{"id":"https://openalex.org/W4412403764","doi":"https://doi.org/10.1109/tip.2025.3586485","title":"MAP: Masked Adversarial Perturbation for Boosting Black-Box Attack Transferability","display_name":"MAP: Masked Adversarial Perturbation for Boosting Black-Box Attack Transferability","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412403764","doi":"https://doi.org/10.1109/tip.2025.3586485","pmid":"https://pubmed.ncbi.nlm.nih.gov/40658566"},"language":"en","primary_location":{"id":"doi:10.1109/tip.2025.3586485","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2025.3586485","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068435538","display_name":"Kaige Li","orcid":"https://orcid.org/0000-0002-1716-4381"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaige Li","raw_affiliation_strings":["State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China"],"raw_orcid":"https://orcid.org/0000-0002-1716-4381","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102928806","display_name":"Maoxian Wan","orcid":"https://orcid.org/0009-0000-5396-0185"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Maoxian Wan","raw_affiliation_strings":["State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China"],"raw_orcid":"https://orcid.org/0009-0000-5396-0185","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024575685","display_name":"Qichuan Geng","orcid":"https://orcid.org/0000-0002-0046-5794"},"institutions":[{"id":"https://openalex.org/I96852419","display_name":"Capital Normal University","ror":"https://ror.org/005edt527","country_code":"CN","type":"education","lineage":["https://openalex.org/I96852419"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qichuan Geng","raw_affiliation_strings":["Information Engineering College, Capital Normal University, Beijing, China","Capital Normal University, Beijing, P.R.China"],"raw_orcid":"https://orcid.org/0000-0002-0046-5794","affiliations":[{"raw_affiliation_string":"Information Engineering College, Capital Normal University, Beijing, China","institution_ids":["https://openalex.org/I96852419"]},{"raw_affiliation_string":"Capital Normal University, Beijing, P.R.China","institution_ids":["https://openalex.org/I96852419"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102379100","display_name":"Weimin Shi","orcid":"https://orcid.org/0009-0004-2344-1025"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weimin Shi","raw_affiliation_strings":["State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-2344-1025","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068837264","display_name":"Xiaochun Cao","orcid":"https://orcid.org/0000-0001-7141-708X"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]},{"id":"https://openalex.org/I4210152380","display_name":"Shenzhen Technology University","ror":"https://ror.org/04qzpec27","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210152380"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaochun Cao","raw_affiliation_strings":["School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China","School of Cyber Science and Technology, Shenzhen Campus, Sun Yat-sen University, Shenzhen, P.R.China"],"raw_orcid":"https://orcid.org/0000-0001-7141-708X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Cyber Science and Technology, Shenzhen Campus, Sun Yat-sen University, Shenzhen, P.R.China","institution_ids":["https://openalex.org/I4210152380"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102905671","display_name":"Zhong Zhou","orcid":"https://orcid.org/0000-0002-5825-7517"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhong Zhou","raw_affiliation_strings":["State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China"],"raw_orcid":"https://orcid.org/0000-0002-5825-7517","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing, P.R.China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.792,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.91062444,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"34","issue":null,"first_page":"4426","last_page":"4439"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.944599986076355,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7483980655670166},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.7066164612770081},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.6074416637420654},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5001165866851807},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4701668918132782},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39779287576675415},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.32283279299736023},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.24875780940055847}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7483980655670166},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.7066164612770081},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.6074416637420654},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5001165866851807},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4701668918132782},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39779287576675415},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.32283279299736023},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.24875780940055847},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tip.2025.3586485","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2025.3586485","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},{"id":"pmid:40658566","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40658566","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on image processing : a publication of the IEEE Signal Processing Society","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5299999713897705,"display_name":"Climate action","id":"https://metadata.un.org/sdg/13"}],"awards":[{"id":"https://openalex.org/G1343645032","display_name":null,"funder_award_id":"62206184","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5099911738","display_name":null,"funder_award_id":"62272018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W2117539524","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2549139847","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2896078964","https://openalex.org/W2962734576","https://openalex.org/W2962847335","https://openalex.org/W2962858109","https://openalex.org/W2963446712","https://openalex.org/W2963542245","https://openalex.org/W2969542116","https://openalex.org/W3034190247","https://openalex.org/W3041992316","https://openalex.org/W3138516171","https://openalex.org/W3171288285","https://openalex.org/W4214636423","https://openalex.org/W4214669216","https://openalex.org/W4224950673","https://openalex.org/W4226378932","https://openalex.org/W4285600276","https://openalex.org/W4295136046","https://openalex.org/W4312648479","https://openalex.org/W4312847199","https://openalex.org/W4313156423","https://openalex.org/W4381827123","https://openalex.org/W4386736875","https://openalex.org/W4390871946","https://openalex.org/W4390872540","https://openalex.org/W4390872679","https://openalex.org/W4390873031","https://openalex.org/W4393154441","https://openalex.org/W4393159840","https://openalex.org/W4399487388","https://openalex.org/W4402716179","https://openalex.org/W4402727751","https://openalex.org/W4402754002","https://openalex.org/W4404563014","https://openalex.org/W4411244506","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6674330103","https://openalex.org/W6731927902","https://openalex.org/W6739879593","https://openalex.org/W6746402973","https://openalex.org/W6755308174","https://openalex.org/W6758684365","https://openalex.org/W6771809012","https://openalex.org/W6773713311","https://openalex.org/W6795140394","https://openalex.org/W6805152169","https://openalex.org/W6810857415","https://openalex.org/W6838510352","https://openalex.org/W6838695150","https://openalex.org/W6850117044","https://openalex.org/W6853649152","https://openalex.org/W6866741285"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4409346678","https://openalex.org/W4392340763","https://openalex.org/W4283325551"],"abstract_inverted_index":{"The":[0],"transferability":[1,86,168],"of":[2,59,94],"adversarial":[3,53,85],"examples":[4],"is":[5],"vital":[6],"for":[7],"black-box":[8,182],"attacks,":[9],"as":[10,65],"it":[11,147],"enables":[12],"the":[13,17,51,60,107,112,123],"adversary":[14],"to":[15,57,83,110,118,122,133,184],"deceive":[16,149],"target":[18],"model":[19],"without":[20],"knowing":[21],"its":[22],"internals.":[23],"Despite":[24],"numerous":[25],"methods":[26],"focusing":[27],"on":[28,143],"transferability,":[29],"they":[30],"still":[31],"struggle":[32],"with":[33,37],"transferring":[34],"across":[35,87],"models":[36],"distinct":[38],"architectural":[39],"components":[40],"(e.g.,":[41],"CNNs":[42],"and":[43,105,137,152,178],"ViTs).":[44],"In":[45],"this":[46,73],"work,":[47],"we":[48,75],"argue":[49],"that":[50,175],"limited":[52],"perturbation":[54,101,129],"diversity":[55],"leads":[56],"overfitting":[58,121],"surrogate":[61,124],"model,":[62],"which":[63,115],"acts":[64],"a":[66,77,91,163],"key":[67],"factor":[68],"in":[69],"reducing":[70],"transferability.":[71],"To":[72],"end,":[74],"propose":[76],"Masked":[78],"Adversarial":[79],"Perturbation":[80],"(MAP)":[81],"method":[82],"boost":[84],"various":[88],"architectures":[89],"from":[90,140],"novel":[92],"perspective":[93],"diversifying":[95],"perturbation.":[96],"Specifically,":[97],"MAP":[98,127,176],"randomly":[99],"masks":[100],"patches":[102,132],"during":[103],"iterations":[104],"compels":[106],"remaining":[108],"ones":[109],"retain":[111],"attack":[113],"effect,":[114],"diversifies":[116],"perturbations":[117,139],"mitigate":[119],"their":[120,135,158],"model.":[125],"Naturally,":[126],"spreads":[128],"over":[130,169],"local":[131],"alleviate":[134],"co-adaptation":[136],"prevent":[138],"overly":[141],"relying":[142],"specific":[144],"patterns.":[145],"Consequently,":[146],"can":[148],"convolution":[150],"operation":[151],"self-attention":[153],"mechanism":[154],"indiscriminately":[155],"by":[156],"attacking":[157],"basic":[159],"input":[160],"units,":[161],"i.e.,":[162],"single":[164],"patch,":[165],"showing":[166],"superior":[167],"previous":[170],"methods.":[171],"Extensive":[172],"experiments":[173],"illustrate":[174],"consistently":[177],"significantly":[179],"boosts":[180],"diverse":[181],"attacks":[183],"achieve":[185],"state-of-the-art":[186],"performance.":[187]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}