{"id":"https://openalex.org/W4380032277","doi":"https://doi.org/10.1109/tifs.2023.3284649","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","display_name":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4380032277","doi":"https://doi.org/10.1109/tifs.2023.3284649"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3284649","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3284649","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://iris.unitn.it/bitstream/11572/383192/1/Logit_Margin-TIFS23.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041234756","display_name":"Juanjuan Weng","orcid":"https://orcid.org/0000-0003-0825-2272"},"institutions":[{"id":"https://openalex.org/I191208505","display_name":"Xiamen University","ror":"https://ror.org/00mcjh785","country_code":"CN","type":"education","lineage":["https://openalex.org/I191208505"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Juanjuan Weng","raw_affiliation_strings":["Department of Artificial Intelligence, Xiamen University, Xiamen, China"],"raw_orcid":"https://orcid.org/0000-0003-0825-2272","affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence, Xiamen University, Xiamen, China","institution_ids":["https://openalex.org/I191208505"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072443458","display_name":"Zhiming Luo","orcid":"https://orcid.org/0000-0002-3411-9582"},"institutions":[{"id":"https://openalex.org/I191208505","display_name":"Xiamen University","ror":"https://ror.org/00mcjh785","country_code":"CN","type":"education","lineage":["https://openalex.org/I191208505"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiming Luo","raw_affiliation_strings":["Department of Artificial Intelligence, Xiamen University, Xiamen, China"],"raw_orcid":"https://orcid.org/0000-0002-3411-9582","affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence, Xiamen University, Xiamen, China","institution_ids":["https://openalex.org/I191208505"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081767617","display_name":"Shaozi Li","orcid":"https://orcid.org/0000-0001-5403-9945"},"institutions":[{"id":"https://openalex.org/I191208505","display_name":"Xiamen University","ror":"https://ror.org/00mcjh785","country_code":"CN","type":"education","lineage":["https://openalex.org/I191208505"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaozi Li","raw_affiliation_strings":["Department of Artificial Intelligence, Xiamen University, Xiamen, China"],"raw_orcid":"https://orcid.org/0000-0001-5403-9945","affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence, Xiamen University, Xiamen, China","institution_ids":["https://openalex.org/I191208505"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027171279","display_name":"Nicu Sebe","orcid":"https://orcid.org/0000-0002-6597-7248"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Nicu Sebe","raw_affiliation_strings":["Department of Information Engineering and Computer Science, University of Trento, Trento, Italy"],"raw_orcid":"https://orcid.org/0000-0002-6597-7248","affiliations":[{"raw_affiliation_string":"Department of Information Engineering and Computer Science, University of Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065328976","display_name":"Zhun Zhong","orcid":"https://orcid.org/0000-0002-8202-0544"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Zhun Zhong","raw_affiliation_strings":["Department of Information Engineering and Computer Science, University of Trento, Trento, Italy"],"raw_orcid":"https://orcid.org/0000-0002-8202-0544","affiliations":[{"raw_affiliation_string":"Department of Information Engineering and Computer Science, University of Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0468,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.92901426,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"18","issue":null,"first_page":"3561","last_page":"3574"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9753999710083008,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11216","display_name":"Radiation Detection and Scintillator Technologies","score":0.964900016784668,"subfield":{"id":"https://openalex.org/subfields/3108","display_name":"Radiation"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.8266361951828003},{"id":"https://openalex.org/keywords/logit","display_name":"Logit","score":0.7940179109573364},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7505391836166382},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7057284116744995},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"Logistic regression","score":0.6710940599441528},{"id":"https://openalex.org/keywords/calibration","display_name":"Calibration","score":0.6044248938560486},{"id":"https://openalex.org/keywords/econometrics","display_name":"Econometrics","score":0.4734713137149811},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.37555840611457825},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.343924880027771},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.2744009494781494},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.15996119379997253}],"concepts":[{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.8266361951828003},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.7940179109573364},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7505391836166382},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7057284116744995},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.6710940599441528},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.6044248938560486},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.4734713137149811},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.37555840611457825},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.343924880027771},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2744009494781494},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.15996119379997253}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tifs.2023.3284649","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3284649","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:iris.unitn.it:11572/383192","is_oa":true,"landing_page_url":"https://hdl.handle.net/11572/383192","pdf_url":"https://iris.unitn.it/bitstream/11572/383192/1/Logit_Margin-TIFS23.pdf","source":{"id":"https://openalex.org/S4377196320","display_name":"Iris (University of Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:zenodo.org:8335385","is_oa":true,"landing_page_url":"https://zenodo.org/record/8335385","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Information Forensics and Security 18(6) 3561-3574","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:iris.unitn.it:11572/383192","is_oa":true,"landing_page_url":"https://hdl.handle.net/11572/383192","pdf_url":"https://iris.unitn.it/bitstream/11572/383192/1/Logit_Margin-TIFS23.pdf","source":{"id":"https://openalex.org/S4377196320","display_name":"Iris (University of Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1912650229","display_name":null,"funder_award_id":"2022J01002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4397263494","display_name":null,"funder_award_id":"951911","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"},{"id":"https://openalex.org/G4730125998","display_name":null,"funder_award_id":"2022J01002","funder_id":"https://openalex.org/F4320321878","funder_display_name":"Natural Science Foundation of Fujian Province"},{"id":"https://openalex.org/G5940849163","display_name":null,"funder_award_id":"62276221","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7331901853","display_name":null,"funder_award_id":"EU H2020","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321878","display_name":"Natural Science Foundation of Fujian Province","ror":null},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4380032277.pdf","grobid_xml":"https://content.openalex.org/works/W4380032277.grobid-xml"},"referenced_works_count":71,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W1686810756","https://openalex.org/W1821462560","https://openalex.org/W1903029394","https://openalex.org/W1945616565","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2570685808","https://openalex.org/W2774644650","https://openalex.org/W2804935296","https://openalex.org/W2947821610","https://openalex.org/W2950048339","https://openalex.org/W2962847335","https://openalex.org/W2963163009","https://openalex.org/W2963389226","https://openalex.org/W2963446712","https://openalex.org/W2963466847","https://openalex.org/W2963542245","https://openalex.org/W2963744840","https://openalex.org/W2963855547","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2972986629","https://openalex.org/W2976752987","https://openalex.org/W2984699060","https://openalex.org/W2994088087","https://openalex.org/W2998457557","https://openalex.org/W3006076803","https://openalex.org/W3009542902","https://openalex.org/W3015646845","https://openalex.org/W3020621865","https://openalex.org/W3022021750","https://openalex.org/W3034190247","https://openalex.org/W3035569111","https://openalex.org/W3088377098","https://openalex.org/W3110144845","https://openalex.org/W3114501414","https://openalex.org/W3117037102","https://openalex.org/W3162549644","https://openalex.org/W3163465952","https://openalex.org/W3166898278","https://openalex.org/W3170874841","https://openalex.org/W4214703392","https://openalex.org/W4214870408","https://openalex.org/W4226378932","https://openalex.org/W4291653584","https://openalex.org/W4308831279","https://openalex.org/W4312469934","https://openalex.org/W4313141826","https://openalex.org/W6620707391","https://openalex.org/W6637373629","https://openalex.org/W6638523607","https://openalex.org/W6640425456","https://openalex.org/W6729756640","https://openalex.org/W6731927902","https://openalex.org/W6738693630","https://openalex.org/W6756444276","https://openalex.org/W6758684365","https://openalex.org/W6763091886","https://openalex.org/W6768366551","https://openalex.org/W6770979763","https://openalex.org/W6771961379","https://openalex.org/W6773713311","https://openalex.org/W6774469542","https://openalex.org/W6776690448","https://openalex.org/W6785111489","https://openalex.org/W6787052717","https://openalex.org/W6788135285","https://openalex.org/W6842094839"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4289744111","https://openalex.org/W2077865273","https://openalex.org/W2559245114","https://openalex.org/W1989125082"],"abstract_inverted_index":{"Previous":[0],"works":[1],"have":[2],"extensively":[3],"studied":[4],"the":[5,34,50,64,71,75,89,98,103,107,112,129,163,167,171,175,181,194,198,201,206],"transferability":[6,26],"of":[7,52,63,100,141,174,200],"adversarial":[8,22,46,168],"samples":[9],"in":[10,84,92,209],"untargeted":[11,78],"black-box":[12,210],"scenarios.":[13],"However,":[14],"it":[15],"still":[16],"remains":[17],"challenging":[18],"to":[19,42,49,97,109,147,155],"craft":[20],"targeted":[21,45,76,211],"examples":[23,47,169],"with":[24,111,131],"higher":[25,156],"than":[27],"non-targeted":[28],"ones.":[29],"Recent":[30],"studies":[31],"reveal":[32],"that":[33,70,161],"traditional":[35],"Cross-Entropy":[36],"(CE)":[37],"loss":[38,66],"function":[39,67],"is":[40,184,216],"insufficient":[41],"learn":[43],"transferable":[44],"due":[48],"issue":[51,114],"vanishing":[53],"gradient.":[54],"In":[55],"this":[56,93],"work,":[57],"we":[58,95,159],"provide":[59],"a":[60,132,149],"comprehensive":[61],"investigation":[62],"CE":[65],"and":[68,77,115,119,135,153,170],"find":[69],"logit":[72,104,121,151],"margin":[73,105,152],"between":[74,166],"classes":[79],"will":[80],"quickly":[81],"obtain":[82],"saturation":[83,113],"CE,":[85],"which":[86,124,183,204],"largely":[87],"limits":[88],"transferability.":[90,157],"Therefore,":[91],"paper,":[94],"devote":[96],"goal":[99],"continually":[101],"increasing":[102],"along":[106],"optimization":[108,146],"deal":[110],"propose":[116],"two":[117],"simple":[118],"effective":[120],"calibration":[122],"methods,":[123,203],"are":[125],"achieved":[126],"by":[127],"downscaling":[128,187],"logits":[130,188],"temperature":[133],"factor":[134],"an":[136],"adaptive":[137],"margin,":[138],"respectively.":[139],"Both":[140],"them":[142],"can":[143,178],"effectively":[144],"encourage":[145],"produce":[148],"larger":[150],"lead":[154],"Besides,":[158],"show":[160],"minimizing":[162],"cosine":[164],"distance":[165],"classifier":[172],"weights":[173],"target":[176],"class":[177],"further":[179],"improve":[180],"transferability,":[182],"benefited":[185],"from":[186],"via":[189],"L2-normalization.":[190],"Experiments":[191],"conducted":[192],"on":[193],"ImageNet":[195],"dataset":[196],"validate":[197],"effectiveness":[199],"proposed":[202],"outperform":[205],"state-of-the-art":[207],"methods":[208],"attacks.":[212],"The":[213],"source":[214],"code":[215],"available":[217],"at":[218],"Link.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2023-06-10T00:00:00"}