{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T15:19:47Z","timestamp":1788448787755,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":71,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,4,17]],"date-time":"2021-04-17T00:00:00Z","timestamp":1618617600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,4,19]]},"DOI":"10.1145\/3445814.3446747","type":"proceedings-article","created":{"date-parts":[[2021,4,11]],"date-time":"2021-04-11T17:06:26Z","timestamp":1618160786000},"page":"990-1003","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":46,"title":["Defensive approximation: securing CNNs using approximate computing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8992-7958","authenticated-orcid":false,"given":"Amira","family":"Guesmi","sequence":"first","affiliation":[{"name":"University of Sfax, Tunisia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5102-8087","authenticated-orcid":false,"given":"Ihsen","family":"Alouani","sequence":"additional","affiliation":[{"name":"Polytechnic University of Hauts-de-France, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khaled N.","family":"Khasawneh","sequence":"additional","affiliation":[{"name":"George Mason University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mouna","family":"Baklouti","sequence":"additional","affiliation":[{"name":"University of Sfax, Tunisia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tarek","family":"Frikha","sequence":"additional","affiliation":[{"name":"University of Sfax, Tunisia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohamed","family":"Abid","sequence":"additional","affiliation":[{"name":"University of Sfax, Tunisia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nael","family":"Abu-Ghazaleh","sequence":"additional","affiliation":[{"name":"University of California at Riverside, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,4,17]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"IEEE Standard for Floating-Point Arithmetic","year":"2008","unstructured":"2008. IEEE Standard for Floating-Point Arithmetic . IEEE Std 754- 2008 ( 2008 ), 1-70. 2008. IEEE Standard for Floating-Point Arithmetic. IEEE Std 754-2008 ( 2008 ), 1-70."},{"key":"e_1_3_2_1_2_1","volume-title":"Computer Vision: A Survey","author":"Akhtar N.","year":"2018","unstructured":"N. Akhtar and A. Mian . 2018 . Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey . IEEE Access 6 ( 2018 ), 14410-14430. N. Akhtar and A. Mian. 2018. Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey. IEEE Access 6 ( 2018 ), 14410-14430."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2017.7995703"},{"key":"e_1_3_2_1_4_1","volume-title":"Hamza Ouarnoughi, and Smail Niar.","author":"Ali Karim M. A.","year":"2020","unstructured":"Karim M. A. Ali , Ihsen Alouani , Abdessamad Ait El Cadi , Hamza Ouarnoughi, and Smail Niar. 2020 . Cross-layer CNN Approximations for Hardware Implementation. In Applied Reconfigurable Computing. Architectures, Tools, and Applications, Fernando Rinc\u00f3n, Jes\u00fas Barba, Hayden K. H. So, Pedro Diniz, and Juli\u00e1n Caba (Eds.). Springer International Publishing , Cham, 151-165. Karim M. A. Ali, Ihsen Alouani, Abdessamad Ait El Cadi, Hamza Ouarnoughi, and Smail Niar. 2020. Cross-layer CNN Approximations for Hardware Implementation. In Applied Reconfigurable Computing. Architectures, Tools, and Applications, Fernando Rinc\u00f3n, Jes\u00fas Barba, Hayden K. H. So, Pedro Diniz, and Juli\u00e1n Caba (Eds.). Springer International Publishing, Cham, 151-165."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2017.2778341"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3145812"},{"key":"e_1_3_2_1_7_1","volume-title":"Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models. arXiv","author":"Boloor Adith","year":"1903","unstructured":"Adith Boloor , Xin He , Christopher Gill , Yevgeniy Vorobeychik , and Xuan Zhang . 2019. Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models. arXiv : 1903 . 05157 [cs.RO] Adith Boloor, Xin He, Christopher Gill, Yevgeniy Vorobeychik, and Xuan Zhang. 2019. Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models. arXiv: 1903. 05157 [cs.RO]"},{"key":"e_1_3_2_1_8_1","unstructured":"Wieland Brendel Jonas Rauber and Matthias Bethge. 2017. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. arXiv: 1712. 04248 [stat.ML]  Wieland Brendel Jonas Rauber and Matthias Bethge. 2017. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. arXiv: 1712. 04248 [stat.ML]"},{"key":"e_1_3_2_1_9_1","volume-title":"On Evaluating Adversarial Robustness. arXiv","author":"Carlini Nicholas","year":"1902","unstructured":"Nicholas Carlini , Anish Athalye , Nicolas Papernot , Wieland Brendel , Jonas Rauber , Dimitris Tsipras , Ian Goodfellow , Aleksander Madry , and Alexey Kurakin . 2019. On Evaluating Adversarial Robustness. arXiv : 1902 . 06705 [cs.LG] Nicholas Carlini, Anish Athalye, Nicolas Papernot, Wieland Brendel, Jonas Rauber, Dimitris Tsipras, Ian Goodfellow, Aleksander Madry, and Alexey Kurakin. 2019. On Evaluating Adversarial Robustness. arXiv: 1902. 06705 [cs.LG]"},{"key":"e_1_3_2_1_10_1","volume-title":"Wagner","author":"Carlini Nicholas","year":"2016","unstructured":"Nicholas Carlini and David A . Wagner . 2016 . Towards Evaluating the Robustness of Neural Networks. CoRR abs\/1608.04644 ( 2016 ). arXiv: 1608.04644 http:\/\/arxiv. org\/abs\/1608.04644 Nicholas Carlini and David A. Wagner. 2016. Towards Evaluating the Robustness of Neural Networks. CoRR abs\/1608.04644 ( 2016 ). arXiv: 1608.04644 http:\/\/arxiv. org\/abs\/1608.04644"},{"key":"e_1_3_2_1_11_1","volume-title":"Jordan","author":"Chen Jianbo","year":"2019","unstructured":"Jianbo Chen and Michael I . Jordan . 2019 . Boundary Attack++: Query-Eficient Decision-Based Adversarial Attack. CoRR abs\/ 1904.02144 ( 2019 ). arXiv: 1904.02144 http:\/\/arxiv.org\/abs\/ 1904.02144 Jianbo Chen and Michael I. Jordan. 2019. Boundary Attack++: Query-Eficient Decision-Based Adversarial Attack. CoRR abs\/ 1904.02144 ( 2019 ). arXiv: 1904.02144 http:\/\/arxiv.org\/abs\/ 1904.02144"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00042"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"Dan C. Ciresan Ueli Meier Jonathan Masci and J\u00fcrgen Schmidhuber. 2012. Multicolumn deep neural network for trafic sign classification. Neural networks : the oficial journal of the International Neural Network Society 32 ( 2012 ) 333-8.  Dan C. Ciresan Ueli Meier Jonathan Masci and J\u00fcrgen Schmidhuber. 2012. Multicolumn deep neural network for trafic sign classification. Neural networks : the oficial journal of the International Neural Network Society 32 ( 2012 ) 333-8.","DOI":"10.1016\/j.neunet.2012.02.023"},{"key":"e_1_3_2_1_14_1","first-page":"1310","volume-title":"Proceedings of the 36th International Conference on Machine Learning (Proceedings of Machine Learning Research","volume":"97","author":"Cohen Jeremy","year":"2019","unstructured":"Jeremy Cohen , Elan Rosenfeld , and Zico Kolter . 2019 . Certified Adversarial Robustness via Randomized Smoothing . In Proceedings of the 36th International Conference on Machine Learning (Proceedings of Machine Learning Research , Vol. 97 ), Kamalika Chaudhuri and Ruslan Salakhutdinov (Eds.). PMLR, Long Beach, California, USA , 1310 - 1320 . http:\/\/proceedings.mlr.press\/v97\/cohen19c.html Jeremy Cohen, Elan Rosenfeld, and Zico Kolter. 2019. Certified Adversarial Robustness via Randomized Smoothing. In Proceedings of the 36th International Conference on Machine Learning (Proceedings of Machine Learning Research, Vol. 97 ), Kamalika Chaudhuri and Ruslan Salakhutdinov (Eds.). PMLR, Long Beach, California, USA, 1310-1320. http:\/\/proceedings.mlr.press\/v97\/cohen19c.html"},{"key":"e_1_3_2_1_15_1","unstructured":"Nilaksh Das Madhuri Shanbhogue Shang-Tse Chen Fred Hohman Li Chen Michael E Kounavis and Duen Horng Chau. 2017. Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression. arXiv preprint arXiv:1705.02900 ( 2017 ).  Nilaksh Das Madhuri Shanbhogue Shang-Tse Chen Fred Hohman Li Chen Michael E Kounavis and Duen Horng Chau. 2017. Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression. arXiv preprint arXiv:1705.02900 ( 2017 )."},{"key":"e_1_3_2_1_16_1","volume-title":"Deep learning in natural language processing","author":"Deng Li","unstructured":"Li Deng and Yang Liu . 2018. Deep learning in natural language processing . Springer . Li Deng and Yang Liu. 2018. Deep learning in natural language processing. Springer."},{"key":"e_1_3_2_1_17_1","volume-title":"Deep Learning on Mobile Devices-A Review. CoRR abs\/","author":"Deng Yunbin","year":"1904","unstructured":"Yunbin Deng . 2019. Deep Learning on Mobile Devices-A Review. CoRR abs\/ 1904 .09274 ( 2019 ). arXiv: 1904.09274 http:\/\/arxiv.org\/abs\/ 1904.09274 Yunbin Deng. 2019. Deep Learning on Mobile Devices-A Review. CoRR abs\/ 1904.09274 ( 2019 ). arXiv: 1904.09274 http:\/\/arxiv.org\/abs\/ 1904.09274"},{"key":"e_1_3_2_1_18_1","volume-title":"Stochastic Activation Pruning for Robust Adversarial Defense. CoRR abs\/","author":"Dhillon Guneet S.","year":"1803","unstructured":"Guneet S. Dhillon , Kamyar Azizzadenesheli , Zachary C. Lipton , Jeremy Bernstein , Jean Kossaifi , Aran Khanna , and Anima Anandkumar . 2018. Stochastic Activation Pruning for Robust Adversarial Defense. CoRR abs\/ 1803 .01442 ( 2018 ). arXiv: 1803.01442 http:\/\/arxiv.org\/abs\/ 1803.01442 Guneet S. Dhillon, Kamyar Azizzadenesheli, Zachary C. Lipton, Jeremy Bernstein, Jean Kossaifi, Aran Khanna, and Anima Anandkumar. 2018. Stochastic Activation Pruning for Robust Adversarial Defense. CoRR abs\/ 1803.01442 ( 2018 ). arXiv: 1803.01442 http:\/\/arxiv.org\/abs\/ 1803.01442"},{"key":"e_1_3_2_1_19_1","unstructured":"Ivan Evtimov Kevin Eykholt Earlence Fernandes Tadayoshi Kohno Bo Li Atul Prakash Amir Rahmati and Dawn Song. 2017. Robust Physical-World Attacks on Machine Learning Models. CoRR abs\/1707.08945 ( 2017 ). arXiv: 1707.08945 http:\/\/arxiv.org\/abs\/1707.08945  Ivan Evtimov Kevin Eykholt Earlence Fernandes Tadayoshi Kohno Bo Li Atul Prakash Amir Rahmati and Dawn Song. 2017. Robust Physical-World Attacks on Machine Learning Models. CoRR abs\/1707.08945 ( 2017 ). arXiv: 1707.08945 http:\/\/arxiv.org\/abs\/1707.08945"},{"key":"e_1_3_2_1_20_1","unstructured":"Ian J. Goodfellow Jonathon Shlens and Christian Szegedy. 2014. Explaining and Harnessing Adversarial Examples. arXiv: 1412. 6572 [stat.ML]  Ian J. Goodfellow Jonathon Shlens and Christian Szegedy. 2014. Explaining and Harnessing Adversarial Examples. arXiv: 1412. 6572 [stat.ML]"},{"key":"e_1_3_2_1_21_1","unstructured":"Shixiang Gu and Luca Rigazio. 2014. Towards deep neural network architectures robust to adversarial examples. arXiv preprint arXiv:1412.5068 ( 2014 ).  Shixiang Gu and Luca Rigazio. 2014. Towards deep neural network architectures robust to adversarial examples. arXiv preprint arXiv:1412.5068 ( 2014 )."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3339985.3358495"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2012.2217962"},{"key":"e_1_3_2_1_24_1","unstructured":"Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2015. Deep Residual Learning for Image Recognition. CoRR abs\/1512.03385 ( 2015 ). arXiv: 1512.03385 http:\/\/arxiv.org\/abs\/1512.03385  Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2015. Deep Residual Learning for Image Recognition. CoRR abs\/1512.03385 ( 2015 ). arXiv: 1512.03385 http:\/\/arxiv.org\/abs\/1512.03385"},{"key":"e_1_3_2_1_25_1","unstructured":"Dan Hendrycks and Kevin Gimpel. 2016. Early Methods for Detecting Adversarial Images. arXiv: 1608.00530 [cs.LG]  Dan Hendrycks and Kevin Gimpel. 2016. Early Methods for Detecting Adversarial Images. arXiv: 1608.00530 [cs.LG]"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/DTIS.2016.7483885"},{"key":"e_1_3_2_1_27_1","volume-title":"Predictive technology model (PTM) website. Retrieved","author":"Nanoscale Integration and Modeling (NIMO) Group","year":"2019","unstructured":"Nanoscale Integration and Modeling (NIMO) Group . 2012. Predictive technology model (PTM) website. Retrieved April 8, 2019 from http:\/\/ptm.asu.edu Nanoscale Integration and Modeling (NIMO) Group. 2012. Predictive technology model (PTM) website. Retrieved April 8, 2019 from http:\/\/ptm.asu.edu"},{"key":"e_1_3_2_1_28_1","unstructured":"Dhiraj Kalamkar Dheevatsa Mudigere Naveen Mellempudi Dipankar Das Kunal Banerjee Sasikanth Avancha Dharma Teja Vooturi Nataraj Jammalamadaka Jianyu Huang Hector Yuen Jiyan Yang Jongsoo Park Alexander Heinecke Evangelos Georganas Sudarshan Srinivasan Abhisek Kundu Misha Smelyanskiy Bharat Kaul and Pradeep Dubey. 2019. A Study of BFLOAT16 for Deep Learning Training. arXiv: 1905. 12322 [cs.LG]  Dhiraj Kalamkar Dheevatsa Mudigere Naveen Mellempudi Dipankar Das Kunal Banerjee Sasikanth Avancha Dharma Teja Vooturi Nataraj Jammalamadaka Jianyu Huang Hector Yuen Jiyan Yang Jongsoo Park Alexander Heinecke Evangelos Georganas Sudarshan Srinivasan Abhisek Kundu Misha Smelyanskiy Bharat Kaul and Pradeep Dubey. 2019. A Study of BFLOAT16 for Deep Learning Training. arXiv: 1905. 12322 [cs.LG]"},{"key":"e_1_3_2_1_30_1","first-page":"1097","volume-title":"Proceedings of the 25th International Conference on Neural Information Processing Systems-Volume 1 ( Lake Tahoe, Nevada) ( NIPS'12). Curran Associates Inc.","author":"Krizhevsky Alex","unstructured":"Alex Krizhevsky , Ilya Sutskever , and Geofrey E. Hinton . 2012. ImageNet Classiifcation with Deep Convolutional Neural Networks . In Proceedings of the 25th International Conference on Neural Information Processing Systems-Volume 1 ( Lake Tahoe, Nevada) ( NIPS'12). Curran Associates Inc. , Red Hook, NY, USA , 1097 - 1105 . Alex Krizhevsky, Ilya Sutskever, and Geofrey E. Hinton. 2012. ImageNet Classiifcation with Deep Convolutional Neural Networks. In Proceedings of the 25th International Conference on Neural Information Processing Systems-Volume 1 ( Lake Tahoe, Nevada) ( NIPS'12). Curran Associates Inc., Red Hook, NY, USA, 1097-1105."},{"key":"e_1_3_2_1_31_1","unstructured":"Alexey Kurakin Ian J. Goodfellow and Samy Bengio. 2016. Adversarial examples in the physical world. CoRR abs\/1607.02533 ( 2016 ). arXiv: 1607.02533 http:\/\/arxiv.org\/abs\/1607.02533  Alexey Kurakin Ian J. Goodfellow and Samy Bengio. 2016. Adversarial examples in the physical world. CoRR abs\/1607.02533 ( 2016 ). arXiv: 1607.02533 http:\/\/arxiv.org\/abs\/1607.02533"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_33_1","unstructured":"Yann LeCun and Corinna Cortes. 2010. MNIST handwritten digit database. http:\/\/yann.lecun.com\/exdb\/mnist\/. ( 2010 ). http:\/\/yann.lecun.com\/exdb\/mnist\/  Yann LeCun and Corinna Cortes. 2010. MNIST handwritten digit database. http:\/\/yann.lecun.com\/exdb\/mnist\/. ( 2010 ). http:\/\/yann.lecun.com\/exdb\/mnist\/"},{"key":"e_1_3_2_1_34_1","volume-title":"2019 IEEE Symposium on Security and Privacy (SP). 656-672","author":"Lecuyer M.","unstructured":"M. Lecuyer , V. Atlidakis , R. Geambasu , D. Hsu , and S. Jana . 2019. Certified Robustness to Adversarial Examples with Diferential Privacy . In 2019 IEEE Symposium on Security and Privacy (SP). 656-672 . M. Lecuyer, V. Atlidakis, R. Geambasu, D. Hsu, and S. Jana. 2019. Certified Robustness to Adversarial Examples with Diferential Privacy. In 2019 IEEE Symposium on Security and Privacy (SP). 656-672."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2012.146"},{"key":"e_1_3_2_1_36_1","volume-title":"Defensive Quantization: When Eficiency Meets Robustness. arXiv","author":"Lin Ji","year":"2019","unstructured":"Ji Lin , Chuang Gan , and Song Han . 2019 . Defensive Quantization: When Eficiency Meets Robustness. arXiv : 1904. 08444 [cs.LG] Ji Lin, Chuang Gan, and Song Han. 2019. Defensive Quantization: When Eficiency Meets Robustness. arXiv: 1904. 08444 [cs.LG]"},{"key":"e_1_3_2_1_37_1","unstructured":"Xuanqing Liu Minhao Cheng Huan Zhang and Cho-Jui Hsieh. 2017. Towards Robust Neural Networks via Random Self-ensemble. arXiv:1712.00673 [cs.LG]  Xuanqing Liu Minhao Cheng Huan Zhang and Cho-Jui Hsieh. 2017. Towards Robust Neural Networks via Random Self-ensemble. arXiv:1712.00673 [cs.LG]"},{"key":"e_1_3_2_1_38_1","unstructured":"Jiajun Lu Hussein Sibai Evan Fabry and David Forsyth. 2017. NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles. arXiv: 1707.03501 [cs.CV]  Jiajun Lu Hussein Sibai Evan Fabry and David Forsyth. 2017. NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles. arXiv: 1707.03501 [cs.CV]"},{"key":"e_1_3_2_1_39_1","volume-title":"2016 26th International Conference on Field Programmable Logic and Applications (FPL). 1-8.","author":"Ma Yufei","unstructured":"Yufei Ma , N. Suda , Yu Cao , J. Seo , and S. Vrudhula . 2016. Scalable and modularized RTL compilation of Convolutional Neural Networks onto FPGA . In 2016 26th International Conference on Field Programmable Logic and Applications (FPL). 1-8. Yufei Ma, N. Suda, Yu Cao, J. Seo, and S. Vrudhula. 2016. Scalable and modularized RTL compilation of Convolutional Neural Networks onto FPGA. In 2016 26th International Conference on Field Programmable Logic and Applications (FPL). 1-8."},{"key":"e_1_3_2_1_40_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards Deep Learning Models Resistant to Adversarial Attacks. arXiv: 1706. 06083 [stat.ML]  Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards Deep Learning Models Resistant to Adversarial Attacks. arXiv: 1706. 06083 [stat.ML]"},{"key":"e_1_3_2_1_41_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards Deep Learning Models Resistant to Adversarial Attacks. arXiv: 1706. 06083 [stat.ML]  Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards Deep Learning Models Resistant to Adversarial Attacks. arXiv: 1706. 06083 [stat.ML]"},{"key":"e_1_3_2_1_42_1","first-page":"5","article-title":"Article: Handwritten Courtesy Amount and Signature Recognition on Bank Cheque using Neural Network","volume":"118","author":"Alam Miah Mohammad Badrul","year":"2015","unstructured":"Mohammad Badrul Alam Miah , Mohammad Abu Yousuf , Md. Sohag Mia , and Md. Parag Miya . 2015 . Article: Handwritten Courtesy Amount and Signature Recognition on Bank Cheque using Neural Network . International Journal of Computer Applications 118 , 5 (May 2015 ), 21-26. Full text available. Mohammad Badrul Alam Miah, Mohammad Abu Yousuf, Md. Sohag Mia, and Md. Parag Miya. 2015. Article: Handwritten Courtesy Amount and Signature Recognition on Bank Cheque using Neural Network. International Journal of Computer Applications 118, 5 (May 2015 ), 21-26. Full text available.","journal-title":"International Journal of Computer Applications"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Riccardo Miotto Fei Wang Shuang Wang Xiaoqian Jiang and Joel T Dudley. 2018. Deep learning for healthcare: review opportunities and challenges. Briefings in bioinformatics 19 6 ( 2018 ) 1236-1246.  Riccardo Miotto Fei Wang Shuang Wang Xiaoqian Jiang and Joel T Dudley. 2018. Deep learning for healthcare: review opportunities and challenges. Briefings in bioinformatics 19 6 ( 2018 ) 1236-1246.","DOI":"10.1093\/bib\/bbx044"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2019.8727133"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2015. DeepFool: a simple and accurate method to fool deep neural networks. arXiv:1511.04599 [cs.LG]  Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2015. DeepFool: a simple and accurate method to fool deep neural networks. arXiv:1511.04599 [cs.LG]","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_1_46_1","volume-title":"Jong Hwan Ko, and Saibal Mukhopadhyay","author":"Na Taesik","year":"2017","unstructured":"Taesik Na , Jong Hwan Ko, and Saibal Mukhopadhyay . 2017 . Cascade Adversarial Machine Learning Regularized with a Unified Embedding . arXiv: 1708. 02582 [stat.ML] Taesik Na, Jong Hwan Ko, and Saibal Mukhopadhyay. 2017. Cascade Adversarial Machine Learning Regularized with a Unified Embedding. arXiv: 1708. 02582 [stat.ML]"},{"key":"e_1_3_2_1_47_1","unstructured":"Nina Narodytska and Shiva Prasad Kasiviswanathan. 2016. Simple Black-Box Adversarial Perturbations for Deep Networks. CoRR abs\/1612.06299 ( 2016 ). arXiv: 1612.06299 http:\/\/arxiv.org\/abs\/1612.06299  Nina Narodytska and Shiva Prasad Kasiviswanathan. 2016. Simple Black-Box Adversarial Perturbations for Deep Networks. CoRR abs\/1612.06299 ( 2016 ). arXiv: 1612.06299 http:\/\/arxiv.org\/abs\/1612.06299"},{"key":"e_1_3_2_1_48_1","unstructured":"Aran Nayebi and Surya Ganguli. 2017. Biologically inspired protection of deep networks from adversarial attacks. arXiv:1703. 09202 [stat.ML]  Aran Nayebi and Surya Ganguli. 2017. Biologically inspired protection of deep networks from adversarial attacks. arXiv:1703. 09202 [stat.ML]"},{"key":"e_1_3_2_1_49_1","volume-title":"2018 IEEE 36th International Conference on Computer Design (ICCD). 476-479","author":"Neggaz M. A.","unstructured":"M. A. Neggaz , I. Alouani , P. R. Lorenzo , and S. Niar . 2018. A Reliability Study on CNNs for Critical Embedded Systems . In 2018 IEEE 36th International Conference on Computer Design (ICCD). 476-479 . M. A. Neggaz, I. Alouani, P. R. Lorenzo, and S. Niar. 2018. A Reliability Study on CNNs for Critical Embedded Systems. In 2018 IEEE 36th International Conference on Computer Design (ICCD). 476-479."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2019.2952336"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2718479"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"e_1_3_2_1_54_1","unstructured":"Nicolas Papernot Patrick D. McDaniel Somesh Jha Matt Fredrikson Z. Berkay Celik and Ananthram Swami. 2015. The Limitations of Deep Learning in Adversarial Settings. CoRR abs\/1511.07528 ( 2015 ). arXiv: 1511.07528 http:\/\/arxiv.org\/abs\/1511.07528  Nicolas Papernot Patrick D. McDaniel Somesh Jha Matt Fredrikson Z. Berkay Celik and Ananthram Swami. 2015. The Limitations of Deep Learning in Adversarial Settings. CoRR abs\/1511.07528 ( 2015 ). arXiv: 1511.07528 http:\/\/arxiv.org\/abs\/1511.07528"},{"key":"e_1_3_2_1_55_1","volume-title":"PyTorch: An Imperative Style","author":"Paszke Adam","year":"1912","unstructured":"Adam Paszke , Sam Gross , Francisco Massa , Adam Lerer , James Bradbury , Gregory Chanan , Trevor Killeen , Zeming Lin , Natalia Gimelshein , Luca Antiga , Alban Desmaison , Andreas K\u00f6pf , Edward Yang , Zach DeVito , Martin Raison , Alykhan Tejani , Sasank Chilamkurthy , Benoit Steiner , Lu Fang , Junjie Bai , and Soumith Chintala . 2019. PyTorch: An Imperative Style , High-Performance Deep Learning Library . arXiv: 1912 . 01703 [cs.LG] Adam Paszke, Sam Gross, Francisco Massa, Adam Lerer, James Bradbury, Gregory Chanan, Trevor Killeen, Zeming Lin, Natalia Gimelshein, Luca Antiga, Alban Desmaison, Andreas K\u00f6pf, Edward Yang, Zach DeVito, Martin Raison, Alykhan Tejani, Sasank Chilamkurthy, Benoit Steiner, Lu Fang, Junjie Bai, and Soumith Chintala. 2019. PyTorch: An Imperative Style, High-Performance Deep Learning Library. arXiv: 1912. 01703 [cs.LG]"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Harry A Pierson and Michael S Gashler. 2017. Deep learning in robotics: a review of recent research. Advanced Robotics 31 16 ( 2017 ) 821-835.  Harry A Pierson and Michael S Gashler. 2017. Deep learning in robotics: a review of recent research. Advanced Robotics 31 16 ( 2017 ) 821-835.","DOI":"10.1080\/01691864.2017.1365009"},{"key":"e_1_3_2_1_57_1","volume-title":"Certified Defenses against Adversarial Examples. arXiv","author":"Raghunathan Aditi","year":"1801","unstructured":"Aditi Raghunathan , Jacob Steinhardt , and Percy Liang . 2018. Certified Defenses against Adversarial Examples. arXiv : 1801 . 09344 [cs.LG] Aditi Raghunathan, Jacob Steinhardt, and Percy Liang. 2018. Certified Defenses against Adversarial Examples. arXiv: 1801. 09344 [cs.LG]"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","unstructured":"Joseph Redmon and Ali Farhadi. 2016. YOLO9000: Better Faster Stronger. arXiv: 1612.08242 [cs.CV]  Joseph Redmon and Ali Farhadi. 2016. YOLO9000: Better Faster Stronger. arXiv: 1612.08242 [cs.CV]","DOI":"10.1109\/CVPR.2017.690"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11504"},{"key":"e_1_3_2_1_60_1","volume-title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models. arXiv preprint arXiv","author":"Samangouei Pouya","year":"2018","unstructured":"Pouya Samangouei , Maya Kabkab , and Rama Chellappa . 2018 . Defense-gan: Protecting classifiers against adversarial attacks using generative models. arXiv preprint arXiv : 1805. 06605 ( 2018 ). Pouya Samangouei, Maya Kabkab, and Rama Chellappa. 2018. Defense-gan: Protecting classifiers against adversarial attacks using generative models. arXiv preprint arXiv: 1805. 06605 ( 2018 )."},{"key":"e_1_3_2_1_61_1","volume-title":"Explainable AI: interpreting, explaining and visualizing deep learning","author":"Samek Wojciech","unstructured":"Wojciech Samek . 2019. Explainable AI: interpreting, explaining and visualizing deep learning . Vol. 11700 . Springer Nature . Wojciech Samek. 2019. Explainable AI: interpreting, explaining and visualizing deep learning. Vol. 11700. Springer Nature."},{"key":"e_1_3_2_1_62_1","unstructured":"Karen Simonyan and Andrew Zisserman. 2014. Very Deep Convolutional Networks for Large-Scale Image Recognition. arXiv:1409.1556 [cs.CV]  Karen Simonyan and Andrew Zisserman. 2014. Very Deep Convolutional Networks for Large-Scale Image Recognition. arXiv:1409.1556 [cs.CV]"},{"key":"e_1_3_2_1_63_1","unstructured":"Aman Sinha Hongseok Namkoong and John Duchi. 2017. Certifying Some Distributional Robustness with Principled Adversarial Training. arXiv: 1710. 10571 [stat.ML]  Aman Sinha Hongseok Namkoong and John Duchi. 2017. Certifying Some Distributional Robustness with Principled Adversarial Training. arXiv: 1710. 10571 [stat.ML]"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354211"},{"key":"e_1_3_2_1_65_1","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv:1312.6199 [cs.CV]  Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv:1312.6199 [cs.CV]"},{"key":"e_1_3_2_1_66_1","volume-title":"Attilio Fiandrotti, and Gianluca Francini.","author":"Tartaglione Enzo","year":"2018","unstructured":"Enzo Tartaglione , Skjalg Leps\u00f8 y , Attilio Fiandrotti, and Gianluca Francini. 2018 . Learning sparse neural networks via sensitivity-driven regularization. In Advances in Neural Information Processing Systems 31, S. Bengio, H. Wallach, H. Larochelle, K. Grauman, N. Cesa-Bianchi, and R. Garnett (Eds.). Curran Associates, Inc ., 3878-3888. http:\/\/papers.nips.cc\/paper\/7644-learning-sparse-neuralnetworks-via-sensitivity-driven-regularization.pdf Enzo Tartaglione, Skjalg Leps\u00f8 y, Attilio Fiandrotti, and Gianluca Francini. 2018. Learning sparse neural networks via sensitivity-driven regularization. In Advances in Neural Information Processing Systems 31, S. Bengio, H. Wallach, H. Larochelle, K. Grauman, N. Cesa-Bianchi, and R. Garnett (Eds.). Curran Associates, Inc., 3878-3888. http:\/\/papers.nips.cc\/paper\/7644-learning-sparse-neuralnetworks-via-sensitivity-driven-regularization.pdf"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/92.845894"},{"key":"e_1_3_2_1_68_1","unstructured":"Florian Tram\u00e8r Alexey Kurakin Nicolas Papernot Ian Goodfellow Dan Boneh and Patrick McDaniel. 2017. Ensemble adversarial training: Attacks and defenses. arXiv preprint arXiv:1705.07204 ( 2017 ).  Florian Tram\u00e8r Alexey Kurakin Nicolas Papernot Ian Goodfellow Dan Boneh and Patrick McDaniel. 2017. Ensemble adversarial training: Attacks and defenses. arXiv preprint arXiv:1705.07204 ( 2017 )."},{"key":"e_1_3_2_1_69_1","volume-title":"NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips. arXiv","author":"Venceslai Valerio","year":"2005","unstructured":"Valerio Venceslai , Alberto Marchisio , Ihsen Alouani , Maurizio Martina , and Muhammad Shafique . 2020. NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips. arXiv : 2005 . 08041 [cs.CR] Valerio Venceslai, Alberto Marchisio, Ihsen Alouani, Maurizio Martina, and Muhammad Shafique. 2020. NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips. arXiv: 2005. 08041 [cs.CR]"},{"key":"e_1_3_2_1_70_1","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 501-509","author":"Xie Cihang","unstructured":"Cihang Xie , Yuxin Wu , Laurens van der Maaten, Alan L Yuille, and Kaiming He. 2019. Feature denoising for improving adversarial robustness . In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 501-509 . Cihang Xie, Yuxin Wu, Laurens van der Maaten, Alan L Yuille, and Kaiming He. 2019. Feature denoising for improving adversarial robustness. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 501-509."},{"key":"e_1_3_2_1_71_1","volume-title":"Rajendra Rana Bhat, and Xiaolin Li","author":"Yuan Xiaoyong","year":"2017","unstructured":"Xiaoyong Yuan , Pan He , Qile Zhu , Rajendra Rana Bhat, and Xiaolin Li . 2017 . Adversarial Examples : Attacks and Defenses for Deep Learning. CoRR abs\/1712.07107 ( 2017 ). arXiv: 1712.07107 http:\/\/arxiv.org\/abs\/1712.07107 Xiaoyong Yuan, Pan He, Qile Zhu, Rajendra Rana Bhat, and Xiaolin Li. 2017. Adversarial Examples: Attacks and Defenses for Deep Learning. CoRR abs\/1712.07107 ( 2017 ). arXiv: 1712.07107 http:\/\/arxiv.org\/abs\/1712.07107"},{"key":"e_1_3_2_1_72_1","unstructured":"Shuchang Zhou Yuxin Wu Zekun Ni Xinyu Zhou He Wen and Yuheng Zou. 2018. DoReFa-Net: Training Low Bitwidth Convolutional Neural Networks with Low Bitwidth Gradients. arXiv: 1606.06160 [cs.NE]  Shuchang Zhou Yuxin Wu Zekun Ni Xinyu Zhou He Wen and Yuheng Zou. 2018. DoReFa-Net: Training Low Bitwidth Convolutional Neural Networks with Low Bitwidth Gradients. arXiv: 1606.06160 [cs.NE]"}],"event":{"name":"ASPLOS '21: 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems","location":"Virtual USA","acronym":"ASPLOS '21","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages"]},"container-title":["Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3445814.3446747","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3445814.3446747","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:28:14Z","timestamp":1750195694000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3445814.3446747"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,17]]},"references-count":71,"alternative-id":["10.1145\/3445814.3446747","10.1145\/3445814"],"URL":"https:\/\/doi.org\/10.1145\/3445814.3446747","relation":{},"subject":[],"published":{"date-parts":[[2021,4,17]]},"assertion":[{"value":"2021-04-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}