{"id":"https://openalex.org/W7135026204","doi":"https://doi.org/10.1109/tifs.2026.3673132","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","display_name":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7135026204","doi":"https://doi.org/10.1109/tifs.2026.3673132"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3673132","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3673132","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128887243","display_name":"Weizhe Kong","orcid":null},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weizhe Kong","raw_affiliation_strings":["School of Artificial Intelligence, Anhui University, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiao Wang","orcid":"https://orcid.org/0000-0001-6117-6745"},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Wang","raw_affiliation_strings":["School of Computer Science and Technology, Anhui University, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0001-6117-6745","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128811581","display_name":"Ruichong Gao","orcid":null},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruichong Gao","raw_affiliation_strings":["School of Computer Science and Technology, Anhui University, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chenglong Li","orcid":"https://orcid.org/0000-0002-7233-2739"},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenglong Li","raw_affiliation_strings":["School of Artificial Intelligence, Anhui University, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0002-7233-2739","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128873381","display_name":"Yu Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zhang","raw_affiliation_strings":["National University of Defense Technology, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0002-5848-8892","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Hefei, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128853706","display_name":"Xing Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xing Yang","raw_affiliation_strings":["National University of Defense Technology, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0002-8824-1356","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Hefei, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128839612","display_name":"Yaowei Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaowei Wang","raw_affiliation_strings":["Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-2197-9038","affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jin Tang","orcid":"https://orcid.org/0000-0001-8375-3590"},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jin Tang","raw_affiliation_strings":["School of Computer Science and Technology, Anhui University, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0001-8375-3590","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24723236,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"2843","last_page":"2857"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8986999988555908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8986999988555908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.05249999836087227,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.010700000450015068,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8460999727249146},{"id":"https://openalex.org/keywords/pedestrian","display_name":"Pedestrian","score":0.8087999820709229},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6924999952316284},{"id":"https://openalex.org/keywords/offset","display_name":"Offset (computer science)","score":0.3824999928474426},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.375900000333786},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.36640000343322754},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.35370001196861267},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.3490000069141388}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8514999747276306},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8460999727249146},{"id":"https://openalex.org/C2777113093","wikidata":"https://www.wikidata.org/wiki/Q221488","display_name":"Pedestrian","level":2,"score":0.8087999820709229},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6924999952316284},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5493999719619751},{"id":"https://openalex.org/C175291020","wikidata":"https://www.wikidata.org/wiki/Q1156822","display_name":"Offset (computer science)","level":2,"score":0.3824999928474426},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3797000050544739},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.375900000333786},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.36640000343322754},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35370001196861267},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3319000005722046},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3301999866962433},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.3249000012874603},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3118000030517578},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3077999949455261},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3012999892234802},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2687999904155731},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2574000060558319}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3673132","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3673132","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5581591129302979,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2366631306","display_name":null,"funder_award_id":"62102205","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2599639279","display_name":null,"funder_award_id":"U24A20342","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3953017609","display_name":null,"funder_award_id":"62536003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7056223949","display_name":null,"funder_award_id":"2025M774481","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W1907729166","https://openalex.org/W2111025459","https://openalex.org/W2604463754","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2898491875","https://openalex.org/W2904764169","https://openalex.org/W2962847335","https://openalex.org/W2963365374","https://openalex.org/W2963448658","https://openalex.org/W2963542245","https://openalex.org/W2964248351","https://openalex.org/W2969542116","https://openalex.org/W2998496429","https://openalex.org/W3094502228","https://openalex.org/W3112567928","https://openalex.org/W3171288285","https://openalex.org/W3184927044","https://openalex.org/W3187411329","https://openalex.org/W3187415662","https://openalex.org/W3202281277","https://openalex.org/W4220961760","https://openalex.org/W4229014680","https://openalex.org/W4285207098","https://openalex.org/W4293846201","https://openalex.org/W4313547874","https://openalex.org/W4321021543","https://openalex.org/W4381785636","https://openalex.org/W4385815572","https://openalex.org/W4386113300","https://openalex.org/W4390097598","https://openalex.org/W4390871960","https://openalex.org/W4390872679","https://openalex.org/W4390873546","https://openalex.org/W4393148027","https://openalex.org/W4395471094","https://openalex.org/W4400772240","https://openalex.org/W4402216993","https://openalex.org/W4402716075","https://openalex.org/W4402727545","https://openalex.org/W4405521688","https://openalex.org/W4405717816","https://openalex.org/W4409368333","https://openalex.org/W4413144828","https://openalex.org/W4413840453","https://openalex.org/W7125826771","https://openalex.org/W7133192728"],"related_works":[],"abstract_inverted_index":{"Pedestrian":[0],"Attribute":[1],"Recognition":[2],"(PAR)":[3],"is":[4,100,120,134],"an":[5],"indispensable":[6],"task":[7],"in":[8,16],"human-centered":[9],"research":[10],"and":[11,30,50,62,86,106,127,130,150,186,198],"has":[12],"made":[13],"great":[14],"progress":[15],"recent":[17],"years":[18],"with":[19],"the":[20,27,46,66,71,79,97,124,141,147,154,169,191,202],"development":[21],"of":[22,171,193,209],"deep":[23],"neural":[24],"networks.":[25],"However,":[26],"potential":[28],"vulnerability":[29],"anti-interference":[31],"ability":[32],"have":[33],"still":[34],"not":[35],"been":[36],"fully":[37,189],"explored.":[38],"To":[39],"bridge":[40],"this":[41,43,210],"gap,":[42],"paper":[44,211],"proposes":[45],"first":[47,77],"adversarial":[48,148,155,172,196],"attack":[49,197],"defense":[51,165,199],"framework":[52],"for":[53,136,201],"pedestrian":[54,67,81,203],"attribute":[55,98,109,137,204],"recognition.":[56,138,205],"Specifically,":[57],"we":[58,145],"exploit":[59],"both":[60,178],"global-":[61],"patch-level":[63],"attacks":[64],"on":[65,70,140,177,215],"images,":[68],"based":[69],"pre-trained":[72,113],"CLIP-based":[73],"PAR":[74,143],"framework.":[75],"It":[76],"divides":[78],"input":[80],"image":[82],"into":[83,89,102,108],"non-overlapping":[84],"patches":[85],"embeds":[87],"them":[88],"feature":[90],"embeddings":[91],"using":[92,104,111],"a":[93,112,131,162],"projection":[94],"layer.":[95],"Meanwhile,":[96],"set":[99],"expanded":[101],"sentences":[103],"prompts":[105],"embedded":[107],"features":[110],"CLIP":[114],"text":[115,128],"encoder.":[116],"A":[117],"multi-modal":[118],"Transformer":[119],"adopted":[121],"to":[122,152,167],"fuse":[123],"obtained":[125],"vision":[126],"tokens,":[129],"feed-forward":[132],"network":[133],"utilized":[135],"Based":[139],"aforementioned":[142],"framework,":[144],"adopt":[146],"semantic":[149,163],"label-perturbation":[151],"generate":[153],"noise,":[156],"termed":[157],"ASL-PAR.":[158],"We":[159],"also":[160],"design":[161],"offset":[164],"strategy":[166],"suppress":[168],"influence":[170],"attacks.":[173],"Extensive":[174],"experiments":[175],"conducted":[176],"digital":[179],"domains":[180,188],"(i.e.,":[181],"PETA,":[182],"PA100K,":[183],"MSP60K,":[184],"RAPv2)":[185],"physical":[187],"validated":[190],"effectiveness":[192],"our":[194],"proposed":[195],"strategies":[200],"The":[206],"source":[207],"code":[208],"will":[212],"be":[213],"released":[214],"https://github.com/Event-AHU/OpenPAR.":[216]},"counts_by_year":[],"updated_date":"2026-03-20T20:47:17.329874","created_date":"2026-03-13T00:00:00"}