{"id":"https://openalex.org/W7126053387","doi":"https://doi.org/10.1109/jiot.2026.3659121","title":"Enhancing Opaque-Box VLMs Attack With Prior Information Guide","display_name":"Enhancing Opaque-Box VLMs Attack With Prior Information Guide","publication_year":2026,"publication_date":"2026-01-29","ids":{"openalex":"https://openalex.org/W7126053387","doi":"https://doi.org/10.1109/jiot.2026.3659121"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2026.3659121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3659121","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124185363","display_name":"Zhiying Mu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210105136","display_name":"Yangtze River Delta Physics Research Center (China)","ror":"https://ror.org/01g53qc72","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210105136"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiying Mu","raw_affiliation_strings":["Yangtze River Delta Research Institute, NPU, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0004-8470-7317","affiliations":[{"raw_affiliation_string":"Yangtze River Delta Research Institute, NPU, Suzhou, China","institution_ids":["https://openalex.org/I4210105136"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Litao Peng","orcid":"https://orcid.org/0009-0006-7773-1866"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Litao Peng","raw_affiliation_strings":["School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0009-0006-7773-1866","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124175368","display_name":"Junhua Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I2802390878","display_name":"Sir Run Run Shaw Hospital","ror":"https://ror.org/00ka6rp58","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I2802390878"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junhua Shi","raw_affiliation_strings":["Nursing Department, Sir Run Run Shaw Hospital, School of Medicine, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nursing Department, Sir Run Run Shaw Hospital, School of Medicine, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I2802390878","https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124239254","display_name":"Wenxiao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenxiao Zhang","raw_affiliation_strings":["School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"last","author":{"id":null,"display_name":"Dehong Gao","orcid":"https://orcid.org/0000-0002-6636-5702"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dehong Gao","raw_affiliation_strings":["School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-6636-5702","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Northwestern Polytechnical University, Xi’an, Shaanxi, China","institution_ids":["https://openalex.org/I17145004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.10439058,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"8","first_page":"16263","last_page":"16271"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8324999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8324999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.10329999774694443,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.013299999758601189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.4350999891757965},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.4350000023841858},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.39809998869895935},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3822999894618988},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.3727000057697296},{"id":"https://openalex.org/keywords/universality","display_name":"Universality (dynamical systems)","score":0.3449000120162964},{"id":"https://openalex.org/keywords/optimization-problem","display_name":"Optimization problem","score":0.3239000141620636}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8284000158309937},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.4350999891757965},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4350000023841858},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43050000071525574},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.39809998869895935},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3727000057697296},{"id":"https://openalex.org/C183992945","wikidata":"https://www.wikidata.org/wiki/Q2495574","display_name":"Universality (dynamical systems)","level":2,"score":0.3449000120162964},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C2986897749","wikidata":"https://www.wikidata.org/wiki/Q231761","display_name":"Potential field","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C3020402766","wikidata":"https://www.wikidata.org/wiki/Q104376712","display_name":"Prior information","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2662000060081482},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3659121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3659121","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1160214813","display_name":null,"funder_award_id":"62372380","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G192882225","display_name":null,"funder_award_id":"U22B2036","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8659228507","display_name":null,"funder_award_id":"2026HLKY26","funder_id":"https://openalex.org/F4320336176","funder_display_name":"Department of Medicine, School of Medicine, Queen's University"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336176","display_name":"Department of Medicine, School of Medicine, Queen's University","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"vision-language":[1],"models":[2,16,45,120],"(VLMs)":[3],"have":[4,34],"made":[5],"significant":[6],"progress":[7],"in":[8,85,98],"the":[9,60,82,86,95,99,103,111,123,128],"field":[10],"of":[11,62,105,127],"response":[12],"generation.":[13],"However,":[14],"these":[15],"also":[17,57],"face":[18],"more":[19],"potential":[20],"security":[21],"risks":[22],"due":[23],"to":[24,36,93,121],"diverse":[25],"media":[26],"inputs.":[27],"In":[28],"realistic":[29],"settings,":[30],"adversaries":[31],"often":[32],"only":[33],"access":[35],"black-box":[37,44,100],"models,":[38],"which":[39],"makes":[40],"query-based":[41,96],"attacks":[42],"on":[43,76,132],"an":[46,72],"important":[47],"attack":[48,64,97,112],"method.":[49],"Although":[50],"this":[51,68],"method":[52,74,80,130],"has":[53],"high":[54],"accuracy,":[55],"it":[56],"suffers":[58],"from":[59],"issue":[61],"low":[63],"efficiency.":[65,113],"To":[66],"address":[67],"challenge,":[69],"we":[70],"propose":[71],"optimization":[73,129],"based":[75,131],"prior":[77,91,133],"information.":[78,135],"This":[79],"uses":[81],"gradient":[83,134],"generated":[84],"surrogate":[87],"white-box":[88],"model":[89],"as":[90],"information":[92],"guide":[94],"model,":[101],"reducing":[102],"number":[104],"unnecessary":[106],"queries":[107],"and":[108,125],"thus":[109],"improving":[110],"We":[114],"conduct":[115],"comprehensive":[116],"experiments":[117],"using":[118],"various":[119],"demonstrate":[122],"availability":[124],"universality":[126]},"counts_by_year":[],"updated_date":"2026-04-09T06:08:40.794217","created_date":"2026-01-30T00:00:00"}