{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T12:34:25Z","timestamp":1791894865611,"version":"4.3.4"},"reference-count":176,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2021,11,23]],"date-time":"2021-11-23T00:00:00Z","timestamp":1637625600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61872130, 62122023, U20A20202, 62002167, and 61874042"],"award-info":[{"award-number":["61872130, 62122023, U20A20202, 62002167, and 61874042"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Science and Technology Project of Department of Communications of Hunan Provincial","award":["201928"],"award-info":[{"award-number":["201928"]}]},{"name":"Hunan Natural Science Foundation for Distinguished Young Scholars","award":["2020JJ2010"],"award-info":[{"award-number":["2020JJ2010"]}]},{"name":"Hunan Science and Technology Innovation Leading Talents Project","award":["2021RC4019"],"award-info":[{"award-number":["2021RC4019"]}]},{"DOI":"10.13039\/501100003392","name":"Natural Science Foundation of Fujian Province","doi-asserted-by":"crossref","award":["2021J01544"],"award-info":[{"award-number":["2021J01544"]}],"id":[{"id":"10.13039\/501100003392","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Key R & D Projects of Changsha","award":["kq1907103"],"award-info":[{"award-number":["kq1907103"]}]},{"DOI":"10.13039\/501100004608","name":"National Natural Science Foundation of JiangSu","doi-asserted-by":"crossref","award":["BK20200461"],"award-info":[{"award-number":["BK20200461"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,1,31]]},"abstract":"<jats:p>In recent years, with rapid technological advancement in both computing hardware and algorithm, Artificial Intelligence (AI) has demonstrated significant advantage over human being in a wide range of fields, such as image recognition, education, autonomous vehicles, finance, and medical diagnosis. However, AI-based systems are generally vulnerable to various security threats throughout the whole process, ranging from the initial data collection and preparation to the training, inference, and final deployment. In an AI-based system, the data collection and pre-processing phase are vulnerable to sensor spoofing attacks and scaling attacks, respectively, while the training and inference phases of the model are subject to poisoning attacks and adversarial attacks, respectively. To address these severe security threats against the AI-based systems, in this article, we review the challenges and recent research advances for security issues in AI, so as to depict an overall blueprint for AI security. More specifically, we first take the lifecycle of an AI-based system as a guide to introduce the security threats that emerge at each stage, which is followed by a detailed summary for corresponding countermeasures. Finally, some of the future challenges and opportunities for the security issues in AI will also be discussed.<\/jats:p>","DOI":"10.1145\/3487890","type":"journal-article","created":{"date-parts":[[2021,11,23]],"date-time":"2021-11-23T12:36:59Z","timestamp":1637671019000},"page":"1-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":176,"title":["Artificial Intelligence Security: Threats and Countermeasures"],"prefix":"10.1145","volume":"55","author":[{"given":"Yupeng","family":"Hu","sequence":"first","affiliation":[{"name":"Hunan University, Hunan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenxin","family":"Kuang","sequence":"additional","affiliation":[{"name":"Hunan University, Hunan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zheng","family":"Qin","sequence":"additional","affiliation":[{"name":"Hunan University, Hunan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kenli","family":"Li","sequence":"additional","affiliation":[{"name":"Hunan University, Hunan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiliang","family":"Zhang","sequence":"additional","affiliation":[{"name":"Hunan University, Hunan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yansong","family":"Gao","sequence":"additional","affiliation":[{"name":"Nanjing University of Science and Technology, Nanjing, Jiangsu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjia","family":"Li","sequence":"additional","affiliation":[{"name":"New York Institute of Technology, New York, NY"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Keqin","family":"Li","sequence":"additional","affiliation":[{"name":"State University of New York, Albany, NY"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,11,23]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00020"},{"key":"e_1_3_1_3_2","unstructured":"Moustafa Alzantot Bharathan Balaji and Mani B. Srivastava. 2018. Did you hear that? Adversarial Examples Against Automatic Speech Recognition. CoRR abs\/1801.00554 (2018). arXiv:1801.00554 . http:\/\/arxiv.org\/abs\/1801.00554."},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.5555\/3045390.3045410"},{"key":"e_1_3_1_5_2","unstructured":"Hyrum S. Anderson Anant Kharkar Bobby Filar and Phil Roth. 2017. Evading machine learning malware detection. Black Hat (2017) 1\u20136."},{"key":"e_1_3_1_6_2","unstructured":"Martin Arjovsky and L\u00e9on Bottou. 2017. Towards Principled Methods for Training Generative Adversarial Networks. arXiv:1701.04862 [stat.ML] https:\/\/arxiv.org\/abs\/1701.04862"},{"key":"e_1_3_1_7_2","unstructured":"Eugene Bagdasaryan and Vitaly Shmatikov. 2020. Blind Backdoors in Deep Learning Models. CoRR abs\/2005.03823 (2020). arXiv:2005.03823 https:\/\/arxiv.org\/abs\/2005.03823"},{"key":"e_1_3_1_8_2","first-page":"2938","volume-title":"Proceedings of the 23rd International Conference on Artificial Intelligence and Statistics","author":"Bagdasaryan Eugene","year":"2020","unstructured":"Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2020. How to backdoor federated learning. In Proceedings of the 23rd International Conference on Artificial Intelligence and Statistics. PMLR, 2938\u20132948."},{"key":"e_1_3_1_9_2","unstructured":"Shumeet Baluja and Ian Fischer. 2017. Adversarial Transformation Networks: Learning to Generate Adversarial Examples. CoRR abs\/1703.09387 (2017). arXiv:1703.09387 http:\/\/arxiv.org\/abs\/1703.09387"},{"key":"e_1_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2020.3037619"},{"key":"e_1_3_1_12_2","first-page":"634","volume-title":"Proceedings of the International Conference on Machine Learning","author":"Bhagoji Arjun Nitin","year":"2019","unstructured":"Arjun Nitin Bhagoji, Supriyo Chakraborty, Prateek Mittal, and Seraphin Calo. 2019. Analyzing federated learning through an adversarial lens. In Proceedings of the International Conference on Machine Learning. PMLR, 634\u2013643."},{"key":"e_1_3_1_13_2","unstructured":"Bryan Biegel and James F. Kurose. 2016. The National Artificial Intelligence Research and Development Strategic Plan_NSTC and NITRD. White House (2016). https:\/\/www.nitrd.gov\/pubs\/national_ai_rd_strategic_plan.pdf."},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.5555\/2040895.2040945"},{"key":"e_1_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.5555\/3042573.3042761"},{"key":"e_1_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3264418"},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/2160601.2160603"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2014.05.007"},{"key":"e_1_3_1_19_2","unstructured":"Tom B. Brown Dandelion Man\u00e9 Aurko Roy Mart\u00edn Abadi and Justin Gilmer. 2017. Adversarial Patch. CoRR abs\/1712.09665 (2017). arXiv:1712.09665 http:\/\/arxiv.org\/abs\/1712.09665"},{"key":"e_1_3_1_20_2","unstructured":"Nicholas Carlini and David A. Wagner. 2016. Defensive Distillation is Not Robust to Adversarial Examples. CoRR abs\/1607.04311 (2016). arXiv:1607.04311 http:\/\/arxiv.org\/abs\/1607.04311"},{"key":"e_1_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"e_1_3_1_24_2","unstructured":"Anirban Chakraborty Manaar Alam Vishal Dey Anupam Chattopadhyay and Debdeep Mukhopadhyay. 2018. Adversarial Attacks and Defences: A Survey. CoRR abs\/1810.00069 (2018). arXiv:1810.00069 http:\/\/arxiv.org\/abs\/1810.00069"},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1142\/S1793005708001094"},{"key":"e_1_3_1_26_2","unstructured":"Bryant Chen Wilka Carvalho Nathalie Baracaldo Heiko Ludwig Benjamin Edwards Taesung Lee Ian M. Molloy and Biplav Srivastava. 2018. Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering. CoRR abs\/1811.03728 (2018). arXiv:1811.03728 http:\/\/arxiv.org\/abs\/1811.03728"},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"e_1_3_1_28_2","doi-asserted-by":"crossref","unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. CoRR abs\/1712.05526 (2017). arXiv:1712.05526 http:\/\/arxiv.org\/abs\/1712.05526","DOI":"10.1007\/978-981-287-588-4_100717"},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.5555\/1005332.1016792"},{"key":"e_1_3_1_30_2","unstructured":"Moustapha Cisse Yossi Adi Natalia Neverova and Joseph Keshet. 2017. Houdini: Fooling Deep Structured Prediction Models. arXiv:1707.05373."},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/2909609.2909660"},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.5555\/239297.239320"},{"key":"e_1_3_1_33_2","unstructured":"Ronan Collobert Christian Puhrsch and Gabriel Synnaeve. 2016. Wav2Letter: an End-to-End ConvNet-based Speech Recognition System. CoRR abs\/1609.03193 (2016). arXiv:1609.03193 http:\/\/arxiv.org\/abs\/1609.03193."},{"key":"e_1_3_1_34_2","unstructured":"Jamie Condliffe. 2015. Robotic Surgery Has Been Connected to 144 US Deaths Since 2000. Retrieved October 28 2021 from https:\/\/gizmodo.com\/robotic-surgery-has-been-connected-to-144-u-s-deaths-s-1719202166."},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.11"},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"e_1_3_1_37_2","first-page":"677","volume-title":"Proceedings of the Joint European Conference on Machine Learning and Knowledge Discovery in Databases","author":"Das Nilaksh","year":"2018","unstructured":"Nilaksh Das, Madhuri Shanbhogue, Shang-Tse Chen, Li Chen, Michael E. Kounavis, and Duen Horng Chau. 2018. Adagio: Interactive experimentation with adversarial attack and defense for audio. In Proceedings of the Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer, 677\u2013681."},{"key":"e_1_3_1_38_2","doi-asserted-by":"crossref","unstructured":"Jeffrey Dastin. 2018. Amazon scraps secret AI recruiting tool that showed bias against women. Retrieved October 28 2021 from https:\/\/www.reuters.com\/article\/us-amazon-com-jobs-automation-insight\/amazon-scraps-secret-ai-recruiting-tool-that-showed-bias-against-women-idUSKCN1MK08G.","DOI":"10.1201\/9781003278290-44"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006283"},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"e_1_3_1_41_2","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"e_1_3_1_42_2","unstructured":"Gintare Karolina Dziugaite Zoubin Ghahramani and Daniel M. Roy. 2016. A study of the effect of JPG compression on adversarial images. CoRR abs\/1608.00853 (2016). arXiv:1608.00853 http:\/\/arxiv.org\/abs\/1608.00853"},{"key":"e_1_3_1_43_2","unstructured":"Bill Eidson. 2020. MITRE MICROSOFT AND 11 OTHER ORGANIZATIONS TAKE ON MACHINE-LEARNING THREATS. Retrieved October 28 2021 from https:\/\/www.mitre.org\/publications\/project-stories\/mitre-microsoft-others-take-on-machine-learning-threats."},{"key":"e_1_3_1_44_2","unstructured":"Paul Triolo Graham Webster Rogier Creemers and Elsa Kania. 2017. A Next Generation Artificial Intelligence Development Plan: China. Retrieved October 28 2021 from https:\/\/www.newamerica.org\/cybersecurity-initiative\/digichina\/blog\/full-translation-chinas-new-generation-artificial-intelligence-development-plan-2017\/."},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660348"},{"key":"e_1_3_1_46_2","unstructured":"Ivan Evtimov Kevin Eykholt Earlence Fernandes Tadayoshi Kohno Bo Li Atul Prakash Amir Rahmati and Dawn Song. 2017. Robust Physical-World Attacks on Machine Learning Models. CoRR abs\/1707.08945 (2017). arXiv:1707.08945 http:\/\/arxiv.org\/abs\/1707.08945"},{"key":"e_1_3_1_47_2","unstructured":"Reuben Feinman Ryan R. Curtin Saurabh Shintre and Andrew B. Gardner. 2017. Detecting Adversarial Samples from Artifacts. arXiv:1703.00410 [stat.ML]."},{"key":"e_1_3_1_48_2","unstructured":"Financial Stability Board. 2017. Artificial intelligence and machine learning in financial services - market developments and financial stability implications. Financial Stability Board 45 (2017)."},{"key":"e_1_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.5555\/2671225.2671227"},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"e_1_3_1_51_2","unstructured":"Yansong Gao Bao Gia Doan Zhi Zhang Siqi Ma Jiliang Zhang Anmin Fu Surya Nepal and Hyoungshick Kim. 2020. Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review. CoRR abs\/2007.10760 (2020). arXiv:2007.10760 https:\/\/arxiv.org\/abs\/2007.10760"},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"e_1_3_1_53_2","doi-asserted-by":"publisher","DOI":"10.5555\/3045390.3045413"},{"key":"e_1_3_1_54_2","unstructured":"Yuan Gong and Christian Poellabauer. 2017. Crafting Adversarial Examples For Speech Paralinguistics Applications. CoRR abs\/1711.03280 (2017). arXiv:1711.03280 http:\/\/arxiv.org\/abs\/1711.03280"},{"key":"e_1_3_1_55_2","unstructured":"Zhitao Gong Wenlu Wang Bo Li Dawn Song and Wei-Shinn Ku. 2018. Adversarial Texts with Gradient Methods. arXiv:1801.07175 [cs.CL] https:\/\/arxiv.org\/abs\/1801.07175"},{"key":"e_1_3_1_56_2","volume-title":"Proceedings of the 3rd International Conference on Learning Representations","author":"Goodfellow Ian J.","year":"2015","unstructured":"Ian J. Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In Proceedings of the 3rd International Conference on Learning Representations. ICLR."},{"key":"e_1_3_1_57_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01090-4_1"},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"key":"e_1_3_1_59_2","unstructured":"Kathrin Grosse Praveen Manoharan Nicolas Papernot Michael Backes and Patrick D. McDaniel. 2017. On the (Statistical) Detection of Adversarial Examples. CoRR abs\/1702.06280 (2017). arXiv:1702.06280 http:\/\/arxiv.org\/abs\/1702.06280"},{"key":"e_1_3_1_60_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"e_1_3_1_61_2","unstructured":"Shixiang Gu and Luca Rigazio. 2015. Towards Deep Neural Network Architectures Robust to Adversarial Examples. arXiv:1412.5068 [cs.LG] https:\/\/arxiv.org\/abs\/1412.5068"},{"key":"e_1_3_1_62_2","unstructured":"Tianyu Gu Brendan Dolan-Gavitt and Siddharth Garg. 2017. BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. CoRR abs\/1708.06733 (2017). arXiv:1708.06733 http:\/\/arxiv.org\/abs\/1708.06733"},{"key":"e_1_3_1_63_2","doi-asserted-by":"crossref","unstructured":"Tianyu Gu Kang Liu Brendan Dolan-Gavitt and Siddharth Garg. 2019. BadNets: Evaluating backdooring attacks on deep neural networks. IEEE Access 7 (2019) 47230\u201347244. https:\/\/doi.org\/10.1109\/ACCESS.2019.2909068","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_1_64_2","unstructured":"Stephen Hardy Wilko Henecka Hamish Ivey-Law Richard Nock Giorgio Patrini Guillaume Smith and Brian Thorne. 2017. Private federated learning on vertically partitioned data via entity resolution and additively homomorphic encryption. CoRR abs\/1711.10677 (2017). arXiv:1711.10677 http:\/\/arxiv.org\/abs\/1711.10677"},{"key":"e_1_3_1_65_2","unstructured":"J. Henry Hinnefeld Peter Cooman Nat Mammo and Rupert Deese. 2018. Evaluating Fairness Metrics in the Presence of Dataset Bias. CoRR abs\/1809.09245 (2018). arXiv:1809.09245 http:\/\/arxiv.org\/abs\/1809.09245"},{"key":"e_1_3_1_66_2","unstructured":"Geoffrey Hinton Oriol Vinyals and Jeff Dean. 2015. Distilling the Knowledge in a Neural Network. arXiv:1503.02531 [stat.ML] https:\/\/arxiv.org\/abs\/1503.02531"},{"key":"e_1_3_1_67_2","doi-asserted-by":"publisher","DOI":"10.1162\/neco.2006.18.7.1527"},{"key":"e_1_3_1_68_2","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1900006"},{"key":"e_1_3_1_69_2","unstructured":"Weiwei Hu and Ying Tan. 2017. Black-Box Attacks against RNN based Malware Detection Algorithms. CoRR abs\/1705.08131 (2017). arXiv:1705.08131 http:\/\/arxiv.org\/abs\/1705.08131"},{"key":"e_1_3_1_70_2","unstructured":"Weiwei Hu and Ying Tan. 2017. Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN. CoRR abs\/1702.05983 (2017). arXiv:1702.05983 http:\/\/arxiv.org\/abs\/1702.05983"},{"key":"e_1_3_1_71_2","doi-asserted-by":"publisher","DOI":"10.5555\/3454287.3454299"},{"key":"e_1_3_1_72_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"e_1_3_1_73_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363201"},{"key":"e_1_3_1_74_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1215"},{"key":"e_1_3_1_75_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"e_1_3_1_76_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_5"},{"key":"e_1_3_1_77_2","unstructured":"Bedeuro Kim Alsharif Abuadbba Yansong Gao Yifeng Zheng Muhammad Ejaz Ahmed Hyoungshick Kim and Surya Nepal. 2020. Decamouflage: A Framework to Detect Image-Scaling Attacks on Convolutional Neural Networks. CoRR abs\/2010.03735 (2020). arXiv:2010.03735 https:\/\/arxiv.org\/abs\/2010.03735"},{"key":"e_1_3_1_78_2","unstructured":"Pang Wei Koh and Percy Liang. 2020. Understanding Black-box Predictions via Influence Functions. arXiv:1703.04730 [stat.ML] https:\/\/arxiv.org\/abs\/1703.04730"},{"key":"e_1_3_1_79_2","first-page":"2287","article-title":"Adversarial audio: A new information hiding method","author":"Kong Yehao","year":"2020","unstructured":"Yehao Kong and Jiliang Zhang. 2020. Adversarial audio: A new information hiding method. In Proceedings of the Interspeech, 2287\u20132291.","journal-title":"Proceedings of the Interspeech"},{"key":"e_1_3_1_80_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.20"},{"key":"e_1_3_1_81_2","unstructured":"Alexey Kurakin Ian J. Goodfellow and Samy Bengio. 2016. Adversarial examples in the physical world. CoRR abs\/1607.02533 (2016). arXiv:1607.02533 http:\/\/arxiv.org\/abs\/1607.02533"},{"key":"e_1_3_1_82_2","volume-title":"Proceedings of the 5th International Conference on Learning Representations","author":"Kurakin Alexey","year":"2016","unstructured":"Alexey Kurakin, Ian J. Goodfellow, and Samy Bengio. 2016. Adversarial machine learning at scale. In Proceedings of the 5th International Conference on Learning Representations. ICLR."},{"key":"e_1_3_1_83_2","unstructured":"Hyeungill Lee Sungyeob Han and Jungwoo Lee. 2017. Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN. CoRR abs\/1705.03387 (2017). arXiv:1705.03387 http:\/\/arxiv.org\/abs\/1705.03387"},{"key":"e_1_3_1_84_2","doi-asserted-by":"crossref","unstructured":"Linyang Li Ruotian Ma Qipeng Guo Xiangyang Xue and Xipeng Qiu. 2020. BERT-ATTACK: Adversarial Attack Against BERT Using BERT. CoRR abs\/2004.09984 (2020). arXiv:2004.09984 https:\/\/arxiv.org\/abs\/2004.09984","DOI":"10.18653\/v1\/2020.emnlp-main.500"},{"key":"e_1_3_1_85_2","doi-asserted-by":"publisher","DOI":"10.1109\/CIC48465.2019.00050"},{"key":"e_1_3_1_86_2","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2015.2494017"},{"key":"e_1_3_1_87_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2720635"},{"key":"e_1_3_1_88_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.615"},{"key":"e_1_3_1_89_2","doi-asserted-by":"crossref","unstructured":"Wei Liang Songyou Xie Jiahong Cai Jianbo Xu Yupeng Hu Yang Xu and Meikang Qiu. 2021. Deep neural network security collaborative filtering scheme for service recommendation in intelligent cyber-physical systems. IEEE Internet of Things Journal (2021) 1\u20131. https:\/\/doi.org\/10.1109\/JIOT.2021.3086845","DOI":"10.1109\/JIOT.2021.3086845"},{"key":"e_1_3_1_90_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2817921"},{"key":"e_1_3_1_91_2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140447"},{"key":"e_1_3_1_92_2","doi-asserted-by":"crossref","unstructured":"Gao Liu Zheng Yan and Witold Pedrycz. 2018. Data collection for attack detection and security measurement in Mobile Ad Hoc Networks: A survey. Journal of Network and Computer Applications 105 (2018) 105\u2013122. https:\/\/doi.org\/10.1016\/j.jnca.2018.01.004","DOI":"10.1016\/j.jnca.2018.01.004"},{"key":"e_1_3_1_93_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"e_1_3_1_94_2","volume-title":"Proceedings of the Network and Distributed System Security Symposium","author":"Liu Yingqi","year":"2017","unstructured":"Yingqi Liu, Shiqing Ma, Yousra Aafer, Wen Chuan Lee, and Xiangyu Zhang. 2017. Trojaning attack on neural networks. In Proceedings of the Network and Distributed System Security Symposium."},{"key":"e_1_3_1_95_2","first-page":"1","article-title":"Traffic sign recognition using neural network on OpenCV: Toward intelligent vehicle\/driver assistance system","author":"Lorsakul Auranuch","year":"2007","unstructured":"Auranuch Lorsakul and Jackrit Suthakorn. 2007. Traffic sign recognition using neural network on OpenCV: Toward intelligent vehicle\/driver assistance system. In Proceedings of the 4th International Conference on Ubiquitous Robots and Ambient Intelligence, 1\u201319. Retrieved from http:\/\/crit2007.bartlab.org\/Dr.Jackrit'sPapers\/ney\/1.TRAFFIC_SIGN_Lorsakul_ISR.pdf.","journal-title":"Proceedings of the 4th International Conference on Ubiquitous Robots and Ambient Intelligence"},{"key":"e_1_3_1_96_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.56"},{"key":"e_1_3_1_97_2","doi-asserted-by":"publisher","DOI":"10.1162\/coli_a_00002"},{"key":"e_1_3_1_98_2","unstructured":"John McCarthy. 1956. Artificial Intelligence (AI) Coined at Dartmouth. Retrieved October 28 2021 from https:\/\/250.dartmouth.edu\/highlights\/artificial-intelligence-ai-coined-dartmouth."},{"key":"e_1_3_1_99_2","first-page":"1273","volume-title":"Proceedings of the Artificial Intelligence and Statistics","author":"McMahan Brendan","year":"2017","unstructured":"Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Proceedings of the Artificial Intelligence and Statistics. PMLR, 1273\u20131282."},{"key":"e_1_3_1_100_2","doi-asserted-by":"publisher","DOI":"10.5555\/2886521.2886721"},{"key":"e_1_3_1_101_2","doi-asserted-by":"publisher","DOI":"10.3390\/s151229822"},{"key":"e_1_3_1_102_2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_1_103_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00251"},{"key":"e_1_3_1_104_2","unstructured":"Jan Hendrik Metzen Tim Genewein Volker Fischer and Bastian Bischoff. 2017. On Detecting Adversarial Perturbations. arXiv:1702.04267 [stat.ML] https:\/\/arxiv.org\/abs\/1702.04267"},{"key":"e_1_3_1_105_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"e_1_3_1_106_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_1_107_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00929"},{"key":"e_1_3_1_108_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2861800"},{"key":"e_1_3_1_109_2","unstructured":"Lindasalwa Muda Mumtaj Begam and I. Elamvazuthi. 2010. Voice Recognition Algorithms using Mel Frequency Cepstral Coefficient (MFCC) and Dynamic TimeWarping (DTW) Techniques. CoRR abs\/1003.4083 (2010). arXiv:1003.4083 http:\/\/arxiv.org\/abs\/1003.4083"},{"key":"e_1_3_1_110_2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"e_1_3_1_111_2","doi-asserted-by":"publisher","DOI":"10.5555\/1387709.1387716"},{"key":"e_1_3_1_112_2","doi-asserted-by":"crossref","unstructured":"Alexandra Olteanu Carlos Castillo Fernando Diaz and Emre K\u0131c\u0131man. 2019. Social Data: Biases Methodological Pitfalls and Ethical Boundaries. Frontiers in Big Data 2 (2019) 13. https:\/\/doi.org\/10.3389\/fdata.2019.00013","DOI":"10.3389\/fdata.2019.00013"},{"key":"e_1_3_1_113_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2008.05.008"},{"key":"e_1_3_1_114_2","doi-asserted-by":"crossref","unstructured":"Mesut Ozdag. 2018. Adversarial Attacks and Defenses Against Deep Neural Networks: A Survey. Procedia Computer Science 140 (2018) 152\u2013161. https:\/\/doi.org\/10.1016\/j.procs.2018.10.315 Cyber Physical Systems and Deep Learning Chicago Illinois November 5-7 2018.","DOI":"10.1016\/j.procs.2018.10.315"},{"key":"e_1_3_1_115_2","doi-asserted-by":"crossref","unstructured":"Nicolas Papernot Patrick Mcdaniel Somesh Jha Matt Fredrikson Z. Berkay Celik and Ananthram Swami. 2016. The limitations of deep learning in adversarial settings. In Proceedings of the 2016 IEEE European Symposium on Security and Privacy . DOI:https:\/\/doi.org\/10.1109\/EuroSP.2016.36","DOI":"10.1109\/EuroSP.2016.36"},{"key":"e_1_3_1_116_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"e_1_3_1_117_2","unstructured":"George Philipp and Jaime G. Carbonell. 2018. The Nonlinearity Coefficient - Predicting Overfitting in Deep Neural Networks. CoRR abs\/1806.00179 (2018) . arXiv:1806.00179 http:\/\/arxiv.org\/abs\/1806.00179"},{"key":"e_1_3_1_118_2","volume-title":"Proceedings of the IEEE 2011 Workshop on Automatic Speech Recognition and Understanding","author":"Povey Daniel","year":"2011","unstructured":"Daniel Povey, Arnab Ghoshal, Gilles Boulianne, Lukas Burget, Ondrej Glembek, Nagendra Goel, Mirko Hannemann, Petr Motlicek, Yanmin Qian, Petr Schwarz, Jan Silovsky, Georg Stemmer, and Karel Vesely. 2011. The Kaldi speech recognition toolkit. In Proceedings of the IEEE 2011 Workshop on Automatic Speech Recognition and Understanding. IEEE Signal Processing Society."},{"key":"e_1_3_1_119_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00894"},{"key":"e_1_3_1_120_2","unstructured":"Katyanna Quach. 2020. Researchers made an OpenAI GPT-3 medical chatbot as an experiment. It told a mock patient to kill themselves. Retrieved October 28 2021 from https:\/\/www.theregister.com\/2020\/10\/28\/gpt3_medical_chatbot_experiment\/."},{"key":"e_1_3_1_121_2","doi-asserted-by":"publisher","DOI":"10.5555\/3489212.3489289"},{"key":"e_1_3_1_122_2","doi-asserted-by":"crossref","unstructured":"Erwin Quiring and Konrad Rieck. 2020. Backdooring and Poisoning Neural Networks with Image-Scaling Attacks. CoRR abs\/2003.08633 (2020) . arXiv:2003.08633 https:\/\/arxiv.org\/abs\/2003.08633","DOI":"10.1109\/SPW50608.2020.00024"},{"key":"e_1_3_1_123_2","unstructured":"Aditi Raghunathan Jacob Steinhardt and Percy Liang. 2018. Certified Defenses against Adversarial Examples. CoRR abs\/1801.09344 (2018) . arXiv:1801.09344 http:\/\/arxiv.org\/abs\/1801.09344"},{"key":"e_1_3_1_124_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASRU.2017.8268935"},{"key":"e_1_3_1_125_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01240-3_2"},{"key":"e_1_3_1_126_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00084"},{"key":"e_1_3_1_127_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2316816"},{"key":"e_1_3_1_128_2","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"e_1_3_1_129_2","unstructured":"Pouya Samangouei Maya Kabkab and Rama Chellappa. 2018. Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models. CoRR abs\/1805.06605 (2018) . arXiv:1805.06605 http:\/\/arxiv.org\/abs\/1805.06605"},{"key":"e_1_3_1_130_2","doi-asserted-by":"publisher","DOI":"10.5555\/3304222.3304371"},{"key":"e_1_3_1_131_2","doi-asserted-by":"publisher","DOI":"10.5555\/3327345.3327509"},{"key":"e_1_3_1_132_2","doi-asserted-by":"publisher","DOI":"10.5555\/3027019.3027037"},{"key":"e_1_3_1_133_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_4"},{"key":"e_1_3_1_134_2","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813679"},{"key":"e_1_3_1_135_2","unstructured":"Marco della Cava. 2018. Uber self-driving car kills Arizona pedestrian realizing worst fears of the new tech. Retrieved October 28 2021 from https:\/\/www.usatoday.com\/story\/tech\/2018\/03\/19\/uber-self-driving-car-kills-arizona-woman\/438473002\/."},{"key":"e_1_3_1_136_2","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831199"},{"key":"e_1_3_1_137_2","unstructured":"Congzheng Song and Vitaly Shmatikov. 2018. Fooling OCR Systems withAdversarial Text Images. CoRR abs\/1802.05385 (2018) . arXiv:1802.05385 http:\/\/arxiv.org\/abs\/1802.05385"},{"key":"e_1_3_1_138_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354211"},{"key":"e_1_3_1_139_2","unstructured":"Yang Song Taesup Kim Sebastian Nowozin Stefano Ermon and Nate Kushman. 2017. PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples. CoRR abs\/1710.10766 (2017) . arXiv:1710.10766 http:\/\/arxiv.org\/abs\/1710.10766"},{"key":"e_1_3_1_140_2","doi-asserted-by":"publisher","DOI":"10.5555\/3294996.3295110"},{"key":"e_1_3_1_141_2","doi-asserted-by":"publisher","DOI":"10.1093\/clinchem\/48.8.1279"},{"key":"e_1_3_1_142_2","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"e_1_3_1_143_2","unstructured":"Lichao Sun Ji Wang Philip S. Yu and Bo Li. 2018. Adversarial Attack and Defense on Graph Data: A Survey. CoRR abs\/1812.10528 (2018) . arXiv:1812.10528 http:\/\/arxiv.org\/abs\/1812.10528"},{"key":"e_1_3_1_144_2","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219909"},{"key":"e_1_3_1_145_2","unstructured":"Sining Sun Ching-Feng Yeh Mari Ostendorf Mei-Yuh Hwang and Lei Xie. 2018. Training Augmentation with Adversarial Examples for Robust Speech Recognition. CoRR abs\/1806.02782 (2018) . arXiv:1806.02782 http:\/\/arxiv.org\/abs\/1806.02782"},{"issue":"2000","key":"e_1_3_1_146_2","first-page":"1","article-title":"Simple demographics often identify people uniquely","volume":"671","author":"Sweeney Latanya","year":"2000","unstructured":"Latanya Sweeney. 2000. Simple demographics often identify people uniquely. Health 671, 2000 (2000), 1\u201334.","journal-title":"Health"},{"key":"e_1_3_1_147_2","first-page":"1","article-title":"Intriguing properties of neural networks","author":"Szegedy Christian","year":"2014","unstructured":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2014. Intriguing properties of neural networks. In Proceedings of the 2nd International Conference on Learning Representations. 1\u201310.","journal-title":"Proceedings of the 2nd International Conference on Learning Representations"},{"key":"e_1_3_1_148_2","article-title":"DARPA\u2019s \u2018AI next\u2019 program bearing fruit","author":"Tadjdeh Yasmin","year":"2017","unstructured":"Yasmin Tadjdeh. 2017. DARPA\u2019s \u2018AI next\u2019 program bearing fruit. NDIA\u2019s Business & Technology Magazine. Retrieved from https:\/\/www.nationaldefensemagazine.org\/articles\/2019\/7\/2\/algorithmic-warfare-darpas-ai-next-program-bearing-fruit.","journal-title":"NDIA\u2019s Business & Technology Magazine"},{"key":"e_1_3_1_149_2","unstructured":"Rohan Taori Amog Kamsetty Brenton Chu and Nikita Vemuri. 2018. Targeted Adversarial Examples for Black Box Audio Systems. CoRR abs\/1805.07820 (2018) . arXiv:1805.07820 http:\/\/arxiv.org\/abs\/1805.07820"},{"key":"e_1_3_1_150_2","unstructured":"Florian Tram\u00e8r Alexey Kurakin Nicolas Papernot Ian J. Goodfellow Dan Boneh and Patrick D. McDaniel. 2018. Ensemble adversarial training: Attacks and defenses. In Proceedings of the 6th International Conference on Learning Representations ICLR 2018 Vancouver BC Canada April 30 - May 3 2018 . OpenReview.net. https:\/\/openreview.net\/forum?id=rkZvSe-RZ."},{"key":"e_1_3_1_151_2","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"e_1_3_1_152_2","unstructured":"Alexander Turner Dimitris Tsipras and Aleksander Madry. 2019. Label-Consistent Backdoor Attacks. arXiv:1912.02771 [stat.ML] https:\/\/arxiv.org\/abs\/1912.02771"},{"key":"e_1_3_1_153_2","doi-asserted-by":"crossref","unstructured":"Daniele Ucci Leonardo Aniello and Roberto Baldoni. 2019. Survey of machine learning techniques for malware analysis. Computers & Security 81 (2019) 123\u2013147. https:\/\/doi.org\/10.1016\/j.cose.2018.11.001","DOI":"10.1016\/j.cose.2018.11.001"},{"key":"e_1_3_1_154_2","doi-asserted-by":"publisher","DOI":"10.5555\/2145432.2145576"},{"key":"e_1_3_1_155_2","unstructured":"James Vincent. 2020. What a machine learning tool that turns Obama white can (and can\u2019t) tell us about AI bias. Retrieved October 28 2021 from https:\/\/www.theverge.com\/21298762\/face-depixelizer-ai-machine-learning-toolpulse-stylegan-obama-bias."},{"key":"e_1_3_1_156_2","doi-asserted-by":"crossref","unstructured":"Putra Wanda and Huang Jin Jie. 2020. DeepProfile: Finding fake profile in online social network using dynamic CNN. Journal of Information Security and Applications 52 (2020) 102465. https:\/\/doi.org\/10.1016\/j.jisa.2020.102465","DOI":"10.1016\/j.jisa.2020.102465"},{"key":"e_1_3_1_157_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"e_1_3_1_158_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"e_1_3_1_159_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2017.8116414"},{"key":"e_1_3_1_160_2","unstructured":"Fei Xia and Ruishan Liu. 2016. Adversarial examples generation and defense based on generative adversarial network. arXiv preprint arXiv:1712.00170 (2016)."},{"key":"e_1_3_1_161_2","doi-asserted-by":"publisher","DOI":"10.5555\/3045118.3045298"},{"key":"e_1_3_1_162_2","doi-asserted-by":"publisher","DOI":"10.5555\/3361338.3361370"},{"key":"e_1_3_1_163_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00027"},{"key":"e_1_3_1_164_2","doi-asserted-by":"crossref","unstructured":"Cihang Xie Jianyu Wang Zhishuai Zhang Zhou Ren and Alan Yuille. 2017. Mitigating adversarial effects through randomization. CoRR abs\/1711.01991 (2017) . arXiv:1711.01991 http:\/\/arxiv.org\/abs\/1711.01991","DOI":"10.1149\/MA2017-02\/39\/1711"},{"key":"e_1_3_1_165_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2016.09.045"},{"key":"e_1_3_1_166_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"e_1_3_1_167_2","unstructured":"Weilin Xu David Evans and Yanjun Qi. 2017. Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. CoRR abs\/1704.01155 (2017) . arXiv:1704.01155 http:\/\/arxiv.org\/abs\/1704.01155"},{"key":"e_1_3_1_168_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23115"},{"key":"e_1_3_1_169_2","doi-asserted-by":"publisher","DOI":"10.5555\/3367722.3367787"},{"key":"e_1_3_1_170_2","unstructured":"Chaofei Yang Qing Wu Hai Li and Yiran Chen. 2017. Generative Poisoning Attack Method Against Neural Networks. CoRR abs\/1703.01340 (2017) . arXiv:1703.01340 http:\/\/arxiv.org\/abs\/1703.01340."},{"key":"e_1_3_1_171_2","doi-asserted-by":"publisher","DOI":"10.1145\/3073559"},{"key":"e_1_3_1_172_2","doi-asserted-by":"publisher","DOI":"10.5555\/3277203.3277208"},{"key":"e_1_3_1_173_2","article-title":"AIT: An AI-enabled trust management system for vehicular networks using blockchain technology","author":"Zhang Chenyue","year":"2020","unstructured":"Chenyue Zhang, Wenjia Li, Yuansheng Luo, and Yupeng Hu. 2020. AIT: An AI-enabled trust management system for vehicular networks using blockchain technology. IEEE Internet of Things Journal 8, 5 (2020), 3157\u20133169.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_1_174_2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"issue":"7","key":"e_1_3_1_175_2","first-page":"2578","article-title":"Adversarial examples: Opportunities and challenges","volume":"31","author":"Zhang Jiliang","year":"2020","unstructured":"Jiliang Zhang and Chen Li. 2020. Adversarial examples: Opportunities and challenges. IEEE Transactions on Neural Networks and Learning Systems 31, 7 (2020), 2578\u20132593. DOI:https:\/\/doi.org\/10.1109\/TNNLS.2019.2933524","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"key":"e_1_3_1_176_2","doi-asserted-by":"publisher","DOI":"10.1145\/3386263.3407599"},{"key":"e_1_3_1_177_2","doi-asserted-by":"publisher","DOI":"10.1109\/ATS49688.2020.9301586"}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3487890","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3487890","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:11:56Z","timestamp":1750176716000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3487890"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,23]]},"references-count":176,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1,31]]}},"alternative-id":["10.1145\/3487890"],"URL":"https:\/\/doi.org\/10.1145\/3487890","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,11,23]]},"assertion":[{"value":"2021-02-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-09-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-11-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}