{"id":"https://openalex.org/W4402916443","doi":"https://doi.org/10.1109/tpami.2024.3469952","title":"Dynamic Routing and Knowledge Re-Learning for Data-Free Black-Box Attack","display_name":"Dynamic Routing and Knowledge Re-Learning for Data-Free Black-Box Attack","publication_year":2024,"publication_date":"2024-09-27","ids":{"openalex":"https://openalex.org/W4402916443","doi":"https://doi.org/10.1109/tpami.2024.3469952","pmid":"https://pubmed.ncbi.nlm.nih.gov/39331554"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2024.3469952","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2024.3469952","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074032555","display_name":"Xuelin Qian","orcid":"https://orcid.org/0000-0001-8049-7288"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuelin Qian","raw_affiliation_strings":["School of Automation, and the Brain and Artificial Intelligence Lab (Brain Lab), Northwestern Polytechnical University, Xi’an, China","School of Automation, and the BRain and Artificial INtelligence Lab (BRAIN LAB), Northwestern Polytechnical University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0001-8049-7288","affiliations":[{"raw_affiliation_string":"School of Automation, and the Brain and Artificial Intelligence Lab (Brain Lab), Northwestern Polytechnical University, Xi’an, China","institution_ids":["https://openalex.org/I17145004"]},{"raw_affiliation_string":"School of Automation, and the BRain and Artificial INtelligence Lab (BRAIN LAB), Northwestern Polytechnical University, Xi'an, China","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wenxuan Wang","orcid":"https://orcid.org/0000-0001-7142-9734"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenxuan Wang","raw_affiliation_strings":["School of Computer Science, Northwestern Polytechnical University, Xi’an, China","School of Computer Science, Northwestern Polytechnical University, China"],"raw_orcid":"https://orcid.org/0000-0001-7142-9734","affiliations":[{"raw_affiliation_string":"School of Computer Science, Northwestern Polytechnical University, Xi’an, China","institution_ids":["https://openalex.org/I17145004"]},{"raw_affiliation_string":"School of Computer Science, Northwestern Polytechnical University, China","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047962986","display_name":"Yu\u2013Gang Jiang","orcid":"https://orcid.org/0000-0002-1907-8567"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-Gang Jiang","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China","School of Computer Science, Fudan University, China"],"raw_orcid":"https://orcid.org/0000-0002-1907-8567","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"School of Computer Science, Fudan University, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003418019","display_name":"Xiangyang Xue","orcid":"https://orcid.org/0000-0002-4897-9209"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyang Xue","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China","School of Computer Science, Fudan University, China"],"raw_orcid":"https://orcid.org/0000-0002-4897-9209","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"School of Computer Science, Fudan University, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084959430","display_name":"Yanwei Fu","orcid":"https://orcid.org/0000-0002-6595-6893"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]},{"id":"https://openalex.org/I4210164150","display_name":"Shanghai Center for Brain Science and Brain-Inspired Technology","ror":"https://ror.org/0551a0y31","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210164150"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanwei Fu","raw_affiliation_strings":["School of Data Science, and Fudan ISTBI—ZJNU Algorithm Centre for Brain-inspired Intelligence, Fudan University, Shanghai, China","School of Data Science, and Fudan ISTBI-ZJNU Algorithm Centre for Brain-inspired Intelligence, Fudan University, China"],"raw_orcid":"https://orcid.org/0000-0002-6595-6893","affiliations":[{"raw_affiliation_string":"School of Data Science, and Fudan ISTBI—ZJNU Algorithm Centre for Brain-inspired Intelligence, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I4210164150","https://openalex.org/I24943067"]},{"raw_affiliation_string":"School of Data Science, and Fudan ISTBI-ZJNU Algorithm Centre for Brain-inspired Intelligence, Fudan University, China","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8523,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.75091071,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"47","issue":"1","first_page":"486","last_page":"501"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9706000089645386,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9448000192642212,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7074466943740845},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.628989577293396},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.548092246055603},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.49723175168037415},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4626982808113098},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1959032118320465}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7074466943740845},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.628989577293396},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.548092246055603},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.49723175168037415},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4626982808113098},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1959032118320465}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tpami.2024.3469952","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2024.3469952","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:39331554","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/39331554","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3757416556","display_name":null,"funder_award_id":"62406252","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5077234039","display_name":null,"funder_award_id":"62076067","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":91,"referenced_works":["https://openalex.org/W1995875735","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2543539599","https://openalex.org/W2549139847","https://openalex.org/W2555618208","https://openalex.org/W2603766943","https://openalex.org/W2618530766","https://openalex.org/W2743289088","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2886756692","https://openalex.org/W2896078964","https://openalex.org/W2946547492","https://openalex.org/W2948487788","https://openalex.org/W2956027310","https://openalex.org/W2960065339","https://openalex.org/W2962878175","https://openalex.org/W2962898354","https://openalex.org/W2962944050","https://openalex.org/W2963049565","https://openalex.org/W2963084599","https://openalex.org/W2963125010","https://openalex.org/W2963163009","https://openalex.org/W2963351448","https://openalex.org/W2963542245","https://openalex.org/W2963727135","https://openalex.org/W2963857521","https://openalex.org/W2964111476","https://openalex.org/W2964171870","https://openalex.org/W2964186374","https://openalex.org/W2969985801","https://openalex.org/W2972986629","https://openalex.org/W2982648698","https://openalex.org/W2984699060","https://openalex.org/W2999606423","https://openalex.org/W3020995107","https://openalex.org/W3034368386","https://openalex.org/W3034528892","https://openalex.org/W3034530016","https://openalex.org/W3034726004","https://openalex.org/W3034957837","https://openalex.org/W3035091329","https://openalex.org/W3035569111","https://openalex.org/W3090625831","https://openalex.org/W3092314636","https://openalex.org/W3107235539","https://openalex.org/W3110846353","https://openalex.org/W3120894151","https://openalex.org/W3137278571","https://openalex.org/W3143848010","https://openalex.org/W3171288285","https://openalex.org/W3174136778","https://openalex.org/W3175685622","https://openalex.org/W3177378457","https://openalex.org/W3208993340","https://openalex.org/W3217439865","https://openalex.org/W4214636423","https://openalex.org/W4312433364","https://openalex.org/W4312455652","https://openalex.org/W4312790346","https://openalex.org/W4382465408","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6638523607","https://openalex.org/W6640425456","https://openalex.org/W6719080892","https://openalex.org/W6728994542","https://openalex.org/W6730179637","https://openalex.org/W6739868092","https://openalex.org/W6746608116","https://openalex.org/W6750404860","https://openalex.org/W6751612189","https://openalex.org/W6752985256","https://openalex.org/W6753044988","https://openalex.org/W6759580348","https://openalex.org/W6767428213","https://openalex.org/W6768366551","https://openalex.org/W6780010867","https://openalex.org/W6784333009","https://openalex.org/W6784750986","https://openalex.org/W6786032476","https://openalex.org/W6787972765","https://openalex.org/W6788235018","https://openalex.org/W6809895866","https://openalex.org/W6842892382","https://openalex.org/W6846633112","https://openalex.org/W6848025125"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Deep":[0],"learning":[1,20,184,217],"models":[2,34,203,301],"have":[3,111],"emerged":[4],"as":[5,72,74],"strong":[6],"and":[7,22,28,66,78,129,159,204,255,267,305],"efficient":[8],"tools":[9],"that":[10,32,108,232],"can":[11,60,236,282],"be":[12,238],"applied":[13],"to":[14,37,41,101,164,188,200,218,248,274],"a":[15,48,97,155,167,180,196,213,241],"broad":[16],"spectrum":[17],"of":[18,52,68,114,135,145,252,278],"complex":[19,312],"problems":[21],"many":[23],"real-world":[24,313],"applications.":[25,314],"However,":[26,105],"more":[27,29,49],"works":[30,110],"show":[31],"deep":[33],"are":[35,272],"vulnerable":[36],"adversarial":[38,94],"examples.":[39],"Compared":[40],"vanilla":[42],"attack":[43,296],"settings,":[44],"this":[45,88,151],"paper":[46],"advocates":[47],"practical":[50],"setting":[51],"data-free":[53],"black-box":[54],"attack,":[55],"for":[56,120,298,311],"which":[57],"the":[58,64,69,75,84,102,112,136,143,147,172,208,220,225,229,250,276],"attackers":[59],"completely":[61],"not":[62],"access":[63],"structures":[65],"parameters":[67],"target":[70,103,137,148,173,202,226,300],"model,":[71],"well":[73],"intermediate":[76],"features":[77],"any":[79],"training":[80,178],"data":[81,133,234],"associated":[82],"with":[83,287],"model.":[85,104,138,149,174,227],"To":[86,150,206],"tackle":[87],"task,":[89],"previous":[90],"methods":[91],"generate":[92,190],"transferable":[93],"examples":[95,127],"from":[96,171,224],"transparent":[98],"substitute":[99,117,169,182,192,209],"model":[100,118,170,193],"we":[106,153,211],"found":[107],"these":[109],"limitations":[113],"taking":[115],"static":[116],"structure":[119,183,194,215],"different":[121,201,299],"targets,":[122],"only":[123,237],"using":[124],"hard":[125,257],"synthesized":[126,177],"once,":[128,240],"still":[130],"relying":[131],"on":[132,261],"statistics":[134],"This":[139],"may":[140],"potentially":[141],"harm":[142],"performance":[144],"attacking":[146],"end,":[152],"propose":[154],"novel":[156],"Dynamic":[157],"Routing":[158],"Knowledge":[160],"Re-Learning":[161],"framework":[162],"(DraKe)":[163],"effectively":[165],"learn":[166],"dynamic":[168,181,242],"Specifically,":[175],"given":[176],"samples,":[179],"strategy":[185,245],"is":[186,246],"proposed":[187,247],"adaptively":[189],"optimal":[191],"via":[195],"policy":[197],"network":[198],"according":[199],"tasks.":[205],"facilitate":[207],"training,":[210],"present":[212],"graph-based":[214],"information":[216],"capture":[219],"structural":[221],"knowledge":[222,243],"learned":[223,239],"For":[228],"inherent":[230],"limitation":[231],"online":[233],"generation":[235],"re-learning":[244],"adjust":[249],"weights":[251],"optimization":[253],"objectives":[254],"re-learn":[256],"samples.":[258],"Extensive":[259],"experiments":[260],"four":[262],"public":[263],"image":[264],"classification":[265],"datasets":[266],"one":[268],"face":[269],"recognition":[270],"benchmark":[271],"conducted":[273],"evaluate":[275],"efficacy":[277],"our":[279,292],"Drake.":[280],"We":[281],"obtain":[283],"significant":[284],"improvement":[285],"compared":[286],"state-of-the-art":[288],"competitors.":[289],"More":[290],"importantly,":[291],"DraKe":[293],"consistently":[294],"achieves":[295],"superiority":[297],"(e.g.,":[302],"residual":[303],"networks,":[304],"vision":[306],"transformers),":[307],"showing":[308],"great":[309],"potential":[310]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}