{"id":"W3173829726","doi":"10.1109/tsc.2021.3090365","title":"Defending Adversarial Attacks via Semantic Feature Manipulation","year":2021,"lang":"en","type":"article","venue":"IEEE Transactions on Services Computing","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":10,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"","keywords":"Adversarial system; Computer science; Artificial intelligence; Autoencoder; Transferability; Pattern recognition (psychology); Machine learning; Intuition; Feature (linguistics); Deep learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0002962181,0.0002991674,0.0002923442,0.0002127612,0.000840363,0.0003341598,0.0007309748,0.0001843452,0.00004346615],"category_scores_gemma":[0.000005568701,0.0003368205,0.0001867391,0.0009976247,0.00002219961,0.0007584744,0.00002987597,0.0007408287,0.00009791615],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001329265,"about_ca_system_score_gemma":0.00006620647,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007783619,"about_ca_topic_score_gemma":0.0001212675,"domain_scores_codex":[0.9976836,0.0002421081,0.0003475866,0.0007616191,0.0004971388,0.0004679419],"domain_scores_gemma":[0.9985558,0.0002940304,0.0002030687,0.000666163,0.0001617031,0.0001192831],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000152697,0.00007523019,0.0002332484,0.0001088478,0.00006796098,0.00008360152,0.001466233,0.9464312,0.001846788,0.0006410601,0.00001045136,0.04902009],"study_design_scores_gemma":[0.0006234908,0.00003501496,0.0007263522,0.0001834576,0.00004409866,0.0001202041,0.0001872181,0.9926113,0.004542114,0.0002835434,0.0002923189,0.0003508498],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02888227,0.00004163805,0.9657344,0.0006085256,0.003438365,0.0001406812,0.000001678701,0.0005644134,0.0005880485],"genre_scores_gemma":[0.9103139,0.000004643076,0.08873061,0.0004669005,0.0002945428,0.00000291759,0.000007849815,0.00003188833,0.0001467227],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.8814316,"threshold_uncertainty_score":0.9999084,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01397747120093319,"score_gpt":0.2614147768365508,"score_spread":0.2474373056356176,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}