{"id":"https://openalex.org/W7169587261","doi":"https://doi.org/10.1016/j.eswa.2026.133694","title":"Adversarial patch attacks on vision transformers using transferable gray-box with self-attention","display_name":"Adversarial patch attacks on vision transformers using transferable gray-box with self-attention","publication_year":2026,"publication_date":"2026-07-17","ids":{"openalex":"https://openalex.org/W7169587261","doi":"https://doi.org/10.1016/j.eswa.2026.133694"},"language":"en","primary_location":{"id":"doi:10.1016/j.eswa.2026.133694","doi":"https://doi.org/10.1016/j.eswa.2026.133694","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133694","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-c","doyens","fnege-3","jufo-2","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.eswa.2026.133694","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018278358","display_name":"Huong-Giang Doan","orcid":"https://orcid.org/0000-0003-3428-0939","observed_orcids":["https://orcid.org/0000-0003-3428-0939"]},"institutions":[{"id":"https://openalex.org/I121799043","display_name":"Electric Power University","ror":"https://ror.org/01p4b7n26","country_code":"VN","type":"education","lineage":["https://openalex.org/I121799043"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Huong-Giang Doan","raw_affiliation_strings":["Faculty of Control and Automation, Electric Power University, No. 235 Hoang Quoc Viet, Ha Noi, Vietnam"],"raw_orcid":"https://orcid.org/0000-0003-3428-0939","affiliations":[{"raw_affiliation_string":"Faculty of Control and Automation, Electric Power University, No. 235 Hoang Quoc Viet, Ha Noi, Vietnam","institution_ids":["https://openalex.org/I121799043"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141095818","display_name":"Bao-Chau Ho","orcid":"https://orcid.org/0009-0009-7534-7328","observed_orcids":["https://orcid.org/0009-0009-7534-7328"]},"institutions":[{"id":"https://openalex.org/I4405277486","display_name":"Tr\u01b0\u1eddng \u0110\u1ea1i h\u1ecdc Khoa h\u1ecdc v\u00e0 C\u00f4ng ngh\u1ec7 H\u00e0 N\u1ed9i","ror":"https://ror.org/02wdwrr89","country_code":"VN","type":"education","lineage":["https://openalex.org/I4405277486"]},{"id":"https://openalex.org/I94518387","display_name":"Hanoi University of Science and Technology","ror":"https://ror.org/04nyv3z04","country_code":"VN","type":"education","lineage":["https://openalex.org/I94518387"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Bao-Chau Ho","raw_affiliation_strings":["School of Information and Communication Technology, Hanoi University of Science and Technology, No. 1, Dai Co Viet, Hai Ba Trung, Ha Noi, Vietnam"],"raw_orcid":"https://orcid.org/0009-0009-7534-7328","affiliations":[{"raw_affiliation_string":"School of Information and Communication Technology, Hanoi University of Science and Technology, No. 1, Dai Co Viet, Hai Ba Trung, Ha Noi, Vietnam","institution_ids":["https://openalex.org/I4405277486","https://openalex.org/I94518387"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102965628","display_name":"Thi Thanh Thuy Pham","orcid":"https://orcid.org/0000-0003-3985-3599","observed_orcids":["https://orcid.org/0000-0003-3985-3599"]},"institutions":[{"id":"https://openalex.org/I4405277163","display_name":"H\u1ecdc vi\u1ec7n An ninh nh\u00e2n d\u00e2n","ror":"https://ror.org/01ptcf347","country_code":"VN","type":"education","lineage":["https://openalex.org/I4405277163"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Thi Thanh Thuy Pham","raw_affiliation_strings":["Faculty of Cyber Security and High-Tech Crime Prevention, Academy of People Security, No. 125, Tran Phu, Ha Dong, Ha Noi, Vietnam"],"raw_orcid":"https://orcid.org/0000-0003-3985-3599","affiliations":[{"raw_affiliation_string":"Faculty of Cyber Security and High-Tech Crime Prevention, Academy of People Security, No. 125, Tran Phu, Ha Dong, Ha Noi, Vietnam","institution_ids":["https://openalex.org/I4405277163"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049045320","display_name":"Ngoc-Trung Nguyen","orcid":"https://orcid.org/0000-0002-6389-6567","observed_orcids":["https://orcid.org/0000-0002-6389-6567"]},"institutions":[{"id":"https://openalex.org/I157358134","display_name":"RMIT Vietnam","ror":"https://ror.org/004axh929","country_code":"VN","type":"education","lineage":["https://openalex.org/I157358134","https://openalex.org/I82951845"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Ngoc-Trung Nguyen","raw_affiliation_strings":["School of Science, Engineering and Tech, RMIT Vietnam, No. 702 Nguyen Van Linh, Tan Hung Ward, Ho Chi Minh, Viet Nam"],"raw_orcid":"https://orcid.org/0000-0002-6389-6567","affiliations":[{"raw_affiliation_string":"School of Science, Engineering and Tech, RMIT Vietnam, No. 702 Nguyen Van Linh, Tan Hung Ward, Ho Chi Minh, Viet Nam","institution_ids":["https://openalex.org/I157358134"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058684461","display_name":"Nguy\u1ec5n Th\u1ecb Thanh Th\u1ee7y","orcid":"https://orcid.org/0000-0002-9358-6201","observed_orcids":["https://orcid.org/0000-0002-9358-6201","https://orcid.org/0000-0002-0243-0835"]},"institutions":[{"id":"https://openalex.org/I157358134","display_name":"RMIT Vietnam","ror":"https://ror.org/004axh929","country_code":"VN","type":"education","lineage":["https://openalex.org/I157358134","https://openalex.org/I82951845"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thuy Nguyen","raw_affiliation_strings":["School of Science, Engineering and Tech, RMIT Vietnam, No. 702 Nguyen Van Linh, Tan Hung Ward, Ho Chi Minh, Viet Nam"],"raw_orcid":"https://orcid.org/0000-0002-9358-6201","affiliations":[{"raw_affiliation_string":"School of Science, Engineering and Tech, RMIT Vietnam, No. 702 Nguyen Van Linh, Tan Hung Ward, Ho Chi Minh, Viet Nam","institution_ids":["https://openalex.org/I157358134"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5049045320","https://openalex.org/A5102965628"],"corresponding_institution_ids":["https://openalex.org/I157358134","https://openalex.org/I4405277163"],"apc_list":{"value":3500,"currency":"USD","value_usd":3500},"apc_paid":{"value":3500,"currency":"USD","value_usd":3500},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"332","issue":null,"first_page":"133694","last_page":"133694"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-patch-attacks","display_name":"adversarial patch attacks","score":0.8669999837875366},{"id":"https://openalex.org/keywords/vision-transformer","display_name":"vision transformer","score":0.9929999709129333},{"id":"https://openalex.org/keywords/gray-box-attacks","display_name":"gray-box attacks","score":0.7480000257492065},{"id":"https://openalex.org/keywords/self-attention","display_name":"self-attention","score":0.8619999885559082},{"id":"https://openalex.org/keywords/attack-transferability","display_name":"attack transferability","score":0.8199999928474426},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.5929999947547913},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.8370000123977661}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7714999914169312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7581999897956848},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.5575000047683716},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5454999804496765},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43549999594688416},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2578999996185303},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.24330000579357147},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.2363000065088272},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.22910000383853912}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.eswa.2026.133694","doi":"https://doi.org/10.1016/j.eswa.2026.133694","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133694","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-c","doyens","fnege-3","jufo-2","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.eswa.2026.133694","doi":"https://doi.org/10.1016/j.eswa.2026.133694","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133694","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-c","doyens","fnege-3","jufo-2","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2640329709","https://openalex.org/W2810080315","https://openalex.org/W3198216469","https://openalex.org/W4221114735","https://openalex.org/W4221158218","https://openalex.org/W4383710235","https://openalex.org/W4387817744","https://openalex.org/W4389262616","https://openalex.org/W4393238214","https://openalex.org/W4395109493","https://openalex.org/W4399708230","https://openalex.org/W4402771900","https://openalex.org/W4408210240","https://openalex.org/W4409336141","https://openalex.org/W4411007182","https://openalex.org/W4411090978","https://openalex.org/W4411408494","https://openalex.org/W4411547929","https://openalex.org/W4413037484","https://openalex.org/W4413046900","https://openalex.org/W4414586772","https://openalex.org/W4414781662","https://openalex.org/W4415444028","https://openalex.org/W4415619127","https://openalex.org/W4415798822","https://openalex.org/W4417184280","https://openalex.org/W7123339004"],"related_works":["https://openalex.org/W3196621661","https://openalex.org/W4225102331","https://openalex.org/W4304092585","https://openalex.org/W7134958605","https://openalex.org/W4221158218","https://openalex.org/W3217804443","https://openalex.org/W4388692087","https://openalex.org/W4413037484","https://openalex.org/W4415219852","https://openalex.org/W4385876933"],"abstract_inverted_index":{"Vision":[0,95,204],"Transformers":[1],"(ViTs)":[2],"and":[3,122,150,198],"their":[4,47],"variants":[5],"have":[6],"been":[7],"increasingly":[8],"adopted":[9],"in":[10,22,94],"intelligent":[11],"systems.":[12,206],"However,":[13],"the":[14,140,161,200],"security":[15],"implications":[16],"of":[17,203],"partially":[18],"exposing":[19],"self-attention":[20],"information":[21,71],"ViTs":[23,31],"remain":[24],"largely":[25],"underexplored.":[26],"Existing":[27],"adversarial":[28,133,201],"attacks":[29,134],"on":[30,34,98,147],"typically":[32],"rely":[33],"white-box":[35],"assumptions":[36],"with":[37,43],"unrealistic":[38],"access":[39,138],"or":[40,77],"black-box":[41,158],"settings":[42,116],"limited":[44,69],"effectiveness,":[45],"limiting":[46],"relevance":[48],"to":[49,125,139],"restricted":[50,114],"deployment":[51,66],"conditions.":[52],"In":[53],"this":[54,99],"paper,":[55],"we":[56,101],"investigate":[57],"a":[58,90],"plausible":[59],"gray-box":[60,115],"threat":[61],"model":[62,142],"motivated":[63],"by":[64],"interpretability-oriented":[65],"scenarios,":[67],"where":[68],"attention-related":[70],"may":[72,88,190],"be":[73],"observable":[74],"through":[75],"interpretability":[76],"analysis":[78,81],"interfaces.":[79],"Our":[80],"suggests":[82],"that":[83,117,153,172,185],"such":[84],"partial":[85],"attention":[86],"exposure":[87],"introduce":[89],"previously":[91],"underexplored":[92],"vulnerability":[93],"Transformers.":[96],"Based":[97],"observation,":[100],"propose":[102],"Targeted":[103],"Patch":[104],"Perturbation":[105],"(TPP),":[106],"an":[107],"attention-guided":[108,173],"patch":[109,174],"perturbation":[110,163,188],"framework":[111],"tailored":[112],"for":[113],"localizes":[118],"semantically":[119,186],"important":[120],"patches":[121],"restricts":[123],"perturbations":[124],"these":[126],"regions.":[127],"The":[128,207],"proposed":[129],"method":[130],"enables":[131],"effective":[132],"without":[135],"requiring":[136],"gradient":[137],"target":[141],"during":[143],"attack":[144,179],"execution.":[145],"Experiments":[146],"CIFAR-10,":[148],"CIFAR-100,":[149],"ImageNet":[151],"demonstrate":[152],"TPP":[154],"consistently":[155],"outperforms":[156],"strong":[157],"baselines":[159],"under":[160,181],"same":[162],"budget.":[164],"Further":[165],"evaluations":[166],"across":[167,195],"multiple":[168],"ViT":[169],"architectures":[170],"reveal":[171],"selection":[175],"can":[176],"substantially":[177],"improve":[178],"transferability":[180],"restricted-information":[182],"settings,":[183],"suggesting":[184],"aligned":[187],"localization":[189],"affect":[191],"shared":[192],"semantic":[193],"representations":[194],"transformer":[196],"models":[197],"influence":[199],"robustness":[202],"Transformer":[205],"source":[208],"code":[209],"is":[210],"available":[211],"at:":[212],"https://github.com/BaoChau-Ho/TGP_adv":[213]},"counts_by_year":[],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-07-18T00:00:00"}