{"id":"https://openalex.org/W4312918928","doi":"https://doi.org/10.1109/tpami.2022.3231886","title":"Simultaneously Optimizing Perturbations and Positions for Black-Box Adversarial Patch Attacks","display_name":"Simultaneously Optimizing Perturbations and Positions for Black-Box Adversarial Patch Attacks","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4312918928","doi":"https://doi.org/10.1109/tpami.2022.3231886","pmid":"https://pubmed.ncbi.nlm.nih.gov/37015667"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2022.3231886","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2022.3231886","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079657274","display_name":"Xingxing Wei","orcid":"https://orcid.org/0000-0002-0778-8377"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingxing Wei","raw_affiliation_strings":["Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0778-8377","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100723626","display_name":"Ying Guo","orcid":"https://orcid.org/0000-0002-6429-9297"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Guo","raw_affiliation_strings":["Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6429-9297","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100780326","display_name":"Jie Yu","orcid":"https://orcid.org/0000-0002-1721-7316"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Yu","raw_affiliation_strings":["Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100335384","display_name":"Bo Zhang","orcid":"https://orcid.org/0000-0003-2942-1311"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Zhang","raw_affiliation_strings":["Tencent Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Corporation","institution_ids":["https://openalex.org/I2250653659"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.4915,"has_fulltext":false,"cited_by_count":56,"citation_normalized_percentile":{"value":0.97638756,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"45","issue":"7","first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9890999794006348,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8797949552536011},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7645353674888611},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5888683199882507},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5706878900527954},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5351036190986633},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.4575478434562683},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.43561309576034546},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.4230331778526306},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3963250517845154},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3900024890899658},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1527952253818512}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8797949552536011},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7645353674888611},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5888683199882507},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5706878900527954},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5351036190986633},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.4575478434562683},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.43561309576034546},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.4230331778526306},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3963250517845154},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3900024890899658},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1527952253818512},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tpami.2022.3231886","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2022.3231886","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:37015667","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37015667","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1503398984","https://openalex.org/W1673923490","https://openalex.org/W1901129140","https://openalex.org/W2096733369","https://openalex.org/W2119717200","https://openalex.org/W2479866714","https://openalex.org/W2535873859","https://openalex.org/W2570685808","https://openalex.org/W2619383789","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2798302089","https://openalex.org/W2902867332","https://openalex.org/W2905342581","https://openalex.org/W2905423756","https://openalex.org/W2932026309","https://openalex.org/W2962898354","https://openalex.org/W2963302614","https://openalex.org/W2964205597","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2969664989","https://openalex.org/W2969985801","https://openalex.org/W2971661634","https://openalex.org/W2981011605","https://openalex.org/W3018757597","https://openalex.org/W3039448353","https://openalex.org/W3093070413","https://openalex.org/W3093152201","https://openalex.org/W3094821564","https://openalex.org/W3097573595","https://openalex.org/W3101267861","https://openalex.org/W3103559770","https://openalex.org/W3106412272","https://openalex.org/W3108072218","https://openalex.org/W3110012676","https://openalex.org/W3112001526","https://openalex.org/W3113048882","https://openalex.org/W3125713917","https://openalex.org/W3128390792","https://openalex.org/W3132455321","https://openalex.org/W3161752261","https://openalex.org/W3179647175","https://openalex.org/W4254631372","https://openalex.org/W4282936640","https://openalex.org/W4293584584","https://openalex.org/W6637162671","https://openalex.org/W6683204974","https://openalex.org/W6731927902","https://openalex.org/W6732665253","https://openalex.org/W6747706139","https://openalex.org/W6750227808","https://openalex.org/W6750404860","https://openalex.org/W6751839145","https://openalex.org/W6759424558","https://openalex.org/W6767152389","https://openalex.org/W6777046832","https://openalex.org/W6795035897","https://openalex.org/W6803748346"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3009622996","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Adversarial":[0],"patch":[1],"is":[2],"an":[3,78],"important":[4,55],"form":[5],"of":[6,17,136],"real-world":[7],"adversarial":[8,24,58,79],"attack":[9,86,163],"that":[10,48,156],"brings":[11],"serious":[12],"risks":[13],"to":[14,56,70,102,116,189,195],"the":[15,34,39,43,49,57,73,90,96,99,104,108,112,120,125,129,143,162,172,190],"robustness":[16],"deep":[18],"neural":[19],"networks.":[20],"Previous":[21],"methods":[22],"generate":[23],"patches":[25],"by":[26],"either":[27],"optimizing":[28],"their":[29],"perturbation":[30,76],"values":[31],"while":[32,41],"fixing":[33,42],"pasting":[35],"position":[36,40,74],"or":[37],"manipulating":[38],"patch's":[44,97,105],"content.":[45],"This":[46],"reveals":[47],"positions":[50],"and":[51,75,81,110,148,166,176],"perturbations":[52,106],"are":[53,140],"both":[54],"attack.":[59],"For":[60],"that,":[61],"in":[62,89],"this":[63],"article,":[64],"we":[65,94],"propose":[66],"a":[67,84,133],"novel":[68],"method":[69,158,188],"simultaneously":[71,117],"optimize":[72],"for":[77,119],"patch,":[80],"thus":[82],"obtain":[83],"high":[85],"success":[87,164],"rate":[88,165],"black-box":[91],"setting.":[92],"Technically,":[93],"regard":[95],"position,":[98],"pre-designed":[100],"hyper-parameters":[101],"determine":[103],"as":[107],"variables,":[109],"utilize":[111],"reinforcement":[113],"learning":[114],"framework":[115],"solve":[118],"optimal":[121],"solution":[122],"based":[123],"on":[124,142,150,171],"rewards":[126],"obtained":[127],"from":[128],"target":[130],"model":[131],"with":[132],"small":[134],"number":[135],"queries.":[137],"Extensive":[138],"experiments":[139,170],"conducted":[141],"Face":[144],"Recognition":[145],"(FR)":[146],"task,":[147],"results":[149],"four":[151],"representative":[152],"FR":[153,174],"models":[154],"show":[155],"our":[157,187],"can":[159],"significantly":[160],"improve":[161],"query":[167],"efficiency.":[168],"Besides,":[169],"commercial":[173],"service":[175],"physical":[177],"environments":[178],"confirm":[179],"its":[180,197],"practical":[181],"application":[182],"value.":[183],"We":[184],"also":[185],"extend":[186],"traffic":[191],"sign":[192],"recognition":[193],"task":[194],"verify":[196],"generalization":[198],"ability.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":16}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}