{"id":"https://openalex.org/W4365483675","doi":"https://doi.org/10.1109/tip.2023.3251719","title":"Erosion Attack: Harnessing Corruption To Improve Adversarial Examples","display_name":"Erosion Attack: Harnessing Corruption To Improve Adversarial Examples","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4365483675","doi":"https://doi.org/10.1109/tip.2023.3251719","pmid":"https://pubmed.ncbi.nlm.nih.gov/37058378"},"language":"en","primary_location":{"id":"doi:10.1109/tip.2023.3251719","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2023.3251719","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029844813","display_name":"Lifeng Huang","orcid":"https://orcid.org/0000-0001-5162-9894"},"institutions":[{"id":"https://openalex.org/I101479585","display_name":"South China Agricultural University","ror":"https://ror.org/05v9jqt67","country_code":"CN","type":"education","lineage":["https://openalex.org/I101479585"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lifeng Huang","raw_affiliation_strings":["College of Mathematics and Informatics, South China Agricultural University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-5162-9894","affiliations":[{"raw_affiliation_string":"College of Mathematics and Informatics, South China Agricultural University, Guangzhou, China","institution_ids":["https://openalex.org/I101479585"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040743941","display_name":"Chengying Gao","orcid":"https://orcid.org/0000-0003-1160-0717"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chengying Gao","raw_affiliation_strings":["School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-1160-0717","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115597119","display_name":"Ning Liu","orcid":"https://orcid.org/0000-0003-0884-0058"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ning Liu","raw_affiliation_strings":["School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0884-0058","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4276,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.84026065,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"32","issue":null,"first_page":"4828","last_page":"4841"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9678999781608582,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9334999918937683,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8142086267471313},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7999966144561768},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.7535002827644348},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48680374026298523},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.46476373076438904},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.46126702427864075},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46125519275665283},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.456985741853714},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.42366015911102295},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4016014337539673},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3338569104671478},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.311614453792572}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8142086267471313},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7999966144561768},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.7535002827644348},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48680374026298523},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.46476373076438904},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.46126702427864075},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46125519275665283},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.456985741853714},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.42366015911102295},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4016014337539673},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3338569104671478},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.311614453792572}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tip.2023.3251719","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2023.3251719","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},{"id":"pmid:37058378","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37058378","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on image processing : a publication of the IEEE Signal Processing Society","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8100000023841858}],"awards":[{"id":"https://openalex.org/G4372474279","display_name":null,"funder_award_id":"62272174","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8752293383","display_name":"\u5177\u6709\u7075\u6d3b\u8bbf\u95ee\u63a7\u5236\u548c\u641c\u7d22\u6a21\u5f0f\u7684\u516c\u94a5\u53ef\u641c\u7d22\u52a0\u5bc6\u7684\u7814\u7a76","funder_award_id":"61872152","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":69,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W2095705004","https://openalex.org/W2183341477","https://openalex.org/W2187089797","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2295107390","https://openalex.org/W2570685808","https://openalex.org/W2620038827","https://openalex.org/W2765407302","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2895097814","https://openalex.org/W2947874337","https://openalex.org/W2949389295","https://openalex.org/W2950048339","https://openalex.org/W2962710014","https://openalex.org/W2962847335","https://openalex.org/W2962872506","https://openalex.org/W2962933288","https://openalex.org/W2963001136","https://openalex.org/W2963062382","https://openalex.org/W2963184668","https://openalex.org/W2963446712","https://openalex.org/W2963744840","https://openalex.org/W2963771536","https://openalex.org/W2963920068","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2972986629","https://openalex.org/W2976752987","https://openalex.org/W2990237009","https://openalex.org/W2997583194","https://openalex.org/W3006076803","https://openalex.org/W3006840262","https://openalex.org/W3008051686","https://openalex.org/W3017485054","https://openalex.org/W3020621865","https://openalex.org/W3022021750","https://openalex.org/W3034190247","https://openalex.org/W3035467354","https://openalex.org/W3090036562","https://openalex.org/W3098620600","https://openalex.org/W3119904598","https://openalex.org/W3171288285","https://openalex.org/W3179916154","https://openalex.org/W3186991201","https://openalex.org/W3211999566","https://openalex.org/W4293846201","https://openalex.org/W4293861706","https://openalex.org/W4297672742","https://openalex.org/W6637162671","https://openalex.org/W6674330103","https://openalex.org/W6731927902","https://openalex.org/W6739575509","https://openalex.org/W6739868092","https://openalex.org/W6745136726","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6750404860","https://openalex.org/W6751241578","https://openalex.org/W6758684365","https://openalex.org/W6762093561","https://openalex.org/W6768366551","https://openalex.org/W6771961379","https://openalex.org/W6773713311","https://openalex.org/W6773996356","https://openalex.org/W6776690448","https://openalex.org/W6783873723"],"related_works":["https://openalex.org/W4307079546","https://openalex.org/W4283317927","https://openalex.org/W3102631191","https://openalex.org/W4293790771","https://openalex.org/W4387995186","https://openalex.org/W2897971651","https://openalex.org/W3155916161","https://openalex.org/W4320024171","https://openalex.org/W2502907510","https://openalex.org/W3036725378"],"abstract_inverted_index":{"Although":[0],"adversarial":[1,13,29,153],"examples":[2,30],"pose":[3],"a":[4,40,47,74,138],"serious":[5],"threat":[6,196],"to":[7,24,109,126,142,161,167,197],"deep":[8],"neural":[9],"networks,":[10],"most":[11],"transferable":[12,42,152,190],"attacks":[14,65,191],"are":[15,31],"ineffective":[16],"against":[17],"black-box":[18,51],"defense":[19],"models.":[20,200],"This":[21],"may":[22,66],"lead":[23],"the":[25,79,85,90,122,128,164,174,184,194],"mistaken":[26],"belief":[27],"that":[28,44,100,180],"not":[32],"truly":[33],"threatening.":[34],"In":[35,118],"this":[36],"paper,":[37],"we":[38,88,120],"propose":[39,89],"novel":[41],"attack":[43],"can":[45,158],"defeat":[46],"wide":[48],"range":[49],"of":[50,81,186],"defenses":[52,179],"and":[53,70,107,192],"highlight":[54],"their":[55],"security":[56],"limitations.":[57],"We":[58,172],"identify":[59],"two":[60],"intrinsic":[61],"reasons":[62],"why":[63],"current":[64,198],"fail,":[67],"namely":[68],"data-dependency":[69,86],"network-overfitting.":[71],"They":[72],"provide":[73],"different":[75,178],"perspective":[76],"on":[77],"improving":[78],"transferability":[80],"attacks.":[82],"To":[83],"mitigate":[84],"effect,":[87],"Data":[91],"Erosion":[92,124,169],"method.":[93],"It":[94],"involves":[95],"finding":[96],"special":[97],"augmentation":[98],"data":[99],"behave":[101],"similarly":[102],"in":[103,150],"both":[104],"vanilla":[105],"models":[106,114],"defenses,":[108],"help":[110],"attackers":[111],"fool":[112],"robustified":[113],"with":[115,146],"higher":[116],"chances.":[117],"addition,":[119],"introduce":[121],"Network":[123],"method":[125],"overcome":[127],"network-overfitting":[129],"dilemma.":[130],"The":[131,201],"idea":[132],"is":[133,204],"conceptually":[134],"simple:":[135],"it":[136],"extends":[137],"single":[139],"surrogate":[140],"model":[141],"an":[143],"ensemble":[144],"structure":[145],"high":[147],"diversity,":[148],"resulting":[149],"more":[151],"examples.":[154],"Two":[155],"proposed":[156,175],"methods":[157],"be":[159],"integrated":[160],"further":[162],"enhance":[163],"transferability,":[165],"referred":[166],"as":[168],"Attack":[170],"(EA).":[171],"evaluate":[173],"EA":[176,187],"under":[177],"empirical":[181],"results":[182],"demonstrate":[183],"superiority":[185],"over":[188],"existing":[189],"reveal":[193],"underlying":[195],"robust":[199],"source":[202],"code":[203],"publicly":[205],"available":[206],"at":[207],"https://github.com/mesunhlf/EA.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}