{"id":"https://openalex.org/W4386090485","doi":"https://doi.org/10.1109/tifs.2023.3307908","title":"Query-Efficient Decision-Based Black-Box Patch Attack","display_name":"Query-Efficient Decision-Based Black-Box Patch Attack","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4386090485","doi":"https://doi.org/10.1109/tifs.2023.3307908"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3307908","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3307908","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101729649","display_name":"Zhaoyu Chen","orcid":"https://orcid.org/0000-0002-7112-2596"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoyu Chen","raw_affiliation_strings":["Academy for Engineering and Technology, Fudan University, Shanghai, China","Yiwu Research Institute of Fudan University, Yiwu, China"],"raw_orcid":"https://orcid.org/0000-0002-7112-2596","affiliations":[{"raw_affiliation_string":"Academy for Engineering and Technology, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"Yiwu Research Institute of Fudan University, Yiwu, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100374366","display_name":"Bo Li","orcid":"https://orcid.org/0000-0001-7817-0665"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["Youtu Laboratory, Tencent, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-7817-0665","affiliations":[{"raw_affiliation_string":"Youtu Laboratory, Tencent, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102008934","display_name":"Shuang Wu","orcid":"https://orcid.org/0000-0003-1237-2656"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuang Wu","raw_affiliation_strings":["Youtu Laboratory, Tencent, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-1237-2656","affiliations":[{"raw_affiliation_string":"Youtu Laboratory, Tencent, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086397952","display_name":"Shouhong Ding","orcid":"https://orcid.org/0000-0002-3175-3553"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouhong Ding","raw_affiliation_strings":["Youtu Laboratory, Tencent, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Youtu Laboratory, Tencent, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100669255","display_name":"Wenqiang Zhang","orcid":"https://orcid.org/0000-0002-3339-8751"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenqiang Zhang","raw_affiliation_strings":["Academy for Engineering and Technology, Fudan University, Shanghai, China","Yiwu Research Institute of Fudan University, Yiwu, China"],"raw_orcid":"https://orcid.org/0000-0002-3339-8751","affiliations":[{"raw_affiliation_string":"Academy for Engineering and Technology, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"Yiwu Research Institute of Fudan University, Yiwu, China","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.9174,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":{"value":0.95980025,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"18","issue":null,"first_page":"5522","last_page":"5536"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9660000205039978,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9348999857902527,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8932501673698425},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5880246758460999},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.5823906064033508},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.521699845790863},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46990081667900085},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4624479115009308},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.44477978348731995},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4257379174232483},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35900482535362244},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.34533119201660156},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2165493667125702}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8932501673698425},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5880246758460999},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.5823906064033508},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.521699845790863},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46990081667900085},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4624479115009308},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.44477978348731995},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4257379174232483},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35900482535362244},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.34533119201660156},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2165493667125702},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3307908","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3307908","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7699999809265137}],"awards":[{"id":"https://openalex.org/G1941022325","display_name":null,"funder_award_id":"22511102202","funder_id":"https://openalex.org/F4320336652","funder_display_name":"Science and Technology Innovation Plan Of Shanghai Science and Technology Commission"},{"id":"https://openalex.org/G7143284523","display_name":"\u52a8\u6001\u573a\u666f\u4e2d\u673a\u5668\u4eba\u663e\u8457\u6027\u76ee\u6807\u8bc6\u522b\u4e0e\u8868\u8fbe\u6280\u672f\u7814\u7a76","funder_award_id":"62072112","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336652","display_name":"Science and Technology Innovation Plan Of Shanghai Science and Technology Commission","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W127069151","https://openalex.org/W1595159159","https://openalex.org/W1834627138","https://openalex.org/W2096733369","https://openalex.org/W2117539524","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2475287302","https://openalex.org/W2530184277","https://openalex.org/W2535873859","https://openalex.org/W2608583225","https://openalex.org/W2616247523","https://openalex.org/W2620038827","https://openalex.org/W2765424254","https://openalex.org/W2788820894","https://openalex.org/W2798302089","https://openalex.org/W2902867332","https://openalex.org/W2962898354","https://openalex.org/W2963302614","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2969664989","https://openalex.org/W2969985801","https://openalex.org/W2972986629","https://openalex.org/W2994027480","https://openalex.org/W3015625436","https://openalex.org/W3015646845","https://openalex.org/W3034892461","https://openalex.org/W3035524670","https://openalex.org/W3036294592","https://openalex.org/W3083269515","https://openalex.org/W3094821564","https://openalex.org/W3094984771","https://openalex.org/W3102564565","https://openalex.org/W3103557498","https://openalex.org/W3108072218","https://openalex.org/W3110144845","https://openalex.org/W3128390792","https://openalex.org/W3142085127","https://openalex.org/W3145185940","https://openalex.org/W3168542916","https://openalex.org/W3176237058","https://openalex.org/W3179647175","https://openalex.org/W3189402954","https://openalex.org/W4221166007","https://openalex.org/W4293846201","https://openalex.org/W4312610155","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6682865783","https://openalex.org/W6747706139","https://openalex.org/W6748982675","https://openalex.org/W6750404860","https://openalex.org/W6751839145","https://openalex.org/W6767506513","https://openalex.org/W6774113373","https://openalex.org/W6774469542","https://openalex.org/W6792762529","https://openalex.org/W6795140394","https://openalex.org/W6811734244"],"related_works":["https://openalex.org/W4389650576","https://openalex.org/W3210882018","https://openalex.org/W2970990331","https://openalex.org/W4379116102","https://openalex.org/W3207178610","https://openalex.org/W3211782752","https://openalex.org/W4312601715","https://openalex.org/W4377865163","https://openalex.org/W4392828243","https://openalex.org/W4312822655"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"have":[4,30],"been":[5],"showed":[6],"to":[7,11,27,191],"be":[8],"highly":[9],"vulnerable":[10],"imperceptible":[12],"adversarial":[13],"perturbations.":[14],"As":[15],"a":[16,62,118,149],"complementary":[17],"type":[18],"of":[19,34,43,49,103,141,165,189,205],"adversary,":[20],"patch":[21,37,82,127,137,142,175,193],"attacks":[22,38,138],"that":[23,131],"introduce":[24],"perceptible":[25],"perturbations":[26],"the":[28,32,41,44,47,55,65,70,80,86,91,101,112,134,162,173,179,187,201,215],"images":[29,99],"attracted":[31],"interest":[33],"researchers.":[35],"Existing":[36],"rely":[39],"on":[40,111,153,169,210],"architecture":[42],"model":[45,90],"or":[46],"probabilities":[48],"predictions":[50],"and":[51,96,105,144,156,167,203],"perform":[52],"poorly":[53],"in":[54,139,172,214],"decision-based":[56,81,126,174],"setting,":[57],"which":[58],"can":[59,185],"still":[60],"construct":[61],"perturbation":[63],"with":[64],"minimal":[66],"information":[67],"exposed":[68],"\u2013":[69],"top-1":[71],"predicted":[72],"label.":[73],"In":[74],"this":[75,197],"work,":[76],"we":[77,89,116,160,184],"first":[78,180],"explore":[79],"attack.":[83],"To":[84],"enhance":[85],"attack":[87,145,176],"efficiency,":[88],"patches":[92],"using":[93],"paired":[94],"key-points":[95],"use":[97],"targeted":[98],"as":[100],"initialization":[102],"patches,":[104],"parameter":[106],"optimizations":[107],"are":[108],"all":[109],"performed":[110],"integer":[113],"domain.":[114],"Then,":[115],"propose":[117],"differential":[119],"evolutionary":[120],"algorithm":[121],"named":[122],"DevoPatch":[123,132],"for":[124,178],"query-efficient":[125],"attacks.":[128,194],"Experiments":[129],"demonstrate":[130],"outperforms":[133],"state-of-the-art":[135],"black-box":[136,192],"terms":[140],"area":[143],"success":[146],"rate":[147],"within":[148],"given":[150],"query":[151],"budget":[152],"image":[154,170],"classification":[155,171],"face":[157],"verification.":[158],"Additionally,":[159],"conduct":[161],"vulnerability":[163],"evaluation":[164],"ViT":[166],"MLP":[168],"setting":[177],"time.":[181],"Using":[182],"DevoPatch,":[183],"evaluate":[186],"robustness":[188],"models":[190,208],"We":[195],"believe":[196],"method":[198],"could":[199],"inspire":[200],"design":[202],"deployment":[204],"robust":[206],"vision":[207],"based":[209],"various":[211],"DNN":[212],"architectures":[213],"future.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}