{"id":"https://openalex.org/W4413754628","doi":"https://doi.org/10.1109/tai.2025.3602931","title":"Certified Local Transferability for Evaluating Adversarial Attacks","display_name":"Certified Local Transferability for Evaluating Adversarial Attacks","publication_year":2025,"publication_date":"2025-08-27","ids":{"openalex":"https://openalex.org/W4413754628","doi":"https://doi.org/10.1109/tai.2025.3602931"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2025.3602931","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2025.3602931","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Minyu Chen","orcid":"https://orcid.org/0009-0006-3406-7520"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minyu Chen","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0006-3406-7520","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingyang Li","orcid":"https://orcid.org/0000-0002-3707-4623"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyang Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3707-4623","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ling-I Wu","orcid":"https://orcid.org/0009-0001-8259-2200"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ling-I Wu","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0001-8259-2200","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100354142","display_name":"Guoqiang Li","orcid":"https://orcid.org/0000-0001-9005-7112"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoqiang Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-9005-7112","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11160188,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"3","first_page":"1574","last_page":"1583"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.9596331119537354},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7713325023651123},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5740170478820801},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5472074747085571},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.48739176988601685},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.35023796558380127},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.21334514021873474},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.17616680264472961},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.13483235239982605},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.11104628443717957}],"concepts":[{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.9596331119537354},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7713325023651123},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5740170478820801},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5472074747085571},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48739176988601685},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.35023796558380127},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.21334514021873474},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.17616680264472961},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.13483235239982605},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.11104628443717957},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2025.3602931","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2025.3602931","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4409346678","https://openalex.org/W4392340763","https://openalex.org/W4283325551"],"abstract_inverted_index":{"Deep":[0],"neural":[1,168],"networks":[2],"are":[3,22],"known":[4],"to":[5,8,24,78,91,137],"be":[6],"vulnerable":[7,107],"adversarial":[9,12,63,146],"examples.":[10],"Though":[11],"attacks":[13,140],"show":[14,149],"effectiveness":[15],"in":[16,163],"misleading":[17],"models,":[18],"most":[19],"attack":[20,126],"methods":[21],"designed":[23],"poison":[25],"a":[26,50,61,76,87,123],"specific":[27],"image.":[28],"To":[29],"investigate":[30],"the":[31,35,40,43,68,80,93,104,150,165],"actual":[32],"effect":[33],"on":[34,141],"feature":[36],"space,":[37],"we":[38,56],"introduce":[39],"concept":[41],"of":[42,53,72,83,96,152,167],"certified":[44],"local":[45,81],"transferable":[46],"region.":[47,98],"This":[48],"is":[49,75,120],"connected":[51],"area":[52,108],"inputs":[54],"where":[55],"can":[57],"mathematically":[58],"guarantee":[59],"that":[60],"single":[62],"perturbation":[64],"will":[65],"successfully":[66],"fool":[67],"model.":[69],"The":[70],"size":[71,95],"this":[73,97],"region":[74],"metric":[77,155],"evaluate":[79,138],"transferability":[82],"perturbations.":[84],"We":[85,133],"present":[86],"novel":[88],"method,":[89],"RAOS,":[90],"estimate":[92],"maximum":[94],"Our":[99],"approach":[100],"efficiently":[101],"searches":[102],"for":[103],"largest":[105],"possible":[106],"around":[109],"an":[110],"original":[111],"input":[112],"by":[113],"iteratively":[114],"refining":[115],"its":[116,161],"boundaries.":[117],"Each":[118],"step":[119],"guided":[121],"with":[122,130],"minimal":[124],"distance":[125],"algorithm":[127],"and":[128,145,159],"proven":[129],"state-of-the-art":[131],"verifiers.":[132],"conduct":[134],"empirical":[135],"experiments":[136],"various":[139],"different":[142],"model":[143],"structures":[144],"training":[147],"scenarios.We":[148],"advantage":[151],"our":[153],"proposed":[154],"over":[156],"existing":[157],"ones":[158],"demonstrate":[160],"utility":[162],"exploring":[164],"robustness":[166],"networks.":[169]},"counts_by_year":[],"updated_date":"2026-02-28T06:14:18.631764","created_date":"2025-10-10T00:00:00"}