{"id":"https://openalex.org/W3210339471","doi":"https://doi.org/10.1109/jiot.2021.3124815","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","display_name":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","publication_year":2021,"publication_date":"2021-06-29","ids":{"openalex":"https://openalex.org/W3210339471","doi":"https://doi.org/10.1109/jiot.2021.3124815","mag":"3210339471"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2106.15202","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2106.15202","pdf_url":"https://arxiv.org/pdf/2106.15202","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2106.15202","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072156971","display_name":"Tao Bai","orcid":"https://orcid.org/0000-0002-2034-8026"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Bai, Tao","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029733098","display_name":"Jinqi Luo","orcid":"https://orcid.org/0000-0002-9689-009X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Luo, Jinqi","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071321132","display_name":"Jun Zhao","orcid":"https://orcid.org/0000-0002-3004-7091"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhao, Jun","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7752735018730164},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6742511987686157},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.49058666825294495},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48650282621383667},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4448339641094208},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10229146480560303}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7752735018730164},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6742511987686157},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.49058666825294495},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48650282621383667},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4448339641094208},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10229146480560303}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:arXiv.org:2106.15202","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2106.15202","pdf_url":"https://arxiv.org/pdf/2106.15202","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2106.15202","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2106.15202","pdf_url":"https://arxiv.org/pdf/2106.15202","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.6800000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1536053808","https://openalex.org/W1973190657","https://openalex.org/W2058401212","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2140669960","https://openalex.org/W2180612164","https://openalex.org/W2183341477","https://openalex.org/W2243397390","https://openalex.org/W2271192305","https://openalex.org/W2339754110","https://openalex.org/W2535873859","https://openalex.org/W2561975083","https://openalex.org/W2607219512","https://openalex.org/W2611576673","https://openalex.org/W2618043096","https://openalex.org/W2798302089","https://openalex.org/W2887311010","https://openalex.org/W2890054895","https://openalex.org/W2905423756","https://openalex.org/W2951686386","https://openalex.org/W2953610242","https://openalex.org/W2962793481","https://openalex.org/W2963073614","https://openalex.org/W2963163009","https://openalex.org/W2963542245","https://openalex.org/W2963726920","https://openalex.org/W2963733622","https://openalex.org/W2963857521","https://openalex.org/W2963918968","https://openalex.org/W2964097310","https://openalex.org/W2965198951","https://openalex.org/W2982041717","https://openalex.org/W2983042735","https://openalex.org/W2988535323","https://openalex.org/W3025279871","https://openalex.org/W3034418285","https://openalex.org/W3048636285","https://openalex.org/W3094821564","https://openalex.org/W3103557498","https://openalex.org/W3176269737","https://openalex.org/W4293846201"],"related_works":["https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2772917594","https://openalex.org/W2775347418","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Deep":[0],"learning":[1,21],"based":[2],"image":[3],"recognition":[4],"systems":[5],"have":[6],"been":[7],"widely":[8],"deployed":[9],"on":[10,120,180],"mobile":[11],"devices":[12],"in":[13,84,131,167,174,234],"today's":[14],"world.":[15,237],"In":[16,110],"recent":[17],"studies,":[18],"however,":[19],"deep":[20],"models":[22,182],"are":[23,55,143],"shown":[24],"vulnerable":[25],"to":[26,41,101,145,190,202],"adversarial":[27,32,35,47,81,104,129,153,192,195,229],"examples.":[28],"One":[29],"variant":[30],"of":[31,60,78,124,216,221],"examples,":[33],"called":[34],"patch,":[36],"draws":[37],"researchers'":[38],"attention":[39],"due":[40],"its":[42],"strong":[43,157,164],"attack":[44,51,158,165],"abilities.":[45,159],"Though":[46],"patches":[48,66,105,130,142,196,230],"achieve":[49],"high":[50],"success":[52],"rates,":[53],"they":[54],"easily":[56],"being":[57],"detected":[58,204],"because":[59],"the":[61,65,68,85,116,121,149,163,171,198,214,235],"visual":[62],"inconsistency":[63],"between":[64],"and":[67,91,139,170,186,205,219],"original":[69],"images.":[70],"Besides,":[71],"it":[72],"usually":[73],"requires":[74],"a":[75,132],"large":[76],"amount":[77],"data":[79],"for":[80],"patch":[82,117],"generation":[83],"literature,":[86],"which":[87,210],"is":[88,211],"computationally":[89],"expensive":[90],"time-consuming.":[92],"To":[93],"tackle":[94],"these":[95],"challenges,":[96],"we":[97,113,225],"propose":[98],"an":[99],"approach":[100,161],"generate":[102],"inconspicuous":[103],"with":[106,148,152,183],"one":[107],"single":[108],"image.":[109],"our":[111,194,228],"approach,":[112],"first":[114],"decide":[115],"locations":[118],"basing":[119],"perceptual":[122],"sensitivity":[123],"victim":[125],"models,":[126],"then":[127],"produce":[128],"coarse-to-fine":[133],"way":[134],"by":[135,213],"utilizing":[136],"multiple-scale":[137],"generators":[138],"discriminators.":[140],"The":[141],"encouraged":[144],"be":[146,203,232],"consistent":[147],"background":[150],"images":[151],"training":[154,187],"while":[155],"preserving":[156],"Our":[160],"shows":[162],"abilities":[166],"white-box":[168],"settings":[169,176],"excellent":[172],"transferability":[173],"black-box":[175],"through":[177],"extensive":[178],"experiments":[179],"various":[181],"different":[184],"architectures":[185],"methods.":[188],"Compared":[189],"other":[191],"patches,":[193],"hold":[197],"most":[199],"negligible":[200],"risks":[201],"can":[206,231],"evade":[207],"human":[208],"observations,":[209],"supported":[212],"illustrations":[215],"saliency":[217],"maps":[218],"results":[220],"user":[222],"evaluations.":[223],"Lastly,":[224],"show":[226],"that":[227],"applied":[233],"physical":[236]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2021-11-08T00:00:00"}
