On the public citation graph
Attack as Detection: Using Adversarial Attack Methods to Detect Abnormal Examples
0 signed · 116 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1002/int.22510openalex-snapshot
Advanced evasion attacks and mitigations on practical ML‐based phishing website classifiers
inferredcites →https://doi.org/10.1007/978-3-030-00470-5_13openalex-snapshot
Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks
inferredcites →https://doi.org/10.1007/978-3-030-53288-8_3openalex-snapshot
An Abstraction-Based Framework for Neural Network Verification
inferredcites →https://doi.org/10.1007/978-3-030-71500-7_16openalex-snapshot
Understanding Local Robustness of Deep Neural Networks under Natural Variations
inferredcites →https://doi.org/10.1007/978-3-030-81685-8_8openalex-snapshot
BDD4BNN: A BDD-Based Quantitative Analysis Framework for Binarized Neural Networks
inferredcites →https://doi.org/10.1007/978-3-031-22308-2_20openalex-snapshot
CLEVEREST: Accelerating CEGAR-based Neural Network Verification via Adversarial Attacks
inferredcites →https://doi.org/10.1007/978-3-031-37703-7_20openalex-snapshot
QEBVerif: Quantization Error Bound Verification of Neural Networks
inferredcites →https://doi.org/10.1007/978-3-319-63387-9_5openalex-snapshot
Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks
inferredcites →https://doi.org/10.1007/978-3-319-89960-2_22openalex-snapshot
Feature-Guided Black-Box Safety Testing of Deep Neural Networks
inferredcites →https://doi.org/10.1007/s11263-024-02117-4openalex-snapshot
Generalized Out-of-Distribution Detection: A Survey
inferredcites →https://doi.org/10.1007/s11390-020-0546-7openalex-snapshot
Verifying ReLU Neural Networks from a Model Checking Perspective
inferredcites →https://doi.org/10.1007/s11432-015-5391-xopenalex-snapshot
Crowdsourcing label quality: a theoretical analysis
inferredcites →https://doi.org/10.1016/j.cose.2021.102277openalex-snapshot
Neural network laundering: Removing black-box backdoor watermarks from deep neural networks
inferredcites →https://doi.org/10.1016/j.cosrev.2020.100270openalex-snapshot
A survey of safety and trustworthiness of deep neural networks: Verification, testing, adversarial attack and defence, and interpretability
inferredcites →https://doi.org/10.1016/s0020-0190(98)00165-3openalex-snapshot
Learning conjunctions with noise under product distributions
inferredcites →https://doi.org/10.1093/biomet/34.1-2.28openalex-snapshot
THE GENERALIZATION OF ‘STUDENT'S’ PROBLEM WHEN SEVERAL DIFFERENT POPULATION VARLANCES ARE INVOLVED
inferredcites →https://doi.org/10.1109/access.2019.2909068openalex-snapshot
BadNets: Evaluating Backdooring Attacks on Deep Neural Networks
inferredcites →https://doi.org/10.1109/cvpr.2016.282openalex-snapshot
DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks
inferredcites →https://doi.org/10.1109/cvpr.2018.00160openalex-snapshot
On the Importance of Label Quality for Semantic Segmentation
inferredcites →https://doi.org/10.1109/cvpr.2018.00175openalex-snapshot
Robust Physical-World Attacks on Deep Learning Visual Classification
inferredcites →https://doi.org/10.1109/cvpr.2018.00906openalex-snapshot
Iterative Learning with Open-set Noisy Labels
inferredcites →https://doi.org/10.1109/cvpr.2019.00059openalex-snapshot
Feature Denoising for Improving Adversarial Robustness
inferredcites →https://doi.org/10.1109/cvpr42600.2020.00038openalex-snapshot
Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs
inferredcites →https://doi.org/10.1109/cvpr42600.2020.01445openalex-snapshot
Clean-Label Backdoor Attacks on Video Recognition Models
inferredcites →https://doi.org/10.1109/cvprw.2017.172openalex-snapshot
Simple Black-Box Adversarial Attacks on Deep Neural Networks
inferredcites →https://doi.org/10.1109/eurosp.2016.36openalex-snapshot
The Limitations of Deep Learning in Adversarial Settings
inferredcites →https://doi.org/10.1109/eurosp48549.2020.00019openalex-snapshot
Bypassing Backdoor Detection Algorithms in Deep Learning
inferredcites →https://doi.org/10.1109/iccv.2017.56openalex-snapshot
SafetyNet: Detecting and Rejecting Adversarial Examples Robustly
inferredcites →https://doi.org/10.1109/iccv48922.2021.01615openalex-snapshot
Invisible Backdoor Attack with Sample-Specific Triggers
inferredcites →https://doi.org/10.1109/icdm50108.2020.00025openalex-snapshot
Towards Inspecting and Eliminating Trojan Backdoors in Deep Neural Networks
inferredcites →https://doi.org/10.1109/iceccs51672.2020.00016openalex-snapshot
An Empirical Study on Correlation between Coverage and Robustness for Deep Neural Networks
inferredcites →https://doi.org/10.1109/icse-nier.2019.00031openalex-snapshot
Structural Coverage Criteria for Neural Networks Could Be Misleading
inferredcites →https://doi.org/10.1109/icse.2019.00108openalex-snapshot
Guiding Deep Learning System Testing Using Surprise Adequacy
inferredcites →https://doi.org/10.1109/icse.2019.00126openalex-snapshot
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing
inferredcites →https://doi.org/10.1109/icse43902.2021.00038openalex-snapshot
RobOT: Robustness-Oriented Testing for Deep Learning Systems
inferredcites →https://doi.org/10.1109/ijcnn.2013.6706807openalex-snapshot
Detection of traffic signs in real-world images: The German traffic sign detection benchmark
inferredcites →https://doi.org/10.1109/issre.2018.00021openalex-snapshot
DeepMutation: Mutation Testing of Deep Learning Systems
inferredcites →https://doi.org/10.1109/issre52982.2021.00044openalex-snapshot
Eager Falsification for Accelerating Robustness Verification of Deep Neural Networks
inferredcites →https://doi.org/10.1109/sibgrapi51738.2020.00010openalex-snapshot
A Survey on Deep Learning with Noisy Labels: How to train your model when you cannot trust on the annotations?
inferredcites →https://doi.org/10.1109/sp.2016.41openalex-snapshot
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks
inferredcites →https://doi.org/10.1109/sp.2017.49openalex-snapshot
Towards Evaluating the Robustness of Neural Networks
inferredcites →https://doi.org/10.1109/sp.2018.00058openalex-snapshot
AI2: Safety and Robustness Certification of Neural Networks with Abstract Interpretation
inferredcites →https://doi.org/10.1109/sp.2019.00031openalex-snapshot
Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks
inferredcites →https://doi.org/10.1109/sp40001.2021.00004openalex-snapshot
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems
inferredcites →https://doi.org/10.1109/tdsc.2021.3088661openalex-snapshot
Taking Care of the Discretization Problem: A Comprehensive Study of the Discretization Problem and a Black-Box Adversarial Attack in Discrete Integer Domain
inferredcites →https://doi.org/10.1109/tdsc.2022.3220673openalex-snapshot
Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition
inferredcites →https://doi.org/10.1109/tnnls.2013.2292894openalex-snapshot
Classification in the Presence of Label Noise: A Survey
inferredcites →https://doi.org/10.1109/trustcom53373.2021.00093openalex-snapshot
Robust Backdoor Attacks against Deep Neural Networks in Real Physical World
inferredcites →https://doi.org/10.1109/tsmcb.2012.2223460openalex-snapshot
Noise Tolerance Under Risk Minimization
inferredcites →https://doi.org/10.1111/j.2517-6161.1964.tb00553.xopenalex-snapshot
An Analysis of Transformations
inferredcites →https://doi.org/10.1145/1985793.1985795openalex-snapshot
A practical guide for using statistical tests to assess randomized algorithms in software engineering
inferredcites →https://doi.org/10.1145/3052973.3053009openalex-snapshot
Practical Black-Box Attacks against Machine Learning
inferredcites →https://doi.org/10.1145/3128572.3140444openalex-snapshot
Adversarial Examples Are Not Easily Detected
inferredcites →https://doi.org/10.1145/3238147.3238172openalex-snapshot
Concolic testing for deep neural networks
inferredcites →https://doi.org/10.1145/3238147.3238202openalex-snapshot
DeepGauge: multi-granularity testing criteria for deep learning systems
inferredcites →https://doi.org/10.1145/3319535openalex-snapshot
Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/3368089.3409671openalex-snapshot
Correlations between deep neural network model coverage criteria and model quality
inferredcites →https://doi.org/10.1145/3411764.3445518openalex-snapshot
“Everyone wants to do the model work, not the data work”: Data Cascades in High-Stakes AI
inferredcites →https://doi.org/10.1145/3460319.3464822openalex-snapshot
Attack as defense: characterizing adversarial examples using robustness
inferredcites →https://doi.org/10.1145/3485447.3512225openalex-snapshot
CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning
inferredcites →https://doi.org/10.1145/3551349.3556916openalex-snapshot
QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networks
inferredcites →https://doi.org/10.1145/3563212openalex-snapshot
Precise Quantitative Analysis of Binarized Neural Networks: A BDD-based Approach
inferredcites →https://doi.org/10.1145/3644387openalex-snapshot
Abstraction and Refinement: Towards Scalable and Exact Verification of Neural Networks
inferredcites →https://doi.org/10.1146/annurev-bioeng-071516-044442openalex-snapshot
Deep Learning in Medical Image Analysis
inferredcites →https://doi.org/10.14722/ndss.2018.23198openalex-snapshot
Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks
inferredcites →https://doi.org/10.14722/ndss.2018.23291openalex-snapshot
Trojaning Attack on Neural Networks
inferredcites →https://doi.org/10.14722/ndss.2019.23415openalex-snapshot
NIC: Detecting Adversarial Samples with Neural Network Invariant Checking
inferredcites →https://doi.org/10.1609/aaai.v33i01.33013771openalex-snapshot
Knowledge Distillation with Adversarial Samples Supporting Decision Boundary
inferredcites →https://doi.org/10.1609/aaai.v33i01.3301962openalex-snapshot
Connecting the Digital and Physical World: Improving the Robustness of Adversarial Attacks
inferredcites →https://doi.org/10.1609/aaai.v34i04.5778openalex-snapshot
Label Error Correction and Generation through Label Relationships
inferredcites →https://doi.org/10.1613/jair.1.12125openalex-snapshot
Confident Learning: Estimating Uncertainty in Dataset Labels
inferredcites →https://doi.org/10.2307/2287143openalex-snapshot
An Introduction to Mathematical Statistics and its Applications.
inferredcites →https://doi.org/10.4324/9781410611949openalex-snapshot
A Primer of Signal Detection Theory
inferredcites →https://doi.org/10.48550/arxiv.1605.07277openalex-snapshot
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples
inferredcites →https://doi.org/10.48550/arxiv.1607.04311openalex-snapshot
Defensive Distillation is Not Robust to Adversarial Examples
inferredcites →https://doi.org/10.48550/arxiv.1707.04131openalex-snapshot
Foolbox: A Python toolbox to benchmark the robustness of machine learning models
inferredcites →https://doi.org/10.48550/arxiv.1711.08478openalex-snapshot
MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples
inferredcites →https://doi.org/10.48550/arxiv.1803.04792openalex-snapshot
Testing Deep Neural Networks
inferredcites →https://doi.org/10.48550/arxiv.2004.04692openalex-snapshot
Rethinking the Trigger of Backdoor Attack
inferredcites →https://doi.org/10.48550/arxiv.2010.03282openalex-snapshot
Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks
inferredcites →https://doi.org/10.48550/arxiv.2102.10369openalex-snapshot
WaNet -- Imperceptible Warping-based Backdoor Attack
inferredcites →https://doi.org/10.48550/arxiv.2104.02361openalex-snapshot
Backdoor Attack in the Physical World
inferredcites →https://doi.org/10.48550/arxiv.2210.07242openalex-snapshot
OpenOOD: Benchmarking Generalized Out-of-Distribution Detection
inferredcites →https://doi.org/10.48550/arxiv.2212.10376openalex-snapshot
The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results
inferredcites →https://doi.org/10.48550/arxiv.2302.03251openalex-snapshot
SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency
inferredcites →https://doi.org/10.57702/zp44cu3gopenalex-snapshot
Learning Multiple Layers of Features from Tiny Images
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-031-95767-3_13openalex-snapshot
LaserGuider: A Laser Based Physical Backdoor Attack Against Deep Neural Networks
inferred← citeshttps://doi.org/10.1007/978-981-96-6429-0_47openalex-snapshot
Safeguarding Autonomous Transportation: Deep Learning Strategies for Detecting Anomalies in Vehicle Sensor Data
inferred← citeshttps://doi.org/10.1007/s10664-025-10795-yopenalex-snapshot
SecMLOps: A comprehensive framework for integrating security throughout the machine learning operations lifecycle
inferred← citeshttps://doi.org/10.1007/s13042-025-02873-wopenalex-snapshot
Targeted adversarial traffic generation: black-box approach to evade intrusion detection systems in IoT networks
inferred← citeshttps://doi.org/10.1007/s44196-024-00686-3openalex-snapshot
A Model for Estimating Resiliency of AI-Based Classifiers Defending Against Cyber Attacks
inferred← citeshttps://doi.org/10.1016/j.asoc.2025.113212openalex-snapshot
Interpretability adversarial example detection through multi-interpretation aggregation comparison
inferred← citeshttps://doi.org/10.1016/j.neucom.2026.134416openalex-snapshot
DDoS attacks and detection in smart grids: A systematic survey of threat models, detection methods, and cyber-physical impact
inferred← citeshttps://doi.org/10.1016/j.scico.2026.103476openalex-snapshot
MutDBD: Mutation-based training set diagnosis for backdoor defense in deep neural networks
inferred← citeshttps://doi.org/10.1080/19393555.2025.2547206openalex-snapshot
Adversarial attack detection in secure medical images using deep learning
inferred← citeshttps://doi.org/10.1109/icassp55912.2026.11460529openalex-snapshot
A 3 D: Advanced Adversarial Attack as Detection Framework for Edge Devices
inferred← citeshttps://doi.org/10.1109/icoecai67333.2025.11335900openalex-snapshot
A Deep Neural Ensemble Architecture for Securing IoT Systems Against Adversarial Inputs
inferred← citeshttps://doi.org/10.1109/icsp62122.2024.10743442openalex-snapshot
Embedding Based Sensitive Element Injection against Text-to-Image Generative Models
inferred← citeshttps://doi.org/10.1109/jiot.2025.3602067openalex-snapshot
Carbon-Aware Adversarial Detection in IIoT via Projection Transform
inferred← citeshttps://doi.org/10.1109/ojcoms.2025.3602200openalex-snapshot
Mitigating ML-Driven Adversarial Attacks on xApps Using Dynamic Defense Mechanisms
inferred← citeshttps://doi.org/10.1109/ojcs.2025.3650722openalex-snapshot
A Validation Strategy for Deep Learning Models: Evaluating and Enhancing Robustness
inferred← citeshttps://doi.org/10.1109/swc62898.2024.00121openalex-snapshot
Multi-Level Feature Calibration for Adversarial Training Against Attack
inferred← citeshttps://doi.org/10.1109/tifs.2026.3714137openalex-snapshot
Protecting Your Customized LLM Systems From Backdoored Instructions With Metacognitive Probing
inferred← citeshttps://doi.org/10.1109/tse.2024.3361661openalex-snapshot
Stealthy Backdoor Attack for Code Models
inferred← citeshttps://doi.org/10.1145/3696001openalex-snapshot
Demo2Test: Transfer Testing of Agent in Competitive Environment with Failure Demonstrations
inferred← citeshttps://doi.org/10.1145/3720471openalex-snapshot
Verification of Bit-Flip Attacks against Quantized Neural Networks
inferred← citeshttps://doi.org/10.1145/3748503openalex-snapshot
Interpreting Deep Neural Networks via Relative Activation-Deactivation Abstractions
inferred← citeshttps://doi.org/10.1145/3843770openalex-snapshot
BASFuzz: Toward Robustness Evaluation of LLM-based NLP Software via Automated Fuzz Testing
inferred← citeshttps://doi.org/10.1186/s42400-025-00546-3openalex-snapshot
Advancements in adversarial example defense for deep learning models: a review
inferred← citeshttps://doi.org/10.23919/cje.2024.00.294openalex-snapshot
Robust Features Learning Under the Guidance of Generalization Features
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.