{"id":"https://openalex.org/W7117465443","doi":"https://doi.org/10.1109/access.2025.3649234","title":"Improving Adversarial Transferability on Vision Transformers via Dual-Flow Adversarial Attack","display_name":"Improving Adversarial Transferability on Vision Transformers via Dual-Flow Adversarial Attack","publication_year":2025,"publication_date":"2025-12-29","ids":{"openalex":"https://openalex.org/W7117465443","doi":"https://doi.org/10.1109/access.2025.3649234"},"language":null,"primary_location":{"id":"doi:10.1109/access.2025.3649234","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3649234","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3649234","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101803493","display_name":"Bin Zhou","orcid":"https://orcid.org/0000-0003-4245-0694"},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Bohai Zhou","raw_affiliation_strings":["School of Information Engineering, Wuhan University of Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121456571","display_name":"Anlu Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anlu Shi","raw_affiliation_strings":["School of Information Engineering, Wuhan University of Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121447597","display_name":"Wei Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Wu","raw_affiliation_strings":["School of Information Engineering, Wuhan University of Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5101803493"],"corresponding_institution_ids":["https://openalex.org/I196699116"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.8442489,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"642","last_page":"651"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8348000049591064},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7954000234603882},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6599000096321106},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.6435999870300293},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.5874000191688538},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.4731000065803528},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.4586000144481659},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4456999897956848}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8348000049591064},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7954000234603882},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.767300009727478},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6599000096321106},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.6435999870300293},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.5874000191688538},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5304999947547913},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.4731000065803528},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.4586000144481659},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4456999897956848},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4415999948978424},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3928000032901764},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35760000348091125},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.3398999869823456},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3359000086784363},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.3319999873638153},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3287000060081482},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.31929999589920044},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.3100999891757965},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26339998841285706},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.25920000672340393}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2025.3649234","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3649234","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3649234","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3649234","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2117539524","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2302255633","https://openalex.org/W2774644650","https://openalex.org/W2896078964","https://openalex.org/W2947874337","https://openalex.org/W2962847335","https://openalex.org/W2963542245","https://openalex.org/W2969542116","https://openalex.org/W2997583194","https://openalex.org/W3096609285","https://openalex.org/W3137278571","https://openalex.org/W3171288285","https://openalex.org/W3196621661","https://openalex.org/W3214707056","https://openalex.org/W4214588794","https://openalex.org/W4214634256","https://openalex.org/W4214636423","https://openalex.org/W4214669216","https://openalex.org/W4293846201","https://openalex.org/W4312516520","https://openalex.org/W4365483675","https://openalex.org/W4379162851","https://openalex.org/W4386072305","https://openalex.org/W4387247611","https://openalex.org/W4390871946","https://openalex.org/W4402754002","https://openalex.org/W4402776114","https://openalex.org/W4406983109","https://openalex.org/W4409367194","https://openalex.org/W4413145189","https://openalex.org/W4414230226","https://openalex.org/W4415798822"],"related_works":[],"abstract_inverted_index":{"State-of-the-art":[0],"transferable":[1],"adversarial":[2,162],"attack":[3],"methods":[4],"for":[5,130],"Vision":[6],"Transformers":[7],"(ViTs)":[8],"have":[9],"introduced":[10],"token-embedding":[11],"momentum":[12],"inside":[13],"the":[14,38,66,72,108,122,159,177],"Transformer":[15],"blocks,":[16],"but":[17],"they":[18],"typically":[19],"rely":[20],"on":[21,158],"fixed-decay":[22],"exponential":[23],"moving":[24],"averages":[25],"(EMA)":[26],"to":[27,52,93,126,166],"smooth":[28],"historical":[29,42,91],"embeddings.":[30],"While":[31],"EMA":[32],"can":[33],"suppress":[34],"noise,":[35],"it":[36],"ignores":[37],"varying":[39],"usefulness":[40],"of":[41,161,186],"information":[43],"across":[44,155],"time":[45],"steps;":[46],"moreover,":[47],"cross-architecture":[48],"transfer":[49],"from":[50,164],"ViTs":[51,165,170],"convolutional":[53],"neural":[54],"networks":[55],"(CNNs)":[56],"still":[57],"lags":[58],"significantly.":[59],"To":[60],"address":[61],"these":[62],"issues,":[63],"we":[64,75,111],"propose":[65],"Dual-Flow":[67],"Adversarial":[68],"Attack":[69],"(DFAA).":[70],"In":[71,107],"forward":[73],"flow":[74,110],"design":[76],"a":[77,83],"Learnable-Scored":[78],"Momentum":[79],"Token":[80],"Embedding":[81],"(LS-MTE):":[82],"lightweight":[84],"scoring":[85],"network":[86],"that":[87,146,172],"adaptively":[88],"reweights":[89],"short-term":[90],"embeddings":[92],"capture":[94],"and":[95,132,151,169],"exploit":[96],"temporal":[97],"variations":[98],"in":[99,121],"their":[100],"utility,":[101],"yielding":[102],"more":[103,153],"robust":[104],"intermediate":[105,123],"representations.":[106],"backward":[109],"introduce":[112],"Feature-Distance":[113],"Regularization":[114],"(FDR),":[115],"which":[116],"imposes":[117],"deterministic":[118],"separation":[119],"signals":[120],"feature":[124],"space":[125],"provide":[127],"feature-level":[128],"correction":[129],"gradients":[131],"thereby":[133],"substantially":[134],"improve":[135],"ViT\u2192CNN":[136],"cross-model":[137],"transfer.":[138],"These":[139],"two":[140],"components":[141],"are":[142],"complementary,":[143],"producing":[144],"perturbations":[145],"strongly":[147],"disrupt":[148],"decision":[149],"boundaries":[150],"generalize":[152],"effectively":[154],"architectures.Extensive":[156],"experiments":[157],"transferability":[160],"examples":[163],"various":[167],"CNNs":[168],"show":[171],"our":[173],"DFAA":[174],"method":[175],"surpasses":[176],"current":[178],"state-of-the-art":[179],"surrogate":[180],"refinement":[181],"approach":[182],"by":[183],"an":[184],"average":[185],"10.7%.":[187]},"counts_by_year":[],"updated_date":"2026-01-08T20:05:33.558190","created_date":"2025-12-29T00:00:00"}