{"id":"https://openalex.org/W4414856523","doi":"https://doi.org/10.1109/tgrs.2025.3614488","title":"On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensing","display_name":"On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensing","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4414856523","doi":"https://doi.org/10.1109/tgrs.2025.3614488"},"language":"en","primary_location":{"id":"doi:10.1109/tgrs.2025.3614488","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tgrs.2025.3614488","pdf_url":null,"source":{"id":"https://openalex.org/S111326731","display_name":"IEEE Transactions on Geoscience and Remote Sensing","issn_l":"0196-2892","issn":["0196-2892","1558-0644"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Geoscience and Remote Sensing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072156971","display_name":"Tao Bai","orcid":"https://orcid.org/0000-0002-2034-8026"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tao Bai","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2034-8026","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109638015","display_name":"Xingjian Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xingjian Tian","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0009-0008-5462-8107","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068885379","display_name":"Yonghao Xu","orcid":"https://orcid.org/0000-0002-6857-0152"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Yonghao Xu","raw_affiliation_strings":["Department of Electrical Engineering (ISY), Computer Vision Laboratory (CVL), Linköping University, Linköping, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-6857-0152","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering (ISY), Computer Vision Laboratory (CVL), Linköping University, Linköping, Sweden","institution_ids":["https://openalex.org/I102134673"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024709593","display_name":"Bihan Wen","orcid":"https://orcid.org/0000-0002-6874-6453"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Bihan Wen","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6874-6453","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6368,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88240226,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":"63","issue":null,"first_page":"1","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8144000172615051},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7229999899864197},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.6003999710083008},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.5169000029563904},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.4115999937057495},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.40700000524520874},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.37689998745918274},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.3465999960899353},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3456000089645386}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8557000160217285},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8144000172615051},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7229999899864197},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.6003999710083008},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.5169000029563904},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4643000066280365},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45339998602867126},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4242999851703644},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4115999937057495},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.40700000524520874},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.37689998745918274},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3456000089645386},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.3140000104904175},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.30889999866485596},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.30640000104904175},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.30239999294281006},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.29660001397132874},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.2842000126838684},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2840999960899353},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2669000029563904},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2563000023365021}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tgrs.2025.3614488","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tgrs.2025.3614488","pdf_url":null,"source":{"id":"https://openalex.org/S111326731","display_name":"IEEE Transactions on Geoscience and Remote Sensing","issn_l":"0196-2892","issn":["0196-2892","1558-0644"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Geoscience and Remote Sensing","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/217769","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/217769","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6420927001","display_name":null,"funder_award_id":"2024-05652","funder_id":"https://openalex.org/F4320322887","funder_display_name":"The Research Council"}],"funders":[{"id":"https://openalex.org/F4320322887","display_name":"The Research Council","ror":"https://ror.org/03tcppy59"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W1861492603","https://openalex.org/W1901129140","https://openalex.org/W1903029394","https://openalex.org/W1980038761","https://openalex.org/W2031876960","https://openalex.org/W2088805832","https://openalex.org/W2098676252","https://openalex.org/W2108598243","https://openalex.org/W2165698076","https://openalex.org/W2194775991","https://openalex.org/W2248723555","https://openalex.org/W2253590344","https://openalex.org/W2296151615","https://openalex.org/W2515866431","https://openalex.org/W2603766943","https://openalex.org/W2737129951","https://openalex.org/W2745565856","https://openalex.org/W2804935296","https://openalex.org/W2899747753","https://openalex.org/W2963229629","https://openalex.org/W2963578416","https://openalex.org/W2963857521","https://openalex.org/W2982083293","https://openalex.org/W2989751901","https://openalex.org/W3002497127","https://openalex.org/W3016406224","https://openalex.org/W3034619610","https://openalex.org/W3035821888","https://openalex.org/W3036506870","https://openalex.org/W3096609285","https://openalex.org/W3127159478","https://openalex.org/W3138516171","https://openalex.org/W3201623325","https://openalex.org/W3204447734","https://openalex.org/W3206814941","https://openalex.org/W3210341560","https://openalex.org/W3216244838","https://openalex.org/W4210784289","https://openalex.org/W4214833808","https://openalex.org/W4285293944","https://openalex.org/W4288391486","https://openalex.org/W4295308209","https://openalex.org/W4309717800","https://openalex.org/W4312795296","https://openalex.org/W4327563530","https://openalex.org/W4381278679","https://openalex.org/W4384009247","https://openalex.org/W4388966762","https://openalex.org/W4389113716","https://openalex.org/W4392903198","https://openalex.org/W4393906060","https://openalex.org/W4396767059","https://openalex.org/W4396982199","https://openalex.org/W4401567578","https://openalex.org/W4406125612","https://openalex.org/W4408222802","https://openalex.org/W4412536495"],"related_works":[],"abstract_inverted_index":{"Transfer":[0],"learning":[1,143,164],"with":[2,66],"pretrained":[3,85],"models":[4,47],"from":[5],"general":[6],"computer":[7],"vision":[8],"tasks":[9,36],"is":[10],"widely":[11],"adopted":[12],"in":[13,84,115,123,127,132,141,162],"remote":[14,166],"sensing,":[15,167],"offering":[16],"reduced":[17],"training":[18],"costs":[19],"and":[20,28,71,99,130,153,188],"improved":[21],"performance":[22],"across":[23,101,151],"applications":[24],"like":[25],"scene":[26,124],"classification":[27],"semantic":[29,128],"segmentation.":[30],"However,":[31],"this":[32],"practice":[33],"exposes":[34],"downstream":[35],"to":[37,48,121,148,177],"significant":[38],"vulnerabilities,":[39],"as":[40],"adversaries":[41],"can":[42],"exploit":[43],"publicly":[44],"available":[45],"pre-trained":[46],"craft":[49],"attacks":[50,150],"that":[51],"compromise":[52],"model":[53,112,186],"integrity.":[54],"This":[55],"paper":[56],"introduces":[57],"Adversarial":[58],"Neuron":[59],"Manipulation":[60],"(ANM),":[61],"a":[62],"novel":[63],"attack":[64],"strategy":[65],"two":[67],"variants\u2014ANM-S":[68],"(Single":[69],"Neuron)":[70],"ANM-M":[72],"(Multiple":[73],"Neurons)\u2014that":[74],"generates":[75],"highly":[76],"transferable":[77,149],"perturbations":[78],"by":[79,119],"selectively":[80],"targeting":[81],"fragile":[82],"neurons":[83],"models.":[86],"Unlike":[87],"existing":[88],"adversarial":[89,195],"attacks,":[90],"ANM":[91,109,168],"requires":[92],"no":[93],"domain-specific":[94],"knowledge,":[95],"enhancing":[96],"its":[97],"applicability":[98],"efficiency":[100],"diverse":[102],"settings.":[103],"Evaluated":[104],"on":[105],"various":[106],"benchmark":[107],"datasets,":[108],"significantly":[110],"degrades":[111],"performance.":[113],"ANM-M,":[114],"particular,":[116],"reduces":[117],"accuracy":[118],"up":[120],"84.24%":[122],"classification,":[125],"42.47%":[126],"segmentation,":[129],"75.33%":[131],"object":[133],"detection":[134],"(mAP).":[135],"These":[136],"results":[137],"reveal":[138],"critical":[139],"weaknesses":[140],"deep":[142],"models,":[144],"especially":[145],"their":[146],"susceptibility":[147],"CNN":[152],"Transformer":[154],"architectures.":[155],"By":[156],"exposing":[157],"the":[158,170],"security":[159],"risks":[160],"inherent":[161],"transfer":[163],"for":[165,173,184],"underscores":[169],"urgent":[171],"need":[172],"robust":[174],"defense":[175],"mechanisms":[176],"safeguard":[178],"safety-critical":[179],"applications.":[180],"Our":[181],"findings":[182],"advocate":[183],"enhanced":[185],"resilience":[187],"motivate":[189],"future":[190],"research":[191],"into":[192],"countering":[193],"sophisticated":[194],"threats.":[196]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-29T08:53:18.405633","created_date":"2025-10-10T00:00:00"}