{"id":"https://openalex.org/W7129087182","doi":"https://doi.org/10.1109/tr.2026.3664878","title":"Harnessing Transferable Adversarial Examples via Multilayer Attention-Guided Spatial Transformations","display_name":"Harnessing Transferable Adversarial Examples via Multilayer Attention-Guided Spatial Transformations","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7129087182","doi":"https://doi.org/10.1109/tr.2026.3664878"},"language":null,"primary_location":{"id":"doi:10.1109/tr.2026.3664878","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3664878","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126131990","display_name":"Pengfei Dong","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Dong","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126094726","display_name":"Yatie Xiao","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yatie Xiao","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-1510-3443","affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104337937","display_name":"Chi-Man Pun","orcid":null},"institutions":[{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Chi-Man Pun","raw_affiliation_strings":["Department of Computer and Information Science, University of Macau, Macau, China"],"raw_orcid":"https://orcid.org/0000-0003-1788-3746","affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, University of Macau, Macau, China","institution_ids":["https://openalex.org/I204512498"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121761796","display_name":"Fei Peng","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fei Peng","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8053-4587","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075512625","display_name":"Kongyang Chen","orcid":"https://orcid.org/0000-0003-2439-3518"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kongyang Chen","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2439-3518","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112989750","display_name":"Qingxian Guan","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingxian Guan","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8193-1234","affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Siyuan Chen","orcid":"https://orcid.org/0000-0001-9272-4804"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Siyuan Chen","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9272-4804","affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090596468","display_name":"X. H. Ye","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyu Ye","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019788264","display_name":"ZhenBang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenbang Liu","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18114738,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"75","issue":null,"first_page":"1006","last_page":"1019"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8396999835968018},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.7056000232696533},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7046999931335449},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6758000254631042},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4415000081062317},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4302000105381012},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4092000126838684}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8396999835968018},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7473999857902527},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.7056000232696533},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7046999931335449},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6758000254631042},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5734999775886536},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4415000081062317},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4302000105381012},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4092000126838684},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3774000108242035},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35989999771118164},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3481999933719635},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.34709998965263367},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3377000093460083},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.25529998540878296}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2026.3664878","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3664878","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.7332209348678589,"display_name":"Reduced inequalities"}],"awards":[{"id":"https://openalex.org/G4353495521","display_name":null,"funder_award_id":"22404034","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4465485425","display_name":null,"funder_award_id":"62302116","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5242153627","display_name":null,"funder_award_id":"2025A03J3122","funder_id":"https://openalex.org/F4320335480","funder_display_name":"Guangzhou Municipal Science and Technology Project"},{"id":"https://openalex.org/G6482644756","display_name":null,"funder_award_id":"2024A03J0092","funder_id":"https://openalex.org/F4320335480","funder_display_name":"Guangzhou Municipal Science and Technology Project"},{"id":"https://openalex.org/G6738450633","display_name":null,"funder_award_id":"62406083","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335480","display_name":"Guangzhou Municipal Science and Technology Project","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2295107390","https://openalex.org/W2774644650","https://openalex.org/W2896078964","https://openalex.org/W2962847335","https://openalex.org/W2963446712","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2969542116","https://openalex.org/W3106050153","https://openalex.org/W3127807678","https://openalex.org/W3138516171","https://openalex.org/W3177184533","https://openalex.org/W3186991201","https://openalex.org/W4293846201","https://openalex.org/W4308831279","https://openalex.org/W4312697129","https://openalex.org/W4312790346","https://openalex.org/W4319762875","https://openalex.org/W4385245566","https://openalex.org/W4390872679","https://openalex.org/W4391454373","https://openalex.org/W4391753532","https://openalex.org/W4401109681","https://openalex.org/W4401450512","https://openalex.org/W4402264237","https://openalex.org/W4402704636","https://openalex.org/W4402753604","https://openalex.org/W4402754002","https://openalex.org/W4402774381","https://openalex.org/W4402781618","https://openalex.org/W4405181112","https://openalex.org/W4405517316","https://openalex.org/W4405689429","https://openalex.org/W4406171890","https://openalex.org/W4406858510","https://openalex.org/W4407737114","https://openalex.org/W4407949534","https://openalex.org/W4411543200","https://openalex.org/W4414198934"],"related_works":[],"abstract_inverted_index":{"Transfer-based":[0],"adversarial":[1,53,73,197,205],"attacks":[2,149,168],"are":[3],"key":[4],"for":[5],"evaluating":[6],"the":[7,134,190,195],"robustness":[8,198],"of":[9,202],"deep":[10],"neural":[11],"networks":[12],"(DNNs)":[13],"in":[14,169,204],"black-box":[15,173],"settings,":[16,174],"yet":[17],"their":[18],"effectiveness":[19],"is":[20,210],"often":[21],"constrained":[22],"by":[23],"limited":[24],"cross-model":[25],"transferability.":[26],"Existing":[27],"feature-level":[28],"approaches":[29],"typically":[30],"rely":[31],"on":[32,156],"single-layer":[33],"attention":[34],"guidance":[35,132],"or":[36,125],"static":[37,124],"perturbation":[38],"patterns,":[39],"which":[40,138],"restrict":[41],"adaptability":[42,201],"across":[43,150],"diverse":[44],"architectures.":[45],"In":[46],"this":[47],"work,":[48],"we":[49],"introduce":[50,110],"a":[51],"unified":[52],"framework,":[54],"named":[55],"Multi-layer":[56,77],"Attention-guided":[57,92],"Spatial":[58,105],"Transformations":[59],"(MAT),":[60],"to":[61,69,81,95,109,114,133,189],"exploit":[62],"class-discriminative":[63],"cues":[64],"from":[65,88],"multiple":[66,89],"feature":[67,131],"layers":[68],"craft":[70],"highly":[71],"transferable":[72],"examples.":[74],"MAT":[75,128,143,162,203],"integrates":[76],"Attention":[78],"Fusion":[79],"(MAF)":[80],"capture":[82],"complementary":[83],"low-level":[84],"and":[85,104,136,153,172,179,199],"high-level":[86],"semantics":[87],"intermediate":[90],"layers,":[91],"Augmentation":[93],"(AGA)":[94],"selectively":[96],"perturb":[97],"non-critical":[98],"regions":[99],"while":[100,184],"preserving":[101],"semantic":[102,187],"integrity,":[103],"Random":[106],"Transformation":[107],"(SRT)":[108],"stochastic":[111],"spatial":[112],"augmentations":[113],"diversify":[115],"patterns":[116],"during":[117],"optimization.":[118],"Unlike":[119],"prior":[120],"methods":[121],"that":[122,161],"use":[123],"layer-specific":[126],"attention,":[127],"dynamically":[129],"adapts":[130],"architecture":[135],"task,":[137],"enhances":[139],"generalization.":[140],"We":[141],"evaluate":[142],"against":[144,176],"eleven":[145,165],"state-of-the-art":[146,166],"(SOTA)":[147],"transfer-based":[148,167],"nine":[151],"CNN-based":[152],"Transformer-based":[154],"architectures":[155],"ImageNet.":[157],"Comprehensive":[158],"experiments":[159],"demonstrate":[160],"consistently":[163],"outperforms":[164],"both":[170],"white-box":[171],"including":[175],"adversarially":[177],"trained":[178],"input":[180],"preprocessing-based":[181],"defensive":[182],"models,":[183],"maintaining":[185],"higher":[186],"similarity":[188],"original":[191],"inputs.":[192],"It":[193],"highlights":[194],"superior":[196],"excellent":[200],"machine":[206],"learning.":[207],"Our":[208],"code":[209],"available":[211],"athttps://github.com/dislab-gzhu/MAT.":[212]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-02-17T00:00:00"}