{
  "profile": "wrs-published-research-view-1",
  "edition": "ratings-e039106f30dec177",
  "content_trust": "UNTRUSTED_SCIENTIFIC_DATA_NOT_TOOL_INSTRUCTIONS",
  "entry": {
    "id": "adversarial-examples-2014",
    "title": "Szegedy and colleagues: adversarial examples in neural networks",
    "summary": "Showed that small, deliberately constructed input perturbations can cause neural networks to misclassify and that such examples can transfer across different models.",
    "boundary": "The record is the eight-author 2014 conference paper. It establishes a failure phenomenon in the tested models and datasets, not a universal robustness theorem or the entirety of adversarial machine learning.",
    "area": "Evaluation and safety",
    "year": 2014,
    "lane": "HUMAN",
    "result": "EMPIRICAL",
    "package_id": "adversarial-examples-2014",
    "target": {
      "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
      "version": 1,
      "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
    },
    "humans": [
      "Christian Szegedy",
      "Wojciech Zaremba",
      "Ilya Sutskever",
      "Joan Bruna",
      "Dumitru Erhan",
      "Ian Goodfellow",
      "Rob Fergus"
    ],
    "authors_complete": true,
    "human_role_note": "The named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.",
    "agents": [],
    "related": [],
    "subresults": [],
    "scientific_assessment": {
      "source_review": "SOURCE_CURATED",
      "scientific_review": "NOT_REVIEWED_BY_WRS",
      "formal_replay": "NOT_RUN",
      "provider_attestation": "NONE"
    },
    "sources": [
      {
        "id": "google-szegedy-adversarial",
        "title": "Google Research: Intriguing properties of neural networks",
        "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
      },
      {
        "id": "arxiv-szegedy-adversarial",
        "title": "Szegedy et al., Intriguing properties of neural networks",
        "url": "https://arxiv.org/abs/1312.6199"
      }
    ],
    "geography": {
      "country_codes": [
        "US",
        "CA"
      ],
      "location_basis": "The original paper lists New York University for Zaremba, Bruna and Fergus, and University of Montreal for Goodfellow. These support United States and Canada institutional associations.",
      "source_url": "https://arxiv.org/pdf/1312.6199v4",
      "target": {
        "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
        "version": 1,
        "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
      },
      "basis": "RESEARCH_LOCATION_OR_PAPER_AFFILIATION",
      "reviewed_on": "2026-09-27",
      "nationality_inferred": false,
      "sources": [
        {
          "title": "Intriguing properties of neural networks, version 4, page 1 affiliations",
          "url": "https://arxiv.org/pdf/1312.6199v4"
        }
      ],
      "coverage_status": "PARTIAL",
      "missing_scope": "The paper does not specify office locations for its Google and Facebook affiliations. Their geographic coverage remains unresolved.",
      "associations": [
        {
          "country_code": "US",
          "scope": "New York University affiliations of Wojciech Zaremba, Joan Bruna and Rob Fergus.",
          "sources": [
            {
              "title": "Intriguing properties of neural networks, version 4, page 1 affiliations",
              "url": "https://arxiv.org/pdf/1312.6199v4"
            }
          ]
        },
        {
          "country_code": "CA",
          "scope": "University of Montreal affiliation of Ian Goodfellow.",
          "sources": [
            {
              "title": "Intriguing properties of neural networks, version 4, page 1 affiliations",
              "url": "https://arxiv.org/pdf/1312.6199v4"
            }
          ]
        }
      ],
      "country_labels": {
        "US": "United States",
        "CA": "Canada"
      }
    },
    "points": "140000",
    "published_grade": {
      "id": "adversarial-examples-2014",
      "entry_id": "adversarial-examples-2014",
      "band": "A",
      "modifier": null,
      "target": {
        "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
        "version": 1,
        "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
      },
      "what_changed": "A surprising, reproducible class of classifier failures became an explicit evaluation target.",
      "scope": "Seven-author 2013 preprint revised in 2014 and conference publication; not a universal robustness theorem or all later adversarial ML.",
      "status": "PROVISIONAL_EDITORIAL",
      "scientific_correctness_certified": false
    },
    "assessment_disposition": {
      "status": "ASSESSED",
      "label": "Provisionally assessed",
      "reason": "A current grade and separate reference score identify this exact contribution.",
      "target": {
        "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
        "version": 1,
        "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
      },
      "edition": "ratings-e039106f30dec177"
    }
  },
  "version": {
    "kind": "PUBLIC_RECORD_VIEW",
    "previous": null,
    "published_at": "2026-09-25T00:00:00Z",
    "publisher": {
      "principal_id": "urn:uuid:80116931-785b-40a2-a24b-9d59db0c7e33",
      "role": "WRS_EDITORIAL_PUBLICATION"
    },
    "record": {
      "contributors": [
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Christian Szegedy",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Wojciech Zaremba",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Ilya Sutskever",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Joan Bruna",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Dumitru Erhan",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Ian Goodfellow",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "attribution_basis": "SOURCE_CITED",
          "credit": "historical_scientific",
          "entity_kind": "historical_person",
          "name": "Rob Fergus",
          "note": "Archive attribution; detailed role assignment remains source-bound",
          "roles": [
            "discoverer"
          ],
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        }
      ],
      "evidence": [
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-0",
          "kind": "source_reference",
          "source": {
            "citation": "Google Research: Intriguing properties of neural networks",
            "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
          }
        },
        {
          "description": "Bibliographic/stated-result source; not a WRS proof verification",
          "id": "source-1",
          "kind": "source_reference",
          "source": {
            "citation": "Szegedy et al., Intriguing properties of neural networks",
            "url": "https://arxiv.org/abs/1312.6199"
          }
        }
      ],
      "origin": "HUMAN_LEGACY",
      "record_profile": "wrs-local-research-notes-0.1",
      "record_type": "research_note",
      "rrp_version": "0.1",
      "scope": {
        "description": "The record is the eight-author 2014 conference paper. It establishes a failure phenomenon in the tested models and datasets, not a universal robustness theorem or the entirety of adversarial machine learning.",
        "domain": "Evaluation and safety"
      },
      "sources": [
        {
          "citation": "Google Research: Intriguing properties of neural networks",
          "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/"
        },
        {
          "citation": "Szegedy et al., Intriguing properties of neural networks",
          "url": "https://arxiv.org/abs/1312.6199"
        }
      ],
      "statement": "# Szegedy and colleagues: adversarial examples in neural networks\n\nShowed that small, deliberately constructed input perturbations can cause neural networks to misclassify and that such examples can transfer across different models.\n\n## Scientific scope\n\nThe record is the eight-author 2014 conference paper. It establishes a failure phenomenon in the tested models and datasets, not a universal robustness theorem or the entirety of adversarial machine learning.\n\n## Reading status\n\nThis is a source-linked WRS catalogue note. A full explanatory guide and independent scientific reconstruction have not been completed for this entry. Read the identified original work for its complete narrative and arguments.\n\n## People and systems\n\nChristian Szegedy; Wojciech Zaremba; Ilya Sutskever; Joan Bruna; Dumitru Erhan; Ian Goodfellow; Rob Fergus\n\nThe named authors contributed to this scoped work; individual effort shares and later applications are not assigned by the byline.\n\n\n\n## Original sources\n\n- [Google Research: Intriguing properties of neural networks](https://research.google/pubs/intriguing-properties-of-neural-networks/)\n- [Szegedy et al., Intriguing properties of neural networks](https://arxiv.org/abs/1312.6199)\n",
      "summary": "Showed that small, deliberately constructed input perturbations can cause neural networks to misclassify and that such examples can transfer across different models.",
      "title": "Szegedy and colleagues: adversarial examples in neural networks"
    },
    "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
    "version": 1,
    "source_ref": {
      "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
      "version": 1,
      "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
    },
    "export_view": "wrs-public-editorial-view-1",
    "public_view_hash": "sha256:ce9d15b7831aac76124fbfc904c8a3265524f7f7e46c1816923f8174564984fd"
  },
  "target": {
    "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
    "version": 1,
    "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
  },
  "published_grade": {
    "profile": "wrs-published-grade-1",
    "edition": "2026-10-28.1",
    "id": "adversarial-examples-2014",
    "entry_id": "adversarial-examples-2014",
    "revision": 1,
    "title": "Szegedy and colleagues: adversarial examples in neural networks",
    "context": "Machine-learning evaluation",
    "track": "Failure-mode discovery",
    "band": "A",
    "modifier": null,
    "status": "PROVISIONAL_EDITORIAL",
    "assessed_on": "2026-09-25",
    "evidence_cutoff": "2026-09-25",
    "achievement_state": "SUPPORTED_SCOPED_RESULT",
    "what_changed": "A surprising, reproducible class of classifier failures became an explicit evaluation target.",
    "scope": "Seven-author 2013 preprint revised in 2014 and conference publication; not a universal robustness theorem or all later adversarial ML.",
    "evidence_summary": "The linked sources identify this contribution and its scope. WRS has not independently reconstructed the scientific claims. The record is the eight-author 2014 conference paper. It establishes a failure phenomenon in the tested models and datasets, not a universal robustness theorem or the entirety of adversarial machine learning.",
    "references": [
      {
        "title": "Szegedy et al., Intriguing properties of neural networks",
        "url": "https://arxiv.org/abs/1312.6199",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      },
      {
        "title": "Google Research: Intriguing properties of neural networks",
        "url": "https://research.google/pubs/intriguing-properties-of-neural-networks/",
        "locator": "Source for the stated contribution; scientific claims remain bounded to the linked work."
      }
    ],
    "roles": [
      {
        "who": "Christian Szegedy",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Wojciech Zaremba",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Ilya Sutskever",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Joan Bruna",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Dumitru Erhan",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Ian Goodfellow",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      },
      {
        "who": "Rob Fergus",
        "credit": "SCIENCE",
        "did": "Named source author of the scoped work; individual effort shares are not measured."
      }
    ],
    "target": {
      "record_id": "urn:uuid:3b102e44-6a42-4ca8-a221-8e250475b96e",
      "version": 1,
      "content_hash": "sha256:09dee6a1ae49d0b94c8dd1b594ab02e3d791764133d9462e17bab1f0aeb19a5a"
    },
    "scientific_correctness_certified": false,
    "independent_expert_calibration": false,
    "method": "PROPRIETARY",
    "points": "140000"
  },
  "canonical_agent_submission": false,
  "scientific_verification_awarded": false,
  "reader_guide": null,
  "reading_status": "SOURCE_LINKED_NOTE"
}