Disentangling Improves VAEs' Robustness to Adversarial Attacks. Article Swipe

View

Matthew Willetts , Alexander Camuto , Stephen Roberts , Chris Holmes ·

YOU? · · 2019 · Open Access ·

This paper is concerned with the robustness of VAEs to adversarial attacks. We highlight that conventional VAEs are brittle under attack but that methods recently introduced for disentanglement such as $\beta$-TCVAE (Chen et al., 2018) improve robustness, as demonstrated through a variety of previously proposed adversarial attacks (Tabacof et al. (2016); Gondim-Ribeiro et al. (2018); Kos et al.(2018)). This motivated us to develop Seatbelt-VAE, a new hierarchical disentangled VAE that is designed to be significantly more robust to adversarial attacks than existing approaches, while retaining high quality reconstructions.

Related Topics

Computer Science

Gretchen Whitmer Kidnapping Plot

Artificial Intelligence

Concepts

Adversarial system Robustness (evolution) Computer science Chen Artificial intelligence Computer security Geology Paleontology Chemistry Gene Biochemistry

Metadata

Type: preprint
Language: en
Landing Page: https://arxiv.org/pdf/1906.00230.pdf
OA Status: green
Cited By: 2
Related Works: 20
OpenAlex ID: https://openalex.org/W2947920725

All OpenAlex metadata

Raw OpenAlex JSON

OpenAlex ID: https://openalex.org/W2947920725

Canonical identifier for this work in OpenAlex
Title: Disentangling Improves VAEs' Robustness to Adversarial Attacks.

Work title
Type: preprint

OpenAlex work type
Language: en

Primary language
Publication year: 2019

Year of publication
Publication date: 2019-09-25

Full publication date if available
Authors: Matthew Willetts, Alexander Camuto, Stephen Roberts, Chris Holmes

List of authors in order
Landing page: https://arxiv.org/pdf/1906.00230.pdf

Publisher landing page
Open access: Yes

Whether a free full text is available
OA status: green

Open access status per OpenAlex
OA URL: https://arxiv.org/pdf/1906.00230.pdf

Direct OA link when available
Concepts: Adversarial system, Robustness (evolution), Computer science, Chen, Artificial intelligence, Computer security, Geology, Paleontology, Chemistry, Gene, Biochemistry

Top concepts (fields/topics) attached by OpenAlex
Cited by: 2

Total citation count in OpenAlex
Citations by year (recent): 2021: 1, 2020: 1

Per-year citation counts (last 5 years)
Related works (count): 20

Other works algorithmically related by OpenAlex

Full payload

id	https://openalex.org/W2947920725
doi
ids.mag	2947920725
ids.openalex	https://openalex.org/W2947920725
fwci
type	preprint
title	Disentangling Improves VAEs' Robustness to Adversarial Attacks.
biblio.issue
biblio.volume
biblio.last_page
biblio.first_page
topics[0].id	https://openalex.org/T11606
topics[0].field.id	https://openalex.org/fields/22
topics[0].field.display_name	Engineering
topics[0].score	0.9700999855995178
topics[0].domain.id	https://openalex.org/domains/3
topics[0].domain.display_name	Physical Sciences
topics[0].subfield.id	https://openalex.org/subfields/2205
topics[0].subfield.display_name	Civil and Structural Engineering
topics[0].display_name	Infrastructure Maintenance and Monitoring
topics[1].id	https://openalex.org/T11689
topics[1].field.id	https://openalex.org/fields/17
topics[1].field.display_name	Computer Science
topics[1].score	0.9564999938011169
topics[1].domain.id	https://openalex.org/domains/3
topics[1].domain.display_name	Physical Sciences
topics[1].subfield.id	https://openalex.org/subfields/1702
topics[1].subfield.display_name	Artificial Intelligence
topics[1].display_name	Adversarial Robustness in Machine Learning
topics[2].id	https://openalex.org/T11512
topics[2].field.id	https://openalex.org/fields/17
topics[2].field.display_name	Computer Science
topics[2].score	0.9523000121116638
topics[2].domain.id	https://openalex.org/domains/3
topics[2].domain.display_name	Physical Sciences
topics[2].subfield.id	https://openalex.org/subfields/1702
topics[2].subfield.display_name	Artificial Intelligence
topics[2].display_name	Anomaly Detection Techniques and Applications
is_xpac	False
apc_list
apc_paid
concepts[0].id	https://openalex.org/C37736160
concepts[0].level	2
concepts[0].score	0.9418216943740845
concepts[0].wikidata	https://www.wikidata.org/wiki/Q1801315
concepts[0].display_name	Adversarial system
concepts[1].id	https://openalex.org/C63479239
concepts[1].level	3
concepts[1].score	0.8753647804260254
concepts[1].wikidata	https://www.wikidata.org/wiki/Q7353546
concepts[1].display_name	Robustness (evolution)
concepts[2].id	https://openalex.org/C41008148
concepts[2].level	0
concepts[2].score	0.6893919706344604
concepts[2].wikidata	https://www.wikidata.org/wiki/Q21198
concepts[2].display_name	Computer science
concepts[3].id	https://openalex.org/C2776085556
concepts[3].level	2
concepts[3].score	0.5287995934486389
concepts[3].wikidata	https://www.wikidata.org/wiki/Q183361
concepts[3].display_name	Chen
concepts[4].id	https://openalex.org/C154945302
concepts[4].level	1
concepts[4].score	0.5000653266906738
concepts[4].wikidata	https://www.wikidata.org/wiki/Q11660
concepts[4].display_name	Artificial intelligence
concepts[5].id	https://openalex.org/C38652104
concepts[5].level	1
concepts[5].score	0.3290204405784607
concepts[5].wikidata	https://www.wikidata.org/wiki/Q3510521
concepts[5].display_name	Computer security
concepts[6].id	https://openalex.org/C127313418
concepts[6].level	0
concepts[6].score	0.04499751329421997
concepts[6].wikidata	https://www.wikidata.org/wiki/Q1069
concepts[6].display_name	Geology
concepts[7].id	https://openalex.org/C151730666
concepts[7].level	1
concepts[7].score	0.0
concepts[7].wikidata	https://www.wikidata.org/wiki/Q7205
concepts[7].display_name	Paleontology
concepts[8].id	https://openalex.org/C185592680
concepts[8].level	0
concepts[8].score	0.0
concepts[8].wikidata	https://www.wikidata.org/wiki/Q2329
concepts[8].display_name	Chemistry
concepts[9].id	https://openalex.org/C104317684
concepts[9].level	2
concepts[9].score	0.0
concepts[9].wikidata	https://www.wikidata.org/wiki/Q7187
concepts[9].display_name	Gene
concepts[10].id	https://openalex.org/C55493867
concepts[10].level	1
concepts[10].score	0.0
concepts[10].wikidata	https://www.wikidata.org/wiki/Q7094
concepts[10].display_name	Biochemistry
keywords[0].id	https://openalex.org/keywords/adversarial-system
keywords[0].score	0.9418216943740845
keywords[0].display_name	Adversarial system
keywords[1].id	https://openalex.org/keywords/robustness
keywords[1].score	0.8753647804260254
keywords[1].display_name	Robustness (evolution)
keywords[2].id	https://openalex.org/keywords/computer-science
keywords[2].score	0.6893919706344604
keywords[2].display_name	Computer science
keywords[3].id	https://openalex.org/keywords/chen
keywords[3].score	0.5287995934486389
keywords[3].display_name	Chen
keywords[4].id	https://openalex.org/keywords/artificial-intelligence
keywords[4].score	0.5000653266906738
keywords[4].display_name	Artificial intelligence
keywords[5].id	https://openalex.org/keywords/computer-security
keywords[5].score	0.3290204405784607
keywords[5].display_name	Computer security
keywords[6].id	https://openalex.org/keywords/geology
keywords[6].score	0.04499751329421997
keywords[6].display_name	Geology
language	en
locations[0].id	mag:2947920725
locations[0].is_oa	True
locations[0].source.id	https://openalex.org/S4306400194
locations[0].source.issn
locations[0].source.type	repository
locations[0].source.is_oa	True
locations[0].source.issn_l
locations[0].source.is_core	False
locations[0].source.is_in_doaj	False
locations[0].source.display_name	arXiv (Cornell University)
locations[0].source.host_organization	https://openalex.org/I205783295
locations[0].source.host_organization_name	Cornell University
locations[0].source.host_organization_lineage	https://openalex.org/I205783295
locations[0].license
locations[0].pdf_url
locations[0].version	submittedVersion
locations[0].raw_type
locations[0].license_id
locations[0].is_accepted	False
locations[0].is_published	False
locations[0].raw_source_name	arXiv (Cornell University)
locations[0].landing_page_url	https://arxiv.org/pdf/1906.00230.pdf
authorships[0].author.id	https://openalex.org/A5019067441
authorships[0].author.orcid	https://orcid.org/0000-0001-6585-3950
authorships[0].author.display_name	Matthew Willetts
authorships[0].author_position	first
authorships[0].raw_author_name	Matthew Willetts
authorships[0].is_corresponding	False
authorships[1].author.id	https://openalex.org/A5075596560
authorships[1].author.orcid
authorships[1].author.display_name	Alexander Camuto
authorships[1].author_position	middle
authorships[1].raw_author_name	Alexander Camuto
authorships[1].is_corresponding	False
authorships[2].author.id	https://openalex.org/A5058617210
authorships[2].author.orcid	https://orcid.org/0000-0002-9305-9268
authorships[2].author.display_name	Stephen Roberts
authorships[2].author_position	middle
authorships[2].raw_author_name	Stephen J. Roberts
authorships[2].is_corresponding	False
authorships[3].author.id	https://openalex.org/A5100649922
authorships[3].author.orcid	https://orcid.org/0000-0002-6667-4943
authorships[3].author.display_name	Chris Holmes
authorships[3].author_position	last
authorships[3].raw_author_name	Chris C. Holmes
authorships[3].is_corresponding	False
has_content.pdf	False
has_content.grobid_xml	False
is_paratext	False
open_access.is_oa	True
open_access.oa_url	https://arxiv.org/pdf/1906.00230.pdf
open_access.oa_status	green
open_access.any_repository_has_fulltext	False
created_date	2025-10-10T00:00:00
display_name	Disentangling Improves VAEs' Robustness to Adversarial Attacks.
has_fulltext	False
is_retracted	False
updated_date	2025-10-10T17:16:08.811792
primary_topic.id	https://openalex.org/T11606
primary_topic.field.id	https://openalex.org/fields/22
primary_topic.field.display_name	Engineering
primary_topic.score	0.9700999855995178
primary_topic.domain.id	https://openalex.org/domains/3
primary_topic.domain.display_name	Physical Sciences
primary_topic.subfield.id	https://openalex.org/subfields/2205
primary_topic.subfield.display_name	Civil and Structural Engineering
primary_topic.display_name	Infrastructure Maintenance and Monitoring
related_works	https://openalex.org/W3005226846, https://openalex.org/W3166519971, https://openalex.org/W2950947818, https://openalex.org/W3033197720, https://openalex.org/W2896667350, https://openalex.org/W3138091863, https://openalex.org/W2774644650, https://openalex.org/W2969454448, https://openalex.org/W2904331652, https://openalex.org/W3200620942, https://openalex.org/W2950183588, https://openalex.org/W3108822760, https://openalex.org/W2765725061, https://openalex.org/W3171103165, https://openalex.org/W3156525504, https://openalex.org/W3200563458, https://openalex.org/W2900211049, https://openalex.org/W3083465548, https://openalex.org/W3108552244, https://openalex.org/W2894427974
cited_by_count	2
counts_by_year[0].year	2021
counts_by_year[0].cited_by_count	1
counts_by_year[1].year	2020
counts_by_year[1].cited_by_count	1
locations_count	1
best_oa_location.id	mag:2947920725
best_oa_location.is_oa	True
best_oa_location.source.id	https://openalex.org/S4306400194
best_oa_location.source.issn
best_oa_location.source.type	repository
best_oa_location.source.is_oa	True
best_oa_location.source.issn_l
best_oa_location.source.is_core	False
best_oa_location.source.is_in_doaj	False
best_oa_location.source.display_name	arXiv (Cornell University)
best_oa_location.source.host_organization	https://openalex.org/I205783295
best_oa_location.source.host_organization_name	Cornell University
best_oa_location.source.host_organization_lineage	https://openalex.org/I205783295
best_oa_location.license
best_oa_location.pdf_url
best_oa_location.version	submittedVersion
best_oa_location.raw_type
best_oa_location.license_id
best_oa_location.is_accepted	False
best_oa_location.is_published	False
best_oa_location.raw_source_name	arXiv (Cornell University)
best_oa_location.landing_page_url	https://arxiv.org/pdf/1906.00230.pdf
primary_location.id	mag:2947920725
primary_location.is_oa	True
primary_location.source.id	https://openalex.org/S4306400194
primary_location.source.issn
primary_location.source.type	repository
primary_location.source.is_oa	True
primary_location.source.issn_l
primary_location.source.is_core	False
primary_location.source.is_in_doaj	False
primary_location.source.display_name	arXiv (Cornell University)
primary_location.source.host_organization	https://openalex.org/I205783295
primary_location.source.host_organization_name	Cornell University
primary_location.source.host_organization_lineage	https://openalex.org/I205783295
primary_location.license
primary_location.pdf_url
primary_location.version	submittedVersion
primary_location.raw_type
primary_location.license_id
primary_location.is_accepted	False
primary_location.is_published	False
primary_location.raw_source_name	arXiv (Cornell University)
primary_location.landing_page_url	https://arxiv.org/pdf/1906.00230.pdf
publication_date	2019-09-25
publication_year	2019
referenced_works_count	0
abstract_inverted_index.a	40, 64
abstract_inverted_index.We	12
abstract_inverted_index.as	29, 37
abstract_inverted_index.be	73
abstract_inverted_index.et	32, 48, 52, 56
abstract_inverted_index.is	2, 70
abstract_inverted_index.of	7, 42
abstract_inverted_index.to	9, 61, 72, 77
abstract_inverted_index.us	60
abstract_inverted_index.Kos	55
abstract_inverted_index.VAE	68
abstract_inverted_index.al.	49, 53
abstract_inverted_index.are	17
abstract_inverted_index.but	21
abstract_inverted_index.for	26
abstract_inverted_index.new	65
abstract_inverted_index.the	5
abstract_inverted_index.This	0, 58
abstract_inverted_index.VAEs	8, 16
abstract_inverted_index.al.,	33
abstract_inverted_index.high	85
abstract_inverted_index.more	75
abstract_inverted_index.such	28
abstract_inverted_index.than	80
abstract_inverted_index.that	14, 22, 69
abstract_inverted_index.with	4
abstract_inverted_index.(Chen	31
abstract_inverted_index.2018)	34
abstract_inverted_index.paper	1
abstract_inverted_index.under	19
abstract_inverted_index.while	83
abstract_inverted_index.attack	20
abstract_inverted_index.robust	76
abstract_inverted_index.(2016);	50
abstract_inverted_index.(2018);	54
abstract_inverted_index.attacks	46, 79
abstract_inverted_index.brittle	18
abstract_inverted_index.develop	62
abstract_inverted_index.improve	35
abstract_inverted_index.methods	23
abstract_inverted_index.quality	86
abstract_inverted_index.through	39
abstract_inverted_index.variety	41
abstract_inverted_index.(Tabacof	47
abstract_inverted_index.attacks.	11
abstract_inverted_index.designed	71
abstract_inverted_index.existing	81
abstract_inverted_index.proposed	44
abstract_inverted_index.recently	24
abstract_inverted_index.concerned	3
abstract_inverted_index.highlight	13
abstract_inverted_index.motivated	59
abstract_inverted_index.retaining	84
abstract_inverted_index.introduced	25
abstract_inverted_index.previously	43
abstract_inverted_index.robustness	6
abstract_inverted_index.adversarial	10, 45, 78
abstract_inverted_index.al.(2018)).	57
abstract_inverted_index.approaches,	82
abstract_inverted_index.robustness,	36
abstract_inverted_index.conventional	15
abstract_inverted_index.demonstrated	38
abstract_inverted_index.disentangled	67
abstract_inverted_index.hierarchical	66
abstract_inverted_index.$\beta$-TCVAE	30
abstract_inverted_index.Seatbelt-VAE,	63
abstract_inverted_index.significantly	74
abstract_inverted_index.Gondim-Ribeiro	51
abstract_inverted_index.disentanglement	27
abstract_inverted_index.reconstructions.	87
cited_by_percentile_year
countries_distinct_count	0
institutions_distinct_count	4
citation_normalized_percentile