{"id":"https://openalex.org/W4409869032","doi":"https://doi.org/10.1145/3718751.3718815","title":"Rethinking Translation Invariance in Transfer-based Adversarial Attacks","display_name":"Rethinking Translation Invariance in Transfer-based Adversarial Attacks","publication_year":2024,"publication_date":"2024-11-15","ids":{"openalex":"https://openalex.org/W4409869032","doi":"https://doi.org/10.1145/3718751.3718815"},"language":"en","primary_location":{"id":"doi:10.1145/3718751.3718815","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3718751.3718815","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3718751.3718815","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3718751.3718815","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100657706","display_name":"Bo Yang","orcid":"https://orcid.org/0000-0002-0859-2747"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Yang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0000-0002-0859-2747","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057918897","display_name":"Leyu Dai","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Leyu Dai","raw_affiliation_strings":["Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0009-0009-6753-3016","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047763068","display_name":"Hengwei Zhang","orcid":"https://orcid.org/0000-0002-1649-7336"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hengwei Zhang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0000-0002-1649-7336","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I169689159"],"apc_list":null,"apc_paid":null,"fwci":0.7086,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.74769279,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"405","last_page":"410"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.942300021648407,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9381999969482422,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8543721437454224},{"id":"https://openalex.org/keywords/translation","display_name":"Translation (biology)","score":0.7055829763412476},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5808406472206116},{"id":"https://openalex.org/keywords/transfer","display_name":"Transfer (computing)","score":0.45658084750175476},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4118134081363678},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4079653024673462},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.34207683801651},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3355613350868225},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.07025367021560669}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8543721437454224},{"id":"https://openalex.org/C149364088","wikidata":"https://www.wikidata.org/wiki/Q185917","display_name":"Translation (biology)","level":4,"score":0.7055829763412476},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5808406472206116},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.45658084750175476},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4118134081363678},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4079653024673462},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.34207683801651},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3355613350868225},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.07025367021560669},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.0},{"id":"https://openalex.org/C105580179","wikidata":"https://www.wikidata.org/wiki/Q188928","display_name":"Messenger RNA","level":3,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3718751.3718815","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3718751.3718815","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3718751.3718815","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3718751.3718815","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3718751.3718815","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3718751.3718815","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.5}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409869032.pdf","grobid_xml":"https://content.openalex.org/works/W4409869032.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2183341477","https://openalex.org/W2274287116","https://openalex.org/W2302255633","https://openalex.org/W2620038827","https://openalex.org/W2767962654","https://openalex.org/W2774018344","https://openalex.org/W2774644650","https://openalex.org/W2911634294","https://openalex.org/W2926400157","https://openalex.org/W2962847335","https://openalex.org/W2963384482","https://openalex.org/W2963389226","https://openalex.org/W2963744840","https://openalex.org/W2963920068","https://openalex.org/W2964311202","https://openalex.org/W2964350391","https://openalex.org/W2969542116","https://openalex.org/W2976752987","https://openalex.org/W3176579584","https://openalex.org/W4293580221","https://openalex.org/W6637162671","https://openalex.org/W6719080892","https://openalex.org/W6729756640","https://openalex.org/W6745908940"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W4288019534"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"models":[2,32],"are":[3,9],"vulnerable":[4],"to":[5,15,49,55],"adversarial":[6,22,35],"examples,":[7,23],"which":[8],"generated":[10],"by":[11,33,104],"adding":[12],"subtle":[13],"perturbations":[14],"raw":[16],"images.":[17],"Leveraging":[18],"the":[19,62,101,105,133,137],"transferability":[20,75,126],"of":[21,64,87,139],"adversaries":[24],"can":[25],"achieve":[26],"effective":[27,47],"black-box":[28],"attacks":[29],"on":[30,38,132,154],"target":[31],"utilizing":[34],"examples":[36],"crafted":[37],"surrogate":[39],"models.":[40,78,129,158],"Translation-Invariant":[41,94],"attack":[42,89,95,148],"Method":[43,96],"(TIM)":[44],"is":[45],"an":[46,84,92],"method":[48],"improve":[50,56],"transferability.":[51],"However,":[52],"in":[53,74,125],"order":[54],"computational":[57],"efficiency,":[58],"this":[59,80],"work":[60],"convolves":[61],"gradients":[63,102,110],"un-translated":[65],"images":[66,115],"with":[67,108,116],"a":[68,145],"kernel":[69],"matrix,":[70],"limiting":[71],"its":[72],"improvement":[73,124,151],"across":[76,127],"more":[77],"In":[79],"work,":[81],"we":[82,99],"conduct":[83],"in-depth":[85],"analysis":[86],"translation-invariant":[88],"and":[90],"propose":[91],"Enhanced":[93],"(ETIM).":[97],"Specifically,":[98],"replace":[100],"obtained":[103,111],"convolution":[106],"operation":[107],"averaging":[109],"from":[112],"slightly":[113],"translated":[114],"uniformly":[117],"increasing":[118],"transformation":[119],"magnitudes,":[120],"thereby":[121],"achieving":[122],"comprehensive":[123],"multiple":[128],"Experimental":[130],"results":[131],"ImageNet":[134],"dataset":[135],"validate":[136],"effectiveness":[138],"our":[140],"approach,":[141],"where":[142],"ETIM":[143],"shows":[144],"12.6%":[146],"average":[147],"success":[149],"rate":[150],"over":[152],"TIM":[153],"six":[155],"advanced":[156],"defense":[157]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}