<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02349625</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-02T19:18:14+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">DDSA: a Defense against Adversarial Attacks using Deep Denoising Sparse Autoencoder</title>
            <author role="aut">
              <persName>
                <forename type="first">Yassine</forename>
                <surname>Bakhti</surname>
              </persName>
              <email type="md5">b5efcb8b6a9cd4569eb201348c36d0fb</email>
              <email type="domain">insa-rennes.fr</email>
              <idno type="idhal" notation="numeric">1055232</idno>
              <idno type="halauthorid" notation="string">1662035-1055232</idno>
              <affiliation ref="#struct-185974"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sid Ahmed</forename>
                <surname>Fezza</surname>
              </persName>
              <idno type="idhal" notation="numeric">774102</idno>
              <idno type="halauthorid" notation="string">914444-774102</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-6453-8588</idno>
              <affiliation ref="#struct-543033"/>
            </author>
            <author role="crp">
              <persName>
                <forename type="first">Wassim</forename>
                <surname>Hamidouche</surname>
              </persName>
              <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
              <email type="domain">insa-rennes.fr</email>
              <idno type="idhal" notation="string">wassim-hamidouche</idno>
              <idno type="idhal" notation="numeric">17949</idno>
              <idno type="halauthorid" notation="string">23120-17949</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0143-1756</idno>
              <idno type="IDREF">https://www.idref.fr/155804839</idno>
              <affiliation ref="#struct-185974"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Olivier</forename>
                <surname>Déforges</surname>
              </persName>
              <email type="md5">8d490bab73fcd159850a5817ca51b548</email>
              <email type="domain">ens.insa-rennes.fr</email>
              <idno type="idhal" notation="numeric">838257</idno>
              <idno type="halauthorid" notation="string">138924-838257</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-0750-0959</idno>
              <affiliation ref="#struct-185974"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Laurent</forename>
                <surname>Jonchère</surname>
              </persName>
              <email type="md5">dc1f1e9bdb3dc2065f8bf1bfd5663118</email>
              <email type="domain">univ-rennes.fr</email>
            </editor>
            <funder ref="#projanr-55039"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2020-07-07 15:16:39</date>
              <date type="whenModified">2025-04-04 18:29:48</date>
              <date type="whenReleased">2020-07-10 11:06:02</date>
              <date type="whenProduced">2019</date>
              <date type="whenEndEmbargoed">2020-07-07</date>
              <ref type="file" target="https://univ-rennes.hal.science/hal-02349625v1/document">
                <date notBefore="2020-07-07"/>
              </ref>
              <ref type="file" subtype="greenPublisher" n="1" target="https://univ-rennes.hal.science/hal-02349625v1/file/hal-02349625.pdf" id="file-2892449-2547380">
                <date notBefore="2020-07-07"/>
              </ref>
              <ref type="externalLink" target="https://ieeexplore.ieee.org/ielx7/6287639/8600701/08890816.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="113861">
                <persName>
                  <forename>Laurent</forename>
                  <surname>Jonchère</surname>
                </persName>
                <email type="md5">dc1f1e9bdb3dc2065f8bf1bfd5663118</email>
                <email type="domain">univ-rennes.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02349625</idno>
            <idno type="halUri">https://univ-rennes.hal.science/hal-02349625</idno>
            <idno type="halBibtex">bakhti:hal-02349625</idno>
            <idno type="halRefHtml">&lt;i&gt;IEEE Access&lt;/i&gt;, 2019, 7, pp.160397-160407. &lt;a target="_blank" href="https://dx.doi.org/10.1109/ACCESS.2019.2951526"&gt;&amp;#x27E8;10.1109/ACCESS.2019.2951526&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IEEE Access, 2019, 7, pp.160397-160407. &amp;#x27E8;10.1109/ACCESS.2019.2951526&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-2892449-2547380"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-NANTES">Université de Nantes</idno>
            <idno type="stamp" n="UNIV-RENNES1">Université de Rennes 1</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INSA-RENNES">Institut National des Sciences Appliquées de Rennes</idno>
            <idno type="stamp" n="IETR">Institut d'Électronique et des Technologies du numéRique - UMR CNRS 6164</idno>
            <idno type="stamp" n="SUP_IETR">Institut d'Electronique et de Télécommunications de Rennes</idno>
            <idno type="stamp" n="IETR-INSA" corresp="IETR">Institut d'Electronique et de Télécommunications de Rennes</idno>
            <idno type="stamp" n="STATS-UR1">Statistiques-HAL-UR1</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="UR1-HAL">Publications labos UR1 dans HAL-Rennes 1</idno>
            <idno type="stamp" n="UR1-MATH-STIC">UR1 - publications Maths-STIC</idno>
            <idno type="stamp" n="UR1-UFR-ISTIC">UFR ISTIC Informatique et électronique</idno>
            <idno type="stamp" n="IETR-VAADER" corresp="IETR">Video Analysis and Architecture Design for Embedded Resources</idno>
            <idno type="stamp" n="IETR-IMAGE">IETR - Département Image</idno>
            <idno type="stamp" n="TEST-UR-CSS">TEST Université de Rennes CSS</idno>
            <idno type="stamp" n="UNIV-RENNES">Université de Rennes</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="TEST-HALCNRS">Collection test HAL CNRS</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="UR1-MATH-NUM">Pôle UnivRennes - Mathématiques - Numérique </idno>
            <idno type="stamp" n="NANTES-UNIVERSITE">Nantes Université</idno>
            <idno type="stamp" n="UNIV-NANTES-AV2022">Université de Nantes</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">DDSA: a Defense against Adversarial Attacks using Deep Denoising Sparse Autoencoder</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Yassine</forename>
                    <surname>Bakhti</surname>
                  </persName>
                  <email type="md5">b5efcb8b6a9cd4569eb201348c36d0fb</email>
                  <email type="domain">insa-rennes.fr</email>
                  <idno type="idhal" notation="numeric">1055232</idno>
                  <idno type="halauthorid" notation="string">1662035-1055232</idno>
                  <affiliation ref="#struct-185974"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sid Ahmed</forename>
                    <surname>Fezza</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">774102</idno>
                  <idno type="halauthorid" notation="string">914444-774102</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-6453-8588</idno>
                  <affiliation ref="#struct-543033"/>
                </author>
                <author role="crp">
                  <persName>
                    <forename type="first">Wassim</forename>
                    <surname>Hamidouche</surname>
                  </persName>
                  <email type="md5">d5af25a39821d271958e0b180eb8c446</email>
                  <email type="domain">insa-rennes.fr</email>
                  <idno type="idhal" notation="string">wassim-hamidouche</idno>
                  <idno type="idhal" notation="numeric">17949</idno>
                  <idno type="halauthorid" notation="string">23120-17949</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0143-1756</idno>
                  <idno type="IDREF">https://www.idref.fr/155804839</idno>
                  <affiliation ref="#struct-185974"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Olivier</forename>
                    <surname>Déforges</surname>
                  </persName>
                  <email type="md5">8d490bab73fcd159850a5817ca51b548</email>
                  <email type="domain">ens.insa-rennes.fr</email>
                  <idno type="idhal" notation="numeric">838257</idno>
                  <idno type="halauthorid" notation="string">138924-838257</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-0750-0959</idno>
                  <affiliation ref="#struct-185974"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">107030</idno>
                <idno type="issn">2169-3536</idno>
                <idno type="eissn">2169-3536</idno>
                <title level="j">IEEE Access</title>
                <imprint>
                  <publisher>IEEE</publisher>
                  <biblScope unit="volume">7</biblScope>
                  <biblScope unit="pp">160397-160407</biblScope>
                  <date type="datePub">2019</date>
                  <date type="dateEpub">2019-11-04</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/ACCESS.2019.2951526</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">denoising</term>
                <term xml:lang="en">sparse autoencoder</term>
                <term xml:lang="en">defense</term>
                <term xml:lang="en">adversarial attacks</term>
                <term xml:lang="en">security</term>
                <term xml:lang="en">Deep neural network</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ne">Computer Science [cs]/Neural and Evolutionary Computing [cs.NE]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Given their outstanding performance, the Deep Neural Networks (DNNs) models have been deployed in many real-world applications. However, recent studies have demonstrated that they are vulnerable to small carefully crafted perturbations, i.e., adversarial examples, which considerably decrease their performance and can lead to devastating consequences, especially for safety-critical applications, such as autonomous vehicles, healthcare and face recognition. Therefore, it is of paramount importance to offer defense solutions that increase the robustness of DNNs against adversarial attacks. In this paper, we propose a novel defense solution based on a Deep Denoising Sparse Autoencoder (DDSA). The proposed method is performed as a pre-processing step, where the adversarial noise of the input samples is removed before feeding the classifier. The pre-processing defense block can be associated with any classifier, without any change to their architecture or training procedure. In addition, the proposed method is a universal defense, since it does not require any knowledge about the attack, making it usable against any type of attack. The experimental results on MNIST and CIFAR-10 datasets have shown that the proposed DDSA defense provides a high robustness against a set of prominent attacks under white-, gray- and black-box settings, and outperforms state-of-the-art defense methods.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-185974" status="OLD">
          <idno type="IdRef">149256035</idno>
          <idno type="RNSR">200212224H</idno>
          <idno type="ROR">https://ror.org/013q33h79</idno>
          <orgName>Institut d'Électronique et des Technologies du numéRique</orgName>
          <orgName type="acronym">IETR</orgName>
          <date type="start">2012-01-01</date>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>Campus de Beaulieu Bâtiment 11D263 Av.Général Leclerc-CS 74205 35042 Rennes Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ietr.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-93263" type="direct"/>
            <relation active="#struct-105160" type="direct"/>
            <relation active="#struct-117606" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-411575" type="direct"/>
            <relation name="UMR6164" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-543033" status="VALID">
          <orgName>Institut National des Télécommunications et des TIC</orgName>
          <orgName type="acronym">INTTIC</orgName>
          <desc>
            <address>
              <addrLine>Route de Sénia - BP 1518 Oran El M'nouer - 31000 Oran</addrLine>
              <country key="DZ"/>
            </address>
            <ref type="url">http://www.ito.dz/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-93263" status="OLD">
          <idno type="IdRef">026403447</idno>
          <idno type="ROR">https://ror.org/03gnr7b55</idno>
          <orgName>Université de Nantes</orgName>
          <orgName type="acronym">UN</orgName>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>1, quai de Tourville - BP 13522 - 44035 Nantes cedex 1</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-nantes.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-105160" status="VALID">
          <idno type="IdRef">26693823X</idno>
          <idno type="ROR">https://ror.org/015m7wh34</idno>
          <orgName>Université de Rennes</orgName>
          <orgName type="acronym">UR</orgName>
          <desc>
            <address>
              <addrLine>Campus de Beaulieu, 263 avenue Général Leclerc, CS 74205, 35042 RENNES CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-rennes.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-117606" status="VALID">
          <idno type="ROR">https://ror.org/04xaa4j22</idno>
          <orgName>Institut National des Sciences Appliquées - Rennes</orgName>
          <orgName type="acronym">INSA Rennes</orgName>
          <desc>
            <address>
              <addrLine>20, avenue des Buttes de Coësmes - CS 70839 - 35708 Rennes cedex 7</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-rennes.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-55039" status="VALID">
          <idno type="anr">ANR-10-AIRT-0007</idno>
          <orgName>B-COM</orgName>
          <desc>B-COM</desc>
          <date type="start">2010</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>