{"id":"https://openalex.org/W2984260944","doi":"https://doi.org/10.1145/3319535.3354259","title":"Seeing isn't Believing","display_name":"Seeing isn't Believing","publication_year":2019,"publication_date":"2019-11-06","ids":{"openalex":"https://openalex.org/W2984260944","doi":"https://doi.org/10.1145/3319535.3354259","mag":"2984260944"},"language":"en","primary_location":{"id":"doi:10.1145/3319535.3354259","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3354259","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037049534","display_name":"Yue Zhao","orcid":"https://orcid.org/0000-0003-0342-2797"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yue Zhao","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103837552","display_name":"Hong Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hong Zhu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072373338","display_name":"Ruigang Liang","orcid":"https://orcid.org/0000-0002-8751-9918"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruigang Liang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019278589","display_name":"Qintao Shen","orcid":"https://orcid.org/0009-0001-9671-6120"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qintao Shen","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027504758","display_name":"Shengzhi Zhang","orcid":"https://orcid.org/0000-0001-9432-9779"},"institutions":[{"id":"https://openalex.org/I111088046","display_name":"Boston University","ror":"https://ror.org/05qwgg493","country_code":"US","type":"education","lineage":["https://openalex.org/I111088046"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shengzhi Zhang","raw_affiliation_strings":["Metropolitan College, Boston University, Boston, MA, USA"],"affiliations":[{"raw_affiliation_string":"Metropolitan College, Boston University, Boston, MA, USA","institution_ids":["https://openalex.org/I111088046"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5037049534"],"corresponding_institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":10.5636,"has_fulltext":false,"cited_by_count":160,"citation_normalized_percentile":{"value":0.98553097,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1989","last_page":"2004"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.958299994468689,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.9514999985694885,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7756624221801758},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.710205078125},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.6726685762405396},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5388308167457581},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.5272152423858643},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.5103723406791687},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4628853499889374},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.43927866220474243},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.42499056458473206},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.22418877482414246},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08914530277252197}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7756624221801758},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.710205078125},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.6726685762405396},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5388308167457581},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.5272152423858643},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.5103723406791687},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4628853499889374},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.43927866220474243},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.42499056458473206},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.22418877482414246},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08914530277252197},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3319535.3354259","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3354259","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.550000011920929,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W639708223","https://openalex.org/W1536680647","https://openalex.org/W2102605133","https://openalex.org/W2109255472","https://openalex.org/W2180612164","https://openalex.org/W2193145675","https://openalex.org/W2407521645","https://openalex.org/W2535873859","https://openalex.org/W2594717275","https://openalex.org/W2604505099","https://openalex.org/W2774018344","https://openalex.org/W2787708942","https://openalex.org/W2962717526","https://openalex.org/W2963037989","https://openalex.org/W2963150697","https://openalex.org/W2963207607","https://openalex.org/W2963542991","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964175514","https://openalex.org/W2988916019","https://openalex.org/W3106250896","https://openalex.org/W4289038676"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W2949096641","https://openalex.org/W2970686063","https://openalex.org/W4320729701","https://openalex.org/W3034745255","https://openalex.org/W4254103348"],"abstract_inverted_index":{"Recently":[0],"Adversarial":[1],"Examples":[2],"(AEs)":[3],"that":[4,168],"deceive":[5],"deep":[6],"learning":[7],"models":[8,219],"have":[9],"been":[10],"a":[11,32],"topic":[12],"of":[13,158,213],"intense":[14],"research":[15],"interest.":[16],"Compared":[17],"with":[18,190,220],"the":[19,22,25,37,54,62,66,69,173,184],"AEs":[20,104,141,159,170,204],"in":[21,42,46,83,147],"digital":[23],"space,":[24],"physical":[26],"adversarial":[27],"attack":[28,144,172],"is":[29,58],"considered":[30],"as":[31],"more":[33,59,163],"severe":[34],"threat":[35],"to":[36,99,127,143,160,188,195,201,208],"applications":[38],"like":[39],"face":[40],"recognition":[41],"authentication,":[43],"objection":[44],"detection":[45],"autonomous":[47],"driving":[48],"cars,":[49],"etc.":[50,91],"In":[51,92],"particular,":[52],"deceiving":[53],"object":[55,67,77,108,145,176],"detectors":[56,78,146,177],"practically,":[57],"challenging":[60],"since":[61],"relative":[63],"position":[64],"between":[65],"and":[68,89,102,121,130,150,181,197],"detector":[70],"may":[71],"keep":[72],"changing.":[73],"Existing":[74],"works":[75],"attacking":[76,214],"are":[79,205],"still":[80],"very":[81],"limited":[82],"various":[84],"scenarios,":[85],"e.g.,":[86],"varying":[87,191],"distance":[88,192],"angles,":[90],"this":[93],"paper,":[94],"we":[95,115,135],"presented":[96],"systematic":[97],"solutions":[98],"build":[100],"robust":[101],"practical":[103],"against":[105],"real":[106],"world":[107],"detectors.":[109],"Particularly,":[110],"for":[111,131],"Hiding":[112],"Attack":[113,133],"(HA),":[114],"proposed":[116,136],"thefeature-interference":[117],"reinforcement":[118],"(FIR)":[119],"method":[120],"theenhanced":[122],"realistic":[123],"constraints":[124],"generation":[125],"(ERG)":[126],"enhance":[128],"robustness,":[129],"Appearing":[132],"(AA),":[134],"thenested-AE,":[137],"which":[138],"combines":[139],"two":[140],"together":[142],"both":[148],"long":[149],"short":[151],"distance.":[152],"We":[153],"also":[154,206],"designed":[155],"diverse":[156],"styles":[157],"make":[161],"AA":[162],"surreptitious.":[164],"Evaluation":[165],"results":[166],"show":[167],"our":[169],"can":[171],"state-of-the-art":[174,217],"real-time":[175],"(i.e.,":[178],"YOLO":[179],"V3":[180],"faster-RCNN)":[182],"at":[183],"success":[185,222],"rate":[186],"up":[187],"92.4%":[189],"from":[193,199],"1m":[194],"25m":[196],"angles":[198],"-60\u00ba":[200],"60\u00ba.":[202],"Our":[203],"demonstrated":[207],"be":[209],"highly":[210],"transferable,":[211],"capable":[212],"another":[215],"three":[216],"black-box":[218],"high":[221],"rate.":[223]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":28},{"year":2024,"cited_by_count":30},{"year":2023,"cited_by_count":28},{"year":2022,"cited_by_count":18},{"year":2021,"cited_by_count":30},{"year":2020,"cited_by_count":23},{"year":2019,"cited_by_count":2}],"updated_date":"2026-03-30T08:08:38.191290","created_date":"2025-10-10T00:00:00"}