{"id":"https://openalex.org/W4405181670","doi":"https://doi.org/10.1145/3658644.3690343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","display_name":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405181670","doi":"https://doi.org/10.1145/3658644.3690343"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3690343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690343","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690343","source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690343","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018790885","display_name":"Hanbin Hong","orcid":"https://orcid.org/0009-0007-0538-6669"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanbin Hong","raw_affiliation_strings":["University of Connecticut, Storrs, CT, USA"],"raw_orcid":"https://orcid.org/0009-0007-0538-6669","affiliations":[{"raw_affiliation_string":"University of Connecticut, Storrs, CT, USA","institution_ids":["https://openalex.org/I140172145"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100390708","display_name":"Xinyu Zhang","orcid":"https://orcid.org/0000-0002-7427-5774"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Zhang","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0002-7427-5774","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101789833","display_name":"Binghui Wang","orcid":"https://orcid.org/0000-0001-5616-060X"},"institutions":[{"id":"https://openalex.org/I180949307","display_name":"Illinois Institute of Technology","ror":"https://ror.org/037t3ry66","country_code":"US","type":"education","lineage":["https://openalex.org/I180949307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Binghui Wang","raw_affiliation_strings":["Illinois Institute of Technology, Chicago, IL, USA"],"raw_orcid":"https://orcid.org/0000-0001-5616-060X","affiliations":[{"raw_affiliation_string":"Illinois Institute of Technology, Chicago, IL, USA","institution_ids":["https://openalex.org/I180949307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072485378","display_name":"Zhongjie Ba","orcid":"https://orcid.org/0000-0003-0921-8869"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongjie Ba","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0003-0921-8869","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100725148","display_name":"Yuan Hong","orcid":"https://orcid.org/0000-0003-4095-4506"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuan Hong","raw_affiliation_strings":["University of Connecticut, Storrs, CT, USA"],"raw_orcid":"https://orcid.org/0000-0003-4095-4506","affiliations":[{"raw_affiliation_string":"University of Connecticut, Storrs, CT, USA","institution_ids":["https://openalex.org/I140172145"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9164,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.80410704,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"600","last_page":"614"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9782999753952026,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7633941769599915},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7553778290748596},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7481365203857422},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.6640722155570984},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.533440887928009},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4643080532550812},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.44924303889274597},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44428551197052},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27540332078933716}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7633941769599915},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7553778290748596},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7481365203857422},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.6640722155570984},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.533440887928009},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4643080532550812},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.44924303889274597},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44428551197052},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27540332078933716},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3690343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690343","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690343","source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3690343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690343","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690343","source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2267193157","display_name":null,"funder_award_id":"CNS-2308730, CNS-2302689, CMMI-2326341, CNS-2319277, ECCS-2216926, CNS-2241713, CNS-2331302 and CNS-2339686","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405181670.pdf"},"referenced_works_count":88,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1901129140","https://openalex.org/W1945616565","https://openalex.org/W2117539524","https://openalex.org/W2194775991","https://openalex.org/W2350778671","https://openalex.org/W2543927648","https://openalex.org/W2549139847","https://openalex.org/W2594877703","https://openalex.org/W2596164567","https://openalex.org/W2603766943","https://openalex.org/W2611576673","https://openalex.org/W2618043096","https://openalex.org/W2620038827","https://openalex.org/W2640329709","https://openalex.org/W2746600820","https://openalex.org/W2747329762","https://openalex.org/W2765233338","https://openalex.org/W2765384636","https://openalex.org/W2767962654","https://openalex.org/W2773022113","https://openalex.org/W2774018344","https://openalex.org/W2776514146","https://openalex.org/W2786118190","https://openalex.org/W2787496614","https://openalex.org/W2787708942","https://openalex.org/W2787733970","https://openalex.org/W2798801120","https://openalex.org/W2802557767","https://openalex.org/W2874797877","https://openalex.org/W2883285025","https://openalex.org/W2889210204","https://openalex.org/W2890324916","https://openalex.org/W2895097814","https://openalex.org/W2906208681","https://openalex.org/W2911634294","https://openalex.org/W2913266441","https://openalex.org/W2914897181","https://openalex.org/W2915401840","https://openalex.org/W2918814112","https://openalex.org/W2943642558","https://openalex.org/W2943646750","https://openalex.org/W2946814535","https://openalex.org/W2962710014","https://openalex.org/W2963485691","https://openalex.org/W2963496101","https://openalex.org/W2963857521","https://openalex.org/W2963952467","https://openalex.org/W2964082701","https://openalex.org/W2969542116","https://openalex.org/W2976017709","https://openalex.org/W2982648698","https://openalex.org/W2985451033","https://openalex.org/W2996921661","https://openalex.org/W3015625436","https://openalex.org/W3034190247","https://openalex.org/W3034619610","https://openalex.org/W3080297477","https://openalex.org/W3081635600","https://openalex.org/W3091857398","https://openalex.org/W3105976275","https://openalex.org/W3106412272","https://openalex.org/W3107235539","https://openalex.org/W3118608800","https://openalex.org/W3174316494","https://openalex.org/W3179761913","https://openalex.org/W3213164726","https://openalex.org/W3213927281","https://openalex.org/W4226376618","https://openalex.org/W4226510616","https://openalex.org/W4281564094","https://openalex.org/W4287752693","https://openalex.org/W4312442707","https://openalex.org/W4312707520","https://openalex.org/W4362635268","https://openalex.org/W4385412533","https://openalex.org/W4386066309","https://openalex.org/W4386272826","https://openalex.org/W4399597738","https://openalex.org/W4402264369","https://openalex.org/W6713132643","https://openalex.org/W6729756640","https://openalex.org/W6746921180","https://openalex.org/W6756052093","https://openalex.org/W6759580348","https://openalex.org/W6771543752","https://openalex.org/W6774685073","https://openalex.org/W6779823529"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4283221438","https://openalex.org/W2900159906","https://openalex.org/W4384648009","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W4380352238","https://openalex.org/W3126470649","https://openalex.org/W2930249865"],"abstract_inverted_index":{"Black-box":[0],"adversarial":[1,83,121,132,160],"attacks":[2,27,66,73,190],"have":[3,184,223],"demonstrated":[4],"strong":[5,110],"potential":[6],"to":[7,59,103,169],"compromise":[8],"machine":[9,99],"learning":[10,100],"models":[11],"by":[12,32],"iteratively":[13],"querying":[14,86],"the":[15,39,48,56,77,88,127,130,140,152,155,171,176,187,192,210,225,228],"target":[16,89,141],"model":[17],"or":[18,44],"leveraging":[19],"transferability":[20],"from":[21],"a":[22,61,117,146],"local":[23],"surrogate":[24],"model.Recently,":[25],"such":[26],"can":[28,75],"be":[29],"effectively":[30],"mitigated":[31],"state-of-the-art":[33],"(SOTA)":[34],"defenses,":[35],"e.g.,":[36,108],"detection":[37],"via":[38],"pattern":[40],"of":[41,64,82,98,119,129,154,212,227],"sequential":[42],"queries,":[43],"injecting":[45],"noise":[46],"into":[47],"model.":[49,90,142],"To":[50],"our":[51],"best":[52],"knowledge,":[53],"we":[54,144,164,183],"take":[55],"first":[57],"step":[58],"study":[60],"new":[62,92],"paradigm":[63],"black-box":[65,72,93,106,156,189,203],"with":[67,113,123,158,200],"provable":[68,114],"guarantees":[69],"--":[70],"certifiable":[71,188],"that":[74],"guarantee":[76],"attack":[78,94,157],"success":[79],"probability":[80],"(ASP)":[81],"examples":[84,122,133,161],"before":[85],"over":[87,139],"This":[91],"unveils":[95],"significant":[96],"vulnerabilities":[97],"models,":[101],"compared":[102],"traditional":[104],"empirical":[105],"attacks,":[107,204],"breaking":[109],"SOTA":[111,202,207],"defenses":[112,208],"confidence,":[115],"constructing":[116],"space":[118],"(infinite)":[120],"high":[124],"ASP,":[125],"and":[126,195,215,220],"ASP":[128,153],"generated":[131],"is":[134],"theoretically":[135],"guaranteed":[136],"without":[137],"verification/queries":[138],"Specifically,":[143],"establish":[145],"novel":[147,167],"theoretical":[148,219],"foundation":[149],"for":[150,179],"ensuring":[151],"randomized":[159,172],"(AEs).":[162],"Then,":[163],"propose":[165],"several":[166],"techniques":[168],"craft":[170],"AEs":[173],"while":[174,198],"reducing":[175],"perturbation":[177],"size":[178],"better":[180],"imperceptibility.":[181],"Finally,":[182],"comprehensively":[185],"evaluated":[186],"on":[191],"CIFAR10/100,":[193],"ImageNet,":[194],"LibriSpeech":[196],"datasets,":[197],"benchmarking":[199],"16":[201],"against":[205],"various":[206],"in":[209],"domains":[211],"computer":[213],"vision":[214],"speech":[216],"recognition.":[217],"Both":[218],"experimental":[221],"results":[222],"validated":[224],"significance":[226],"proposed":[229],"attack.":[230]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}