{"id":"https://openalex.org/W7124493119","doi":"https://doi.org/10.1109/tmm.2026.3654444","title":"Practical No-Box Adversarial Attacks With Training-Free Hybrid Image Transformation","display_name":"Practical No-Box Adversarial Attacks With Training-Free Hybrid Image Transformation","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7124493119","doi":"https://doi.org/10.1109/tmm.2026.3654444"},"language":null,"primary_location":{"id":"doi:10.1109/tmm.2026.3654444","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3654444","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123190210","display_name":"Qilong Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092517","display_name":"Shanghai Eye Disease Prevention & Treatment Center","ror":"https://ror.org/0048a4976","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210092517"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qilong Zhang","raw_affiliation_strings":["Shanghai Eye Diseases Prevention and Treatment Center/ Shanghai Eye Hospital, School of Medicine, Tongji University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Eye Diseases Prevention and Treatment Center/ Shanghai Eye Hospital, School of Medicine, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I4210092517"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107943142","display_name":"Y. Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Youheng Sun","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0009-0006-3110-1658","affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123173150","display_name":"Chaoning Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoning Zhang","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-6007-6099","affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123251205","display_name":"Chaoqun Li","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoqun Li","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078148851","display_name":"Xuanhan Wang","orcid":"https://orcid.org/0000-0002-3881-9658"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuanhan Wang","raw_affiliation_strings":["Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3881-9658","affiliations":[{"raw_affiliation_string":"Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123235069","display_name":"Jingkuan Song","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092517","display_name":"Shanghai Eye Disease Prevention & Treatment Center","ror":"https://ror.org/0048a4976","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210092517"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingkuan Song","raw_affiliation_strings":["Shanghai Eye Diseases Prevention and Treatment Center/ Shanghai Eye Hospital, School of Medicine, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-2549-8322","affiliations":[{"raw_affiliation_string":"Shanghai Eye Diseases Prevention and Treatment Center/ Shanghai Eye Hospital, School of Medicine, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I4210092517"]}]},{"author_position":"last","author":{"id":null,"display_name":"Lianli Gao","orcid":"https://orcid.org/0000-0002-2522-6394"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lianli Gao","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-2522-6394","affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.07120194,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":null,"first_page":"4497","last_page":"4508"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8522999882698059},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4975999891757965},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4595000147819519},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4422000050544739},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4187999963760376},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.38420000672340393},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3837999999523163},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.36469998955726624}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.885200023651123},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8522999882698059},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4975999891757965},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4722999930381775},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4595000147819519},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4422000050544739},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4187999963760376},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38690000772476196},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3837999999523163},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.36469998955726624},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.3379000127315521},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33709999918937683},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3361999988555908},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3346000015735626},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3181999921798706},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27630001306533813},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.263700008392334},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.26260000467300415},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2563999891281128},{"id":"https://openalex.org/C106430172","wikidata":"https://www.wikidata.org/wiki/Q6002272","display_name":"Image restoration","level":4,"score":0.25220000743865967},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmm.2026.3654444","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3654444","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.48227691650390625}],"awards":[{"id":"https://openalex.org/G1457562816","display_name":null,"funder_award_id":"22120240634","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2546663186","display_name":null,"funder_award_id":"62020106008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5422811002","display_name":null,"funder_award_id":"U23A20315","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6864684409","display_name":null,"funder_award_id":"62122018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8418174427","display_name":null,"funder_award_id":"82441006","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G975111477","display_name":null,"funder_award_id":"62425208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recently,":[0],"the":[1,16,22,36,45,89,97,140,153],"adversarial":[2,94],"vulnerability":[3],"of":[4,35,75,91,139,145,155,184],"deep":[5],"neu":[6],"ral":[7],"networks":[8],"(DNNs)":[9],"has":[10,57],"raised":[11],"increasing":[12],"attention.":[13],"Among":[14],"all":[15],"threat":[17,99],"models,":[18],"no-box":[19,98,191],"attacks":[20,176,192],"are":[21],"most":[23],"practical":[24],"but":[25],"extremely":[26],"challenging":[27],"since":[28],"they":[29],"neither":[30],"rely":[31],"on":[32,171,186],"any":[33],"knowledge":[34],"target":[37],"model":[38],"or":[39],"similar":[40],"substitute":[41,51],"model,":[42,100],"nor":[43],"access":[44],"dataset":[46],"for":[47],"training":[48,76],"a":[49,54,63,84,92,127,181],"new":[50],"model.":[52],"Although":[53],"recent":[55],"method":[56,175,197],"attempted":[58],"such":[59],"an":[60,134],"attack":[61,107,133],"in":[62,110,122,130],"loose":[64],"sense,":[65],"its":[66],"performance":[67],"is":[68,77,120,198,209],"not":[69],"good":[70],"enough":[71],"and":[72,87,125,143,150,159,168],"computational":[73],"overhead":[74],"expensive.":[78],"In":[79],"this":[80],"paper,":[81],"we":[82,132],"move":[83],"step":[85],"forward":[86],"show":[88,160],"existence":[90],"training-free":[93],"perturbation":[95],"under":[96],"which":[101,188],"can":[102],"be":[103,164],"successfully":[104],"used":[105],"to":[106,201],"different":[108],"DNNs":[109],"real-time.":[111],"Motivated":[112],"by":[113,137,193],"our":[114,174,196],"observation":[115],"that":[116,161],"high-frequency":[117],"component":[118],"(HFC)":[119],"dominant":[121],"low-level":[123],"features":[124],"plays":[126],"crucial":[128],"role":[129],"classification,":[131],"image":[135],"mainly":[136],"suppression":[138],"original":[141],"HFC":[142,158],"adding":[144],"noisy":[146,157],"HFC.":[147],"We":[148],"empirically":[149],"experimentally":[151],"analyze":[152],"requirements":[154],"effective":[156],"it":[162],"should":[163],"regionally":[165],"homogeneous,":[166],"repeating":[167],"dense.":[169],"Remarkably,":[170],"ImageNet":[172],"dataset,":[173],"ten":[177],"well-known":[178],"models":[179],"with":[180],"success":[182],"rate":[183],"98.13%":[185],"average,":[187],"outperforms":[189],"state-of-the-art":[190],"6.41%.":[194],"Furthermore,":[195],"even":[199],"competitive":[200],"mainstream":[202],"transfer-based":[203],"black":[204],"box":[205],"attacks.":[206],"Our":[207],"code":[208],"publicly":[210],"available1":[211]},"counts_by_year":[],"updated_date":"2026-06-16T07:32:37.131356","created_date":"2026-01-17T00:00:00"}