{"id":"https://openalex.org/W7083691425","doi":"https://doi.org/10.1109/tifs.2025.3615475","title":"F2Attack: Two-Factors Scoring Method for Query-Efficient Hard-Label Black-Box Textual Adversarial Attacks","display_name":"F2Attack: Two-Factors Scoring Method for Query-Efficient Hard-Label Black-Box Textual Adversarial Attacks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7083691425","doi":"https://doi.org/10.1109/tifs.2025.3615475"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3615475","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3615475","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/journal_contribution/F2Attack_Two-Factors_Scoring_Method_For_Query-Efficient_Hard-Label_Black-Box_Textual_Adversarial_Attacks/30196363","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Jiahui Wang","orcid":"https://orcid.org/0000-0003-2552-0726"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahui Wang","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2552-0726","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hua Zhang","orcid":"https://orcid.org/0000-0002-0532-9783"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Zhang","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0532-9783","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yongji Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongji Wang","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, National Engineering Research Center of Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haoran Gao","orcid":"https://orcid.org/0000-0002-9596-3066"},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoran Gao","raw_affiliation_strings":["Artificial Intelligence and Intelligent Operation Center, China Mobile Research Institute, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9596-3066","affiliations":[{"raw_affiliation_string":"Artificial Intelligence and Intelligent Operation Center, China Mobile Research Institute, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qi Li","orcid":"https://orcid.org/0000-0001-9855-6119"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9855-6119","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":null,"display_name":"Huiyu Zhou","orcid":"https://orcid.org/0000-0003-1634-9840"},"institutions":[{"id":"https://openalex.org/I153648349","display_name":"University of Leicester","ror":"https://ror.org/04h699437","country_code":"GB","type":"education","lineage":["https://openalex.org/I153648349"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Huiyu Zhou","raw_affiliation_strings":["School of Computing and Mathematical Sciences, University of Leicester, Leicester, U.K"],"raw_orcid":"https://orcid.org/0000-0003-1634-9840","affiliations":[{"raw_affiliation_string":"School of Computing and Mathematical Sciences, University of Leicester, Leicester, U.K","institution_ids":["https://openalex.org/I153648349"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2378,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88298266,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"20","issue":null,"first_page":"10495","last_page":"10510"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12157","display_name":"Geochemistry and Geologic Mapping","score":0.6779999732971191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12157","display_name":"Geochemistry and Geologic Mapping","score":0.6779999732971191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13067","display_name":"Geological Modeling and Analysis","score":0.03009999915957451,"subfield":{"id":"https://openalex.org/subfields/1906","display_name":"Geochemistry and Petrology"},"field":{"id":"https://openalex.org/fields/19","display_name":"Earth and Planetary Sciences"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14311","display_name":"Electrical and Electromagnetic Research","score":0.017100000753998756,"subfield":{"id":"https://openalex.org/subfields/3107","display_name":"Atomic and Molecular Physics, and Optics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.776199996471405},{"id":"https://openalex.org/keywords/word","display_name":"Word (group theory)","score":0.6424000263214111},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6247000098228455},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5529000163078308},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.5184999704360962},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4927999973297119},{"id":"https://openalex.org/keywords/semantic-similarity","display_name":"Semantic similarity","score":0.4593999981880188}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8357999920845032},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.776199996471405},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.6424000263214111},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6247000098228455},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5949000120162964},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5529000163078308},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5480999946594238},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.5184999704360962},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4927999973297119},{"id":"https://openalex.org/C130318100","wikidata":"https://www.wikidata.org/wiki/Q2268914","display_name":"Semantic similarity","level":2,"score":0.4593999981880188},{"id":"https://openalex.org/C2779439875","wikidata":"https://www.wikidata.org/wiki/Q1078276","display_name":"Natural language understanding","level":3,"score":0.4049000144004822},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3977999985218048},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.35899999737739563},{"id":"https://openalex.org/C2778828372","wikidata":"https://www.wikidata.org/wiki/Q5283209","display_name":"Distributional semantics","level":3,"score":0.32899999618530273},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.3125999867916107},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3075000047683716},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C188338183","wikidata":"https://www.wikidata.org/wiki/Q80735","display_name":"Stop words","level":3,"score":0.28369998931884766}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3615475","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3615475","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/30196363","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/F2Attack_Two-Factors_Scoring_Method_For_Query-Efficient_Hard-Label_Black-Box_Textual_Adversarial_Attacks/30196363","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/30196363","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/F2Attack_Two-Factors_Scoring_Method_For_Query-Efficient_Hard-Label_Black-Box_Textual_Adversarial_Attacks/30196363","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4139883311","display_name":null,"funder_award_id":"62172055","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6856271369","display_name":null,"funder_award_id":"62502042","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6882996255","display_name":null,"funder_award_id":"62572073","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7576027735","display_name":null,"funder_award_id":"62472047","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G811099989","display_name":null,"funder_award_id":"62572068","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W43927996","https://openalex.org/W1832693441","https://openalex.org/W1840435438","https://openalex.org/W2064675550","https://openalex.org/W2250539671","https://openalex.org/W2282821441","https://openalex.org/W2470673105","https://openalex.org/W2608787653","https://openalex.org/W2799194071","https://openalex.org/W2891177506","https://openalex.org/W2896457183","https://openalex.org/W2905526464","https://openalex.org/W2949128310","https://openalex.org/W2963846996","https://openalex.org/W2964232431","https://openalex.org/W2988194011","https://openalex.org/W2996851481","https://openalex.org/W3035367371","https://openalex.org/W3117433489","https://openalex.org/W3137268797","https://openalex.org/W3173162544","https://openalex.org/W3173784240","https://openalex.org/W3173787059","https://openalex.org/W3175052694","https://openalex.org/W3176648901","https://openalex.org/W3177190797","https://openalex.org/W3200913691","https://openalex.org/W3204619801","https://openalex.org/W3205696278","https://openalex.org/W4223913581","https://openalex.org/W4283811884","https://openalex.org/W4285116762","https://openalex.org/W4307112907","https://openalex.org/W4327947795","https://openalex.org/W4382202524","https://openalex.org/W4385571665","https://openalex.org/W4385573354","https://openalex.org/W4385573805","https://openalex.org/W4392353733","https://openalex.org/W4393156672","https://openalex.org/W4409356354"],"related_works":[],"abstract_inverted_index":{"In":[0],"the":[1,31,43,51,58,69,73,76,83,91,104,109,113,121,124,130,147,161,176,183,189,193,225,235,245,255],"hard-label":[2,138],"black-box":[3,139],"setting,":[4],"existing":[5],"attack":[6,21,74,84,141,236],"methods":[7],"randomly":[8],"select":[9],"words":[10,34,46,54,63,156],"for":[11],"perturbation,":[12],"generating":[13],"invalid":[14],"word":[15,99,117,125],"replacement":[16,118],"operations,":[17],"resulting":[18],"in":[19],"low":[20],"success":[22,237],"rate.":[23],"Recent":[24],"works":[25],"alleviate":[26],"this":[27,94,133],"problem":[28],"by":[29,108,239,248],"evaluating":[30],"impact":[32,44,52,67,122,159,166],"of":[33,45,53,123,192,227,242],"on":[35,47,55,68,126,129,160,167,171,199],"model":[36,48,111,162],"predictions,":[37,49],"but":[38,164],"they":[39],"can":[40],"only":[41],"evaluate":[42,120],"not":[50],"attack.":[56,127],"If":[57],"attacker":[59],"replaces":[60,155],"too":[61],"many":[62],"that":[64],"have":[65,157],"significant":[66],"text":[70,168,206],"semantics":[71,81,169],"during":[72],"process,":[75],"adversarial":[77,140,178,194],"example":[78],"has":[79],"poor":[80],"and":[82,112,153,214,218,244],"behavior":[85],"is":[86,229,251],"easily":[87],"detected.":[88],"To":[89],"address":[90],"above":[92],"issues,":[93],"paper":[95,134],"proposes":[96,135],"a":[97,136],"two-factor":[98],"scoring":[100,131,172],"method,":[101,132],"which":[102,250],"uses":[103,146],"attention":[105],"score":[106,151],"output":[107],"pre-attack":[110],"semantic":[114,190,246],"similarity":[115,191,247],"after":[116],"to":[119,150,174,187,231],"Based":[128],"query-efficient":[137],"method":[142,149],"called":[143],"F2Attack.":[144],"F2Attack":[145,181,233],"two-factors":[148],"words,":[152],"then":[154],"great":[158],"prediction":[163],"small":[165],"based":[170],"results":[173],"generate":[175],"initialized":[177],"example.":[179,195],"Then,":[180],"adopts":[182],"simulated":[184],"annealing":[185],"algorithm":[186],"optimize":[188],"We":[196],"conduct":[197],"experiments":[198],"four":[200,215],"representative":[201],"natural":[202,210],"language":[203,211],"models,":[204],"seven":[205],"classification":[207],"datasets,":[208,213],"two":[209],"inference":[212],"commercial":[216],"APIs,":[217],"compared":[219],"them":[220],"with":[221],"baseline":[222,256],"methods.":[223,257],"When":[224],"number":[226],"queries":[228],"limited":[230],"100,":[232],"increases":[234],"rate":[238],"an":[240],"average":[241],"15.165%,":[243],"0.067,":[249],"significantly":[252],"better":[253],"than":[254]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}