{"id":"https://openalex.org/W2995387004","doi":null,"title":"BayesOpt Adversarial Attack","display_name":"BayesOpt Adversarial Attack","publication_year":2020,"publication_date":"2020-04-30","ids":{"openalex":"https://openalex.org/W2995387004","mag":"2995387004"},"language":"en","primary_location":{"id":"mag:2995387004","doi":null,"is_oa":false,"landing_page_url":"https://www.openreview.net/pdf?id=Hkem-lrtvH","pdf_url":null,"source":{"id":"https://openalex.org/S4306419637","display_name":"International Conference on Learning Representations","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Learning Representations","raw_type":null},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033650444","display_name":"Binxin Ru","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Binxin Ru","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030699148","display_name":"Adam D. Cobb","orcid":"https://orcid.org/0000-0003-2868-6983","observed_orcids":["https://orcid.org/0000-0003-2868-6983","https://orcid.org/0000-0002-6638-1788"]},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Adam D. Cobb","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-2868-6983","affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086300347","display_name":"Arno Blaas","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Arno Blaas","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029186201","display_name":"Yarin Gal","orcid":"https://orcid.org/0000-0002-2733-2078","observed_orcids":["https://orcid.org/0000-0002-2733-2078"]},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yarin Gal","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-2733-2078","affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I40120149"],"apc_list":null,"apc_paid":null,"fwci":3.6791,"has_fulltext":false,"cited_by_count":55,"citation_normalized_percentile":{"value":0.94663713,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/black-box-adversarial-attacks","display_name":"black-box adversarial attacks","score":0.9599999785423279},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.8450000286102295},{"id":"https://openalex.org/keywords/bayesian-optimization","display_name":"Bayesian optimization","score":0.8510000109672546},{"id":"https://openalex.org/keywords/bayesian-model-selection","display_name":"Bayesian model selection","score":0.8349999785423279},{"id":"https://openalex.org/keywords/query-efficiency","display_name":"query efficiency","score":0.9200000166893005},{"id":"https://openalex.org/keywords/dimensionality-reduction","display_name":"dimensionality reduction","score":0.8479999899864197},{"id":"https://openalex.org/keywords/deep-neural-network-security","display_name":"deep neural network security","score":0.4620000123977661}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8596396446228027},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7113124132156372},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.6106774806976318},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6086365580558777},{"id":"https://openalex.org/C2778049539","wikidata":"https://www.wikidata.org/wiki/Q17002908","display_name":"Bayesian optimization","level":2,"score":0.5798672437667847},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.5232366919517517},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.4883546531200409},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4321361780166626},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39696890115737915},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3767247796058655},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.360679030418396},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1630716621875763},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2995387004","doi":null,"is_oa":false,"landing_page_url":"https://www.openreview.net/pdf?id=Hkem-lrtvH","pdf_url":null,"source":{"id":"https://openalex.org/S4306419637","display_name":"International Conference on Learning Representations","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Learning Representations","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1484867920","https://openalex.org/W1502922572","https://openalex.org/W1746819321","https://openalex.org/W1883420340","https://openalex.org/W2099201756","https://openalex.org/W2130283669","https://openalex.org/W2243397390","https://openalex.org/W2342840547","https://openalex.org/W2460937040","https://openalex.org/W2486441166","https://openalex.org/W2516574342","https://openalex.org/W2575448570","https://openalex.org/W2586702902","https://openalex.org/W2603766943","https://openalex.org/W2746600820","https://openalex.org/W2765384636","https://openalex.org/W2773022113","https://openalex.org/W2776936219","https://openalex.org/W2787708942","https://openalex.org/W2798801120","https://openalex.org/W2887603965","https://openalex.org/W2946814535","https://openalex.org/W2962711307","https://openalex.org/W2963207607","https://openalex.org/W2963612069","https://openalex.org/W2963659022","https://openalex.org/W2964153729","https://openalex.org/W2964205597","https://openalex.org/W2981892732","https://openalex.org/W3140968660"],"related_works":["https://openalex.org/W2977187670","https://openalex.org/W4367397356","https://openalex.org/W4399198532","https://openalex.org/W3042656994","https://openalex.org/W4306179735","https://openalex.org/W3170514715","https://openalex.org/W4283219580","https://openalex.org/W3163860748","https://openalex.org/W4410076425","https://openalex.org/W3035172095"],"abstract_inverted_index":{"Black-box":[0],"adversarial":[1,12,79],"attacks":[2],"require":[3,35],"a":[4,61],"large":[5],"number":[6,38,53],"of":[7,39,85],"attempts":[8],"before":[9],"finding":[10],"successful":[11],"examples":[13],"that":[14,93],"are":[15,43],"visually":[16],"indistinguishable":[17],"from":[18],"the":[19,50,78,82],"original":[20],"input.":[21],"Current":[22],"approaches":[23],"relying":[24],"on":[25],"substitute":[26],"model":[27,73],"training,":[28],"gradient":[29],"estimation":[30],"or":[31],"genetic":[32],"algorithms":[33],"often":[34],"an":[36],"excessive":[37],"queries.":[40],"Therefore,":[41],"they":[42],"not":[44],"suitable":[45],"for":[46],"real-world":[47],"systems":[48],"where":[49],"maximum":[51],"query":[52],"is":[54],"limited":[55],"due":[56],"to":[57,75,107],"cost.":[58],"We":[59,90],"propose":[60],"query-efficient":[62],"black-box":[63,110],"attack":[64],"which":[65],"uses":[66],"Bayesian":[67,72],"optimisation":[68],"in":[69],"combination":[70],"with":[71,101],"selection":[74],"optimise":[76],"over":[77],"perturbation":[80],"and":[81],"optimal":[83],"degree":[84],"search":[86],"space":[87],"dimension":[88],"reduction.":[89],"demonstrate":[91],"empirically":[92],"our":[94],"method":[95],"can":[96],"achieve":[97],"comparable":[98],"success":[99],"rates":[100],"2-5":[102],"times":[103],"fewer":[104],"queries":[105],"compared":[106],"previous":[108],"state-of-the-art":[109],"attacks.":[111]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":16},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2019-12-26T00:00:00"}