{"id":"https://openalex.org/W3170514715","doi":"https://doi.org/10.1145/3447548.3467386","title":"Simple and Efficient Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes","display_name":"Simple and Efficient Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes","publication_year":2021,"publication_date":"2021-08-13","ids":{"openalex":"https://openalex.org/W3170514715","doi":"https://doi.org/10.1145/3447548.3467386","mag":"3170514715"},"language":"en","primary_location":{"id":"doi:10.1145/3447548.3467386","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447548.3467386","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065117717","display_name":"Satya Narayan Shukla","orcid":null},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Satya Narayan Shukla","raw_affiliation_strings":["University of Massachusetts Amherst, Amherst, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019965945","display_name":"Anit Kumar Sahu","orcid":"https://orcid.org/0000-0002-4083-0418"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anit Kumar Sahu","raw_affiliation_strings":["Amazon Alexa AI, Seattle, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Alexa AI, Seattle, WA, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007878747","display_name":"Devin Willmott","orcid":null},"institutions":[{"id":"https://openalex.org/I4210120115","display_name":"Robert Bosch (United States)","ror":"https://ror.org/02venad53","country_code":"US","type":"company","lineage":["https://openalex.org/I4210120115","https://openalex.org/I889804353"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Devin Willmott","raw_affiliation_strings":["Bosch Center for Artificial Intelligence, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bosch Center for Artificial Intelligence, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I4210120115"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075035644","display_name":"J. Zico Kolter","orcid":"https://orcid.org/0000-0002-8106-5759"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zico Kolter","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3702,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.93928678,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1461","last_page":"1469"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8287509083747864},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7514585256576538},{"id":"https://openalex.org/keywords/bayesian-optimization","display_name":"Bayesian optimization","score":0.719654381275177},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7015281915664673},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.6650248765945435},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.6633555293083191},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5596752762794495},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5419564843177795},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.4910016357898712},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.4794127643108368},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.40165549516677856},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3893868923187256},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3711678087711334}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8287509083747864},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7514585256576538},{"id":"https://openalex.org/C2778049539","wikidata":"https://www.wikidata.org/wiki/Q17002908","display_name":"Bayesian optimization","level":2,"score":0.719654381275177},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7015281915664673},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6650248765945435},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.6633555293083191},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5596752762794495},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5419564843177795},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.4910016357898712},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.4794127643108368},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.40165549516677856},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3893868923187256},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3711678087711334},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3447548.3467386","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447548.3467386","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.4000000059604645,"id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1510052597","https://openalex.org/W1583837637","https://openalex.org/W1686810756","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2192203593","https://openalex.org/W2746600820","https://openalex.org/W2906208681","https://openalex.org/W2950182411","https://openalex.org/W2964205597","https://openalex.org/W2985451033","https://openalex.org/W3080297477","https://openalex.org/W3106412272"],"related_works":["https://openalex.org/W4293054861","https://openalex.org/W2947175736","https://openalex.org/W4287510235","https://openalex.org/W2904174853","https://openalex.org/W4380075502","https://openalex.org/W2597787948","https://openalex.org/W4287723950","https://openalex.org/W2963115223","https://openalex.org/W4322750901","https://openalex.org/W3172573883"],"abstract_inverted_index":{"We":[0,35,70],"focus":[1],"on":[2,23,94],"the":[3,10,72,124],"problem":[4],"of":[5,74],"black-box":[6,48,92,127],"adversarial":[7,15,49,63,128],"attacks,":[8],"where":[9],"aim":[11],"is":[12],"to":[13,26,30,109,118,123],"generate":[14],"examples":[16,64],"for":[17,46,62],"deep":[18],"learning":[19],"models":[20],"solely":[21],"based":[22,44],"information":[24],"limited":[25],"output":[27],"label":[28,91],"(hard-label)":[29],"a":[31,37,66],"queried":[32],"data":[33],"input.":[34],"propose":[36],"simple":[38],"and":[39,83,88,101],"efficient":[40],"Bayesian":[41],"Optimization":[42],"(BO)":[43],"approach":[45,105],"developing":[47],"attacks.":[50,129],"Issues":[51],"with":[52],"BO's":[53],"performance":[54],"in":[55,65],"high":[56],"dimensions":[57],"are":[58],"avoided":[59],"by":[60,79],"searching":[61],"structured":[67],"low-dimensional":[68],"subspace.":[69],"demonstrate":[71],"efficacy":[73],"our":[75],"proposed":[76,104],"attack":[77,112],"method":[78],"evaluating":[80],"both":[81],"\u2113\u221e":[82],"\u21132":[84],"norm":[85],"constrained":[86],"untargeted":[87],"targeted":[89],"hard":[90],"attacks":[93],"three":[95],"standard":[96],"datasets":[97],"-":[98],"MNIST,":[99],"CIFAR-10,":[100],"ImageNet.":[102],"Our":[103],"consistently":[106],"achieves":[107],"2x":[108],"10x":[110,117],"higher":[111],"success":[113],"rate":[114],"while":[115],"requiring":[116],"20x":[119],"fewer":[120],"queries":[121],"compared":[122],"current":[125],"state-of-the-art":[126]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}