{"id":"W4206060246","doi":"10.1109/access.2021.3133334","title":"You Can’t Fool All the Models: Detect Adversarial Samples via Pruning Models","year":2021,"lang":"en","type":"article","venue":"IEEE Access","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"Natural Science Foundation of Zhejiang Province; National Natural Science Foundation of China; Canadian Institute for Advanced Research","keywords":"Computer science; Adversarial system; Pruning; Artificial intelligence; Machine learning; Deep neural networks; Artificial neural network; FLOPS; Deep learning; Sample (material); Pattern recognition (psychology)","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.000584558,0.000311484,0.0003257977,0.0001000058,0.000514242,0.0008302385,0.003573442,0.0001437485,0.00002744785],"category_scores_gemma":[0.0001719026,0.0002556106,0.0001350024,0.0007283998,0.00008909473,0.002527933,0.001411984,0.0006273803,0.00001162998],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001334498,"about_ca_system_score_gemma":0.0003200678,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001551227,"about_ca_topic_score_gemma":0.0005823424,"domain_scores_codex":[0.9971498,0.0003856208,0.0003967608,0.0008065075,0.0006217711,0.0006395088],"domain_scores_gemma":[0.9976679,0.0004504634,0.0002239461,0.001310013,0.0002109087,0.0001367752],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001509852,0.00001928634,0.00004789945,0.00001282704,0.0000652139,0.00006201189,0.001606353,0.9688917,0.0008251819,0.008978146,0.0002618724,0.01921443],"study_design_scores_gemma":[0.0004695977,0.00002148378,0.00004476815,0.00002633575,0.000034965,0.00003960198,0.00006304581,0.9213975,0.003821401,0.07302811,0.000723844,0.0003293652],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01180316,0.0002838874,0.9818779,0.001730645,0.001971712,0.0002414398,0.000005549144,0.0003096076,0.001776073],"genre_scores_gemma":[0.9557469,0.0000336546,0.04209215,0.001316523,0.0005657601,0.00004105296,0.000007317745,0.00004138275,0.0001552048],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9439438,"threshold_uncertainty_score":0.9999896,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0766063510594319,"score_gpt":0.3066038086844982,"score_spread":0.2299974576250662,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}