{"id":"https://openalex.org/W4312518191","doi":"https://doi.org/10.1109/tetci.2022.3214627","title":"SA-ES: Subspace Activation Evolution Strategy for Black-Box Adversarial Attacks","display_name":"SA-ES: Subspace Activation Evolution Strategy for Black-Box Adversarial Attacks","publication_year":2022,"publication_date":"2022-11-04","ids":{"openalex":"https://openalex.org/W4312518191","doi":"https://doi.org/10.1109/tetci.2022.3214627"},"language":"en","primary_location":{"id":"doi:10.1109/tetci.2022.3214627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2022.3214627","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100357950","display_name":"Zhenhua Li","orcid":"https://orcid.org/0000-0002-6212-6384"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenhua Li","raw_affiliation_strings":["Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-6212-6384","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101625389","display_name":"Huilin Cheng","orcid":"https://orcid.org/0000-0002-9107-6179"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huilin Cheng","raw_affiliation_strings":["Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089246523","display_name":"Xinye Cai","orcid":"https://orcid.org/0000-0002-5208-7254"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinye Cai","raw_affiliation_strings":["Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-5208-7254","affiliations":[{"raw_affiliation_string":"Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100358009","display_name":"Jun Zhao","orcid":"https://orcid.org/0000-0002-3573-152X"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Zhao","raw_affiliation_strings":["Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-3573-152X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000546219","display_name":"Qingfu Zhang","orcid":"https://orcid.org/0000-0003-0786-0671"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qingfu Zhang","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hong Kong, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0003-0786-0671","affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I168719708"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3121,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.83689605,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"7","issue":"3","first_page":"780","last_page":"790"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9771000146865845,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9731000065803528,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9306687116622925},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.7144990563392639},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6824437379837036},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.680735170841217},{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.6331989765167236},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46821144223213196},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4545530378818512},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.34904181957244873},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34186720848083496},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.32987916469573975},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32824403047561646},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.3268505036830902},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1846216320991516}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9306687116622925},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.7144990563392639},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6824437379837036},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.680735170841217},{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.6331989765167236},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46821144223213196},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4545530378818512},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.34904181957244873},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34186720848083496},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.32987916469573975},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32824403047561646},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.3268505036830902},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1846216320991516}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tetci.2022.3214627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tetci.2022.3214627","pdf_url":null,"source":{"id":"https://openalex.org/S4210210251","display_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","issn_l":"2471-285X","issn":["2471-285X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Emerging Topics in Computational Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1878474642","display_name":null,"funder_award_id":"62102178","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3512189188","display_name":null,"funder_award_id":"62125302","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7529917","display_name":"\u9762\u5411\u5927\u6570\u636e\u673a\u5668\u5b66\u4e60\u7684\u4e0d\u786e\u5b9a\u6027\u5efa\u6a21\u53ca\u5e94\u7528\u7814\u7a76","funder_award_id":"61732006","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7647738381","display_name":null,"funder_award_id":"62072234","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W2112796928","https://openalex.org/W2114079787","https://openalex.org/W2117539524","https://openalex.org/W2142508340","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2535873859","https://openalex.org/W2556930864","https://openalex.org/W2603766943","https://openalex.org/W2728489159","https://openalex.org/W2746600820","https://openalex.org/W2766293931","https://openalex.org/W2774644650","https://openalex.org/W2794002979","https://openalex.org/W2798302089","https://openalex.org/W2883285025","https://openalex.org/W2887906331","https://openalex.org/W2906208681","https://openalex.org/W2950782995","https://openalex.org/W2950794298","https://openalex.org/W2963062382","https://openalex.org/W2963070423","https://openalex.org/W2963361074","https://openalex.org/W2963857521","https://openalex.org/W2964205597","https://openalex.org/W2965333252","https://openalex.org/W2972986629","https://openalex.org/W2985451033","https://openalex.org/W2996490176","https://openalex.org/W3007384386","https://openalex.org/W3016550207","https://openalex.org/W3106412272","https://openalex.org/W3107235539","https://openalex.org/W3118608800","https://openalex.org/W3195153428","https://openalex.org/W4206174193","https://openalex.org/W4213135969","https://openalex.org/W4293846201","https://openalex.org/W4324106947","https://openalex.org/W6637162671","https://openalex.org/W6682262322","https://openalex.org/W6702989015","https://openalex.org/W6729977899","https://openalex.org/W6735865323","https://openalex.org/W6739868092","https://openalex.org/W6740800178","https://openalex.org/W6746608116","https://openalex.org/W6750404860","https://openalex.org/W6753044988","https://openalex.org/W6754376045","https://openalex.org/W6759580348","https://openalex.org/W6761833289","https://openalex.org/W6767506513","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4300326282","https://openalex.org/W2742395793","https://openalex.org/W3126156081","https://openalex.org/W3016514588","https://openalex.org/W4312518191","https://openalex.org/W4285196247","https://openalex.org/W2914158293","https://openalex.org/W3041676721","https://openalex.org/W4210611492","https://openalex.org/W4213432687"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"are":[3,62],"vulnerable":[4],"to":[5,31,179],"adversarial":[6,24,46,60,82,100,109,120,133,163,189,193],"examples":[7,47,61,164,190],"that":[8,123,145],"alter":[9],"the":[10,17,23,29,33,36,41,52,57,67,80,92,146,160,166,171,192],"output":[11],"significantly":[12],"with":[13,48,165],"imperceptible":[14],"change":[15],"in":[16,51,66],"input.":[18],"In":[19,70,174],"our":[20],"black-box":[21,68,81,182],"setting,":[22],"attacker":[25],"can":[26,149],"only":[27,104],"query":[28],"model":[30],"predict":[32],"value":[34],"after":[35],"softmax":[37],"layer":[38],"without":[39],"accessing":[40],"underlying":[42],"model.":[43,195],"Currently,":[44],"generating":[45,97],"high":[49],"qualifications":[50],"query-limited":[53],"setting":[54],"and":[55,143,157,169],"investigating":[56],"distribution":[58,118,129,161],"of":[59,103,119,154,162],"two":[63],"main":[64],"challenges":[65],"attack.":[69],"this":[71,128],"paper,":[72],"we":[73,176],"propose":[74],"a":[75,117,124],"zeroth-order":[76],"optimization":[77],"method":[78],"for":[79,96,106,111,191],"attack,":[83],"termed":[84],"subspace":[85],"activation":[86],"evolution":[87],"strategy":[88],"(SA-ES).":[89],"It":[90],"captures":[91],"most":[93],"promising":[94],"direction":[95],"more":[98],"convincing":[99],"examples.Moreover,":[101],"instead":[102],"searching":[105],"one":[107],"reliable":[108],"example":[110],"an":[112,132,155],"original":[113],"input,":[114],"SA-ES":[115,178],"finds":[116],"examples,":[121],"such":[122],"sample":[125],"drawn":[126],"from":[127],"is":[130],"likely":[131],"example.":[134],"We":[135],"conduct":[136],"comprehensive":[137],"experiments":[138],"on":[139],"various":[140],"data":[141],"sets":[142],"validate":[144],"proposed":[147],"algorithm":[148],"efficiently":[150],"find":[151],"perturbation-sensitive":[152],"regions":[153],"image":[156],"stably":[158],"explore":[159],"limited":[167],"query,":[168],"outperforms":[170],"existing":[172],"methods.":[173],"addition,":[175],"apply":[177],"physical":[180,188],"reality":[181],"attacks,":[183],"which":[184],"effectively":[185],"generate":[186],"simulated":[187],"training":[194]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}