{"id":"https://openalex.org/W4407187497","doi":"https://doi.org/10.1145/3716384","title":"Quantifying and Exploiting Adversarial Vulnerability: Gradient-Based Input Pre-Filtering for Enhanced Performance in Black-Box Attacks","display_name":"Quantifying and Exploiting Adversarial Vulnerability: Gradient-Based Input Pre-Filtering for Enhanced Performance in Black-Box Attacks","publication_year":2025,"publication_date":"2025-02-06","ids":{"openalex":"https://openalex.org/W4407187497","doi":"https://doi.org/10.1145/3716384"},"language":"en","primary_location":{"id":"doi:10.1145/3716384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716384","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3716384","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076453827","display_name":"Naveen Karunanayake","orcid":"https://orcid.org/0000-0002-7081-2958"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Naveen Karunanayake","raw_affiliation_strings":["The University of Sydney School of Computer Science, Sydney, Australia","The University of Sydney School of Computer Science,  Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7081-2958","affiliations":[{"raw_affiliation_string":"The University of Sydney School of Computer Science, Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"The University of Sydney School of Computer Science,  Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088027306","display_name":"Bhanuka Silva","orcid":"https://orcid.org/0009-0000-6558-6514"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bhanuka Silva","raw_affiliation_strings":["The University of Sydney School of Computer Science, Sydney, Australia","The University of Sydney School of Computer Science,  Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0000-6558-6514","affiliations":[{"raw_affiliation_string":"The University of Sydney School of Computer Science, Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"The University of Sydney School of Computer Science,  Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092681387","display_name":"Yasod Ginige","orcid":"https://orcid.org/0009-0004-0479-1767"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yasod Ginige","raw_affiliation_strings":["The University of Sydney School of Computer Science, Sydney, Australia","The University of Sydney School of Computer Science,  Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0004-0479-1767","affiliations":[{"raw_affiliation_string":"The University of Sydney School of Computer Science, Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"The University of Sydney School of Computer Science,  Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038376039","display_name":"Suranga Seneviratne","orcid":"https://orcid.org/0000-0002-5485-5595"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Suranga Seneviratne","raw_affiliation_strings":["The University of Sydney School of Computer Science, Sydney, Australia","The University of Sydney School of Computer Science,  Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5485-5595","affiliations":[{"raw_affiliation_string":"The University of Sydney School of Computer Science, Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"The University of Sydney School of Computer Science,  Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037947876","display_name":"Sanjay Chawla","orcid":"https://orcid.org/0000-0002-8102-2572"},"institutions":[{"id":"https://openalex.org/I1301390666","display_name":"Qatar Airways (Qatar)","ror":"https://ror.org/01hx00y13","country_code":"QA","type":"company","lineage":["https://openalex.org/I1301390666"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Sanjay Chawla","raw_affiliation_strings":["Qatar Computing Research Institute, Doha, Qatar","Qatar Computing Research Institute,  Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-8102-2572","affiliations":[{"raw_affiliation_string":"Qatar Computing Research Institute, Doha, Qatar","institution_ids":["https://openalex.org/I1301390666"]},{"raw_affiliation_string":"Qatar Computing Research Institute,  Doha, Qatar","institution_ids":["https://openalex.org/I1301390666"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.5175,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.91734765,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"28","issue":"2","first_page":"1","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9574000239372253,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7467539310455322},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6824846267700195},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6680195927619934},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6008145213127136},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3646361529827118},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2720217704772949}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7467539310455322},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6824846267700195},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6680195927619934},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6008145213127136},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3646361529827118},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2720217704772949}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3716384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716384","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3716384","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3716384","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1614298861","https://openalex.org/W1849277567","https://openalex.org/W1945616565","https://openalex.org/W2007339694","https://openalex.org/W2103459159","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2250539671","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2640329709","https://openalex.org/W2734677449","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2798302089","https://openalex.org/W2888233014","https://openalex.org/W2895097814","https://openalex.org/W2896457183","https://openalex.org/W2929803724","https://openalex.org/W2943671295","https://openalex.org/W2949128310","https://openalex.org/W2963118571","https://openalex.org/W2963143631","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2964346747","https://openalex.org/W2969542116","https://openalex.org/W2982648698","https://openalex.org/W2998347911","https://openalex.org/W3004996675","https://openalex.org/W3008718813","https://openalex.org/W3015646845","https://openalex.org/W3018458867","https://openalex.org/W3032338640","https://openalex.org/W3035524670","https://openalex.org/W3035736465","https://openalex.org/W3106412272","https://openalex.org/W3107235539","https://openalex.org/W3110144845","https://openalex.org/W3163860748","https://openalex.org/W3167676691","https://openalex.org/W3170978381","https://openalex.org/W3174673808","https://openalex.org/W4281908667","https://openalex.org/W4287753328","https://openalex.org/W4288009601","https://openalex.org/W4301409532","https://openalex.org/W4312809370","https://openalex.org/W4318719284","https://openalex.org/W4319453776","https://openalex.org/W4366390744","https://openalex.org/W4366850747","https://openalex.org/W4372283945","https://openalex.org/W4378506863","https://openalex.org/W4385970150","https://openalex.org/W6637162671","https://openalex.org/W6729756640"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W3009622996"],"abstract_inverted_index":{"We":[0],"investigate":[1],"the":[2,34,42,46,51,102,124,146,165,184],"vulnerability":[3,36],"of":[4,37,45,62,148],"inputs":[5,57,100],"in":[6],"an":[7],"adversarial":[8,19,35,114],"setting":[9],"and":[10,85,153,188,195],"demonstrate":[11,122],"that":[12,56,99,123,144,155],"certain":[13],"samples":[14],"are":[15,75],"more":[16,69,111],"susceptible":[17],"to":[18,22,32,50,67,71,113],"perturbations":[20],"compared":[21],"others.":[23],"Specifically,":[24],"we":[25,95,97,121,137,179],"employ":[26],"a":[27,59,78,82,129,139],"simple":[28],"yet":[29],"effective":[30],"approach":[31,182],"quantify":[33],"inputs,":[38],"which":[39],"relies":[40],"on":[41,81,88,107,159],"clipped":[43],"gradients":[44],"loss":[47],"with":[48,58,101],"respect":[49],"input.":[52],"Our":[53],"observations":[54],"indicate":[55],"low":[60,171],"percentage":[61],"zero":[63,104,125],"gradient":[64,105,126],"components":[65],"tend":[66],"be":[68],"vulnerable":[70],"attacks.":[72],"These":[73],"findings":[74],"supported":[76],"by":[77,193],"theoretical":[79],"explanation":[80],"linear":[83],"model":[84,134],"empirical":[86],"evidence":[87],"deep":[89],"neural":[90],"networks.":[91],"Across":[92],"all":[93,177],"datasets":[94,178],"tested,":[96],"find":[98],"lowest":[103],"percentage,":[106,127],"average,":[108,175],"exhibit":[109],"34.5%":[110],"susceptibility":[112],"attacks":[115,152],"than":[116],"randomly":[117],"selected":[118],"inputs.":[119],"Additionally,":[120],"as":[128],"metric,":[130],"transfers":[131],"across":[132,176],"different":[133],"architectures.":[135],"Finally,":[136],"propose":[138],"novel":[140],"black-box":[141,151,190],"attack":[142,166,191],"pipeline":[143],"enhances":[145],"efficiency":[147],"conventional":[149,185],"query-based":[150,189],"show":[154],"input":[156],"pre-filtering":[157],"based":[158],"Zero":[160],"Gradient":[161],"Percentage":[162],"can":[163],"boost":[164],"success":[167],"rates,":[168],"particularly":[169],"under":[170],"perturbation":[172],"levels.":[173],"On":[174],"test,":[180],"our":[181],"outperforms":[183],"shadow":[186],"model-based":[187],"pipelines":[192],"44.9%":[194],"30.4%,":[196],"respectively.":[197]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}