{"id":"https://openalex.org/W4399554878","doi":"https://doi.org/10.1109/iccv51701.2025.00390","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations Against Vision-Language Pre-Training Models","display_name":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations Against Vision-Language Pre-Training Models","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W4399554878","doi":"https://doi.org/10.1109/iccv51701.2025.00390"},"language":"en","primary_location":{"id":"doi:10.1109/iccv51701.2025.00390","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.00390","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2406.05491","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059451258","display_name":"Hao Fang","orcid":"https://orcid.org/0000-0002-1321-3035"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Fang","raw_affiliation_strings":["Tsinghua University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044674169","display_name":"Jiawei Kong","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawei Kong","raw_affiliation_strings":["Tsinghua University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103123319","display_name":"Wenbo Yu","orcid":"https://orcid.org/0000-0002-2602-9093"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Yu","raw_affiliation_strings":["Tsinghua University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100427326","display_name":"Bin Chen","orcid":"https://orcid.org/0000-0002-2962-9254"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Chen","raw_affiliation_strings":["Harbin Institute of Technology,Shenzhen,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology,Shenzhen,China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108050442","display_name":"Jiawei Li","orcid":"https://orcid.org/0000-0003-3873-8003"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawei Li","raw_affiliation_strings":["Huawei Technology,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Technology,China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hao Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210142993","display_name":"China Shenhua Energy (China)","ror":"https://ror.org/046fag481","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210142993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Wu","raw_affiliation_strings":["Shenzhen ShenNong Information Technology Co., Ltd.,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shenzhen ShenNong Information Technology Co., Ltd.,China","institution_ids":["https://openalex.org/I4210142993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004661593","display_name":"Ke Xu","orcid":"https://orcid.org/0000-0002-2935-8968"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Xu","raw_affiliation_strings":["Tsinghua University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4474,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82230781,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"4090","last_page":"4100"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9544000029563904,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8669524192810059},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.6275888681411743},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.5377286672592163},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4926522374153137},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.40856364369392395},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.13190814852714539}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8669524192810059},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.6275888681411743},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.5377286672592163},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4926522374153137},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40856364369392395},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.13190814852714539},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/iccv51701.2025.00390","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.00390","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2406.05491","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2406.05491","pdf_url":"https://arxiv.org/pdf/2406.05491","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2406.05491","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2406.05491","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2406.05491","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2406.05491","pdf_url":"https://arxiv.org/pdf/2406.05491","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6442559592","display_name":null,"funder_award_id":"62171248,62301189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4399554878.pdf","grobid_xml":"https://content.openalex.org/works/W4399554878.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119"],"abstract_inverted_index":{"Vision-Language":[0],"Pre-training":[1],"(VLP)":[2],"models":[3,55,187],"have":[4,22],"exhibited":[5],"unprecedented":[6],"capability":[7],"in":[8,174],"many":[9],"applications":[10],"by":[11,135,148],"taking":[12],"full":[13],"advantage":[14],"of":[15,111,144],"the":[16,60,80,85,92,116,131,142,175],"multimodal":[17,87],"alignment.":[18],"However,":[19],"previous":[20],"studies":[21],"shown":[23],"they":[24],"are":[25,37,56],"vulnerable":[26,58],"to":[27,59,78,99,114,167],"maliciously":[28],"crafted":[29,122],"adversarial":[30,63,165],"samples.":[31],"Despite":[32],"recent":[33],"success,":[34],"these":[35],"methods":[36],"generally":[38],"instance-specific":[39],"and":[40,124,152,188],"require":[41],"generating":[42],"perturbations":[43],"for":[44,128],"each":[45],"input":[46],"sample.":[47],"In":[48,82],"this":[49,101],"paper,":[50],"we":[51,67,97],"reveal":[52],"that":[53,84,161],"VLP":[54,136,176],"also":[57],"instance-agnostic":[61],"universal":[62],"perturbation":[64],"(UAP).":[65],"Specifically,":[66],"design":[68],"a":[69,108],"novel":[70],"Contrastive-training":[71],"Perturbation":[72],"Generator":[73],"with":[74],"Cross-modal":[75],"conditions":[76],"(C-PGC)":[77],"achieve":[79],"attack.":[81],"light":[83],"pivotal":[86],"alignment":[88,132],"is":[89,194],"achieved":[90],"through":[91],"advanced":[93],"contrastive":[94,112],"learning":[95,113],"technique,":[96],"devise":[98],"turn":[100],"powerful":[102],"weapon":[103],"against":[104],"themselves,":[105],"i.e.,":[106],"employ":[107],"malicious":[109],"version":[110],"train":[115],"C-PGC":[117,139,162],"based":[118],"on":[119],"our":[120],"carefully":[121],"positive":[123],"negative":[125],"image-text":[126],"pairs":[127],"essentially":[129,181],"destroying":[130],"relationship":[133],"learned":[134],"models.":[137],"Besides,":[138],"fully":[140],"utilizes":[141],"characteristics":[143],"Vision-and-Language":[145],"(V+L)":[146],"scenarios":[147],"incorporating":[149],"both":[150],"unimodal":[151],"cross-modal":[153],"information":[154],"as":[155],"effective":[156],"guidance.":[157],"Extensive":[158],"experiments":[159],"show":[160],"successfully":[163],"forces":[164],"samples":[166],"move":[168],"away":[169],"from":[170],"their":[171],"original":[172],"area":[173],"model's":[177],"feature":[178],"space,":[179],"thus":[180],"enhancing":[182],"attacks":[183],"across":[184],"various":[185],"victim":[186],"V+L":[189],"tasks.":[190],"The":[191],"GitHub":[192],"repository":[193],"available":[195],"at":[196],"https://github.com/ffhibnese/CPGC_VLP_Universal_Attacks.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}