{"id":"https://openalex.org/W4385080387","doi":"https://doi.org/10.1109/sp46215.2023.10179383","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","display_name":"StyleFool: Fooling Video Classification Systems via Style Transfer","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080387","doi":"https://doi.org/10.1109/sp46215.2023.10179383"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179383","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179383","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101580401","display_name":"Yuxin Cao","orcid":"https://orcid.org/0009-0002-5766-0846"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxin Cao","raw_affiliation_strings":["Tsinghua University,Shenzhen International Graduate School,China","Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Shenzhen International Graduate School,China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101600503","display_name":"Xi Xiao","orcid":"https://orcid.org/0000-0003-1521-9542"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Xiao","raw_affiliation_strings":["Tsinghua University,Shenzhen International Graduate School,China","Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Shenzhen International Graduate School,China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004187454","display_name":"Ruoxi Sun","orcid":"https://orcid.org/0009-0002-5180-2954"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ruoxi Sun","raw_affiliation_strings":["CSIRO’s Data61,Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO’s Data61,Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081805488","display_name":"Derui Wang","orcid":"https://orcid.org/0000-0003-1388-7715"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Derui Wang","raw_affiliation_strings":["CSIRO’s Data61,Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO’s Data61,Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["CSIRO’s Data61,Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO’s Data61,Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["Swinburne University of Technology,Australia","Swinburne University of Technology, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology,Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.5895,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.94218703,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1631","last_page":"1648"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10812","display_name":"Human Pose and Action Recognition","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8329566717147827},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7889748215675354},{"id":"https://openalex.org/keywords/stylized-fact","display_name":"Stylized fact","score":0.6654812097549438},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5824710726737976},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5383575558662415},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4638661742210388},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.45416244864463806},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4407198429107666},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4186658263206482},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3707267642021179},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3249701261520386}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8329566717147827},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7889748215675354},{"id":"https://openalex.org/C38935604","wikidata":"https://www.wikidata.org/wiki/Q4330363","display_name":"Stylized fact","level":2,"score":0.6654812097549438},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5824710726737976},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5383575558662415},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4638661742210388},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.45416244864463806},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4407198429107666},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4186658263206482},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3707267642021179},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3249701261520386},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179383","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179383","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5699999928474426}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"},{"id":"https://openalex.org/F4320337986","display_name":"Tsinghua Shenzhen International Graduate School","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":95,"referenced_works":["https://openalex.org/W24089286","https://openalex.org/W296507979","https://openalex.org/W1522734439","https://openalex.org/W1560729591","https://openalex.org/W1911162795","https://openalex.org/W1923404803","https://openalex.org/W1947481528","https://openalex.org/W1983364832","https://openalex.org/W2005562282","https://openalex.org/W2016053056","https://openalex.org/W2054640142","https://openalex.org/W2078179989","https://openalex.org/W2113221323","https://openalex.org/W2126579184","https://openalex.org/W2133665775","https://openalex.org/W2156303437","https://openalex.org/W2163605009","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2262607787","https://openalex.org/W2292976057","https://openalex.org/W2301937176","https://openalex.org/W2344328033","https://openalex.org/W2408141691","https://openalex.org/W2560674852","https://openalex.org/W2583638424","https://openalex.org/W2603766943","https://openalex.org/W2623430765","https://openalex.org/W2740546229","https://openalex.org/W2746600820","https://openalex.org/W2765424254","https://openalex.org/W2777647957","https://openalex.org/W2809943552","https://openalex.org/W2884238566","https://openalex.org/W2890591829","https://openalex.org/W2890954269","https://openalex.org/W2895097814","https://openalex.org/W2897891760","https://openalex.org/W2902809608","https://openalex.org/W2925709178","https://openalex.org/W2947129602","https://openalex.org/W2950689937","https://openalex.org/W2962872506","https://openalex.org/W2962917037","https://openalex.org/W2963524571","https://openalex.org/W2963559829","https://openalex.org/W2963771536","https://openalex.org/W2963857521","https://openalex.org/W2963920537","https://openalex.org/W2964077693","https://openalex.org/W2964346747","https://openalex.org/W2964784299","https://openalex.org/W2973009130","https://openalex.org/W2981554050","https://openalex.org/W2982109374","https://openalex.org/W2983838625","https://openalex.org/W2998254302","https://openalex.org/W3000042338","https://openalex.org/W3034196143","https://openalex.org/W3035447895","https://openalex.org/W3040282630","https://openalex.org/W3092799791","https://openalex.org/W3102542372","https://openalex.org/W3103557498","https://openalex.org/W3106412272","https://openalex.org/W3108072218","https://openalex.org/W3118859451","https://openalex.org/W3171101525","https://openalex.org/W3176600562","https://openalex.org/W3179761913","https://openalex.org/W3190332634","https://openalex.org/W3196595791","https://openalex.org/W3213911756","https://openalex.org/W4221139054","https://openalex.org/W4288363925","https://openalex.org/W4293846201","https://openalex.org/W4297974956","https://openalex.org/W6633724138","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6682864246","https://openalex.org/W6684191040","https://openalex.org/W6722479552","https://openalex.org/W6746608116","https://openalex.org/W6750404860","https://openalex.org/W6754438973","https://openalex.org/W6758684365","https://openalex.org/W6761100157","https://openalex.org/W6769522718","https://openalex.org/W6771683604","https://openalex.org/W6772225987","https://openalex.org/W6773384939","https://openalex.org/W6774685073","https://openalex.org/W6802132236"],"related_works":["https://openalex.org/W2529311304","https://openalex.org/W4248275646","https://openalex.org/W2992609826","https://openalex.org/W3124809058","https://openalex.org/W2552900035","https://openalex.org/W2162875951","https://openalex.org/W2062875858","https://openalex.org/W4380047323","https://openalex.org/W3009622996","https://openalex.org/W3037859390"],"abstract_inverted_index":{"Video":[0],"classification":[1,79,207],"systems":[2],"are":[3,46],"vulnerable":[4],"to":[5,26,75,87,113,127,140,151,218,228],"adversarial":[6,54,70,144,170,222],"attacks,":[7],"which":[8,93],"can":[9,202],"create":[10],"severe":[11],"security":[12],"problems":[13],"in":[14,29,33,98,110,172,192],"video":[15,69,78,125,206],"verification.":[16],"Current":[17],"black-box":[18,68],"attacks":[19,42,112,171,194],"need":[20,197],"a":[21,67,215],"large":[22],"number":[23,177],"of":[24,36,118,174,178,188,224],"queries":[25,179],"succeed,":[27],"resulting":[28],"high":[30],"computational":[31],"overhead":[32],"the":[34,39,77,89,99,103,115,119,123,131,143,168,176,181,189,205,212,221],"process":[35],"attack.":[37],"On":[38],"other":[40],"hand,":[41],"with":[43],"restricted":[44],"perturbations":[45,63],"ineffective":[47],"against":[48,183],"defenses":[49],"such":[50],"as":[51],"denoising":[52],"or":[53,128],"training.":[55],"In":[56],"this":[57],"paper,":[58],"we":[59,210],"focus":[60],"on":[61,154],"unrestricted":[62,232],"and":[64,159,180],"propose":[65],"StyleFool,":[66],"attack":[71],"via":[72],"style":[73,91],"transfer":[74],"fool":[76,204],"system.":[80],"StyleFool":[81,153,166,225],"first":[82],"utilizes":[83],"color":[84],"theme":[85],"proximity":[86],"select":[88],"best":[90],"image,":[92],"helps":[94],"avoid":[95],"unnatural":[96],"details":[97],"stylized":[100,124,190],"videos.":[101],"Meanwhile,":[102],"target":[104],"class":[105],"confidence":[106],"is":[107,137],"additionally":[108],"considered":[109],"targeted":[111],"influence":[114],"output":[116],"distribution":[117],"classifier":[120],"by":[121],"moving":[122],"closer":[126],"even":[129],"across":[130],"decision":[132],"boundary.":[133],"A":[134],"gradient-free":[135],"method":[136],"then":[138],"employed":[139],"further":[141],"optimize":[142],"perturbations.":[145,233],"We":[146],"carry":[147],"out":[148],"extensive":[149],"experiments":[150],"evaluate":[152,211],"two":[155],"standard":[156],"datasets,":[157],"UCF-101":[158],"HMDB-51.":[160],"The":[161],"experimental":[162],"results":[163],"demonstrate":[164],"that":[165,220],"outperforms":[167],"state-of-the-art":[169],"terms":[173],"both":[175],"robustness":[182],"existing":[184],"defenses.":[185],"Moreover,":[186],"50%":[187],"videos":[191],"untargeted":[193],"do":[195],"not":[196],"any":[198],"query":[199],"since":[200],"they":[201],"already":[203],"model.":[208],"Furthermore,":[209],"indistinguishability":[213],"through":[214],"user":[216],"study":[217],"show":[219],"samples":[223],"look":[226],"imperceptible":[227],"human":[229],"eyes,":[230],"despite":[231]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":6}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}