{"id":"https://openalex.org/W3015445190","doi":"https://doi.org/10.1109/icassp40776.2020.9053181","title":"Headless Horseman: Adversarial Attacks on Transfer Learning Models","display_name":"Headless Horseman: Adversarial Attacks on Transfer Learning Models","publication_year":2020,"publication_date":"2020-04-09","ids":{"openalex":"https://openalex.org/W3015445190","doi":"https://doi.org/10.1109/icassp40776.2020.9053181","mag":"3015445190"},"language":"en","primary_location":{"id":"doi:10.1109/icassp40776.2020.9053181","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp40776.2020.9053181","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2020 - 2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2004.09007","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100712178","display_name":"Ahmed Abdelkader","orcid":"https://orcid.org/0000-0002-6749-1807"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed Abdelkader","raw_affiliation_strings":["Dept. of Computer Science, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056478019","display_name":"Michael J. Curry","orcid":"https://orcid.org/0000-0001-8052-5074"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael J. Curry","raw_affiliation_strings":["Dept. of Computer Science, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034473032","display_name":"Liam Fowl","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liam Fowl","raw_affiliation_strings":["Dept. of Mathematics, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Mathematics, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060687985","display_name":"Tom Goldstein","orcid":"https://orcid.org/0000-0003-1660-9307"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tom Goldstein","raw_affiliation_strings":["Dept. of Computer Science, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026712341","display_name":"Avi Schwarzschild","orcid":"https://orcid.org/0000-0003-0997-4867"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Avi Schwarzschild","raw_affiliation_strings":["Dept. of Mathematics, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Mathematics, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015044935","display_name":"Manli Shu","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manli Shu","raw_affiliation_strings":["Dept. of Computer Science, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083617223","display_name":"Christoph Studer","orcid":"https://orcid.org/0000-0001-8950-6267"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]},{"id":"https://openalex.org/I4405261073","display_name":"Cornell Tech","ror":"https://ror.org/04qscbg47","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295","https://openalex.org/I4405261073"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christoph Studer","raw_affiliation_strings":["Cornell Tech"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell Tech","institution_ids":["https://openalex.org/I205783295","https://openalex.org/I4405261073"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100768317","display_name":"Chen Zhu","orcid":"https://orcid.org/0000-0002-3103-8752"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen Zhu","raw_affiliation_strings":["Dept. of Computer Science, University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer Science, University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3087","last_page":"3091"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9485999941825867,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9383000135421753,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8533482551574707},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.7891738414764404},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7666435837745667},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6342666149139404},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6249707937240601},{"id":"https://openalex.org/keywords/extractor","display_name":"Extractor","score":0.556717574596405},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5538097620010376},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5421072840690613},{"id":"https://openalex.org/keywords/transfer","display_name":"Transfer (computing)","score":0.5401481986045837},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5399285554885864},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.5106552243232727},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.47316938638687134},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.42738109827041626},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.34698981046676636},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34004440903663635},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1016155481338501}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8533482551574707},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.7891738414764404},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7666435837745667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6342666149139404},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6249707937240601},{"id":"https://openalex.org/C117978034","wikidata":"https://www.wikidata.org/wiki/Q5422192","display_name":"Extractor","level":2,"score":0.556717574596405},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5538097620010376},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5421072840690613},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.5401481986045837},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5399285554885864},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.5106552243232727},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.47316938638687134},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.42738109827041626},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.34698981046676636},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34004440903663635},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1016155481338501},{"id":"https://openalex.org/C21880701","wikidata":"https://www.wikidata.org/wiki/Q2144042","display_name":"Process engineering","level":1,"score":0.0},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/icassp40776.2020.9053181","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp40776.2020.9053181","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2020 - 2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2004.09007","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2004.09007","pdf_url":"https://arxiv.org/pdf/2004.09007","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/452590","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/452590","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ICASSP 2020 - 2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.3929/ethz-b-000452590","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-b-000452590","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2004.09007","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2004.09007","pdf_url":"https://arxiv.org/pdf/2004.09007","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7200000286102295}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2108598243","https://openalex.org/W2148394752","https://openalex.org/W2149933564","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2295582178","https://openalex.org/W2408141691","https://openalex.org/W2603766943","https://openalex.org/W2616180702","https://openalex.org/W2640329709","https://openalex.org/W2752782242","https://openalex.org/W2781152419","https://openalex.org/W2883285025","https://openalex.org/W2888940765","https://openalex.org/W2963163009","https://openalex.org/W2963207607","https://openalex.org/W2963389226","https://openalex.org/W2963420686","https://openalex.org/W2963857521","https://openalex.org/W2967540978","https://openalex.org/W4289549047","https://openalex.org/W4293846201","https://openalex.org/W4299518610","https://openalex.org/W4309845474","https://openalex.org/W6682132143","https://openalex.org/W6697274609","https://openalex.org/W6714069269","https://openalex.org/W6754279747","https://openalex.org/W6759424558"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W4295705264"],"abstract_inverted_index":{"Transfer":[0],"learning":[1],"facilitates":[2],"the":[3,29,54,71,75,80],"training":[4],"of":[5,18,56,74,82],"task-specific":[6],"classifiers":[7],"using":[8,47],"pre-trained":[9],"models":[10],"as":[11],"feature":[12,50],"extractors.":[13],"We":[14,37],"present":[15],"a":[16,44,57,83],"family":[17],"transferable":[19],"adversarial":[20,59],"attacks":[21,42],"against":[22,43],"such":[23],"classifiers,":[24],"generated":[25],"without":[26],"access":[27],"to":[28],"classification":[30],"head;":[31],"we":[32],"call":[33],"these":[34],"headless":[35],"attacks.":[36],"first":[38],"demonstrate":[39],"successful":[40],"transfer":[41,62],"victim":[45],"network":[46],"only":[48],"its":[49],"extractor.":[51],"This":[52,61],"motivates":[53],"introduction":[55],"label-blind":[58],"attack.":[60],"attack":[63,78],"method":[64],"does":[65],"not":[66],"require":[67],"any":[68],"information":[69],"about":[70],"class-label":[72],"space":[73],"victim.":[76],"Our":[77],"lowers":[79],"accuracy":[81],"ResNet18":[84],"trained":[85],"on":[86],"CIFAR10":[87],"by":[88],"over":[89],"40%.":[90]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}