{"id":"https://openalex.org/W4387969347","doi":"https://doi.org/10.1145/3581783.3611846","title":"When Measures are Unreliable: Imperceptible Adversarial Perturbations toward Top-k Multi-Label Learning","display_name":"When Measures are Unreliable: Imperceptible Adversarial Perturbations toward Top-k Multi-Label Learning","publication_year":2023,"publication_date":"2023-10-26","ids":{"openalex":"https://openalex.org/W4387969347","doi":"https://doi.org/10.1145/3581783.3611846"},"language":"en","primary_location":{"id":"doi:10.1145/3581783.3611846","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3581783.3611846","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3581783.3611846","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3581783.3611846","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064809444","display_name":"Yuchen Sun","orcid":"https://orcid.org/0009-0002-8895-5380"},"institutions":[{"id":"https://openalex.org/I4210101410","display_name":"International Centre for Theoretical Physics Asia-Pacific","ror":"https://ror.org/01z2px678","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210101410","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuchen Sun","raw_affiliation_strings":["IIP, ICT, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-8895-5380","affiliations":[{"raw_affiliation_string":"IIP, ICT, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210101410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089092566","display_name":"Qianqian Xu","orcid":"https://orcid.org/0000-0002-3512-7277"},"institutions":[{"id":"https://openalex.org/I4210101410","display_name":"International Centre for Theoretical Physics Asia-Pacific","ror":"https://ror.org/01z2px678","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210101410","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianqian Xu","raw_affiliation_strings":["IIP, ICT, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3512-7277","affiliations":[{"raw_affiliation_string":"IIP, ICT, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210101410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024281502","display_name":"Zitai Wang","orcid":"https://orcid.org/0000-0003-4156-6417"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zitai Wang","raw_affiliation_strings":["SKLOIS, IIE, CAS & SCS, UCAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4156-6417","affiliations":[{"raw_affiliation_string":"SKLOIS, IIE, CAS & SCS, UCAS, Beijing, China","institution_ids":[]}]},{"author_position":"last","author":{"id":null,"display_name":"Qingming Huang","orcid":"https://orcid.org/0009-0006-8793-6953"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingming Huang","raw_affiliation_strings":["SCST, UCAS; IIP, ICT, CAS; BDKM, CAS; & Peng Cheng Laboratory, Beijing, China","IIP, ICT, CAS","SCST, UCAS","BDKM, CAS"],"raw_orcid":"https://orcid.org/0009-0006-8793-6953","affiliations":[{"raw_affiliation_string":"SCST, UCAS; IIP, ICT, CAS; BDKM, CAS; & Peng Cheng Laboratory, Beijing, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"IIP, ICT, CAS","institution_ids":[]},{"raw_affiliation_string":"SCST, UCAS","institution_ids":[]},{"raw_affiliation_string":"BDKM, CAS","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1515","last_page":"1526"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8307543992996216},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.765595555305481},{"id":"https://openalex.org/keywords/pascal","display_name":"Pascal (unit)","score":0.6600258350372314},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6308461427688599},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6226038932800293},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6018383502960205},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4807286262512207},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.4490434229373932},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.41786131262779236},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33103039860725403},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.19425776600837708}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8307543992996216},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.765595555305481},{"id":"https://openalex.org/C75608658","wikidata":"https://www.wikidata.org/wiki/Q44395","display_name":"Pascal (unit)","level":2,"score":0.6600258350372314},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6308461427688599},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6226038932800293},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6018383502960205},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4807286262512207},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.4490434229373932},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.41786131262779236},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33103039860725403},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.19425776600837708},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3581783.3611846","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3581783.3611846","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3581783.3611846","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3581783.3611846","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3581783.3611846","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3581783.3611846","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Multimedia","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G28403681","display_name":null,"funder_award_id":"XDB28000000","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4199693610","display_name":null,"funder_award_id":"62236008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G431784793","display_name":null,"funder_award_id":"61976202","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4332558100","display_name":null,"funder_award_id":"XDB28000000","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G6212863906","display_name":null,"funder_award_id":"U21B2038","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6785349463","display_name":null,"funder_award_id":"6212200758","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7801426869","display_name":"\u7aef\u4e91\u534f\u540c\u89c6\u9891\u667a\u80fd\u8ba1\u7b97\u65b9\u6cd5\u4e0e\u82af\u7247\u67b6\u6784\u7814\u7a76","funder_award_id":"61931008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8777218368","display_name":null,"funder_award_id":"XDB28000000","funder_id":"https://openalex.org/F4320321133","funder_display_name":"Chinese Academy of Sciences"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"},{"id":"https://openalex.org/F4320322847","display_name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","ror":"https://ror.org/031141b54"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320335892","display_name":"Youth Innovation Promotion Association","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387969347.pdf","grobid_xml":"https://content.openalex.org/works/W4387969347.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W2007972815","https://openalex.org/W2108598243","https://openalex.org/W2150338193","https://openalex.org/W2243397390","https://openalex.org/W2983042735","https://openalex.org/W2996851481","https://openalex.org/W2997258743","https://openalex.org/W3035229828","https://openalex.org/W3035768837","https://openalex.org/W3092760023","https://openalex.org/W3101496892","https://openalex.org/W3205547207","https://openalex.org/W4200397820","https://openalex.org/W4214748882","https://openalex.org/W4225854131","https://openalex.org/W4256361765","https://openalex.org/W4283817929","https://openalex.org/W4292387248","https://openalex.org/W4294310809","https://openalex.org/W4304015017","https://openalex.org/W4304084214","https://openalex.org/W4312414395"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W4310988119"],"abstract_inverted_index":{"With":[0],"the":[1,33,39,60,65,79,109,167,175],"great":[2],"success":[3],"of":[4,100,111,169],"deep":[5],"neural":[6],"networks,":[7],"adversarial":[8,26,86,124],"learning":[9,20,30],"has":[10],"received":[11],"widespread":[12],"attention":[13],"in":[14,173],"various":[15],"studies,":[16],"ranging":[17],"from":[18,44,75],"multi-class":[19],"to":[21,90,121,145],"multi-label":[22,29,55,177],"learning.":[23],"However,":[24],"existing":[25],"attacks":[27],"toward":[28],"only":[31,92],"pursue":[32],"traditional":[34],"visual":[35,94,130],"imperceptibility":[36],"but":[37,96],"ignore":[38],"new":[40],"perceptible":[41],"problem":[42],"coming":[43],"measures":[45],"such":[46,123,156],"as":[47,157],"Precision@k":[48],"and":[49,131,163],"mAP@k.":[50],"Specifically,":[51],"when":[52],"a":[53,115,140],"well-trained":[54],"classifier":[56],"performs":[57],"far":[58],"below":[59],"expectation":[61],"on":[62,152],"some":[63],"samples,":[64],"victim":[66],"can":[67],"easily":[68],"realize":[69],"that":[70,126],"this":[71,103,105,147],"performance":[72],"degeneration":[73],"stems":[74],"attack,":[76],"rather":[77],"than":[78],"model":[80],"itself.":[81],"Therefore,":[82],"an":[83,135],"ideal":[84],"multi-labeling":[85],"attack":[87],"should":[88],"manage":[89],"not":[91],"deceive":[93],"perception":[95],"also":[97],"evade":[98],"monitoring":[99],"measures.":[101],"To":[102],"end,":[104],"paper":[106],"first":[107],"proposes":[108],"concept":[110],"measure":[112,132],"imperceptibility.":[113,133],"Then,":[114],"novel":[116],"loss":[117],"function":[118],"is":[119,143],"devised":[120],"generate":[122],"perturbations":[125],"could":[127],"achieve":[128],"both":[129],"Furthermore,":[134],"efficient":[136],"algorithm,":[137],"which":[138],"enjoys":[139],"convex":[141],"objective,":[142],"established":[144],"optimize":[146],"objective.":[148],"Finally,":[149],"extensive":[150],"experiments":[151],"large-scale":[153],"benchmark":[154],"datasets,":[155],"PASCAL":[158],"VOC":[159],"2012,":[160],"MS":[161],"COCO,":[162],"NUS":[164],"WIDE,":[165],"demonstrate":[166],"superiority":[168],"our":[170],"proposed":[171],"method":[172],"attacking":[174],"top-k":[176],"systems.":[178]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}