{"id":"https://openalex.org/W4414123601","doi":"https://doi.org/10.1109/tifs.2025.3608665","title":"BESA: Boosting Encoder Stealing Attack With Perturbation Recovery","display_name":"BESA: Boosting Encoder Stealing Attack With Perturbation Recovery","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4414123601","doi":"https://doi.org/10.1109/tifs.2025.3608665"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3608665","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3608665","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114198861","display_name":"Xuhao Ren","orcid":"https://orcid.org/0009-0001-7253-0276"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuhao Ren","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-7253-0276","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014372778","display_name":"Haotian Liang","orcid":"https://orcid.org/0000-0003-2575-731X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]},{"id":"https://openalex.org/I4210163592","display_name":"Economic Research Centre","ror":"https://ror.org/05jsp9k64","country_code":"AZ","type":"facility","lineage":["https://openalex.org/I4210163592"]}],"countries":["AZ","CN"],"is_corresponding":false,"raw_author_name":"Haotian Liang","raw_affiliation_strings":["Beijing Economic Information Centre, Beijing, China","School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Economic Information Centre, Beijing, China","institution_ids":["https://openalex.org/I4210163592"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100455413","display_name":"Yajie Wang","orcid":"https://orcid.org/0000-0002-0962-4464"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajie Wang","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0962-4464","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100380072","display_name":"Chuan Zhang","orcid":"https://orcid.org/0000-0001-7684-8540"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuan Zhang","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7684-8540","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005327587","display_name":"Zehui Xiong","orcid":"https://orcid.org/0000-0002-4440-941X"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zehui Xiong","raw_affiliation_strings":["Singapore University of Technology and Design, Tampines, Singapore","Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4440-941X","affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design, Tampines, Singapore","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100634361","display_name":"Liehuang Zhu","orcid":"https://orcid.org/0000-0003-3277-3887"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liehuang Zhu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3277-3887","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":27.9199,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.99571452,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"20","issue":null,"first_page":"10007","last_page":"10018"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.8051000237464905},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.576200008392334},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.5705000162124634},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3050999939441681},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.2969000041484833}],"concepts":[{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.8051000237464905},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7678999900817871},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.576200008392334},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.5705000162124634},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.40939998626708984},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3783000111579895},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3319000005722046},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3050999939441681},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26579999923706055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3608665","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3608665","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1129527269","display_name":null,"funder_award_id":"2024CX06034","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2824501727","display_name":null,"funder_award_id":"62472032","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4671915250","display_name":null,"funder_award_id":"2023IFS080601-K","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G922434764","display_name":null,"funder_award_id":"62232002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2603766943","https://openalex.org/W2618043096","https://openalex.org/W2963303354","https://openalex.org/W2969695741","https://openalex.org/W3119841746","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W3189812816","https://openalex.org/W3190229640","https://openalex.org/W3200953672","https://openalex.org/W3212600502","https://openalex.org/W3217439865","https://openalex.org/W4308391439","https://openalex.org/W4308643089","https://openalex.org/W4312433364","https://openalex.org/W4312753047","https://openalex.org/W4312768002","https://openalex.org/W4313187550","https://openalex.org/W4313555702","https://openalex.org/W4323846884","https://openalex.org/W4324007057","https://openalex.org/W4382317564","https://openalex.org/W4383221380","https://openalex.org/W4385080307","https://openalex.org/W4385570262","https://openalex.org/W4386072376","https://openalex.org/W4386901291","https://openalex.org/W4389612580","https://openalex.org/W4390874616","https://openalex.org/W4412565294"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2125652721","https://openalex.org/W1540371141","https://openalex.org/W1549363203","https://openalex.org/W2147697413","https://openalex.org/W2154063878","https://openalex.org/W4231274751","https://openalex.org/W2556012038"],"abstract_inverted_index":{"To":[0],"boost":[1],"the":[2,7,12,60,65,70,75,79,84,89,100,116],"encoder":[3,19,52,67,118,122],"stealing":[4,20,53,123],"attack":[5,13,21],"under":[6],"perturbation-based":[8,31],"defense":[9,71,80],"that":[10,112],"hinders":[11],"performance,":[14],"we":[15,110],"propose":[16],"a":[17,95],"boosting":[18],"with":[22,50],"perturbation":[23,41,44,56,85],"recovery":[24,86],"named":[25],"BESA.":[26],"It":[27],"aims":[28],"to":[29,68,93,127],"overcome":[30],"defenses.":[32,137],"The":[33,55],"core":[34],"of":[35,38,120,135],"BESA":[36,113],"consists":[37],"two":[39],"modules:":[40],"detection":[42,57],"and":[43,133],"recovery,":[45],"which":[46],"can":[47],"be":[48],"combined":[49],"canonical":[51],"attacks.":[54],"module":[58,87],"utilizes":[59],"feature":[61,97],"vectors":[62],"obtained":[63],"from":[64,99],"target":[66],"infer":[69],"mechanism":[72,81],"employed":[73],"by":[74,125],"service":[76],"provider.":[77],"Once":[78],"is":[82],"detected,":[83],"leverages":[88],"well-designed":[90],"generative":[91],"model":[92],"restore":[94],"clean":[96],"vector":[98],"perturbed":[101],"one.":[102],"Through":[103],"extensive":[104],"evaluations":[105],"based":[106],"on":[107],"various":[108],"datasets,":[109],"demonstrate":[111],"significantly":[114],"enhances":[115],"surrogate":[117],"accuracy":[119],"existing":[121],"attacks":[124],"up":[126],"24.63%":[128],"when":[129],"facing":[130],"state-of-the-art":[131],"defenses":[132],"combinations":[134],"multiple":[136]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":17}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}