{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:20:35Z","timestamp":1750220435387,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,12]],"date-time":"2020-10-12T00:00:00Z","timestamp":1602460800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,12]]},"DOI":"10.1145\/3394171.3413604","type":"proceedings-article","created":{"date-parts":[[2020,10,12]],"date-time":"2020-10-12T13:12:00Z","timestamp":1602508320000},"page":"1930-1938","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Defending Adversarial Examples via DNN Bottleneck Reinforcement"],"prefix":"10.1145","author":[{"given":"Wenqing","family":"Liu","sequence":"first","affiliation":[{"name":"Tongji University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Miaojing","family":"Shi","sequence":"additional","affiliation":[{"name":"King's College London, London, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Teddy","family":"Furon","sequence":"additional","affiliation":[{"name":"Univ. Rennes, Inria, CNRS, IRISA, Rennes, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li","family":"Li","sequence":"additional","affiliation":[{"name":"Tongji University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,10,12]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2951526"},{"key":"e_1_3_2_2_2_1","unstructured":"Jacob Buckman Aurko Roy Colin Raffel and Ian Goodfellow. 2018. Thermometer encoding: One hot way to resist adversarial examples. In ICLR.  Jacob Buckman Aurko Roy Colin Raffel and Ian Goodfellow. 2018. Thermometer encoding: One hot way to resist adversarial examples. In ICLR."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_2_5_1","volume-title":"A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853","author":"Dziugaite Gintare Karolina","year":"2016","unstructured":"Gintare Karolina Dziugaite , Zoubin Ghahramani , and Daniel M Roy . 2016. A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853 ( 2016 ). Gintare Karolina Dziugaite, Zoubin Ghahramani, and Daniel M Roy. 2016. A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853 (2016)."},{"key":"e_1_3_2_2_6_1","unstructured":"Ian J Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In ICLR.  Ian J Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In ICLR."},{"key":"e_1_3_2_2_7_1","volume-title":"Towards deep neural network architectures robust to adversarial examples. arXiv preprint arXiv:1412.5068","author":"Gu Shixiang","year":"2014","unstructured":"Shixiang Gu and Luca Rigazio . 2014. Towards deep neural network architectures robust to adversarial examples. arXiv preprint arXiv:1412.5068 ( 2014 ). Shixiang Gu and Luca Rigazio. 2014. Towards deep neural network architectures robust to adversarial examples. arXiv preprint arXiv:1412.5068 (2014)."},{"key":"e_1_3_2_2_8_1","unstructured":"Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2016. Deep residual learning for image recognition. In CVPR.  Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2016. Deep residual learning for image recognition. In CVPR."},{"key":"e_1_3_2_2_9_1","unstructured":"Yingying Hua Shiming Ge Xindi Gao Xin Jin and Dan Zeng. 2019. Defending Against Adversarial Examples via Soft Decision Trees Embedding. In ACM MM.  Yingying Hua Shiming Ge Xindi Gao Xin Jin and Dan Zeng. 2019. Defending Against Adversarial Examples via Soft Decision Trees Embedding. In ACM MM."},{"key":"e_1_3_2_2_10_1","unstructured":"Xiaojun Jia Xingxing Wei Xiaochun Cao and Hassan Foroosh. 2019. ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples. In CVPR.  Xiaojun Jia Xingxing Wei Xiaochun Cao and Hassan Foroosh. 2019. ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples. In CVPR."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"crossref","unstructured":"Linxi Jiang Xingjun Ma Shaoxiang Chen James Bailey and Yu-Gang Jiang. 2019. Black-box adversarial attacks on video recognition models. In ACM MM.  Linxi Jiang Xingjun Ma Shaoxiang Chen James Bailey and Yu-Gang Jiang. 2019. Black-box adversarial attacks on video recognition models. In ACM MM.","DOI":"10.1145\/3343031.3351088"},{"key":"e_1_3_2_2_12_1","unstructured":"Alex Krizhevsky Ilya Sutskever and Geoffrey E Hinton. 2012. Imagenet classification with deep convolutional neural networks. In NIPS.  Alex Krizhevsky Ilya Sutskever and Geoffrey E Hinton. 2012. Imagenet classification with deep convolutional neural networks. In NIPS."},{"key":"e_1_3_2_2_13_1","unstructured":"Alexey Kurakin Ian Goodfellow and Samy Bengio. 2017. Adversarial machine learning at scale. In ICLR.  Alexey Kurakin Ian Goodfellow and Samy Bengio. 2017. Adversarial machine learning at scale. In ICLR."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"crossref","unstructured":"X. Li and F. Li. 2017. Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics. In ICCV.  X. Li and F. Li. 2017. Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics. In ICCV.","DOI":"10.1109\/ICCV.2017.615"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"crossref","unstructured":"Fangzhou Liao Ming Liang Yinpeng Dong Tianyu Pang Xiaolin Hu and Jun Zhu. 2018. Defense against adversarial attacks using high-level representation guided denoiser. In CVPR.  Fangzhou Liao Ming Liang Yinpeng Dong Tianyu Pang Xiaolin Hu and Jun Zhu. 2018. Defense against adversarial attacks using high-level representation guided denoiser. In CVPR.","DOI":"10.1109\/CVPR.2018.00191"},{"key":"e_1_3_2_2_16_1","volume-title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples. In CVPR.","author":"Liu Zihao","year":"2019","unstructured":"Zihao Liu , Qi Liu , Tao Liu , Yanzhi Wang , and Wujie Wen . 2019 . Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples. In CVPR. Zihao Liu, Qi Liu, Tao Liu, Yanzhi Wang, and Wujie Wen. 2019. Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples. In CVPR."},{"key":"e_1_3_2_2_17_1","unstructured":"Jiajun Lu Theerasit Issaranon and David Forsyth. 2017. SafetyNet: Detecting and Rejecting Adversarial Examples Robustly. In ICCV.  Jiajun Lu Theerasit Issaranon and David Forsyth. 2017. SafetyNet: Detecting and Rejecting Adversarial Examples Robustly. In ICCV."},{"key":"e_1_3_2_2_18_1","unstructured":"Chen Ma Chenxu Zhao Hailin Shi Li Chen Junhai Yong and Dan Zeng. 2019 b. MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks. In ACM MM.  Chen Ma Chenxu Zhao Hailin Shi Li Chen Junhai Yong and Dan Zeng. 2019 b. MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks. In ACM MM."},{"key":"e_1_3_2_2_19_1","unstructured":"Shiqing Ma Yingqi Liu Guanhong Tao Wen-Chuan Lee and Xiangyu Zhang. 2019 a. NIC: Detecting Adversarial Samples with Neural Network Invariant Checking. In NDSS.  Shiqing Ma Yingqi Liu Guanhong Tao Wen-Chuan Lee and Xiangyu Zhang. 2019 a. NIC: Detecting Adversarial Samples with Neural Network Invariant Checking. In NDSS."},{"key":"e_1_3_2_2_20_1","volume-title":"Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083","author":"Madry Aleksander","year":"2017","unstructured":"Aleksander Madry , Aleksandar Makelov , Ludwig Schmidt , Dimitris Tsipras , and Adrian Vladu . 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 ( 2017 ). Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"crossref","unstructured":"Dongyu Meng and Hao Chen. 2017. Magnet: a two-pronged defense against adversarial examples. In ACM SIGSAC.  Dongyu Meng and Hao Chen. 2017. Magnet: a two-pronged defense against adversarial examples. In ACM SIGSAC.","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_2_2_22_1","volume-title":"Biologically inspired protection of deep networks from adversarial attacks. arXiv preprint arXiv:1703.09202","author":"Nayebi Aran","year":"2017","unstructured":"Aran Nayebi and Surya Ganguli . 2017. Biologically inspired protection of deep networks from adversarial attacks. arXiv preprint arXiv:1703.09202 ( 2017 ). Aran Nayebi and Surya Ganguli. 2017. Biologically inspired protection of deep networks from adversarial attacks. arXiv preprint arXiv:1703.09202 (2017)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"e_1_3_2_2_24_1","volume-title":"U-net: Convolutional networks for biomedical image segmentation. In MICCAI.","author":"Ronneberger Olaf","year":"2015","unstructured":"Olaf Ronneberger , Philipp Fischer , and Thomas Brox . 2015 . U-net: Convolutional networks for biomedical image segmentation. In MICCAI. Olaf Ronneberger, Philipp Fischer, and Thomas Brox. 2015. U-net: Convolutional networks for biomedical image segmentation. In MICCAI."},{"key":"e_1_3_2_2_25_1","volume-title":"Robert Sabourin, and Eric Granger.","author":"Rony J\u00e9r\u00f4me","year":"2019","unstructured":"J\u00e9r\u00f4me Rony , Luiz G Hafemann , Luiz S Oliveira , Ismail Ben Ayed , Robert Sabourin, and Eric Granger. 2019 . Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses. In CVPR. J\u00e9r\u00f4me Rony, Luiz G Hafemann, Luiz S Oliveira, Ismail Ben Ayed, Robert Sabourin, and Eric Granger. 2019. Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses. In CVPR."},{"key":"e_1_3_2_2_26_1","volume-title":"Brendan Daniel Tracey, and David Daniel Cox","author":"Saxe Andrew Michael","year":"2018","unstructured":"Andrew Michael Saxe , Yamini Bansal , Joel Dapello , Madhu Advani , Artemy Kolchinsky , Brendan Daniel Tracey, and David Daniel Cox . 2018 . On the Information Bottleneck Theory of Deep Learning. In ICLR. Andrew Michael Saxe, Yamini Bansal, Joel Dapello, Madhu Advani, Artemy Kolchinsky, Brendan Daniel Tracey, and David Daniel Cox. 2018. On the Information Bottleneck Theory of Deep Learning. In ICLR."},{"key":"e_1_3_2_2_27_1","unstructured":"Miaojing Shi Zhaohui Yang Chao Xu and Qijun Chen. 2019. Revisiting perspective information for efficient crowd counting. In CVPR.  Miaojing Shi Zhaohui Yang Chao Xu and Qijun Chen. 2019. Revisiting perspective information for efficient crowd counting. In CVPR."},{"key":"e_1_3_2_2_28_1","volume-title":"Pixeldefend: Leveraging generative models to understand and defend against adversarial examples. arXiv preprint arXiv:1710.10766","author":"Song Yang","year":"2017","unstructured":"Yang Song , Taesup Kim , Sebastian Nowozin , Stefano Ermon , and Nate Kushman . 2017 . Pixeldefend: Leveraging generative models to understand and defend against adversarial examples. arXiv preprint arXiv:1710.10766 (2017). Yang Song, Taesup Kim, Sebastian Nowozin, Stefano Ermon, and Nate Kushman. 2017. Pixeldefend: Leveraging generative models to understand and defend against adversarial examples. arXiv preprint arXiv:1710.10766 (2017)."},{"key":"e_1_3_2_2_29_1","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2014. Intriguing properties of neural networks. In ICLR.  Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2014. Intriguing properties of neural networks. In ICLR."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"crossref","unstructured":"Olga Taran Shideh Rezaeifar Taras Holotyak and Slava Voloshynovskiy. 2019. Defending against adversarial attacks by randomized diversification. In CVPR.  Olga Taran Shideh Rezaeifar Taras Holotyak and Slava Voloshynovskiy. 2019. Defending against adversarial attacks by randomized diversification. In CVPR.","DOI":"10.1109\/CVPR.2019.01148"},{"key":"e_1_3_2_2_31_1","volume-title":"Feature squeezing: Detecting adversarial examples in deep neural networks. arXiv preprint arXiv:1704.01155","author":"Xu Weilin","year":"2017","unstructured":"Weilin Xu , David Evans , and Yanjun Qi. 2017. Feature squeezing: Detecting adversarial examples in deep neural networks. arXiv preprint arXiv:1704.01155 ( 2017 ). Weilin Xu, David Evans, and Yanjun Qi. 2017. Feature squeezing: Detecting adversarial examples in deep neural networks. arXiv preprint arXiv:1704.01155 (2017)."},{"key":"e_1_3_2_2_32_1","volume-title":"Training Object Detectors from Few Weakly-Labeled and Many Unlabeled Images. arXiv preprint arXiv:1912.00384","author":"Yang Zhaohui","year":"2019","unstructured":"Zhaohui Yang , Miaojing Shi , Yannis Avrithis , Chao Xu , and Vittorio Ferrari . 2019. Training Object Detectors from Few Weakly-Labeled and Many Unlabeled Images. arXiv preprint arXiv:1912.00384 ( 2019 ). Zhaohui Yang, Miaojing Shi, Yannis Avrithis, Chao Xu, and Vittorio Ferrari. 2019. Training Object Detectors from Few Weakly-Labeled and Many Unlabeled Images. arXiv preprint arXiv:1912.00384 (2019)."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"Pu Zhao Sijia Liu Yanzhi Wang and Xue Lin. 2018. An admm-based universal framework for adversarial attacks on deep neural networks. In ACM MM.  Pu Zhao Sijia Liu Yanzhi Wang and Xue Lin. 2018. An admm-based universal framework for adversarial attacks on deep neural networks. In ACM MM.","DOI":"10.1109\/GlobalSIP.2018.8646651"}],"event":{"name":"MM '20: The 28th ACM International Conference on Multimedia","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Seattle WA USA","acronym":"MM '20"},"container-title":["Proceedings of the 28th ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394171.3413604","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3394171.3413604","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:47:15Z","timestamp":1750193235000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394171.3413604"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,12]]},"references-count":33,"alternative-id":["10.1145\/3394171.3413604","10.1145\/3394171"],"URL":"https:\/\/doi.org\/10.1145\/3394171.3413604","relation":{},"subject":[],"published":{"date-parts":[[2020,10,12]]},"assertion":[{"value":"2020-10-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}