{"id":"https://openalex.org/W3041992316","doi":"https://doi.org/10.1609/aaai.v36i3.20279","title":"Making Adversarial Examples More Transferable and Indistinguishable","display_name":"Making Adversarial Examples More Transferable and Indistinguishable","publication_year":2022,"publication_date":"2022-06-28","ids":{"openalex":"https://openalex.org/W3041992316","doi":"https://doi.org/10.1609/aaai.v36i3.20279","mag":"3041992316"},"language":"en","primary_location":{"is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i3.20279","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/20279/20038","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true},"type":"article","type_crossref":"journal-article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/20279/20038","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009901181","display_name":"Junhua Zou","orcid":"https://orcid.org/0000-0003-4655-7173"},"institutions":[{"id":"https://openalex.org/I4210163363","display_name":"PLA Army Engineering University","ror":"https://ror.org/05mgp8x93","country_code":"CN","type":"funder","lineage":["https://openalex.org/I4210163363"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junhua Zou","raw_affiliation_strings":["Army Engineering University of PLA"],"affiliations":[{"raw_affiliation_string":"Army Engineering University of PLA","institution_ids":["https://openalex.org/I4210163363"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055496095","display_name":"Yexin Duan","orcid":"https://orcid.org/0000-0003-0769-4773"},"institutions":[{"id":"https://openalex.org/I4210163363","display_name":"PLA Army Engineering University","ror":"https://ror.org/05mgp8x93","country_code":"CN","type":"funder","lineage":["https://openalex.org/I4210163363"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yexin Duan","raw_affiliation_strings":["Army Engineering University of PLA"],"affiliations":[{"raw_affiliation_string":"Army Engineering University of PLA","institution_ids":["https://openalex.org/I4210163363"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100772380","display_name":"Boyu Li","orcid":"https://orcid.org/0000-0003-1269-8875"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"funder","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Boyu Li","raw_affiliation_strings":["Huazhong University of Science and Technology"],"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100381597","display_name":"Wu Zhang","orcid":"https://orcid.org/0000-0002-6148-6310"},"institutions":[{"id":"https://openalex.org/I4210163363","display_name":"PLA Army Engineering University","ror":"https://ror.org/05mgp8x93","country_code":"CN","type":"funder","lineage":["https://openalex.org/I4210163363"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wu Zhang","raw_affiliation_strings":["Army Engineering University of PLA"],"affiliations":[{"raw_affiliation_string":"Army Engineering University of PLA","institution_ids":["https://openalex.org/I4210163363"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100665153","display_name":"Pan Yu","orcid":"https://orcid.org/0000-0002-3333-9719"},"institutions":[{"id":"https://openalex.org/I4210163363","display_name":"PLA Army Engineering University","ror":"https://ror.org/05mgp8x93","country_code":"CN","type":"funder","lineage":["https://openalex.org/I4210163363"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Pan","raw_affiliation_strings":["Army Engineering University of PLA"],"affiliations":[{"raw_affiliation_string":"Army Engineering University of PLA","institution_ids":["https://openalex.org/I4210163363"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037669752","display_name":"Zhisong Pan","orcid":"https://orcid.org/0000-0001-8615-7313"},"institutions":[{"id":"https://openalex.org/I4210163363","display_name":"PLA Army Engineering University","ror":"https://ror.org/05mgp8x93","country_code":"CN","type":"funder","lineage":["https://openalex.org/I4210163363"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhisong Pan","raw_affiliation_strings":["Army Engineering University of PLA"],"affiliations":[{"raw_affiliation_string":"Army Engineering University of PLA","institution_ids":["https://openalex.org/I4210163363"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.736,"has_fulltext":true,"fulltext_origin":"pdf","cited_by_count":13,"citation_normalized_percentile":{"value":0.812687,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":92,"max":93},"biblio":{"volume":"36","issue":"3","first_page":"3662","last_page":"3670"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9462,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.9031304}],"concepts":[{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.9031304},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.89642656},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7363106},{"id":"https://openalex.org/C139676723","wikidata":"https://www.wikidata.org/wiki/Q1193832","display_name":"Sign (mathematics)","level":2,"score":0.5420081},{"id":"https://openalex.org/C143724316","wikidata":"https://www.wikidata.org/wiki/Q312468","display_name":"Series (stratigraphy)","level":2,"score":0.4175526},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.41001117},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3850743},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35675693},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2868319},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.18921864},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i3.20279","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/20279/20038","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true},{"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2007.03838","pdf_url":"http://arxiv.org/pdf/2007.03838","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":["Cornell University"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false}],"best_oa_location":{"is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v36i3.20279","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/20279/20038","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true},"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":46,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2183341477","https://openalex.org/W2274287116","https://openalex.org/W2302255633","https://openalex.org/W2543927648","https://openalex.org/W2552767274","https://openalex.org/W2561498661","https://openalex.org/W2570685808","https://openalex.org/W2735607295","https://openalex.org/W2736899637","https://openalex.org/W2745565856","https://openalex.org/W2766462876","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2786163515","https://openalex.org/W2788057085","https://openalex.org/W2798302089","https://openalex.org/W2947657997","https://openalex.org/W2950048339","https://openalex.org/W2950864148","https://openalex.org/W2962847335","https://openalex.org/W2963001136","https://openalex.org/W2963070423","https://openalex.org/W2963207607","https://openalex.org/W2963384482","https://openalex.org/W2963389226","https://openalex.org/W2963496101","https://openalex.org/W2963542245","https://openalex.org/W2963557656","https://openalex.org/W2963626025","https://openalex.org/W2963744840","https://openalex.org/W2963771536","https://openalex.org/W2963777966","https://openalex.org/W2963920068","https://openalex.org/W2964153729","https://openalex.org/W2964197269","https://openalex.org/W2964253222","https://openalex.org/W2964350391","https://openalex.org/W2967219371","https://openalex.org/W2969542116","https://openalex.org/W2976752987","https://openalex.org/W3015625436","https://openalex.org/W3088909400","https://openalex.org/W4293846201"],"related_works":["https://openalex.org/W4377864639","https://openalex.org/W4288055406","https://openalex.org/W4226402597","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3132910851","https://openalex.org/W3092178728","https://openalex.org/W2997056298","https://openalex.org/W2950864148","https://openalex.org/W2570685808"],"abstract_inverted_index":{"Fast":[0,53],"gradient":[1,23],"sign":[2,24,40],"attack":[3,25,84,105,117],"series":[4,26],"are":[5,9,73,145],"popular":[6],"methods":[7],"that":[8,94,164],"used":[10],"to":[11,34,58,76],"generate":[12,59,77],"adversarial":[13,61,78,100,175],"examples.":[14],"However,":[15],"most":[16],"of":[17,37,130,142],"the":[18,29,35,38,83,148],"approaches":[19],"based":[20],"on":[21,89],"fast":[22],"cannot":[27],"balance":[28],"indistinguishability":[30],"and":[31,69,102,112,132,180],"transferability":[32,179],"due":[33],"limitations":[36],"basic":[39],"structure.":[41],"To":[42],"address":[43],"this":[44],"problem,":[45],"we":[46],"propose":[47],"a":[48,170],"method,":[49],"called":[50],"Adam":[51],"Iterative":[52],"Gradient":[54],"Tanh":[55],"Method":[56],"(AI-FGTM),":[57],"indistinguishable":[60,99],"examples":[62,79,101,176],"with":[63,125,137,177],"high":[64],"transferability.":[65],"Besides,":[66],"smaller":[67],"kernels":[68],"dynamic":[70],"step":[71],"size":[72],"also":[74,156],"applied":[75],"for":[80,173],"further":[81],"increasing":[82],"success":[85,106,128,140],"rates.":[86],"Extensive":[87],"experiments":[88],"an":[90,126,138],"ImageNet-compatible":[91],"dataset":[92],"show":[93],"our":[95,153,165],"method":[96,154,166],"generates":[97],"more":[98],"achieves":[103],"higher":[104,146],"rates":[107],"without":[108],"extra":[109],"running":[110],"time":[111],"resource.":[113],"Our":[114],"best":[115],"transfer-based":[116],"NI-TI-DI-AITM":[118],"can":[119,155],"fool":[120],"six":[121],"classic":[122],"defense":[123,135],"models":[124,136],"average":[127,139],"rate":[129,141],"89.3%":[131],"three":[133],"advanced":[134],"82.7%,":[143],"which":[144],"than":[147],"state-of-the-art":[149],"gradient-based":[150],"attacks.":[151],"Additionally,":[152],"reduce":[157],"nearly":[158],"20%":[159],"mean":[160],"perturbation.":[161],"We":[162],"expect":[163],"will":[167],"serve":[168],"as":[169],"new":[171],"baseline":[172],"generating":[174],"better":[178],"indistinguishability.":[181]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W3041992316","counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2025-04-16T02:12:33.193984","created_date":"2020-07-16"}