{"id":"https://openalex.org/W4406857579","doi":"https://doi.org/10.1109/tmm.2025.3535328","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-Box Scenario","display_name":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-Box Scenario","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4406857579","doi":"https://doi.org/10.1109/tmm.2025.3535328"},"language":"en","primary_location":{"id":"doi:10.1109/tmm.2025.3535328","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2025.3535328","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028872220","display_name":"Renyang Liu","orcid":"https://orcid.org/0000-0002-7121-1257"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Renyang Liu","raw_affiliation_strings":["School of Information Science and Engineering, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0002-7121-1257","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103392821","display_name":"Kwok-Yan Lam","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Kwok-Yan Lam","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7479-7970","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wei Zhou","orcid":"https://orcid.org/0000-0002-5881-9436"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Zhou","raw_affiliation_strings":["School of Software and the Engineering Research Center of Cyberspace, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0002-5881-9436","affiliations":[{"raw_affiliation_string":"School of Software and the Engineering Research Center of Cyberspace, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103185340","display_name":"Sixing Wu","orcid":"https://orcid.org/0000-0001-7278-8720"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sixing Wu","raw_affiliation_strings":["School of Software and the Engineering Research Center of Cyberspace, Yunnan University, Kunming, China"],"raw_orcid":"https://orcid.org/0000-0001-7278-8720","affiliations":[{"raw_affiliation_string":"School of Software and the Engineering Research Center of Cyberspace, Yunnan University, Kunming, China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jun Zhao","orcid":"https://orcid.org/0000-0002-3004-7091"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jun Zhao","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3004-7091","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101374723","display_name":"Dongting Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dongting Hu","raw_affiliation_strings":["Melbourne Centre for Data Science, School of Mathematics and Statistics, University of Melbourne, Parkville, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Melbourne Centre for Data Science, School of Mathematics and Statistics, University of Melbourne, Parkville, VIC, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102023771","display_name":"Mingming Gong","orcid":"https://orcid.org/0000-0001-7147-5589"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mingming Gong","raw_affiliation_strings":["Melbourne Centre for Data Science, School of Mathematics and Statistics, University of Melbourne, Parkville, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7147-5589","affiliations":[{"raw_affiliation_string":"Melbourne Centre for Data Science, School of Mathematics and Statistics, University of Melbourne, Parkville, VIC, Australia","institution_ids":["https://openalex.org/I165779595"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.131,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92278968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"27","issue":null,"first_page":"2666","last_page":"2681"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9341999888420105,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9341999888420105,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9294000267982483,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.9290000200271606,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8615975379943848},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7853519916534424},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.5942912101745605},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2817106246948242}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8615975379943848},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7853519916534424},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.5942912101745605},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2817106246948242},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tmm.2025.3535328","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2025.3535328","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/218086","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/218086","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2408903403","display_name":null,"funder_award_id":"62101480","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2703468498","display_name":null,"funder_award_id":"62162067","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320325256","display_name":"Info-communications Media Development Authority","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":74,"referenced_works":["https://openalex.org/W1982471090","https://openalex.org/W2054273865","https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2141983208","https://openalex.org/W2171349048","https://openalex.org/W2194775991","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2883780447","https://openalex.org/W2962785568","https://openalex.org/W2963163009","https://openalex.org/W2963446712","https://openalex.org/W2998347911","https://openalex.org/W3013520104","https://openalex.org/W3017136408","https://openalex.org/W3034892461","https://openalex.org/W3036294592","https://openalex.org/W3045675435","https://openalex.org/W3107235539","https://openalex.org/W3128522683","https://openalex.org/W3161469108","https://openalex.org/W3162545290","https://openalex.org/W3167676691","https://openalex.org/W3175685622","https://openalex.org/W3184420582","https://openalex.org/W3193088178","https://openalex.org/W3198796530","https://openalex.org/W3203755221","https://openalex.org/W3204447181","https://openalex.org/W3208594240","https://openalex.org/W4214585697","https://openalex.org/W4223936353","https://openalex.org/W4249875616","https://openalex.org/W4283389011","https://openalex.org/W4285227025","https://openalex.org/W4285287329","https://openalex.org/W4293846201","https://openalex.org/W4295136046","https://openalex.org/W4304197304","https://openalex.org/W4310823379","https://openalex.org/W4312295406","https://openalex.org/W4316660635","https://openalex.org/W4319787183","https://openalex.org/W4387776386","https://openalex.org/W4389473983","https://openalex.org/W4393154890","https://openalex.org/W4394896798","https://openalex.org/W6618372016","https://openalex.org/W6637373629","https://openalex.org/W6677919164","https://openalex.org/W6723285250","https://openalex.org/W6746402973","https://openalex.org/W6746608116","https://openalex.org/W6747184836","https://openalex.org/W6747473890","https://openalex.org/W6750404860","https://openalex.org/W6759129252","https://openalex.org/W6759580348","https://openalex.org/W6761100157","https://openalex.org/W6761833289","https://openalex.org/W6765779288","https://openalex.org/W6767352609","https://openalex.org/W6767666165","https://openalex.org/W6768928678","https://openalex.org/W6771809012","https://openalex.org/W6772461460","https://openalex.org/W6774575851","https://openalex.org/W6780973103","https://openalex.org/W6780986092","https://openalex.org/W6784493056","https://openalex.org/W6787972765","https://openalex.org/W6803163449","https://openalex.org/W6810259881"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Extensive":[0],"studies":[1],"have":[2,31],"revealed":[3],"that":[4,80,111,270],"deep":[5],"neural":[6],"networks":[7],"(DNNs)":[8],"are":[9,88],"vulnerable":[10],"to":[11,34,43,63,70,92,129,141,167,182,189,199,216,223,232,251,262],"adversarial":[12,81,102,170,191,225,279],"attacks,":[13],"especially":[14],"black-box":[15,54,265],"ones,":[16],"which":[17],"can":[18],"heavily":[19],"threaten":[20],"the":[21,25,36,48,64,75,120,133,158,173,183,195,206,217,233,275,278,284],"DNNs":[22,39],"deployed":[23],"in":[24,84,126,149,172],"real":[26],"world.":[27],"Many":[28],"attack":[29,55,94,285],"techniques":[30],"been":[32],"proposed":[33],"explore":[35],"vulnerability":[37,134],"of":[38,67,122,135,186,220,228,249,277],"and":[40,90,124,193,203,236,281],"further":[41],"help":[42],"improve":[44,205,274],"their":[45,201],"robustness.":[46],"Despite":[47],"significant":[49],"progress":[50],"made":[51],"recently,":[52],"existing":[53,263],"methods":[56],"still":[57],"suffer":[58],"from":[59],"unsatisfactory":[60],"performance":[61],"due":[62],"vast":[65],"number":[66],"queries":[68],"needed":[69],"optimize":[71,252],"desired":[72],"perturbations.":[73,106],"Besides,":[74],"other":[76],"critical":[77],"challenge":[78],"is":[79,99,108,139],"examples":[82,171,192,226,280],"built":[83],"a":[85,127,150,164,179,247],"noise-adding":[86],"manner":[87],"abnormal":[89],"struggle":[91],"successfully":[93],"robust":[95],"models,":[96],"whose":[97],"robustness":[98],"enhanced":[100],"by":[101],"training":[103],"against":[104],"small":[105],"There":[107],"no":[109],"doubt":[110],"these":[112],"two":[113,197],"issues":[114],"mentioned":[115],"above":[116],"will":[117],"significantly":[118,204],"increase":[119],"risk":[121],"exposure":[123],"result":[125],"failure":[128],"dig":[130],"deeply":[131],"into":[132],"DNNs.":[136],"Hence,":[137],"it":[138],"necessary":[140],"evaluate":[142],"DNNs'":[143],"fragility":[144],"sufficiently":[145],"under":[146,258,288],"query-limited":[147,174,259,289],"settings":[148],"non-additional":[151],"way.":[152],"In":[153],"this":[154],"paper,":[155],"we":[156,210,238],"propose":[157],"Spatial":[159],"Transform":[160],"Black-box":[161],"Attack":[162],"(STBA),":[163],"novel":[165],"framework":[166],"craft":[168],"formidable":[169],"scenario.":[175],"Specifically,":[176],"STBA":[177,271],"introduces":[178],"flow":[180,214,256],"field":[181,215,257],"high-frequency":[184,218],"part":[185,219],"clean":[187,221],"images":[188,222],"generate":[190,224],"adopts":[194],"following":[196],"processes":[198],"enhance":[200],"naturalness":[202],"query":[207],"efficiency:":[208],"a)":[209],"apply":[211],"an":[212,240,254],"estimated":[213],"instead":[227],"introducing":[229],"external":[230],"noise":[231],"benign":[234],"image,":[235],"b)":[237],"leverage":[239],"efficient":[241],"gradient":[242],"estimation":[243],"method":[244],"based":[245],"on":[246],"batch":[248],"samples":[250],"such":[253],"ideal":[255],"settings.":[260,290],"Compared":[261],"score-based":[264],"baselines,":[266],"extensive":[267],"experiments":[268],"indicated":[269],"could":[272],"effectively":[273],"imperceptibility":[276],"remarkably":[282],"boost":[283],"success":[286],"rate":[287]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}