Advanced search
Publication Cover
The American Statistician Volume 76, 2022 - Issue 4
Submit an article Journal homepage
2,579
Views
16
CrossRef citations to date
0
Altmetric
General

A Review of Adversarial Attack and Defense for Classification Methods

Yao Lia Department of Statistics & Operations Research, University of North Carolina at Chapel Hill, Chapel Hill, NC;View further author information
,
Minhao Chengb Department of Computer Science, University of California at Los Angeles, Los Angeles, CA;View further author information
,
Cho-Jui Hsiehb Department of Computer Science, University of California at Los Angeles, Los Angeles, CA;View further author information
&
Thomas C. M. Leec Department of Statistics, University of California at Davis, Davis, CACorrespondence[email protected]
ORCID Iconhttps://orcid.org/0000-0001-7067-405XView further author information
ORCID Icon
Pages 329-345 | Received 18 Aug 2021, Accepted 10 Nov 2021, Published online: 04 Jan 2022

References

  • Al-Dujaili, A., and O’Reilly, U.-M. (2020), “Sign Bits Are All You Need for Black-Box Attacks,” in International Conference on Learning Representations.
  • Alzantot, M., Sharma, Y., Chakraborty, S., and Srivastava, M. (2018), “Genattack: Practical Black-Box Attacks With Gradient-Free Optimization,” arXiv preprint arXiv:1805.11090.
  • Andriushchenko, M., Croce, F., Flammarion, N., and Hein, M. (2020), “Square Attack: A Query-Efficient Black-Box Adversarial Attack via Random Search,” in European Conference on Computer Vision, 484–501.
  • Athalye, A., Carlini, N., and Wagner, D. (2018), “Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples,” in International Conference on Machine Learning, 274–283.
  • Baluja, S., and Fischer, I. (2018), “Learning to Attack: Adversarial Transformation Networks,” in Proceedings of AAAI-2018.
  • Biggio, B., Corona, I., Maiorca, D., Nelson, B., Šrndić, N., Laskov, P., Giacinto, G., and Roli, F. (2013), “Evasion Attacks Against Machine Learning at Test Time,” in Joint European Conference on Machine Learning and Knowledge Discovery in Databases, 387–402.
  • Brendel, W., Rauber, J., and Bethge, M. (2018), “Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models,” International Conference on Learning Representations.
  • Brunner, T., Diehl, F., Le, M. T., and Knoll, A. (2019), “Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks,” in Proceedings of the IEEE International Conference on Computer Vision, 4958–4966.
  • Carlini, N., and Wagner, D., (2017a), “Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods,” in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, 3–14.
  • Carlini, N., and Wagner, D. (2017b), “Towards Evaluating the Robustness of Neural Networks,” in 2017 IEEE Symposium on Security and Privacy (SP), 39–57.
  • Carmon, Y., Raghunathan, A., Schmidt, L., Liang, P., and Duchi, J. C. (2020), “Unlabeled Data Improves Adversarial Robustness,” Advances in Neural Information Processing Systems.
  • Chen, H., Zhang, H., Si, S., Li, Y., Boning, D., and Hsieh, C.-J. (2019), “Robustness Verification of Tree-Based Models,” in Advances in Neural Information Processing Systems, Vol. 32, Curran Associates, Inc.
  • Chen, J., and Gu, Q. (2020), “Rays: A Ray Searching Method for Hard-Label Adversarial Attack,” in Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, 1739–1747.
  • Chen, J., and Jordan, M. I. (2019), “Boundary Attack++: Query-Efficient Decision-Based Adversarial Attack,” arXiv preprint arXiv:1904.02144.
  • Chen, J., Jordan, M. I., and Wainwright, M. J. (2020), “Hopskipjumpattack: A Query-Efficient Decision-Based Attack.” In 2020 IEEE Symposium on Security and Privacy (SP), 1277–1294. DOI: 10.1109/SP40000.2020.00045.
  • Chen, P.-Y., Sharma, Y., Zhang, H., Yi, J., and Hsieh, C.-J. (2018) “EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples,” in Thirty-Second AAAI Conference on Artificial Intelligence.
  • Chen, P.-Y., Zhang, H., Sharma, Y., Yi, J., and Hsieh, C.-J. (2017), “Zoo: Zeroth Order Optimization Based Black-Box Attacks to Deep Neural Networks Without Training Substitute Models,” in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, 15–26.
  • Cheng, M., Le, T., Chen, P.-Y., Zhang, H., Yi, J., and Hsieh, C.-J. (2019a), “Query-Efficient Hard-Label Black-Box Attack: An Optimization-Based Approach,” in International Conference on Learning Representations, available at https://openreview.net/forum?id=rJlk6iRqKX.
  • Cheng, M., Singh, S., Chen, P. H., Chen, P.-Y., Liu, S., and Hsieh, C.-J. (2020a) “Sign-Opt: A Query-Efficient Hard-Label Adversarial Attack,” in International Conference on Learning Representations.
  • Cheng, M., Yi, J., Chen, P.-Y., Zhang, H., and Hsieh, C.-J. (2020b), “Seq2sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples,” Proceedings of the AAAI Conference on Artificial Intelligence, 34, 3601–3608. DOI: 10.1609/aaai.v34i04.5767.
  • Cheng, S., Dong, Y., Pang, T., Su, H., and Zhu, J. (2019b), “Improving Black-Box Adversarial Attacks with a Transfer-Based Prior,” in Advances in Neural Information Processing Systems, 10932–10942.
  • Cohen, J., Rosenfeld, E., and Kolter, Z. (2019), “Certified Adversarial Robustness via Randomized Smoothing,” in International Conference on Machine Learning, 1310–1320.
  • Croce, F., and Hein, M. (2020), “Reliable Evaluation of Adversarial Robustness with an Ensemble of Diverse Parameter-Free Attacks,” in International Conference on Machine Learning, 2206–2216.
  • Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., and Fei-Fei, L. (2009), “Imagenet: A Large-Scale Hierarchical Image Database,” in IEEE Conference on Computer Vision and Pattern Recognition, 2009. CVPR 2009, 248–255.
  • Devlin, J., Chang, M.-W., Lee, K., and Toutanova, K. (2019), “BERT: Pre-Training of Deep Bidirectional Transformers for Language Understanding,” in Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers), 4171–4186. Minneapolis, MN: Association for Computational Linguistics.
  • Dhillon, G. S., Azizzadenesheli, K., Lipton, Z. C., Bernstein, J., Kossaifi, J., Khanna, A., and Anandkumar, A. (2018), “Stochastic Activation Pruning for Robust Adversarial Defense,” International Conference on Learning Representations.
  • Ding, G. W., Sharma, Y., Lui, K. Y. C., and Huang, R. (2020), “Mma Training: Direct Input Space Margin Maximization Through Adversarial Training,” in International Conference on Learning Representations.
  • Dodge, S., and Karam, L. (2017), “A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortions,” in 2017 26th International Conference on Computer Communication and Networks (ICCCN), 1–7. DOI: 10.1109/ICCCN.2017.8038465.
  • Dosovitskiy, A., Beyer, L., Kolesnikov, A., Weissenborn, D., Zhai, X., Unterthiner, T., Dehghani, M., Minderer, M., Heigold, G., Gelly, S., et al. (2021) “An Image Is Worth 16x16 Words: Transformers for Image Recognition at Scale,” International Conference on Learning Representations.
  • Fawzi, A., Moosavi-Dezfooli, S.-M., and Frossard, P. (2016), “Robustness of Classifiers: From Adversarial to Random Noise,” in Advances in Neural Information Processing Systems, 1632–1640.
  • Feinman, R., Curtin, R. R., Shintre, S., and Gardner, A. B. (2017), “Detecting Adversarial Samples from Artifacts,” International Conference on Machine Learning.
  • Franceschi, J.-Y., Fawzi, A., and Fawzi, O. (2018), “Robustness of Classifiers to Uniform lp and Gaussian Noise,” in Proceedings of the Twenty-First International Conference on Artificial Intelligence and Statistics (eds. A. Storkey and F. Perez-Cruz), vol. 84 of Proceedings of Machine Learning Research, 1280–1288. PMLR.
  • Gao, J., Lanchantin, J., Soffa, M. L., and Qi, Y. (2018), “Black-Box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers,” in 2018 IEEE Security and Privacy Workshops (SPW), 50–56. DOI: 10.1109/SPW.2018.00016.
  • Gao, R., Cai, T., Li, H., Hsieh, C.-J., Wang, L., and Lee, J. D. (2019), “Convergence of Adversarial Training in Overparametrized Neural Networks,” Advances in Neural Information Processing Systems, 32, 13029–13040.
  • Gong, Z., Wang, W., and Ku, W.-S. (2017), “Adversarial and Clean Data Are Not Twins,” arXiv preprint arXiv:1704.04960.
  • Goodfellow, I., Bengio, Y., and Courville, A. (2016), Deep Learning. Cambridge, MA: MIT Press.
  • Goodfellow, I., Shlens, J., and Szegedy, C. (2015), “Explaining and Harnessing Adversarial Examples,” in International Conference on Learning Representations.
  • Gowal, S., Qin, C., Uesato, J., Mann, T., and Kohli, P. (2020), “Uncovering the Limits of Adversarial Training Against Norm-Bounded Adversarial Examples,” arXiv preprint arXiv:2010.03593.
  • Grosse, K., Manoharan, P., Papernot, N., Backes, M., and McDaniel, P. (2017), “On the (Statistical) Detection of Adversarial Examples,” arXiv preprint arXiv:1702.06280.
  • Guo, C., Frank, J. S., and Weinberger, K. Q. (2020), “Low Frequency Adversarial Perturbation,” in Proceedings of the 35th Uncertainty in Artificial Intelligence Conference (eds. R. P. Adams and V. Gogate), vol. 115 of Proceedings of Machine Learning Research, 1127–1137. Tel Aviv, Israel: PMLR.
  • Guo, C., Gardner, J., You, Y., Wilson, A. G., and Weinberger, K. (2019a), “Simple Black-Box Adversarial Attacks,” in Proceedings of the 36th International Conference on Machine Learning, eds. K. Chaudhuri and R. Salakhutdinov, vol. 97 of Proceedings of Machine Learning Research, 2484–2493. Tel Aviv, Israel: PMLR.
  • Guo, Y., Yan, Z., and Zhang, C. (2019b), “Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-Box Attacks,” in Advances in Neural Information Processing Systems, eds. H. Wallach, H. Larochelle, A. Beygelzimer, F. d Alché-Buc, E. Fox, and R. Garnett, vol. 32, Curran Associates, Inc.
  • Hecht-Nielsen, R. (1992), “Theory of the Backpropagation Neural Network,” in Neural Networks for Perception, 65–93. Elsevier.
  • Hung, K., and Fithian, W. (2019), “Rank Verification for Exponential Families,” The Annals of Statistics, 47, 758–782. DOI: 10.1214/17-AOS1634.
  • Ilyas, A., Engstrom, L., Athalye, A., and Lin, J. (2018), “Black-Box Adversarial Attacks with Limited Queries and Information,” in International Conference on Machine Learning, 2137–2146.
  • Ilyas, A., Engstrom, L., and Madry, A. (2019), “Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors,” in International Conference on Learning Representations.
  • Jalal, A., Ilyas, A., Daskalakis, C., and Dimakis, A. G. (2017), “The Robust Manifold Defense: Adversarial Training Using Generative Models,” arXiv preprint arXiv:1712.09196.
  • Jia, R., and Liang, P. (2017), “Adversarial Examples for Evaluating Reading Comprehension Systems,” in Proceedings of the 2017 Conference on Empirical Methods in Natural Language Processing, 2021–2031. Copenhagen, Denmark: Association for Computational Linguistics.
  • Krizhevsky, A., and Hinton, G. (2009), “Learning Multiple Layers of Features from Tiny Images,” Technical Report, Citeseer.
  • Kurakin, A., Goodfellow, I., and Bengio, S. (2016), “Adversarial Examples in the Physical World.”
  • LeCun, Y. (1998), “The MNIST Database of Handwritten Digits,” http://yann.lecun.com/exdb/mnist/.
  • LeCun, Y., Bottou, L., Bengio, Y., and Haffner, P. (1998), “Gradient-Based Learning Applied to Document Recognition,” in Proceedings of the IEEE, 86, 2278–2324. DOI: 10.1109/5.726791.
  • Lecuyer, M., Atlidakis, V., Geambasu, R., Hsu, D., and Jana, S. (2019), “Certified Robustness to Adversarial Examples with Differential Privacy,” in 2019 IEEE Symposium on Security and Privacy (SP), 656–672. DOI: 10.1109/SP.2019.00044.
  • Lee, K., Lee, K., Lee, H., and Shin, J. (2018), “A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks,” in Advances in Neural Information Processing Systems, 7167–7177.
  • Levina, E., and Bickel, P. J. (2005), “Maximum Likelihood Estimation of Intrinsic Dimension,” in Advances in Neural Information Processing Systems, 777–784.
  • Li, B., Chen, C., Wang, W., and Carin, L. (2018a), “Certified Adversarial Robustness with Additive Noise,” arXiv preprint arXiv:1809.03113.
  • Li, X., and Li, F. (2017), “Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics,” in 2017 IEEE International Conference on Computer Vision, 5775–5783.
  • Li, Y., Li, L., Wang, L., Zhang, T., and Gong, B. (2019), “Nattack: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks,” in International Conference on Machine Learning, 3866–3876. PMLR.
  • Li, Y., Min, M. R., Yu, W., Hsieh, C.-J., Lee, T. C. M., and Kruus, E. (2018b), “Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding,” arXiv preprint arXiv:1811.07950.
  • Liu, S., Chen, P.-Y., Chen, X., and Hong, M. (2018a), “signsgd via Zeroth-Order Oracle,” in International Conference on Learning Representations.
  • Liu, X., Cheng, M., Zhang, H., and Hsieh, C.-J. (2018b), “Towards Robust Neural Networks via Random Self-Ensemble,” in Proceedings of the European Conference on Computer Vision (ECCV), 369–385.
  • Liu, X., Li, Y., Wu, C., and Hsieh, C.-J. (2019), “Adv-BNN: Improved Adversarial Defense Through Robust Bayesian Neural Network,” in International Conference on Learning Representations.
  • Liu, Y., Chen, X., Liu, C., and Song, D. (2017), “Delving into Transferable Adversarial Examples and Black-Box Attacks,” International Conference on Learning Representations.
  • Ma, X., Li, B., Wang, Y., Erfani, S. M., Wijewickrema, S., Schoenebeck, G., Song, D., Houle, M. E., and Bailey, J. (2018), “Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality,” International Conference on Learning Representations.
  • Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (2018), “Towards Deep Learning Models Resistant to Adversarial Attacks,” in International Conference on Learning Representations.
  • Meng, D., and Chen, H. (2017), “Magnet: A Two-Pronged Defense Against Adversarial Examples,” in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 135–147.
  • Metzen, J. H., Genewein, T., Fischer, V., and Bischoff, B. (2017), “On Detecting Adversarial Perturbations,” International Conference on Learning Representations.
  • Moosavi-Dezfooli, S.-M., Fawzi, A., and Frossard, P. (2016), “Deepfool: A Simple and Accurate Method to Fool Deep Neural Networks,” in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2574–2582.
  • Mopuri, K. R., Ojha, U., Garg, U., and Babu, R. V. (2018), “Nag: Network for Adversary Generation,” in Proceedings of the IEEE Computer Vision and Pattern Recognition (CVPR).
  • Nesterov, Y., and Spokoiny, V. (2017), “Random Gradient-Free Minimization of Convex Functions,” Foundations of Computational Mathematics, 17, 527–566. DOI: 10.1007/s10208-015-9296-2.
  • Pang, T., Yang, X., Dong, Y., Su, H., and Zhu, J. (2021), “Bag of Tricks for Adversarial Training,” in International Conference on Learning Representations.
  • Pang, T., Yang, X., Dong, Y., Xu, K., Zhu, J., and Su, H. (2020), “Boosting Adversarial Training with Hypersphere Embedding,” in Advances in Neural Information Processing Systems, eds. H. Larochelle, M. Ranzato, R. Hadsell, M. F. Balcan and H. Lin, vol. 33, 7779–7792. Curran Associates, Inc.
  • Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z. B., and Swami, A. (2017), “Practical Black-Box Attacks Against Machine Learning,” in Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 506–519.
  • Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., and Swami, A. (2016), “The Limitations of Deep Learning in Adversarial Settings,” in Security and Privacy (EuroS&P), 2016 IEEE European Symposium on, 372–387.
  • Qiu, S., Liu, Q., Zhou, S., and Wu, C. (2019), “Review of Artificial Intelligence Adversarial Attack and Defense Technologies,” Applied Sciences, 9, 909. DOI: 10.3390/app9050909.
  • Raghuram, J., Chandrasekaran, V., Jha, S., and Banerjee, S. (2020), “Detecting Anomalous Inputs to DNN Classifiers by Joint Statistical Testing at the Layers,” arXiv preprint arXiv:2007.15147.
  • Ren, K., Zheng, T., Qin, Z., and Liu, X. (2020), “Adversarial Attacks and Defenses in Deep Learning,” Engineering, 6, 346–360. DOI: 10.1016/j.eng.2019.12.012.
  • Roth, K., Kilcher, Y., and Hofmann, T. (2019), “The Odds Are Odd: A Statistical Test for Detecting Adversarial Examples,” in International Conference on Machine Learning, 5498–5507.
  • Samangouei, P., Kabkab, M., and Chellappa, R. (2018), “Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models,” in International Conference on Learning Representations.
  • Samanta, S., and Mehta, S. (2017), “Towards Crafting Text Adversarial Samples,” arXiv preprint arXiv:1707.02812.
  • Serban, A., Poll, E., and Visser, J. (2020), “Adversarial Examples on Object Recognition: A Comprehensive Survey,” ACM Computing Surveys (CSUR), 53, 1–38. DOI: 10.1145/3398394.
  • Shafahi, A., Najibi, M., Ghiasi, M. A., Xu, Z., Dickerson, J., Studer, C., Davis, L. S., Taylor, G., and Goldstein, T. (2019), “Adversarial Training for Free!,” in Advances in Neural Information Processing Systems, 3353–3364.
  • Silver, D., Huang, A., Maddison, C. J., Guez, A., Sifre, L., Van Den Driessche, G., Schrittwieser, J., Antonoglou, I., Panneershelvam, V., and Lanctot, M. (2016) “Mastering the Game of Go With Deep Neural Networks and Tree Search,” Nature, 529, 484–489. DOI: 10.1038/nature16961.
  • Simonyan, K., and Zisserman, A. (2014), “Very Deep Convolutional Networks for Large-Scale Image Recognition,” arXiv preprint arXiv:1409.1556.
  • Song, Y., Kim, T., Nowozin, S., Ermon, S., and Kushman, N. (2018), “Pixeldefend: Leveraging Generative Models to Understand and Defend Against Adversarial Examples,” in International Conference on Learning Representations.
  • Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R. (2014), “Intriguing Properties of Neural Networks,” in International Conference on Learning Representations.
  • Tanay, T., and Griffin, L. (2016), “A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples,” arXiv preprint arXiv:1608.07690.
  • Wang, L., Zhang, H., Yi, J., Hsieh, C.-J., and Jiang, Y. (2020a), “Spanning Attack: Reinforce Black-Box Attacks with Unlabeled Data,” Machine Learning, 109, 2349–2368. DOI: 10.1007/s10994-020-05916-1.
  • Wang, Y., Ma, X., Bailey, J., Yi, J., Zhou, B., and Gu, Q. (2019), “On the Convergence and Robustness of Adversarial Training,” in International Conference on Machine Learning, 6586–6595.
  • Wang, Y., Zou, D., Yi, J., Bailey, J., Ma, X., and Gu, Q. (2020b), “Improving Adversarial Robustness Requires Revisiting Misclassified Examples,” in International Conference on Learning Representations.
  • Wong, E., and Kolter, J. Z. (2020), “Learning Perturbation Sets for Robust Machine Learning,” arXiv preprint arXiv:2007.08450.
  • Wong, E., Rice, L., and Kolter, J. Z. (2020), “Fast Is Better than Free: Revisiting Adversarial Training,” in International Conference on Learning Representations.
  • Wong, E., Schmidt, F., and Kolter, Z. (2019), “Wasserstein Adversarial Examples via Projected Sinkhorn Iterations,” in International Conference on Machine Learning, 6808–6817.
  • Wu, D., Xia, S.-T., and Wang, Y. (2020), “Adversarial Weight Perturbation Helps Robust Generalization,” Advances in Neural Information Processing Systems, 33.
  • Xie, C., Wang, J., Zhang, Z., Ren, Z., and Yuille, A. (2018), “Mitigating Adversarial Effects Through Randomization,” in International Conference on Learning Representations.
  • Xu, H., Ma, Y., Liu, H.-C., Deb, D., Liu, H., Tang, J.-L., and Jain, A. K. (2020), “Adversarial Attacks and Defenses in Images, Graphs and Text: A Review,” International Journal of Automation and Computing, 17, 151–178. DOI: 10.1007/s11633-019-1211-x.
  • Yang, P., Chen, J., Hsieh, C.-J., Wang, J.-L., and Jordan, M. (2020a), “Ml-loo: Detecting Adversarial Examples with Feature Attribution,” in Proceedings of the AAAI Conference on Artificial Intelligence, 34, 6639–6647. DOI: 10.1609/aaai.v34i04.6140.
  • Yang, P., Chen, J., Hsieh, C.-J., Wang, J.-L., and Jordan, M. I. (2020b), “Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Data,” Journal of Machine Learning Research, 21, 1–36.
  • Yuan, X., He, P., Zhu, Q., and Li, X. (2019), “Adversarial Examples: Attacks and Defenses for Deep Learning,” IEEE Transactions on Neural Networks and Learning Systems, 30, 2805–2824. DOI: 10.1109/TNNLS.2018.2886017.
  • Zantedeschi, V., Nicolae, M.-I., and Rawat, A. (2017), “Efficient Defenses Against Adversarial Attacks,” in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, 39–49.
  • Zhang, D., Zhang, T., Lu, Y., Zhu, Z., and Dong, B. (2019a), “You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle,” in Advances in Neural Information Processing Systems, 227–238.
  • Zhang, H., Yu, Y., Jiao, J., Xing, E., El Ghaoui, L., and Jordan, M. (2019b), “Theoretically Principled Trade-Off Between Robustness and Accuracy,” in International Conference on Machine Learning, 7472–7482.
  • Zheng, Z., and Hong, P. (2018), “Robust Detection of Adversarial Attacks by Modeling the Intrinsic Properties of Deep Neural Networks,” in Advances in Neural Information Processing Systems, 7913–7922.
  • Zou, H., and Hastie, T. (2005), “Regularization and Variable Selection via the Elastic Net,” Journal of the Royal Statistical Society: Series B, 67, 301–320. DOI: 10.1111/j.1467-9868.2005.00503.x.

Reprints and Corporate Permissions

Please note: Selecting permissions does not provide access to the full text of the article, please see our help page How do I view content?

To request a reprint or corporate permissions for this article, please click on the relevant link below:

Order Reprints Request Corporate Permissions

Academic Permissions

Please note: Selecting permissions does not provide access to the full text of the article, please see our help page How do I view content?

Obtain permissions instantly via Rightslink by clicking on the button below:

Request Academic Permissions

If you are unable to obtain permissions via Rightslink, please complete and submit this Permissions form. For more information, please visit our Permissions help page.

Related research

People also read lists articles that other readers of this article have read.

Recommended articles lists articles that we recommend and is powered by our AI driven recommendation engine.

Cited by lists all citing articles based on Crossref citations.
Articles with the Crossref icon will open in a new tab.