{"id":"https://openalex.org/W4386066565","doi":"https://doi.org/10.1109/cvpr52729.2023.01965","title":"T-SEA: Transfer-Based Self-Ensemble Attack on Object Detection","display_name":"T-SEA: Transfer-Based Self-Ensemble Attack on Object Detection","publication_year":2023,"publication_date":"2023-06-01","ids":{"openalex":"https://openalex.org/W4386066565","doi":"https://doi.org/10.1109/cvpr52729.2023.01965"},"language":"en","primary_location":{"id":"doi:10.1109/cvpr52729.2023.01965","doi":"https://doi.org/10.1109/cvpr52729.2023.01965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cvpr52729.2023.01965","pdf_url":null,"source":{"id":"https://openalex.org/S4210176548","display_name":"IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings","issn_l":"1063-6919","issn":["1063-6919","2332-564X","2575-7075"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2211.09773","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100732402","display_name":"Hao Huang","orcid":"https://orcid.org/0000-0003-3998-9074","observed_orcids":["https://orcid.org/0000-0003-3998-9074"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Huang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101820620","display_name":"Ziyan Chen","orcid":"https://orcid.org/0000-0002-3304-1322","observed_orcids":["https://orcid.org/0000-0002-3304-1322","https://orcid.org/0009-0009-1534-2904","https://orcid.org/0000-0001-6277-5635"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyan Chen","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074300516","display_name":"Huanran Chen","orcid":"https://orcid.org/0000-0003-0847-9485","observed_orcids":["https://orcid.org/0000-0003-0847-9485"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huanran Chen","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100781631","display_name":"Yongtao Wang","orcid":"https://orcid.org/0000-0003-1379-2206","observed_orcids":["https://orcid.org/0000-0003-1379-2206"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongtao Wang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100629181","display_name":"Kevin Zhang","orcid":"https://orcid.org/0000-0002-8798-2443","observed_orcids":["https://orcid.org/0000-0002-8798-2443","https://orcid.org/0000-0002-3503-7431"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kevin Zhang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":9.4072,"has_fulltext":true,"cited_by_count":83,"citation_normalized_percentile":{"value":0.98680969,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"20514","last_page":"20523"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.6669999957084656},{"id":"https://openalex.org/keywords/object-detection","display_name":"object detection","score":0.9750000238418579},{"id":"https://openalex.org/keywords/self-ensemble","display_name":"self-ensemble","score":0.8870000243186951},{"id":"https://openalex.org/keywords/attack-transferability","display_name":"attack transferability","score":0.7670000195503235},{"id":"https://openalex.org/keywords/white-box-attacks","display_name":"white-box attacks","score":0.578000009059906},{"id":"https://openalex.org/keywords/preimplantation-genetic-diagnosis","display_name":"preimplantation genetic diagnosis","score":0.6610000133514404},{"id":"https://openalex.org/keywords/mim","display_name":"MIM","score":0.7009999752044678}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8589490652084351},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.642920196056366},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.5382897853851318},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.5183387994766235},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.42632395029067993},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4215109050273895},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4139763414859772},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37479764223098755},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3619686961174011},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1767246127128601},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/cvpr52729.2023.01965","doi":"https://doi.org/10.1109/cvpr52729.2023.01965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cvpr52729.2023.01965","pdf_url":null,"source":{"id":"https://openalex.org/S4210176548","display_name":"IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings","issn_l":"1063-6919","issn":["1063-6919","2332-564X","2575-7075"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2211.09773","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2211.09773","pdf_url":"https://arxiv.org/pdf/2211.09773","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2211.09773","doi":"https://doi.org/10.48550/arxiv.2211.09773","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2211.09773","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2211.09773","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2211.09773","pdf_url":"https://arxiv.org/pdf/2211.09773","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G3015833353","display_name":null,"funder_award_id":"2022ZD0160305","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4386066565.pdf","grobid_xml":"https://content.openalex.org/works/W4386066565.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W2095705004","https://openalex.org/W2161969291","https://openalex.org/W2331143823","https://openalex.org/W2570343428","https://openalex.org/W2603766943","https://openalex.org/W2604505099","https://openalex.org/W2640329709","https://openalex.org/W2746314669","https://openalex.org/W2765407302","https://openalex.org/W2773022113","https://openalex.org/W2774644650","https://openalex.org/W2787189300","https://openalex.org/W2787348029","https://openalex.org/W2796347433","https://openalex.org/W2889835374","https://openalex.org/W2890883923","https://openalex.org/W2922073769","https://openalex.org/W2938470389","https://openalex.org/W2965198951","https://openalex.org/W2976752987","https://openalex.org/W2998508940","https://openalex.org/W3018757597","https://openalex.org/W3030520226","https://openalex.org/W3034214559","https://openalex.org/W3093070413","https://openalex.org/W3093958125","https://openalex.org/W3094984771","https://openalex.org/W3095448863","https://openalex.org/W3106250896","https://openalex.org/W3138516171","https://openalex.org/W3159649695","https://openalex.org/W3168542916","https://openalex.org/W3204155906","https://openalex.org/W4221166007","https://openalex.org/W4224918372","https://openalex.org/W4230674625","https://openalex.org/W4249716558","https://openalex.org/W4312610155","https://openalex.org/W6750227808","https://openalex.org/W6777046832"],"related_works":["https://openalex.org/W7213586767","https://openalex.org/W7117537093","https://openalex.org/W4390271984","https://openalex.org/W6977518110","https://openalex.org/W7138937250","https://openalex.org/W4393158506","https://openalex.org/W4413145567","https://openalex.org/W4281252087","https://openalex.org/W3094984771","https://openalex.org/W3049416749"],"abstract_inverted_index":{"Compared":[0],"to":[1,31,42,76,138,173],"query-based":[2],"black-box":[3,6,67,84,177],"attacks,":[4],"transferbased":[5],"attacks":[7],"do":[8],"not":[9,41],"require":[10],"any":[11],"information":[12,145],"of":[13,46,96,124,142,179],"the":[14,33,44,51,64,92,97,128,131,135,143,148,157,176,180],"attacked":[15,132],"models,":[16],"which":[17,36],"ensures":[18],"their":[19],"secrecy.":[20],"However,":[21],"most":[22],"existing":[23,98],"transfer-based":[24,66],"approaches":[25,126],"rely":[26],"on":[27,50,63,69,82,91,127,183],"ensembling":[28],"multiple":[29,83,164,184],"models":[30,49],"boost":[32],"attack":[34,68,81,104,167],"transferability,":[35],"is":[37,193],"time-":[38],"and":[39,100,134,146,171],"resource-intensive,":[40],"mention":[43],"difficulty":[45],"obtaining":[47],"diverse":[48],"same":[52],"task.":[53],"To":[54],"address":[55],"this":[56,59],"limitation,":[57],"in":[58],"work,":[60],"we":[61,87,113],"focus":[62],"single-model":[65],"object":[70],"detection,":[71],"utilizing":[72],"only":[73],"one":[74],"model":[75,119],"achieve":[77],"a":[78,122],"high-transferability":[79],"adversarial":[80,136],"detectors.":[85],"Specifically,":[86],"first":[88],"make":[89,140],"observations":[90],"patch":[93,115,137,149,182],"optimization":[94,116],"process":[95],"method":[99],"propose":[101],"an":[102],"enhanced":[103],"framework":[105,159],"by":[106],"slightly":[107],"adjusting":[108],"its":[109],"training":[110],"strategies.":[111],"Then,":[112],"analogize":[114],"with":[117,163],"regular":[118],"optimization,":[120],"proposing":[121],"series":[123],"self-ensemble":[125],"input":[129],"data,":[130],"model,":[133],"efficiently":[139],"use":[141],"limited":[144],"prevent":[147],"from":[150],"overfitting.":[151],"The":[152],"experimental":[153],"results":[154],"show":[155],"that":[156],"proposed":[158],"can":[160],"be":[161],"applied":[162],"classical":[165],"base":[166],"methods":[168],"(e.g.,":[169],"PGD":[170],"MIM)":[172],"greatly":[174],"improve":[175],"transferability":[178],"well-optimized":[181],"mainstream":[185],"detectors,":[186],"meanwhile":[187],"boosting":[188],"white-box":[189],"performance.":[190],"Our":[191],"code":[192],"available":[194],"at":[195],"https://github.com/VDIGPKU/TSEA.":[196]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":36},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2023-08-23T00:00:00"}