{"id":"https://openalex.org/W2570685808","doi":"https://doi.org/10.48550/arxiv.1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","display_name":"Delving into Transferable Adversarial Examples and Black-box Attacks","publication_year":2016,"publication_date":"2016-11-08","ids":{"openalex":"https://openalex.org/W2570685808","doi":"https://doi.org/10.48550/arxiv.1611.02770","mag":"2570685808"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:1611.02770","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1611.02770","pdf_url":"https://arxiv.org/pdf/1611.02770","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1611.02770","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101690984","display_name":"Yanpei Liu","orcid":"https://orcid.org/0000-0002-4530-8151","observed_orcids":["https://orcid.org/0000-0002-4530-8151"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liu, Yanpei","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101977008","display_name":"Xinyun Chen","orcid":"https://orcid.org/0009-0001-9700-8951","observed_orcids":["https://orcid.org/0009-0001-9700-8951"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen, Xinyun","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100353208","display_name":"Chang Liu","orcid":"https://orcid.org/0000-0003-1004-590X","observed_orcids":["https://orcid.org/0000-0003-1004-590X"]},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liu, Chang","raw_affiliation_strings":["University of the California , Berkeley"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of the California , Berkeley","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019426968","display_name":"Dawn Xiaodong Song","orcid":"https://orcid.org/0000-0001-9745-6802","observed_orcids":["https://orcid.org/0000-0001-9745-6802"]},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Song, Dawn","raw_affiliation_strings":["University of the California , Berkeley"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of the California , Berkeley","institution_ids":["https://openalex.org/I95457486"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1643,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.906000018119812},{"id":"https://openalex.org/keywords/transferability","display_name":"transferability","score":0.7099999785423279},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.843999981880188},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.5619999766349792}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8748900890350342},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.629547119140625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44134825468063354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.39517340064048767},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.3371984362602234},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.22428449988365173}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:arXiv.org:1611.02770","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1611.02770","pdf_url":"https://arxiv.org/pdf/1611.02770","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2950864148","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1611.02770","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1611.02770","doi":"https://doi.org/10.48550/arxiv.1611.02770","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1611.02770","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1611.02770","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1611.02770","pdf_url":"https://arxiv.org/pdf/1611.02770","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5510470933","display_name":"TWC: Medium: Collaborative: Aspire: Leveraging Automated Synthesis Technologies for Enhancing System Security","funder_award_id":"1409915","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2570685808.pdf","grobid_xml":"https://content.openalex.org/works/W2570685808.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1945616565","https://openalex.org/W2067713319","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2194775991","https://openalex.org/W2408141691","https://openalex.org/W2516574342","https://openalex.org/W2949650786","https://openalex.org/W2950179405","https://openalex.org/W2951807304","https://openalex.org/W2953047670","https://openalex.org/W2963207607","https://openalex.org/W2964121744","https://openalex.org/W3118608800"],"related_works":["https://openalex.org/W4386076145","https://openalex.org/W3183199078","https://openalex.org/W4361020071","https://openalex.org/W4297813224","https://openalex.org/W4313348906","https://openalex.org/W4392412547","https://openalex.org/W4285612995","https://openalex.org/W4400243878","https://openalex.org/W3156525504","https://openalex.org/W4404391434"],"abstract_inverted_index":{"An":[0],"intriguing":[1],"property":[2],"of":[3,10,52,73,134],"deep":[4,26],"neural":[5,27],"networks":[6],"is":[7,180],"the":[8,34,45,53,67,71,148,160,168],"existence":[9],"adversarial":[11,21,75,87,95,102,124,136,162,169],"examples,":[12,88],"which":[13,179],"can":[14,175],"transfer":[15,110,142],"among":[16],"different":[17],"architectures.":[18],"These":[19],"transferable":[20,93,123,161],"examples":[22,76,96,103,137,170],"may":[23],"severely":[24],"hinder":[25],"network-based":[28],"applications.":[29],"Previous":[30],"works":[31],"mostly":[32],"study":[33,51,70,82],"transferability":[35,54,72],"using":[36,105,172],"small":[37],"scale":[38,61],"datasets.":[39],"In":[40],"this":[41],"work,":[42],"we":[43,64,116,129,165],"are":[44,65,97,139],"first":[46,68,149],"to":[47,69,99,121,141,157],"conduct":[48],"an":[49],"extensive":[50],"over":[55],"large":[56,60,132],"models":[57],"and":[58,63,85,89],"a":[59,131,181],"dataset,":[62],"also":[66,152],"targeted":[74,86,101,135],"with":[77,111,143],"their":[78,112,144],"target":[79,113,145],"labels.":[80,114],"We":[81,151],"both":[83],"non-targeted":[84,94],"show":[90,166],"that":[91,138,167],"while":[92],"easy":[98],"find,":[100],"generated":[104,171],"existing":[106],"approaches":[107,120,174],"almost":[108],"never":[109],"Therefore,":[115],"propose":[117],"novel":[118],"ensemble-based":[119,173],"generating":[122],"examples.":[125,163],"Using":[126],"such":[127],"approaches,":[128],"observe":[130],"proportion":[133],"able":[140],"labels":[146],"for":[147],"time.":[150],"present":[153],"some":[154],"geometric":[155],"studies":[156],"help":[158],"understanding":[159],"Finally,":[164],"successfully":[176],"attack":[177],"Clarifai.com,":[178],"black-box":[182],"image":[183],"classification":[184],"system.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":66},{"year":2025,"cited_by_count":124},{"year":2024,"cited_by_count":181},{"year":2023,"cited_by_count":202},{"year":2022,"cited_by_count":195},{"year":2021,"cited_by_count":235},{"year":2020,"cited_by_count":248},{"year":2019,"cited_by_count":218},{"year":2018,"cited_by_count":130},{"year":2017,"cited_by_count":43},{"year":2016,"cited_by_count":1}],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2017-01-13T00:00:00"}