<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03539991</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-02T14:42:01+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Adversarial example detection for DNN models: a review and experimental comparison</title>
            <author role="crp">
              <persName>
                <forename type="first">Ahmed</forename>
                <surname>Aldahdooh</surname>
              </persName>
              <email type="md5">a72e36519757b593aaa50757824b7bda</email>
              <email type="domain">insa-rennes.fr</email>
              <idno type="idhal" notation="numeric">778654</idno>
              <idno type="halauthorid" notation="string">1046977-778654</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7624-5253</idno>
              <idno type="IDREF">https://www.idref.fr/204394996</idno>
              <affiliation ref="#struct-3195"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Wassim</forename>
                <surname>Hamidouche</surname>
              </persName>
              <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
              <email type="domain">insa-rennes.fr</email>
              <idno type="idhal" notation="string">wassim-hamidouche</idno>
              <idno type="idhal" notation="numeric">17949</idno>
              <idno type="halauthorid" notation="string">23120-17949</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0143-1756</idno>
              <idno type="IDREF">https://www.idref.fr/155804839</idno>
              <affiliation ref="#struct-3195"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sid Ahmed</forename>
                <surname>Fezza</surname>
              </persName>
              <idno type="idhal" notation="numeric">774102</idno>
              <idno type="halauthorid" notation="string">914444-774102</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-6453-8588</idno>
              <affiliation ref="#struct-505078"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Olivier</forename>
                <surname>Déforges</surname>
              </persName>
              <email type="md5">8d490bab73fcd159850a5817ca51b548</email>
              <email type="domain">ens.insa-rennes.fr</email>
              <idno type="idhal" notation="numeric">838257</idno>
              <idno type="halauthorid" notation="string">138924-838257</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-0750-0959</idno>
              <affiliation ref="#struct-3195"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Wassim</forename>
                <surname>Hamidouche</surname>
              </persName>
              <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
              <email type="domain">insa-rennes.fr</email>
            </editor>
            <funder>The Project is funded by both Région Bretagne (Brittany region), France, and direction générale de l’armement (DGA).</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2022-01-22 17:39:47</date>
              <date type="whenModified">2025-04-10 16:24:16</date>
              <date type="whenReleased">2022-01-22 17:39:47</date>
              <date type="whenProduced">2022-08</date>
              <ref type="externalLink" target="http://arxiv.org/pdf/2105.00203"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="328214">
                <persName>
                  <forename>Wassim</forename>
                  <surname>Hamidouche</surname>
                </persName>
                <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
                <email type="domain">insa-rennes.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03539991</idno>
            <idno type="halUri">https://hal.science/hal-03539991</idno>
            <idno type="halBibtex">aldahdooh:hal-03539991</idno>
            <idno type="halRefHtml">&lt;i&gt;Artificial Intelligence Review&lt;/i&gt;, 2022, 9 (6), pp.161269-161282. &lt;a target="_blank" href="https://dx.doi.org/10.1007/s10462-021-10125-w"&gt;&amp;#x27E8;10.1007/s10462-021-10125-w&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">Artificial Intelligence Review, 2022, 9 (6), pp.161269-161282. &amp;#x27E8;10.1007/s10462-021-10125-w&amp;#x27E9;</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-RENNES1">Université de Rennes 1</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INSA-RENNES">Institut National des Sciences Appliquées de Rennes</idno>
            <idno type="stamp" n="IETR">Institut d'Électronique et des Technologies du numéRique - UMR CNRS 6164</idno>
            <idno type="stamp" n="IETR-INSA" corresp="IETR">Institut d'Electronique et de Télécommunications de Rennes</idno>
            <idno type="stamp" n="UR1-HAL">Publications labos UR1 dans HAL-Rennes 1</idno>
            <idno type="stamp" n="UR1-MATH-STIC">UR1 - publications Maths-STIC</idno>
            <idno type="stamp" n="UR1-UFR-ISTIC">UFR ISTIC Informatique et électronique</idno>
            <idno type="stamp" n="IETR-VAADER" corresp="IETR">Video Analysis and Architecture Design for Embedded Resources</idno>
            <idno type="stamp" n="IETR-IMAGE">IETR - Département Image</idno>
            <idno type="stamp" n="TEST-UR-CSS">TEST Université de Rennes CSS</idno>
            <idno type="stamp" n="UNIV-RENNES">Université de Rennes</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="UR1-MATH-NUM">Pôle UnivRennes - Mathématiques - Numérique </idno>
            <idno type="stamp" n="CYBERSCHOOL">CyberSchool - Ecole universitaire de recherche en Cybersécurité</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Version arxiv relue par les pairs et acceptée pour publication</note>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Adversarial example detection for DNN models: a review and experimental comparison</title>
                <author role="crp">
                  <persName>
                    <forename type="first">Ahmed</forename>
                    <surname>Aldahdooh</surname>
                  </persName>
                  <email type="md5">a72e36519757b593aaa50757824b7bda</email>
                  <email type="domain">insa-rennes.fr</email>
                  <idno type="idhal" notation="numeric">778654</idno>
                  <idno type="halauthorid" notation="string">1046977-778654</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7624-5253</idno>
                  <idno type="IDREF">https://www.idref.fr/204394996</idno>
                  <affiliation ref="#struct-3195"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Wassim</forename>
                    <surname>Hamidouche</surname>
                  </persName>
                  <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
                  <email type="domain">insa-rennes.fr</email>
                  <idno type="idhal" notation="string">wassim-hamidouche</idno>
                  <idno type="idhal" notation="numeric">17949</idno>
                  <idno type="halauthorid" notation="string">23120-17949</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0143-1756</idno>
                  <idno type="IDREF">https://www.idref.fr/155804839</idno>
                  <affiliation ref="#struct-3195"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sid Ahmed</forename>
                    <surname>Fezza</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">774102</idno>
                  <idno type="halauthorid" notation="string">914444-774102</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-6453-8588</idno>
                  <affiliation ref="#struct-505078"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Olivier</forename>
                    <surname>Déforges</surname>
                  </persName>
                  <email type="md5">8d490bab73fcd159850a5817ca51b548</email>
                  <email type="domain">ens.insa-rennes.fr</email>
                  <idno type="idhal" notation="numeric">838257</idno>
                  <idno type="halauthorid" notation="string">138924-838257</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-0750-0959</idno>
                  <affiliation ref="#struct-3195"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">10798</idno>
                <idno type="issn">0269-2821</idno>
                <idno type="eissn">1573-7462</idno>
                <title level="j">Artificial Intelligence Review</title>
                <imprint>
                  <publisher>Springer Verlag</publisher>
                  <biblScope unit="volume">9</biblScope>
                  <biblScope unit="issue">6</biblScope>
                  <biblScope unit="pp">161269-161282</biblScope>
                  <date type="datePub">2022-08</date>
                  <date type="dateEpub">2022-01-06</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/s10462-021-10125-w</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-ai">Computer Science [cs]/Artificial Intelligence [cs.AI]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Deep learning (DL) has shown great success in many human-related tasks, which has led to its adoption in many computer vision based applications, such as security surveillance systems, autonomous vehicles and healthcare. Such safety-critical applications have to draw their path to success deployment once they have the capability to overcome safety-critical challenges. Among these challenges are the defense against or/and the detection of the adversarial examples (AEs). Adversaries can carefully craft small, often imperceptible, noise called perturbations to be added to the clean image to generate the AE. The aim of AE is to fool the DL model which makes it a potential risk for DL applications. Many test-time evasion attacks and countermeasures, i.e., defense or detection methods, are proposed in the literature. Moreover, few reviews and surveys were published and theoretically showed the taxonomy of the threats and the countermeasure methods with little focus in AE detection methods. In this paper, we focus on image classification task and attempt to provide a survey for detection methods of test-time evasion attacks on neural network classifiers. A detailed discussion for such methods is provided with experimental results for eight state-of-the-art detectors under different scenarios on four datasets. We also provide potential challenges and future perspectives for this research direction.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-3195" status="OLD">
          <orgName>Institut d'Electronique et de Télécommunications de Rennes</orgName>
          <orgName type="acronym">IETR</orgName>
          <date type="end">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Campus de Beaulieu Bâtiment 11D 35042 Rennes Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ietr.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-105160" type="direct"/>
            <relation active="#struct-117606" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-303397" type="direct"/>
            <relation name="UMR6164" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-505078" status="VALID">
          <orgName>National Institute of Telecommunications and ICT</orgName>
          <desc>
            <address>
              <addrLine>Oran, Algérie</addrLine>
              <country key="DZ"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-105160" status="VALID">
          <idno type="IdRef">26693823X</idno>
          <idno type="ROR">https://ror.org/015m7wh34</idno>
          <orgName>Université de Rennes</orgName>
          <orgName type="acronym">UR</orgName>
          <desc>
            <address>
              <addrLine>Campus de Beaulieu, 263 avenue Général Leclerc, CS 74205, 35042 RENNES CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-rennes.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-117606" status="VALID">
          <idno type="ROR">https://ror.org/04xaa4j22</idno>
          <orgName>Institut National des Sciences Appliquées - Rennes</orgName>
          <orgName type="acronym">INSA Rennes</orgName>
          <desc>
            <address>
              <addrLine>20, avenue des Buttes de Coësmes - CS 70839 - 35708 Rennes cedex 7</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-rennes.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-303397" status="VALID">
          <orgName>Ecole Supérieure d'Electricité - SUPELEC (FRANCE)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>