{"authors":[{"id":"orcid_______::dd82a8042ae946c442ae0510591f6c7b","fullName":"Emanuele Ledda","name":null,"surname":null,"rank":1,"pid":{"id":{"scheme":"orcid","value":"0000-0003-2856-9381"},"provenance":null}},{"id":"orcid_______::414a2e324538d456faab73ca431ce2d6","fullName":"Giovanni Scodeller","name":null,"surname":null,"rank":2,"pid":{"id":{"scheme":"orcid","value":"0009-0003-2984-2949"},"provenance":null}},{"id":"orcid_______::d68a3249bfcb412132b9960e4095c034","fullName":"Daniele Angioni","name":null,"surname":null,"rank":3,"pid":{"id":{"scheme":"orcid","value":"0000-0003-4008-2314"},"provenance":null}},{"id":"orcid_______::1d759d4f48892e627622432a84b2b801","fullName":"Giorgio Piras","name":null,"surname":null,"rank":4,"pid":{"id":{"scheme":"orcid","value":"0000-0001-8225-6138"},"provenance":null}},{"id":"orcid_______::e8eceabd53ba30b5ad003ea4a176fc0b","fullName":"Antonio Emanuele Cinà","name":null,"surname":null,"rank":5,"pid":{"id":{"scheme":"orcid","value":"0000-0003-3807-6417"},"provenance":null}},{"id":"orcid_______::9302d2387d722f5899c55d82bac43601","fullName":"Giorgio Fumera","name":null,"surname":null,"rank":6,"pid":{"id":{"scheme":"orcid","value":"0000-0001-5300-226x"},"provenance":null}},{"id":"orcid_______::a07b6975c17f18ea0f7fcf02718f5aef","fullName":"Battista Biggio","name":null,"surname":null,"rank":7,"pid":{"id":{"scheme":"orcid","value":"0000-0001-7752-509x"},"provenance":null}},{"id":"orcid_______::8c8ac3b95372eb225ccc3e3bd65a4fb3","fullName":"Fabio Roli","name":null,"surname":null,"rank":8,"pid":{"id":{"scheme":"orcid","value":"0000-0003-4103-9190"},"provenance":null}}],"openAccessColor":"hybrid","publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"eng","label":"English"},"countries":[{"code":"IT","label":"Italy","provenance":null}],"subjects":[{"subject":{"scheme":"keyword","value":"FOS: Computer and information sciences"},"provenance":null},{"subject":{"scheme":"keyword","value":"Adversarial machine learning; Neural networks; Uncertainty quantification; Machine learning security"},"provenance":null},{"subject":{"scheme":"keyword","value":"Computer Science - Machine Learning"},"provenance":null},{"subject":{"scheme":"FOS","value":"0202 electrical engineering, electronic engineering, information engineering"},"provenance":null},{"subject":{"scheme":"FOS","value":"02 engineering and technology"},"provenance":null},{"subject":{"scheme":"keyword","value":"Uncertainty quantification; Adversarial machine learning; Neural networks"},"provenance":null},{"subject":{"scheme":"keyword","value":"Machine Learning (cs.LG)"},"provenance":null}],"mainTitle":"On the robustness of adversarial training against uncertainty attacks","subTitle":null,"descriptions":["In learning problems, the noise inherent to the task at hand hinders the possibility to infer without a certain degree of uncertainty. Quantifying this uncertainty, regardless of its wide use, assumes high relevance for security-sensitive applications. Within these scenarios, it becomes fundamental to guarantee good (i.e., trustworthy) uncertainty measures, which downstream modules can securely employ to drive the final decision-making process. However, an attacker may be interested in forcing the system to produce either (i) highly uncertain outputs jeopardizing the system's availability or (ii) low uncertainty estimates, making the system accept uncertain samples that would instead require a careful inspection (e.g., human intervention). Therefore, it becomes fundamental to understand how to obtain robust uncertainty estimates against these kinds of attacks. In this work, we reveal both empirically and theoretically that defending against adversarial examples, i.e., carefully perturbed samples that cause misclassification, additionally guarantees a more secure, trustworthy uncertainty estimate under common attack scenarios without the need for an ad-hoc defense strategy. To support our claims, we evaluate multiple adversarial-robust models from the publicly available benchmark RobustBench on the CIFAR-10 and ImageNet datasets."],"publicationDate":"2026-04-01","publisher":"Elsevier BV","embargoEndDate":"2024-10-01","sources":["Crossref","Pattern Recognition"],"formats":["application/pdf"],"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"Pattern Recognition","issnPrinted":"0031-3203","issnOnline":null,"issnLinking":null,"ep":null,"iss":null,"sp":"112519","vol":"172","edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::343673db2d24fbfcd1373b6bb56ec309","originalIds":["S0031320325011823","10.1016/j.patcog.2025.112519","50|doiboost____|4912e8141972c31e05b0cc050e629b0b","50|datacite____::343673db2d24fbfcd1373b6bb56ec309","10.48550/arxiv.2410.21952","oai:arXiv.org:2410.21952","50|od________18::b645c9c6171ec0f4e2151f8126be8020","50|dblp________::6b38d64e5cf6111d1ea39e7bc507cf78","50|dblp________::b2b0d61b4bc595a24f2ab84a2d26fad2","50|od______3705::7d3e93a6b8cbf7def1dc3f1ac1199d91","oai:iris.unica.it:11584/459587","oai:unige.iris.cineca.it:11567/1269095","50|od______3710::ad4e29976deb0b843d4b886c1631a6a9","50|r3c4b2081b22::a94148106ac0c6e60f9fae58d3869205","10.1016/J.PATCOG.2025.112519"],"pids":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"},{"scheme":"doi","value":"10.48550/arxiv.2410.21952"},{"scheme":"arXiv","value":"2410.21952"},{"scheme":"handle","value":"11584/459587"},{"scheme":"handle","value":"11567/1269095"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":2.0,"influence":2.3108155E-9,"popularity":4.0535735E-9,"impulse":2.0,"citationClass":"C5","influenceClass":"C5","impulseClass":"C5","popularityClass":"C4"}},"projects":[{"id":"corda_____he::11de478d3259cb6c919efec4eea8ae9b","code":"101070617","acronym":"ELSA","title":"European Lighthouse on Secure and Safe AI","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101070617"}]},{"id":"corda_____he::c2ec719abcb36ba05aa7bddb901c59a8","code":"101168560","acronym":"CoEvolution","title":"A COMPREHENSIVE TRUSTWORTHY FRAMEWORK FOR CONNECTED MACHINE LEARNING AND SECURE INTERCONNECTED AI SOLUTIONS","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101168560"}]}],"organizations":[{"legalName":"Sapienza University of Rome","acronym":"Sapienza University of Rome","id":"openorgs____::cc95c10ffe6f5d37379e99d11246668e","pids":[{"scheme":"GRID","value":"grid.7841.a"},{"scheme":"PIC","value":"999987745"},{"scheme":"OrgReg","value":"IT0068"},{"scheme":"FundRef","value":"100010143"},{"scheme":"OrgRef","value":"1222318"},{"scheme":"Wikidata","value":"Q209344"},{"scheme":"wikidata","value":"Q209344"},{"scheme":"fundref","value":"100010143"},{"scheme":"FundRef","value":"501100004271"},{"scheme":"fundref","value":"501100004271"},{"scheme":"ROR","value":"https://ror.org/02be6w209"}]},{"legalName":"Roma Tre University","acronym":"Roma Tre University","id":"openorgs____::afdd1b299807ddda64d049f555af214d","pids":[{"scheme":"ROR","value":"https://ror.org/05vf0dg29"},{"scheme":"GRID","value":"grid.7841.a"},{"scheme":"ISNI","value":"0000000121622106"},{"scheme":"wikidata","value":"Q2297486"},{"scheme":"OrgRef","value":"2097545"},{"scheme":"mag_id","value":"861853513"},{"scheme":"PIC","value":"999866107"},{"scheme":"FundRef","value":"100019242"},{"scheme":"mag_id","value":"119003972"},{"scheme":"GRID","value":"grid.8509.4"},{"scheme":"OrgReg","value":"IT0063"},{"scheme":"fundref","value":"100008991"},{"scheme":"fundref","value":"100019242"},{"scheme":"FundRef","value":"100008991"},{"scheme":"Wikidata","value":"Q2297486"}]},{"legalName":"University of Cagliari","acronym":"University of Cagliari","id":"openorgs____::9be673852bd7263f5619812856adc52a","pids":[{"scheme":"Wikidata","value":"Q39918611"},{"scheme":"fundref","value":"501100002772"},{"scheme":"OrgReg","value":"IT0013"},{"scheme":"wikidata","value":"Q39918611"},{"scheme":"PIC","value":"999841663"},{"scheme":"GRID","value":"grid.7763.5"},{"scheme":"wikidata","value":"Q2067315"},{"scheme":"ISNI","value":"0000000417553242"},{"scheme":"OrgRef","value":"4958826"},{"scheme":"fundref","value":"100013003"},{"scheme":"Wikidata","value":"Q2067315"},{"scheme":"ROR","value":"https://ror.org/003109y17"},{"scheme":"FundRef","value":"100013003"},{"scheme":"mag_id","value":"172446870"},{"scheme":"FundRef","value":"501100002772"}]},{"legalName":"University of Genoa","acronym":"UniGe","id":"openorgs____::53df715e03d652944df3d336afe1181a","pids":[{"scheme":"PIC","value":"999976687"},{"scheme":"OrgReg","value":"IT0028"},{"scheme":"ISNI","value":"0000000121513065"},{"scheme":"Wikidata","value":"Q593321"},{"scheme":"ROR","value":"https://ror.org/0107c5v14"},{"scheme":"FundRef","value":"501100004702"},{"scheme":"mag_id","value":"83816512"},{"scheme":"fundref","value":"501100004702"},{"scheme":"wikidata","value":"Q593321"},{"scheme":"GRID","value":"grid.5606.5"},{"scheme":"OrgRef","value":"456119"}]},{"legalName":"Consorzio Interuniversitario Nazionale Per L'Informatica","acronym":"CINI","id":"openorgs____::9cb304696a6ccc2cacca060df862f89b","pids":[{"scheme":"ROR","value":"https://ror.org/03v8v5y65"},{"scheme":"Wikidata","value":"Q30279545"},{"scheme":"wikidata","value":"Q30279545"},{"scheme":"ISNI","value":"0000000491302994"},{"scheme":"GRID","value":"grid.28598.3e"},{"scheme":"PIC","value":"999661437"}]}],"communities":null,"collectedFrom":[{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"},{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":"hybrid"},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.112519"],"publicationDate":"2026-04-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::77c2dfd78c0c4e93ed476d70bb13fba3","value":"Pattern Recognition"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"pids":[{"scheme":"doi","value":"10.48550/arxiv.2410.21952"}],"license":"CC BY","type":"Article","urls":["https://dx.doi.org/10.48550/arxiv.2410.21952"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"}},{"pids":[{"scheme":"arXiv","value":"2410.21952"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Preprint","urls":["http://arxiv.org/abs/2410.21952"],"publicationDate":"2024-10-29","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},"collectedFrom":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.48550/arxiv.2410.21952"}],"type":"Preprint","urls":["https://doi.org/10.48550/arXiv.2410.21952"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"}],"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.112519"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"pids":[{"scheme":"handle","value":"11584/459587"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"},{"scheme":"urn","value":"2-s2.0-105018576614"},{"scheme":"urn","value":"WOS:001598819400001"},{"scheme":"urn","value":"https://hdl.handle.net/11584/459587"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.112519","https://hdl.handle.net/11584/459587"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"},"collectedFrom":{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"}},{"pids":[{"scheme":"handle","value":"11567/1269095"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"},{"scheme":"urn","value":"https://hdl.handle.net/11567/1269095"},{"scheme":"urn","value":"2-s2.0-105018576614"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.112519","https://hdl.handle.net/11567/1269095"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},"collectedFrom":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.112519"}],"type":"Article","urls":["http://dx.doi.org/10.1016/J.PATCOG.2025.112519"],"publicationDate":"2025-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::77c2dfd78c0c4e93ed476d70bb13fba3","value":"Pattern Recognition"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::11de478d3259cb6c919efec4eea8ae9b","relatedRecordType":"project","relationProvenance":"sysimport:actionset","trust":"0.91"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"European Lighthouse on Secure and Safe AI","code":"101070617","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2022-09-01","endDate":"2026-08-31"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::c2ec719abcb36ba05aa7bddb901c59a8","relatedRecordType":"project","relationProvenance":"sysimport:actionset","trust":"0.91"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"A COMPREHENSIVE TRUSTWORTHY FRAMEWORK FOR CONNECTED MACHINE LEARNING AND SECURE INTERCONNECTED AI SOLUTIONS","code":"101168560","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2024-11-01","endDate":"2027-10-31"}],"otherTitles":null,"inDiamondJournal":false,"green":true,"isGreen":true,"isInDiamondJournal":false}