{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,18]],"date-time":"2026-04-18T16:32:40Z","timestamp":1776529960717,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,16]],"date-time":"2020-11-16T00:00:00Z","timestamp":1605484800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NSF Grant","award":["CCF-1704859"],"award-info":[{"award-number":["CCF-1704859"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,11,16]]},"DOI":"10.1145\/3380446.3430628","type":"proceedings-article","created":{"date-parts":[[2020,11,24]],"date-time":"2020-11-24T22:27:07Z","timestamp":1606256827000},"page":"21-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["R2AD: Randomization and Reconstructor-based Adversarial Defense on Deep Neural Network"],"prefix":"10.1145","author":[{"given":"Marzieh","family":"Ashrafiamiri","sequence":"first","affiliation":[{"name":"University of California, Irvine, Irvine, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sai","family":"Manoj Pudukotai Dinakarrao","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax City, VA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amir Hosein","family":"Afandizadeh Zargari","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Irvine, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Minjun","family":"Seo","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Irvine, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fadi","family":"Kurdahi","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Irvine, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Houman","family":"Homayoun","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,16]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/3026877.3026899"},{"key":"e_1_3_2_2_2_1","volume-title":"Hardware-Assisted Security: Understanding Security Vulnerabilities and Emerging Attacks for Better Defenses. In Conf. on Compilers, Architecture, and Synthesis for Embedded Systems (CASES).","author":"Ferdinand","unstructured":"Ferdinand Brasser and et al. 2018 . Hardware-Assisted Security: Understanding Security Vulnerabilities and Emerging Attacks for Better Defenses. In Conf. on Compilers, Architecture, and Synthesis for Embedded Systems (CASES). Ferdinand Brasser and et al. 2018. Hardware-Assisted Security: Understanding Security Vulnerabilities and Emerging Attacks for Better Defenses. In Conf. on Compilers, Architecture, and Synthesis for Embedded Systems (CASES)."},{"key":"e_1_3_2_2_3_1","volume-title":"Int. Conf. on Learning Representations.","author":"Buckman J.","unstructured":"J. Buckman , A. Roy , and I. Goodfellow . 2018. Thermometer Encoding: One Hot Way to Resist Adversarial Examples . In Int. Conf. on Learning Representations. J. Buckman, A. Roy, and I. Goodfellow. 2018. Thermometer Encoding: One Hot Way to Resist Adversarial Examples. In Int. Conf. on Learning Representations."},{"key":"e_1_3_2_2_4_1","volume-title":"Towards Evaluating the Robustness of Neural Networks. In IEEE Symposium on Security and Privacy (SP).","author":"Carlini N.","unstructured":"N. Carlini and D. Wagner . 2017 . Towards Evaluating the Robustness of Neural Networks. In IEEE Symposium on Security and Privacy (SP). N. Carlini and D. Wagner. 2017. Towards Evaluating the Robustness of Neural Networks. In IEEE Symposium on Security and Privacy (SP)."},{"key":"e_1_3_2_2_5_1","volume-title":"Int. Conf. on Computer-Aided Design.","author":"S. M.","unstructured":"S. M. P. Dinakarrao and et al. 2018. Enhancing Adversarial Training towards Robust Machine Learners and its Analysis . In Int. Conf. on Computer-Aided Design. S. M. P. Dinakarrao and et al. 2018. Enhancing Adversarial Training towards Robust Machine Learners and its Analysis. In Int. Conf. on Computer-Aided Design."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317762"},{"key":"e_1_3_2_2_7_1","volume-title":"Explaining and Harnessing Adversarial Examples. In International Conference on Learning Representations (ICLR).","author":"Goodfellow Ian J.","year":"2015","unstructured":"Ian J. Goodfellow , Jonathon Shlens , and Christian Szegedy . 2015 . Explaining and Harnessing Adversarial Examples. In International Conference on Learning Representations (ICLR). Ian J. Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and Harnessing Adversarial Examples. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_8_1","volume-title":"McDaniel","author":"Grosse Kathrin","year":"2017","unstructured":"Kathrin Grosse , Praveen Manoharan , Nicolas Papernot , Michael Backes , and Patrick D . McDaniel . 2017 . On the (Statistical) Detection of Adversarial Examples. CoRR , Vol. abs\/ 1702 .06280 (2017). Kathrin Grosse, Praveen Manoharan, Nicolas Papernot, Michael Backes, and Patrick D. McDaniel. 2017. On the (Statistical) Detection of Adversarial Examples. CoRR, Vol. abs\/1702.06280 (2017)."},{"key":"e_1_3_2_2_9_1","volume-title":"IEEE Conf. on Cognitive and Computational Aspects of Situation Management.","author":"Gutzwiller R. S.","unstructured":"R. S. Gutzwiller and J. Reeder . 2017. Human interactive machine learning for trust in teams of autonomous robots . In IEEE Conf. on Cognitive and Computational Aspects of Situation Management. R. S. Gutzwiller and J. Reeder. 2017. Human interactive machine learning for trust in teams of autonomous robots. In IEEE Conf. on Cognitive and Computational Aspects of Situation Management."},{"key":"e_1_3_2_2_10_1","volume-title":"International Conference on Learning Representations.","author":"Kurakin A.","unstructured":"A. Kurakin , I.J. Goodfellow , and S. Bengio . 2017. Adversarial examples in the physical world . In International Conference on Learning Representations. A. Kurakin, I.J. Goodfellow, and S. Bengio. 2017. Adversarial examples in the physical world. In International Conference on Learning Representations."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_2_12_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Liu Yanpei","year":"2017","unstructured":"Yanpei Liu , Xinyun Chen , Chang Liu , and Dawn Song . 2017 . Delving into Transferable Adversarial Examples and Black-box Attacks . In International Conference on Learning Representations (ICLR). Yanpei Liu, Xinyun Chen, Chang Liu, and Dawn Song. 2017. Delving into Transferable Adversarial Examples and Black-box Attacks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_2_2_14_1","volume-title":"Int. Conf. on Learning Representations.","author":"Metzen Jan Hendrik","year":"2017","unstructured":"Jan Hendrik Metzen , Tim Genewein , Volker Fischer , and Bastian Bischoff . 2017 . On detecting adversarial perturbations .. In Int. Conf. on Learning Representations. Jan Hendrik Metzen, Tim Genewein, Volker Fischer, and Bastian Bischoff. 2017. On detecting adversarial perturbations.. In Int. Conf. on Learning Representations."},{"key":"e_1_3_2_2_15_1","volume-title":"DeepFool: a simple and accurate method to fool deep neural networks. CoRR","author":"Moosavi-Dezfooli Seyed-Mohsen","year":"2015","unstructured":"Seyed-Mohsen Moosavi-Dezfooli , Alhussein Fawzi , and Pascal Frossard . 2015. DeepFool: a simple and accurate method to fool deep neural networks. CoRR , Vol. abs\/ 1511 .04599 ( 2015 ). Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, and Pascal Frossard. 2015. DeepFool: a simple and accurate method to fool deep neural networks. CoRR, Vol. abs\/1511.04599 (2015)."},{"key":"e_1_3_2_2_16_1","unstructured":"Nicolas Papernot and etal 2018. Technical Report on the CleverHans v2.1.0 Adversarial Examples Library. arXiv preprint arXiv:1610.00768 (2018).  Nicolas Papernot and et al. 2018. Technical Report on the CleverHans v2.1.0 Adversarial Examples Library. arXiv preprint arXiv:1610.00768 (2018)."},{"key":"e_1_3_2_2_17_1","volume-title":"The Limitations of Deep Learning in Adversarial Settings. In IEEE European Symposium on Security and Privacy (Euro S&P).","author":"Papernot N.","unstructured":"N. Papernot , P. McDaniel , S. Jha , M. Fredrikson , Z. B. Celik , and A. Swami . 2016a . The Limitations of Deep Learning in Adversarial Settings. In IEEE European Symposium on Security and Privacy (Euro S&P). N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami. 2016a. The Limitations of Deep Learning in Adversarial Settings. In IEEE European Symposium on Security and Privacy (Euro S&P)."},{"key":"e_1_3_2_2_18_1","volume-title":"IEEE Symposium on Security and Privacy (S&P).","author":"Papernot N.","unstructured":"N. Papernot , P. McDaniel , X. Wu , S. Jha , and A. Swami . 2016b. Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks . In IEEE Symposium on Security and Privacy (S&P). N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami. 2016b. Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks. In IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196047"},{"key":"e_1_3_2_2_20_1","volume-title":"Understanding adversarial training: increasing local stability of neural nets through robust optimization. ArXiv e-prints","author":"Shaham Uri","year":"2015","unstructured":"Uri Shaham , Yutaro Yamada , and Sahand Negahban . 2015. Understanding adversarial training: increasing local stability of neural nets through robust optimization. ArXiv e-prints ( 2015 ). Uri Shaham, Yutaro Yamada, and Sahand Negahban. 2015. Understanding adversarial training: increasing local stability of neural nets through robust optimization. ArXiv e-prints (2015)."},{"key":"e_1_3_2_2_21_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Szegedy Christian","year":"2014","unstructured":"Christian Szegedy , Wojciech Zaremba , Ilya Sutskever , Joan Bruna , Dumitru Erhan , Ian J. Goodfellow , and Rob Fergus . 2014 . Intriguing properties of neural networks . In International Conference on Learning Representations (ICLR). Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian J. Goodfellow, and Rob Fergus. 2014. Intriguing properties of neural networks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098158"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2857080"},{"key":"e_1_3_2_2_24_1","volume-title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms. arXiv preprint arXiv:1708.07747","author":"Xiao Han","year":"2017","unstructured":"Han Xiao , Kashif Rasul , and Roland Vollgraf . 2017. Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms. arXiv preprint arXiv:1708.07747 ( 2017 ). Han Xiao, Kashif Rasul, and Roland Vollgraf. 2017. Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms. arXiv preprint arXiv:1708.07747 (2017)."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCI.2018.2840738"}],"event":{"name":"MLCAD '20: 2020 ACM\/IEEE Workshop on Machine Learning for CAD","location":"Virtual Event Iceland","acronym":"MLCAD '20","sponsor":["SIGDA ACM Special Interest Group on Design Automation"]},"container-title":["Proceedings of the 2020 ACM\/IEEE Workshop on Machine Learning for CAD"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3380446.3430628","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3380446.3430628","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:41:21Z","timestamp":1750200081000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3380446.3430628"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,16]]},"references-count":25,"alternative-id":["10.1145\/3380446.3430628","10.1145\/3380446"],"URL":"https:\/\/doi.org\/10.1145\/3380446.3430628","relation":{},"subject":[],"published":{"date-parts":[[2020,11,16]]},"assertion":[{"value":"2020-11-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}