{"id":"https://openalex.org/W4375869337","doi":"https://doi.org/10.1109/icassp49357.2023.10096892","title":"Measuring the Transferability of \u2113<sub>\u221e</sub> Attacks by the \u2113<sub>2</sub> Norm","display_name":"Measuring the Transferability of \u2113<sub>\u221e</sub> Attacks by the \u2113<sub>2</sub> Norm","publication_year":2023,"publication_date":"2023-05-05","ids":{"openalex":"https://openalex.org/W4375869337","doi":"https://doi.org/10.1109/icassp49357.2023.10096892"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49357.2023.10096892","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10096892","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101888837","display_name":"Sizhe Chen","orcid":"https://orcid.org/0000-0003-3274-6926"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sizhe Chen","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071569011","display_name":"Qinghua Tao","orcid":"https://orcid.org/0000-0001-9705-7748"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Qinghua Tao","raw_affiliation_strings":["KU Leuven"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030062236","display_name":"Zhixing Ye","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhixing Ye","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026169938","display_name":"Xiaolin Huang","orcid":"https://orcid.org/0000-0003-4285-6520"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolin Huang","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10645","display_name":"Cardiac Arrest and Resuscitation","score":0.9423999786376953,"subfield":{"id":"https://openalex.org/subfields/2711","display_name":"Emergency Medicine"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.8499524593353271},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5367212891578674},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.5335676670074463},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.48942914605140686},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.473716676235199},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34419888257980347},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.294615775346756},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.2558361291885376},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.11328667402267456}],"concepts":[{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.8499524593353271},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5367212891578674},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.5335676670074463},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.48942914605140686},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.473716676235199},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34419888257980347},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.294615775346756},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.2558361291885376},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.11328667402267456},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49357.2023.10096892","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10096892","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1945616565","https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2271840356","https://openalex.org/W2531409750","https://openalex.org/W2765424254","https://openalex.org/W2774644650","https://openalex.org/W2785940809","https://openalex.org/W2795727551","https://openalex.org/W2908510526","https://openalex.org/W2962847335","https://openalex.org/W2962872506","https://openalex.org/W2963446712","https://openalex.org/W2964081807","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2976752987","https://openalex.org/W2999606423","https://openalex.org/W3094250460","https://openalex.org/W3100197791","https://openalex.org/W3103557498","https://openalex.org/W3107235539","https://openalex.org/W4293846201","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6739868092","https://openalex.org/W6748482152","https://openalex.org/W6768366551","https://openalex.org/W6784591795"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4392340763","https://openalex.org/W4283325551","https://openalex.org/W4403006689"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"could":[3],"be":[4,150],"fooled":[5],"by":[6,28,153,171],"adversarial":[7,26],"examples":[8],"with":[9,76,123],"trivial":[10],"differences":[11],"to":[12,43,125,138],"original":[13],"samples.":[14],"To":[15],"keep":[16],"the":[17,25,29,41,45,59,71,84,93,99,107,145,155],"difference":[18],"imperceptible":[19],"in":[20,69],"human":[21],"eyes,":[22],"researchers":[23],"bound":[24],"perturbations":[27,122,135],"\u2113":[30,60,79,85,128,156,161],"<inf":[31,61,80,86,129,157,162],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[32,62,81,87,130,158,163],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">\u221e</inf>":[33,63,82,159],"norm,":[34],"which":[35],"is":[36,66,168],"now":[37],"commonly":[38],"served":[39],"as":[40],"standard":[42],"align":[44],"strength":[46,146],"of":[47,147],"different":[48],"attacks":[49,148],"for":[50],"a":[51,77],"fair":[52],"comparison.":[53],"However,":[54],"we":[55,101,141],"propose":[56],"that":[57,144],"using":[58],"norm":[64],"alone":[65],"not":[67],"sufficient":[68],"measuring":[70],"attack":[72,94,108,114],"strength,":[73],"because":[74,119],"even":[75],"fixed":[78],"distance,":[83],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</inf>":[88,131,164],"distance":[89],"also":[90],"greatly":[91],"affects":[92],"transferability":[95],"between":[96],"models.":[97,186],"Through":[98],"discovery,":[100],"reach":[102],"more":[103],"in-depth":[104],"understandings":[105],"towards":[106],"mechanism,":[109],"i.e.,":[110],"several":[111],"existing":[112],"methods":[113],"black-box":[115,185],"models":[116],"better":[117,139],"partly":[118],"they":[120],"craft":[121],"70%":[124],"130%":[126],"larger":[127,134],"distances.":[132],"Since":[133],"naturally":[136],"lead":[137],"transferability,":[140],"thereby":[142],"advocate":[143],"should":[149],"simultaneously":[151],"measured":[152],"both":[154],"and":[160,183],"norm.":[165],"Our":[166],"proposal":[167],"firmly":[169],"supported":[170],"extensive":[172],"experiments":[173],"on":[174],"ImageNet":[175],"dataset":[176],"from":[177],"7":[178],"attacks,":[179],"4":[180],"white-box":[181],"models,":[182],"9":[184]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}