{"id":"https://openalex.org/W4206091469","doi":"https://doi.org/10.1109/tii.2021.3139902","title":"Generating Adversarial Examples With Shadow Model","display_name":"Generating Adversarial Examples With Shadow Model","publication_year":2022,"publication_date":"2022-01-04","ids":{"openalex":"https://openalex.org/W4206091469","doi":"https://doi.org/10.1109/tii.2021.3139902"},"language":"en","primary_location":{"id":"doi:10.1109/tii.2021.3139902","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2021.3139902","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100422044","display_name":"Rui Zhang","orcid":"https://orcid.org/0000-0002-4117-2656"},"institutions":[{"id":"https://openalex.org/I59028903","display_name":"Ocean University of China","ror":"https://ror.org/04rdtx186","country_code":"CN","type":"education","lineage":["https://openalex.org/I59028903"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Zhang","raw_affiliation_strings":["College of Computer Science and Technology, Ocean University of China, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0002-4117-2656","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Ocean University of China, Qingdao, China","institution_ids":["https://openalex.org/I59028903"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080791772","display_name":"Hui Xia","orcid":"https://orcid.org/0000-0001-7326-5796"},"institutions":[{"id":"https://openalex.org/I59028903","display_name":"Ocean University of China","ror":"https://ror.org/04rdtx186","country_code":"CN","type":"education","lineage":["https://openalex.org/I59028903"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Xia","raw_affiliation_strings":["College of Computer Science and Technology, Ocean University of China, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0001-7326-5796","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Ocean University of China, Qingdao, China","institution_ids":["https://openalex.org/I59028903"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007408033","display_name":"Chunqiang Hu","orcid":"https://orcid.org/0000-0001-5825-2241"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunqiang Hu","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0001-5825-2241","affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100439655","display_name":"Cheng Zhang","orcid":"https://orcid.org/0000-0002-7196-9463"},"institutions":[{"id":"https://openalex.org/I188674872","display_name":"West Texas A&M University","ror":"https://ror.org/04gnp7x40","country_code":"US","type":"education","lineage":["https://openalex.org/I188674872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cheng Zhang","raw_affiliation_strings":["Paul and Virginia Engler College of Business, West Texas A&amp;M University, Canyon, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-7196-9463","affiliations":[{"raw_affiliation_string":"Paul and Virginia Engler College of Business, West Texas A&amp;M University, Canyon, TX, USA","institution_ids":["https://openalex.org/I188674872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100362891","display_name":"Chao Liu","orcid":"https://orcid.org/0000-0001-7363-1987"},"institutions":[{"id":"https://openalex.org/I59028903","display_name":"Ocean University of China","ror":"https://ror.org/04rdtx186","country_code":"CN","type":"education","lineage":["https://openalex.org/I59028903"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Liu","raw_affiliation_strings":["College of Computer Science and Technology, Ocean University of China, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0001-7363-1987","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Ocean University of China, Qingdao, China","institution_ids":["https://openalex.org/I59028903"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100602821","display_name":"Fu Xiao","orcid":"https://orcid.org/0000-0003-1815-2793"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fu Xiao","raw_affiliation_strings":["School of Computer, Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0003-1815-2793","affiliations":[{"raw_affiliation_string":"School of Computer, Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3919,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.82950759,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"18","issue":"9","first_page":"6283","last_page":"6289"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9713000059127808,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7390240430831909},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7389296293258667},{"id":"https://openalex.org/keywords/shadow","display_name":"Shadow (psychology)","score":0.6953598260879517},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6629040837287903},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6197227835655212},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.5479906797409058},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.5364530682563782},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5037264227867126},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.5028054714202881},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4613634943962097},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.45381420850753784},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.45166873931884766},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4209280014038086},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3806780278682709},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.28965145349502563},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.17930591106414795}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7390240430831909},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7389296293258667},{"id":"https://openalex.org/C117797892","wikidata":"https://www.wikidata.org/wiki/Q286363","display_name":"Shadow (psychology)","level":2,"score":0.6953598260879517},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6629040837287903},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6197227835655212},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.5479906797409058},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.5364530682563782},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5037264227867126},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.5028054714202881},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4613634943962097},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.45381420850753784},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.45166873931884766},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4209280014038086},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3806780278682709},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.28965145349502563},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.17930591106414795},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tii.2021.3139902","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tii.2021.3139902","pdf_url":null,"source":{"id":"https://openalex.org/S184777250","display_name":"IEEE Transactions on Industrial Informatics","issn_l":"1551-3203","issn":["1551-3203","1941-0050"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Industrial Informatics","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.800000011920929}],"awards":[{"id":"https://openalex.org/G4215494930","display_name":null,"funder_award_id":"ZR2019MF018","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G4501441032","display_name":"\u793e\u4ea4\u7f51\u7edc\u4e2d\u82e5\u5e72\u6f5c\u5728\u9690\u79c1\u653b\u51fb\u4e0e\u9632\u5fa1\u673a\u5236\u7814\u7a76","funder_award_id":"62072065","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5342570409","display_name":null,"funder_award_id":"62172377","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5446143581","display_name":"\u79fb\u52a8Ad Hoc\u7f51\u7edc\u8282\u70b9\u5408\u4f5c\u6fc0\u52b1\u7b56\u7565\u7684\u7814\u7a76","funder_award_id":"61872205","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1945616565","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2535873859","https://openalex.org/W2603766943","https://openalex.org/W2962711307","https://openalex.org/W2963070423","https://openalex.org/W2963163009","https://openalex.org/W2963323244","https://openalex.org/W2964152294","https://openalex.org/W2972986629","https://openalex.org/W2981892732","https://openalex.org/W2999424232","https://openalex.org/W3008515144","https://openalex.org/W3015625436","https://openalex.org/W3019982035","https://openalex.org/W3104218734","https://openalex.org/W3107210824","https://openalex.org/W3118608800","https://openalex.org/W3151461088","https://openalex.org/W3154373807","https://openalex.org/W3167676691","https://openalex.org/W3172743044","https://openalex.org/W3173859330","https://openalex.org/W3183866186","https://openalex.org/W3198562442","https://openalex.org/W4288103143","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6740164494","https://openalex.org/W6746608116","https://openalex.org/W6767666165","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2950475743","https://openalex.org/W4286235935","https://openalex.org/W4385154961","https://openalex.org/W4387163578","https://openalex.org/W3162343139","https://openalex.org/W4206451978","https://openalex.org/W3041443116","https://openalex.org/W3198488011","https://openalex.org/W4308235762","https://openalex.org/W3209982355"],"abstract_inverted_index":{"The":[0,54],"reduction":[1],"in":[2,15,28],"the":[3,8,16,42,47,51,58,63,71,75,84,93,97,104,109,114,120],"number":[4,43],"of":[5,19,44,67,74,96],"queries":[6,45],"to":[7,46,50,107],"object":[9,48],"model":[10,38,49,60,77,86],"is":[11],"a":[12],"hot":[13],"topic":[14],"current":[17,105],"research":[18],"black-box":[20],"adversarial":[21,34,80,89],"attack":[22],"methods.":[23],"To":[24],"solve":[25],"this":[26,29],"problem,":[27],"article,":[30],"we":[31],"propose":[32],"generating":[33],"examples":[35,90],"with":[36],"shadow":[37,52,59,76,85,140],"(GASM)":[39],"that":[40,117],"shifts":[41],"model.":[53],"method":[55],"first":[56],"determines":[57],"based":[61],"on":[62],"robustness":[64],"and":[65,69,87,123,132],"transferability":[66,122],"classifiers":[68],"fine-tunes":[70],"decision":[72],"boundary":[73],"by":[78,91],"constructing":[79],"datasets.":[81],"Second,":[82],"accesses":[83],"constructs":[88],"maximizing":[92],"output":[94],"probability":[95],"targeted":[98],"class":[99,101],"(any":[100],"other":[102],"than":[103],"one)":[106],"modify":[108],"image":[110],"gradient":[111],"information.":[112],"Finally,":[113],"results":[115],"show":[116],"GASM":[118],"has":[119],"strongest":[121],"outperforms":[124],"white-box":[125],"attacks":[126],"when":[127],"AlexNet":[128],"(MNIST),":[129],"VGG-19":[130],"(CIFAR10),":[131],"MobileNet":[133],"v2":[134],"(Tiny":[135],"ImageNet)":[136],"are":[137],"selected":[138],"as":[139],"models.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}
