{"id":"https://openalex.org/W7128794330","doi":"https://doi.org/10.1109/tpami.2026.3664421","title":"Enhancing Adversarial Transferability With Cost-Efficient Landscape Flattening","display_name":"Enhancing Adversarial Transferability With Cost-Efficient Landscape Flattening","publication_year":2026,"publication_date":"2026-02-13","ids":{"openalex":"https://openalex.org/W7128794330","doi":"https://doi.org/10.1109/tpami.2026.3664421","pmid":"https://pubmed.ncbi.nlm.nih.gov/41686679"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2026.3664421","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2026.3664421","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125934997","display_name":"Zhipeng Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhipeng Wei","raw_affiliation_strings":["College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-6315-497X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingjing Chen","orcid":"https://orcid.org/0000-0003-3148-264X"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingjing Chen","raw_affiliation_strings":["Institute of Trustworthy Embodied AI, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-3148-264X","affiliations":[{"raw_affiliation_string":"Institute of Trustworthy Embodied AI, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101295883","display_name":"Han Feng","orcid":"https://orcid.org/0000-0001-5622-7317"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Han","raw_affiliation_strings":["College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125951519","display_name":"Yue Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Yu","raw_affiliation_strings":["College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Artificial Intelligence, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5125959019","display_name":"Yu-Gang Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-Gang Jiang","raw_affiliation_strings":["Institute of Trustworthy Embodied AI, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1907-8567","affiliations":[{"raw_affiliation_string":"Institute of Trustworthy Embodied AI, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15259862,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"48","issue":"6","first_page":"7050","last_page":"7061"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0027000000700354576,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11105","display_name":"Advanced Image Processing Techniques","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/maxima-and-minima","display_name":"Maxima and minima","score":0.9347000122070312},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8536999821662903},{"id":"https://openalex.org/keywords/maxima","display_name":"Maxima","score":0.6827999949455261},{"id":"https://openalex.org/keywords/flattening","display_name":"Flattening","score":0.6377000212669373},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.6043000221252441},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5539000034332275},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.44929999113082886}],"concepts":[{"id":"https://openalex.org/C186633575","wikidata":"https://www.wikidata.org/wiki/Q845060","display_name":"Maxima and minima","level":2,"score":0.9347000122070312},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8536999821662903},{"id":"https://openalex.org/C91528185","wikidata":"https://www.wikidata.org/wiki/Q520952","display_name":"Maxima","level":3,"score":0.6827999949455261},{"id":"https://openalex.org/C19444555","wikidata":"https://www.wikidata.org/wiki/Q212750","display_name":"Flattening","level":2,"score":0.6377000212669373},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.619700014591217},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.6043000221252441},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5539000034332275},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.46369999647140503},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.44929999113082886},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3917999863624573},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.38749998807907104},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C148043351","wikidata":"https://www.wikidata.org/wiki/Q4456944","display_name":"Current (fluid)","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28839999437332153},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2833999991416931},{"id":"https://openalex.org/C73301696","wikidata":"https://www.wikidata.org/wiki/Q5469984","display_name":"Formalism (music)","level":3,"score":0.2732999920845032},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2624000012874603},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C2777317252","wikidata":"https://www.wikidata.org/wiki/Q18393516","display_name":"Rare events","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25220000743865967}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tpami.2026.3664421","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2026.3664421","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:41686679","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/41686679","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G472569701","display_name":null,"funder_award_id":"62032006","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2603766943","https://openalex.org/W2774644650","https://openalex.org/W2947874337","https://openalex.org/W2962700793","https://openalex.org/W2962847335","https://openalex.org/W2963446712","https://openalex.org/W2963542245","https://openalex.org/W2964081807","https://openalex.org/W2969542116","https://openalex.org/W2984699060","https://openalex.org/W3034176567","https://openalex.org/W3035376925","https://openalex.org/W3035569111","https://openalex.org/W3127807678","https://openalex.org/W3135970545","https://openalex.org/W3171288285","https://openalex.org/W3177096435","https://openalex.org/W3183199078","https://openalex.org/W3186991201","https://openalex.org/W3196621661","https://openalex.org/W3205752464","https://openalex.org/W4214703392","https://openalex.org/W4226378932","https://openalex.org/W4232613155","https://openalex.org/W4293846201","https://openalex.org/W4312651322","https://openalex.org/W4386065604","https://openalex.org/W4386076145","https://openalex.org/W4386076244","https://openalex.org/W4386076570","https://openalex.org/W4388692087","https://openalex.org/W4390872436","https://openalex.org/W4390872679","https://openalex.org/W7133218563","https://openalex.org/W7133218905","https://openalex.org/W7133229388"],"related_works":[],"abstract_inverted_index":{"The":[0],"transferability":[1,68],"of":[2,54,126,148,166,178,205],"adversarial":[3,24,67,119,208,213],"examples":[4],"across":[5],"different":[6],"models":[7],"has":[8,19],"drawn":[9],"considerable":[10],"attention":[11],"recently,":[12],"particularly":[13],"in":[14,108,135,154,211],"targeted":[15,196],"transferability.":[16,35,120,214],"Prior":[17],"research":[18],"empirically":[20],"shown":[21],"that":[22,65,150,189],"optimizing":[23],"perturbations":[25,149],"at":[26,84],"neighboring":[27],"points":[28],"with":[29],"the":[30,46,51,55,73,81,93,114,124,127,145,181,202,206],"highest":[31],"loss":[32,57,75,115,203],"value":[33],"improves":[34],"While":[36],"effective,":[37],"such":[38],"a":[39,109],"method":[40],"requires":[41],"multiple":[42],"iterations":[43],"to":[44,99,112,131,143,173],"reach":[45],"local":[47,52,86,101,137,156,191],"maxima":[48,87,102,192],"and":[49,88,103,117,139,193],"disregards":[50],"minima":[53,104,194],"input":[56,74],"landscape.":[58,76],"In":[59],"this":[60,176],"paper,":[61],"we":[62,91,122],"theoretically":[63],"show":[64],"enhancing":[66],"is":[69,78],"attainable":[70],"by":[71],"flattening":[72],"This":[77,158],"accomplished":[79],"through":[80],"perturbation":[82,179],"optimization":[83],"both":[85],"minima.":[89,157],"Moreover,":[90],"propose":[92],"Cost-efficient":[94],"LandscapE":[95],"Flattening":[96],"(CLEF)":[97],"attack":[98,129],"consider":[100],"around":[105],"current":[106,133,152],"inputs":[107,134,153],"cost-efficient":[110],"way":[111],"flatten":[113,201],"landscape":[116,204],"improve":[118],"Specifically,":[121],"reuse":[123],"gradients":[125],"previous":[128],"step":[130],"assist":[132,151],"reaching":[136,155],"maxima,":[138],"employ":[140],"probabilistic":[141,159],"modeling":[142,160],"learn":[144],"distributional":[146],"representations":[147],"can":[161,199],"be":[162],"pre-trained":[163,182],"on":[164],"dozens":[165],"images":[167],"from":[168,180],"other":[169],"domains,":[170],"enabling":[171],"us":[172],"directly":[174],"sample":[175],"type":[177],"distribution":[183],"when":[184],"attacking.":[185],"Experimental":[186],"results":[187],"demonstrate":[188],"integrating":[190],"into":[195],"transferable":[197],"attacks":[198],"significantly":[200],"crafted":[207],"examples,":[209],"resulting":[210],"improved":[212]},"counts_by_year":[],"updated_date":"2026-05-09T06:09:20.037420","created_date":"2026-02-14T00:00:00"}