{"id":"https://openalex.org/W4415330347","doi":"https://doi.org/10.48550/arxiv.2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","display_name":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","publication_year":2025,"publication_date":"2025-06-23","ids":{"openalex":"https://openalex.org/W4415330347","doi":"https://doi.org/10.48550/arxiv.2506.18248"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2506.18248","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.18248","pdf_url":"https://arxiv.org/pdf/2506.18248","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2506.18248","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042174336","display_name":"Jongoh Jeong","orcid":"https://orcid.org/0000-0002-5354-2693","observed_orcids":["https://orcid.org/0000-0002-5354-2693"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jeong, Jongoh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024102285","display_name":"Hunmin Yang","orcid":"https://orcid.org/0009-0007-1625-2957","observed_orcids":["https://orcid.org/0009-0007-1625-2957"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Hunmin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Jeong, Jaeseok","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jeong, Jaeseok","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5113931494","display_name":"Kuk\u2010Jin Yoon","orcid":"https://orcid.org/0000-0002-1634-2756","observed_orcids":["https://orcid.org/0000-0002-1634-2756"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yoon, Kuk-Jin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/generative-adversarial-attacks","display_name":"generative adversarial attacks","score":0.9049999713897705},{"id":"https://openalex.org/keywords/semantic-consistency","display_name":"semantic consistency","score":0.9240000247955322},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.5770000219345093},{"id":"https://openalex.org/keywords/semantic-drift","display_name":"semantic drift","score":0.6290000081062317},{"id":"https://openalex.org/keywords/image-classification-robustness","display_name":"image classification robustness","score":0.492000013589859}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8079000115394592},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.6384000182151794},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.6107000112533569},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.6072999835014343},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5965999960899353},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47929999232292175},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.45739999413490295},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.4528999924659729},{"id":"https://openalex.org/C2781122975","wikidata":"https://www.wikidata.org/wiki/Q16928266","display_name":"Semantic feature","level":2,"score":0.4494999945163727},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3483000099658966},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.3427000045776367},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.29260000586509705},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.28790000081062317},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C63000827","wikidata":"https://www.wikidata.org/wiki/Q3080428","display_name":"Software portability","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.25690001249313354}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2506.18248","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.18248","pdf_url":"https://arxiv.org/pdf/2506.18248","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2506.18248","doi":"https://doi.org/10.48550/arxiv.2506.18248","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2506.18248","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2506.18248","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.18248","pdf_url":"https://arxiv.org/pdf/2506.18248","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Transfer":[0],"attacks":[1,15,38,56,191],"optimize":[2],"on":[3],"a":[4,9,46],"surrogate":[5,61],"and":[6,27,66,102,128,134,174,180],"deploy":[7],"to":[8,30,59,95,153],"black-box":[10,104,196],"target.":[11],"While":[12],"iterative":[13],"optimization":[14],"in":[16,45,165,195],"this":[17],"paradigm":[18],"are":[19],"limited":[20],"by":[21,41,88],"their":[22],"per-input":[23],"cost":[24],"limits":[25],"efficiency":[26],"scalability":[28],"due":[29],"multistep":[31],"gradient":[32],"updates":[33],"for":[34],"each":[35],"input,":[36],"generative":[37,55,190],"alleviate":[39],"these":[40],"producing":[42],"adversarial":[43],"examples":[44],"single":[47],"forward":[48],"pass":[49],"at":[50],"test":[51],"time.":[52],"However,":[53],"current":[54],"still":[57],"adhere":[58],"optimizing":[60],"losses":[62],"(e.g.,":[63],"feature":[64],"divergence)":[65],"overlook":[67],"the":[68,74,90,111,118,161],"generator's":[69,75,92],"internal":[70,76],"dynamics,":[71],"underexploring":[72],"how":[73],"representations":[77,101],"shape":[78],"transferable":[79],"perturbations.":[80],"To":[81,109],"address":[82],"this,":[83],"we":[84,113,146],"enforce":[85],"semantic":[86,115,137],"consistency":[87],"aligning":[89],"early":[91],"intermediate":[93],"features":[94],"an":[96],"EMA":[97],"teacher,":[98],"stabilizing":[99],"object-aligned":[100],"improving":[103],"transfer":[105],"without":[106],"inference-time":[107],"overhead.":[108],"ground":[110],"mechanism,":[112],"quantify":[114],"stability":[116],"as":[117],"standard":[119],"deviation":[120],"of":[121],"foreground":[122,129],"IoU":[123],"between":[124],"cluster-derived":[125],"activation":[126],"masks":[127,130],"across":[131],"generator":[132],"blocks,":[133],"observe":[135],"reduced":[136],"drift":[138],"under":[139],"our":[140,182],"method.":[141],"For":[142],"more":[143],"reliable":[144],"evaluation,":[145],"also":[147],"introduce":[148],"Accidental":[149],"Correction":[150],"Rate":[151,169,172],"(ACR)":[152],"separate":[154],"inadvertent":[155],"corrections":[156],"from":[157],"intended":[158],"misclassifications,":[159],"complementing":[160],"inherent":[162],"blind":[163],"spots":[164],"traditional":[166],"Attack":[167],"Success":[168],"(ASR),":[170],"Fooling":[171],"(FR),":[173],"Accuracy":[175],"metrics.":[176],"Across":[177],"architectures,":[178],"domains,":[179],"tasks,":[181],"approach":[183],"can":[184],"be":[185],"seamlessly":[186],"integrated":[187],"into":[188],"existing":[189],"with":[192],"consistent":[193],"improvements":[194],"transfer,":[197],"while":[198],"maintaining":[199],"test-time":[200],"efficiency.":[201]},"counts_by_year":[],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2025-10-19T00:00:00"}