{"id":"https://openalex.org/W4394828320","doi":"https://doi.org/10.1109/lsp.2024.3383797","title":"Enhancing Adversarial Transferability via Information Bottleneck Constraints","display_name":"Enhancing Adversarial Transferability via Information Bottleneck Constraints","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4394828320","doi":"https://doi.org/10.1109/lsp.2024.3383797"},"language":"en","primary_location":{"id":"doi:10.1109/lsp.2024.3383797","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lsp.2024.3383797","pdf_url":null,"source":{"id":"https://openalex.org/S120629676","display_name":"IEEE Signal Processing Letters","issn_l":"1070-9908","issn":["1070-9908","1558-2361"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048953650","display_name":"Biqing Qi","orcid":"https://orcid.org/0000-0002-4072-0577"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Biqing Qi","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Tshinghua University, Bejing, P. R. China","Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","Frontis.AI, Beijing, P. R. China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Tshinghua University, Bejing, P. R. China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Frontis.AI, Beijing, P. R. China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004055907","display_name":"Junqi Gao","orcid":"https://orcid.org/0009-0007-1644-5812"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junqi Gao","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106670276","display_name":"Jianxing Liu","orcid":"https://orcid.org/0000-0002-2201-3887"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianxing Liu","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108047839","display_name":"Ligang Wu","orcid":"https://orcid.org/0000-0001-8198-5267"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ligang Wu","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107808331","display_name":"Bowen Zhou","orcid":"https://orcid.org/0009-0004-3414-6267"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowen Zhou","raw_affiliation_strings":["Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China"],"affiliations":[{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Department of Control Science and Engineering, Harbin Institute of Technology, Harbin, P. R. China","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5048953650"],"corresponding_institution_ids":["https://openalex.org/I204983213","https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":1.7454,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.86136335,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"31","issue":null,"first_page":"1414","last_page":"1418"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-bottleneck-method","display_name":"Information bottleneck method","score":0.8706556558609009},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7984614372253418},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.79689621925354},{"id":"https://openalex.org/keywords/mutual-information","display_name":"Mutual information","score":0.7793993949890137},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7789468765258789},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6382315158843994},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.5741921663284302},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5233297348022461},{"id":"https://openalex.org/keywords/information-theory","display_name":"Information theory","score":0.4753170609474182},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4481453597545624},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.442476749420166},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.42183834314346313},{"id":"https://openalex.org/keywords/estimator","display_name":"Estimator","score":0.41800910234451294},{"id":"https://openalex.org/keywords/invariant","display_name":"Invariant (physics)","score":0.41524893045425415},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.396464467048645},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37103959918022156},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.18698793649673462},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10531339049339294}],"concepts":[{"id":"https://openalex.org/C60008888","wikidata":"https://www.wikidata.org/wiki/Q6031013","display_name":"Information bottleneck method","level":3,"score":0.8706556558609009},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7984614372253418},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.79689621925354},{"id":"https://openalex.org/C152139883","wikidata":"https://www.wikidata.org/wiki/Q252973","display_name":"Mutual information","level":2,"score":0.7793993949890137},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7789468765258789},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6382315158843994},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.5741921663284302},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5233297348022461},{"id":"https://openalex.org/C52622258","wikidata":"https://www.wikidata.org/wiki/Q131222","display_name":"Information theory","level":2,"score":0.4753170609474182},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4481453597545624},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.442476749420166},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42183834314346313},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.41800910234451294},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.41524893045425415},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.396464467048645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37103959918022156},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.18698793649673462},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10531339049339294},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/lsp.2024.3383797","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lsp.2024.3383797","pdf_url":null,"source":{"id":"https://openalex.org/S120629676","display_name":"IEEE Signal Processing Letters","issn_l":"1070-9908","issn":["1070-9908","1558-2361"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Letters","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2774644650","https://openalex.org/W2963446712","https://openalex.org/W2963857521","https://openalex.org/W2964184826","https://openalex.org/W2969542116","https://openalex.org/W3035569111","https://openalex.org/W3106050153","https://openalex.org/W3114501414","https://openalex.org/W3127807678","https://openalex.org/W3171288285","https://openalex.org/W3177184533","https://openalex.org/W4214703392","https://openalex.org/W4226378932","https://openalex.org/W4293052541","https://openalex.org/W4293846201","https://openalex.org/W4312648479","https://openalex.org/W4386065604","https://openalex.org/W4386076570","https://openalex.org/W6637108112","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6729906282","https://openalex.org/W6731927902","https://openalex.org/W6752051073","https://openalex.org/W6768366551","https://openalex.org/W6784333009","https://openalex.org/W6787052717","https://openalex.org/W6845892164"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4392340763","https://openalex.org/W4283325551","https://openalex.org/W4403006689"],"abstract_inverted_index":{"From":[0],"the":[1,29,35,57,68,85,113,127,132],"perspective":[2],"of":[3,31,59,70,87,136],"information":[4,98],"bottleneck":[5],"(IB)":[6],"theory,":[7],"we":[8,66,91,111],"propose":[9,92],"a":[10,44,74,93,121],"novel":[11,75],"framework":[12,77],"for":[13,102],"performing":[14],"black-box":[15],"transferable":[16,71],"adversarial":[17,32,60],"attacks":[18,72],"named":[19],"IBTA,":[20],"which":[21],"leverages":[22],"advancements":[23],"in":[24],"invariant":[25,48],"features.":[26],"Intuitively,":[27],"diminishing":[28],"reliance":[30,46],"perturbations":[33],"on":[34,47,63,126],"original":[36],"data,":[37],"under":[38],"equivalent":[39],"attack":[40],"performance":[41],"constraints,":[42],"encourages":[43],"greater":[45],"features":[49],"that":[50,78],"contributes":[51],"most":[52],"to":[53,83,106,119],"classification,":[54],"thereby":[55],"enhancing":[56],"transferability":[58],"attacks.":[61],"Building":[62],"this":[64],"motivation,":[65],"redefine":[67],"optimization":[69],"using":[73],"theoretical":[76],"centers":[79],"around":[80],"IB.":[81],"Specifically,":[82],"overcome":[84],"challenge":[86],"unoptimizable":[88],"mutual":[89,97,109],"information,":[90,110],"simple":[94],"and":[95,134,138],"efficient":[96],"lower":[99],"bound":[100],"(MILB)":[101],"approximating":[103],"computation.":[104],"Moreover,":[105],"quantitatively":[107],"evaluate":[108],"utilize":[112],"Mutual":[114],"Information":[115],"Neural":[116],"Estimator":[117],"(MINE)":[118],"perform":[120],"thorough":[122],"analysis.":[123],"Our":[124,141],"experiments":[125],"ImageNet":[128],"dataset":[129],"well":[130],"demonstrate":[131],"efficiency":[133],"scalability":[135],"IBTA":[137],"derived":[139],"MILB.":[140],"code":[142],"is":[143],"available":[144],"at":[145],"github.com/IBTA.":[146]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2026-03-27T14:29:43.386196","created_date":"2025-10-10T00:00:00"}