume-title":"Understanding adversarial training: increasing local stability of neural nets through robust optimization,\" ArXiv e-prints","author":"Shaham U.","year":"2015","unstructured":"U. Shaham, Y. Yamada, and S. Negahban, \"Understanding adversarial training: increasing local stability of neural nets through robust optimization,\" ArXiv e-prints, 2015."},{"key":"e_1_3_2_1_23_1","volume-title":"Adversarial examples in the physical world,\" in International Conference on Learning Representations","author":"Kurakin A.","year":"2017","unstructured":"A. Kurakin, I. Goodfellow, and S. Bengio, \"Adversarial examples in the physical world,\" in International Conference on Learning Representations, 2017."},{"key":"e_1_3_2_1_24_1","volume-title":"Boosting adversarial attacks with momentum,\" in Neural Information Processing Systems Conference","author":"Dong Y.","year":"2017","unstructured":"Y. Dong, F. Liao, T. Pang, H. Su, J. Zhu, X. Hu, and J. Li, \"Boosting adversarial attacks with momentum,\" in Neural Information Processing Systems Conference, 2017."},{"key":"e_1_3_2_1_25_1","volume-title":"Distillation as a defense to adversarial perturbations against deep neural networks,\" in IEEE Symposium on Security and Privacy (S&P)","author":"Papernot N.","year":"2016","unstructured":"N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, \"Distillation as a defense to adversarial perturbations against deep neural networks,\" in IEEE Symposium on Security and Privacy (S&P), 2016."},{"key":"e_1_3_2_1_26_1","first-page":"04599","article-title":"Deepfool: a simple and accurate method to fool deep neural networks","volume":"1511","author":"Moosavi-Dezfooli S.","year":"2015","unstructured":"S. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, \"Deepfool: a simple and accurate method to fool deep neural networks,\" CoRR, vol. abs\/1511.04599, 2015.","journal-title":"CoRR"},{"key":"e_1_3_2_1_27_1","volume-title":"Towards evaluating the robustness of neural networks,\" in IEEE Symposium on Security and Privacy (SP)","author":"Carlini N.","year":"2017","unstructured":"N. Carlini and D. Wagner, \"Towards evaluating the robustness of neural networks,\" in IEEE Symposium on Security and Privacy (SP), 2017."},{"key":"e_1_3_2_1_28_1","volume-title":"Distilling the knowledge in a neural network,\" ArXiv e-prints","author":"Hinton G.","year":"2015","unstructured":"G. Hinton, O. Vinyals, and J. Dean, \"Distilling the knowledge in a neural network,\" ArXiv e-prints, 2015."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_2_1_30_1","first-page":"06280","article-title":"On the (statistical) detection of adversarial examples","volume":"1702","author":"Grosse K.","year":"2017","unstructured":"K. Grosse, P. Manoharan, N. Papernot, M. Backes, and P. D. McDaniel, \"On the (statistical) detection of adversarial examples,\" CoRR, vol. abs\/1702.06280, 2017.","journal-title":"CoRR"},{"key":"e_1_3_2_1_31_1","volume-title":"On detecting adversarial perturbations.\" in International Conference on Learning Representations","author":"Metzen J. H.","year":"2017","unstructured":"J. H. Metzen, T. Genewein, V. Fischer, and B. Bischoff, \"On detecting adversarial perturbations.\" in International Conference on Learning Representations, 2017."},{"key":"e_1_3_2_1_32_1","unstructured":"zalandoresearch \"Mnist fashion dataset \" accessed August 2018. {Online}. Available: https:\/\/github.com\/zalandoresearch\/fashion-mnist"},{"key":"e_1_3_2_1_33_1","volume-title":"Technical report on the cleverhans v2.1.0 adversarial examples library,\" arXiv preprint arXiv:1610.00768","author":"Papernot N.","year":"2018","unstructured":"N. Papernot and et al, \"Technical report on the cleverhans v2.1.0 adversarial examples library,\" arXiv preprint arXiv:1610.00768, 2018."},{"key":"e_1_3_2_1_34_1","unstructured":"keras \"Mnist model \" accessed August 2018. {Online}. Available: https:\/\/github.com\/keras-team\/keras\/blob\/master\/examples\/mnist_mlp.py"},{"key":"e_1_3_2_1_35_1","volume-title":"Random erasing data augmentation\" arXiv preprint arXiv:1708.04896","author":"Zhong Z.","year":"2017","unstructured":"Z. Zhong, L. Zheng, G. Kang, S. Li, and Y. Yang, \"Random erasing data augmentation\" arXiv preprint arXiv:1708.04896, 2017."}],"event":{"name":"ICCAD '18: IEEE\/ACM INTERNATIONAL CONFERENCE ON COMPUTER-AIDED DESIGN","sponsor":["IEEE-EDS Electronic Devices Society","IEEE CAS","IEEE CEDA"],"location":"San Diego California","acronym":"ICCAD '18"},"container-title":["Proceedings of the International Conference on Computer-Aided Design"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3240765.3267502","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3240765.3267502","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:43:44Z","timestamp":1750207424000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3240765.3267502"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11,5]]},"references-count":35,"alternative-id":["10.1145\/3240765.3267502","10.1145\/3240765"],"URL":"https:\/\/doi.org\/10.1145\/3240765.3267502","relation":{},"subject":[],"published":{"date-parts":[[2018,11,5]]},"assertion":[{"value":"2018-11-05","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}