{"id":"https://openalex.org/W4404612238","doi":"https://doi.org/10.1145/3689932.3694769","title":"The Ultimate Combo: Boosting Adversarial Example Transferability by Composing Data Augmentations","display_name":"The Ultimate Combo: Boosting Adversarial Example Transferability by Composing Data Augmentations","publication_year":2024,"publication_date":"2024-11-06","ids":{"openalex":"https://openalex.org/W4404612238","doi":"https://doi.org/10.1145/3689932.3694769"},"language":"en","primary_location":{"id":"doi:10.1145/3689932.3694769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694769","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3689932.3694769","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113290360","display_name":"Zebin Yun","orcid":null},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Zebin Yun","raw_affiliation_strings":["Tel Aviv University, Tel Aviv, Israel"],"affiliations":[{"raw_affiliation_string":"Tel Aviv University, Tel Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111096600","display_name":"Achi-Or Weingarten","orcid":null},"institutions":[{"id":"https://openalex.org/I53964585","display_name":"Weizmann Institute of Science","ror":"https://ror.org/0316ej306","country_code":"IL","type":"education","lineage":["https://openalex.org/I53964585"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Achi-Or Weingarten","raw_affiliation_strings":["Weizmann Institute of Science, Rehovot, Israel"],"affiliations":[{"raw_affiliation_string":"Weizmann Institute of Science, Rehovot, Israel","institution_ids":["https://openalex.org/I53964585"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000713291","display_name":"Eyal Ronen","orcid":"https://orcid.org/0000-0002-6013-7426"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Eyal Ronen","raw_affiliation_strings":["Tel Aviv University, Tel Aviv, Israel"],"affiliations":[{"raw_affiliation_string":"Tel Aviv University, Tel Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101501539","display_name":"Mahmood Sharif","orcid":"https://orcid.org/0000-0001-7661-2220"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Mahmood Sharif","raw_affiliation_strings":["Tel Aviv University, Tel Aviv, Israel"],"affiliations":[{"raw_affiliation_string":"Tel Aviv University, Tel Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5113290360"],"corresponding_institution_ids":["https://openalex.org/I16391192"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18635869,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"113","last_page":"124"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9610000252723694,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.957099974155426,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.9109134674072266},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.908847451210022},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.833876371383667},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7318943738937378},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4351906478404999},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3778592050075531},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.25689026713371277}],"concepts":[{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.9109134674072266},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.908847451210022},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.833876371383667},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7318943738937378},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4351906478404999},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3778592050075531},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25689026713371277},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3689932.3694769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694769","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3689932.3694769","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694769","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7906800922","display_name":null,"funder_award_id":"1807/23","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W2097117768","https://openalex.org/W2180612164","https://openalex.org/W2183341477","https://openalex.org/W2765407302","https://openalex.org/W2774644650","https://openalex.org/W2798302089","https://openalex.org/W2949736877","https://openalex.org/W2954996726","https://openalex.org/W2963163009","https://openalex.org/W2963542245","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2984699060","https://openalex.org/W2998508940","https://openalex.org/W3094704314","https://openalex.org/W3103836116","https://openalex.org/W3127807678","https://openalex.org/W4223544745","https://openalex.org/W4287815740","https://openalex.org/W4301726735","https://openalex.org/W4386076570","https://openalex.org/W6776331362"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4392340763","https://openalex.org/W4283325551","https://openalex.org/W4403006689"],"abstract_inverted_index":{"To":[0,33],"help":[1,54,94],"adversarial":[2],"examples":[3],"generalize":[4,57],"from":[5],"surrogate":[6],"machine-learning":[7],"(ML)":[8],"models":[9,56,107],"to":[10,53,58,115,162],"targets,":[11],"certain":[12,179],"transferability-based":[13],"black-box":[14],"evasion":[15],"attacks":[16],"incorporate":[17],"data":[18,41],"augmentations":[19,29,112,130,137,180],"(e.g.,":[20,113,155],"random":[21],"resizing).":[22],"Yet,":[23],"prior":[24],"work":[25],"has":[26],"explored":[27,47],"limited":[28],"and":[30,62,83,102,105],"their":[31],"composition.":[32],"fill":[34],"the":[35,100,145,150,153],"gap,":[36],"we":[37,46,89,126],"systematically":[38],"studied":[39],"how":[40,64],"augmentation":[42,49,81,91],"affects":[43],"transferability.":[44,96,182],"Specifically,":[45],"46":[48],"techniques":[50,82],"originally":[51],"proposed":[52],"ML":[55],"unseen":[59],"benign":[60],"samples,":[61],"assessed":[63],"they":[65],"impact":[66],"transferability,":[67],"when":[68,120],"applied":[69],"individually":[70],"or":[71],"composed.":[72],"Performing":[73],"exhaustive":[74],"search":[75,85],"on":[76,86,166],"a":[77],"small":[78],"subset":[79],"of":[80,152],"genetic":[84],"all":[87],"techniques,":[88],"identified":[90],"combinations":[92],"that":[93,109,128,144],"promote":[95,181],"Extensive":[97],"experiments":[98],"with":[99,122],"ImageNet":[101],"CIFAR-10":[103],"datasets":[104],"18":[106],"showed":[108],"simple":[110],"color-space":[111],"color":[114],"greyscale)":[116],"attain":[117],"high":[118],"transferability":[119,132,161],"combined":[121],"standard":[123],"augmentations.":[124],"Furthermore,":[125],"discovered":[127],"composing":[129],"impacts":[131],"mostly":[133],"monotonically":[134],"(i.e.,":[135],"more":[136],"\u2192":[138],"\u2265":[139],"transferability).":[140],"We":[141],"also":[142],"found":[143],"best":[146],"composition":[147],"significantly":[148],"outperformed":[149],"state":[151],"art":[154],"91.8%":[156],"vs.":[157],"\u2264":[158],"82.5%":[159],"average":[160],"adversarially":[163],"trained":[164],"targets":[165],"ImageNet).":[167],"Lastly,":[168],"our":[169],"theoretical":[170],"analysis,":[171],"backed":[172],"by":[173],"empirical":[174],"evidence,":[175],"intuitively":[176],"explains":[177],"why":[178]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}