{"id":"https://openalex.org/W2980361376","doi":"https://doi.org/10.1109/access.2019.2948146","title":"Attacking Black-Box Image Classifiers With Particle Swarm Optimization","display_name":"Attacking Black-Box Image Classifiers With Particle Swarm Optimization","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2980361376","doi":"https://doi.org/10.1109/access.2019.2948146","mag":"2980361376"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2948146","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948146","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08876844.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08876844.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017675981","display_name":"Quanxin Zhang","orcid":"https://orcid.org/0000-0002-5094-7388"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanxin Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076502082","display_name":"Kunqing Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kunqing Wang","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006956421","display_name":"Wenjiao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I2802615301","display_name":"China Aerospace Science and Technology Corporation","ror":"https://ror.org/01z8tr155","country_code":"CN","type":"government","lineage":["https://openalex.org/I2802615301"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjiao Zhang","raw_affiliation_strings":["Aerospace Times Feihong Technology Company, Ltd., Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aerospace Times Feihong Technology Company, Ltd., Beijing, China","institution_ids":["https://openalex.org/I2802615301"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103168713","display_name":"Jingjing Hu","orcid":"https://orcid.org/0000-0002-3220-621X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingjing Hu","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3220-621X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.6943,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.88478795,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"7","issue":null,"first_page":"158051","last_page":"158063"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9830999970436096,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7713189125061035},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7385072112083435},{"id":"https://openalex.org/keywords/particle-swarm-optimization","display_name":"Particle swarm optimization","score":0.6492196917533875},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6339811682701111},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6179274320602417},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.529807448387146},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5058850646018982},{"id":"https://openalex.org/keywords/swarm-behaviour","display_name":"Swarm behaviour","score":0.45789745450019836},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4455392062664032},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4444265365600586},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4282689094543457},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.4262532591819763},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4033384919166565},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3941757082939148},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.37128645181655884},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.33549731969833374}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7713189125061035},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7385072112083435},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.6492196917533875},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6339811682701111},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6179274320602417},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.529807448387146},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5058850646018982},{"id":"https://openalex.org/C181335050","wikidata":"https://www.wikidata.org/wiki/Q14915018","display_name":"Swarm behaviour","level":2,"score":0.45789745450019836},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4455392062664032},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4444265365600586},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4282689094543457},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.4262532591819763},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4033384919166565},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3941757082939148},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.37128645181655884},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33549731969833374},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2948146","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948146","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08876844.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:4b61f73d1893463e821d8cfb2ad2e0f8","is_oa":true,"landing_page_url":"https://doaj.org/article/4b61f73d1893463e821d8cfb2ad2e0f8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 158051-158063 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2948146","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948146","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08876844.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5004432382","display_name":"\u9ad8\u53ef\u4fe1Web\u670d\u52a1\u7ec4\u5408\u65b9\u6cd5\u7814\u7a76","funder_award_id":"61772070","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7580715247","display_name":null,"funder_award_id":"61876019","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2980361376.pdf","grobid_xml":"https://content.openalex.org/works/W2980361376.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2009259779","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2117539524","https://openalex.org/W2145287260","https://openalex.org/W2152195021","https://openalex.org/W2160815625","https://openalex.org/W2163605009","https://openalex.org/W2180612164","https://openalex.org/W2183341477","https://openalex.org/W2184045248","https://openalex.org/W2243397390","https://openalex.org/W2342840547","https://openalex.org/W2460937040","https://openalex.org/W2543580944","https://openalex.org/W2570685808","https://openalex.org/W2574022511","https://openalex.org/W2603766943","https://openalex.org/W2770638201","https://openalex.org/W2789264846","https://openalex.org/W2790975052","https://openalex.org/W2797359501","https://openalex.org/W2810651661","https://openalex.org/W2910143551","https://openalex.org/W2930249865","https://openalex.org/W2948487788","https://openalex.org/W2950864148","https://openalex.org/W2963070423","https://openalex.org/W2963207607","https://openalex.org/W2963320092","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964350391","https://openalex.org/W4300511536","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6674914833","https://openalex.org/W6684191040","https://openalex.org/W6694260854","https://openalex.org/W6704559304","https://openalex.org/W6719080892","https://openalex.org/W6731927902","https://openalex.org/W6746608116","https://openalex.org/W6750052831"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3009622996","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"In":[0,73],"order":[1,74],"to":[2,13,26,65,75,132,152],"better":[3],"solve":[4],"the":[5,28,38,43,51,70,78,81,98,104,112,117,120,124,128,133,137,140,147,155,161,182],"shortcomings":[6],"of":[7,30,37,50,80,90,111,119,130,146,158,184],"Deep":[8],"Neural":[9],"Networks":[10],"(DNNs)":[11],"susceptible":[12],"adversarial":[14,39,67,82],"examples,":[15],"evaluating":[16],"existing":[17,118],"neural":[18],"network":[19],"classification":[20,31,52],"performance":[21],"and":[22,57,106,136,154,186,192],"increasing":[23],"training":[24],"sets":[25],"improve":[27,77],"robustness":[29],"models":[32],"require":[33],"more":[34],"effective":[35],"methods":[36],"examples":[40,68],"generation.":[41],"Under":[42],"black-box":[44,71,134,162],"condition,":[45],"less":[46,58],"information":[47,60],"about":[48],"parameters":[49],"model,":[53],"limited":[54],"query":[55],"times,":[56],"feedback":[59,141],"available,":[61],"it":[62],"is":[63,150,164],"difficult":[64],"generate":[66],"against":[69],"model.":[72],"further":[76],"efficiency":[79],"images":[83,188],"generation,":[84],"we":[85,168],"propose":[86,169],"two":[87],"different":[88],"variants":[89],"Partial":[91,100],"Swarm":[92,101],"Optimization":[93,102],"algorithm":[94],"(vPSO)":[95],"base":[96],"on":[97,139],"traditional":[99],"for":[103,160],"targeted":[105,148,177],"non-targeted":[107,190],"attack":[108,149],"under":[109],"conditions":[110],"completely":[113],"black-box.":[114],"Compared":[115],"with":[116],"state-of-the-art":[121],"generation":[122],"algorithm,":[123],"vPSO":[125],"effectively":[126],"reduce":[127],"number":[129,157],"queries":[131,159],"classifier":[135],"dependence":[138],"information.":[142],"The":[143],"success":[144],"rate":[145],"up":[151],"96.0%":[153],"average":[156],"model":[163],"greatly":[165],"reduced.":[166],"Furthermore,":[167],"an":[170],"efficient":[171],"target":[172],"image":[173],"screening":[174],"method":[175],"in":[176,189],"attacks,":[178,191],"as":[179,181],"well":[180],"concept":[183],"easy-to-attack":[185],"hard-to-attack":[187],"give":[193],"corresponding":[194],"distinctions.":[195]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}