{"id":"https://openalex.org/W4411635715","doi":"https://doi.org/10.1145/3731715.3733325","title":"Enhancing Adversarial Transferability via Self-Ensemble Feature Alignment","display_name":"Enhancing Adversarial Transferability via Self-Ensemble Feature Alignment","publication_year":2025,"publication_date":"2025-06-25","ids":{"openalex":"https://openalex.org/W4411635715","doi":"https://doi.org/10.1145/3731715.3733325"},"language":"en","primary_location":{"id":"doi:10.1145/3731715.3733325","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3731715.3733325","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 International Conference on Multimedia Retrieval","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhiming Zhao","orcid":"https://orcid.org/0009-0007-7997-5415"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiming Zhao","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0009-0007-7997-5415","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103325733","display_name":"Jiahao Chen","orcid":"https://orcid.org/0000-0002-5894-662X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahao Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0002-5894-662X","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101607289","display_name":"Qingming Li","orcid":"https://orcid.org/0000-0001-7410-4345"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingming Li","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-7410-4345","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016021356","display_name":"Chunyi Zhou","orcid":"https://orcid.org/0000-0003-0081-0946"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunyi Zhou","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0003-0081-0946","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0003-4268-372X","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.10473046,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1858","last_page":"1867"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.8986214399337769},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8370004296302795},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6805938482284546},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6431014537811279},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5938791036605835},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5143486261367798},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.244198739528656}],"concepts":[{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.8986214399337769},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8370004296302795},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6805938482284546},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6431014537811279},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5938791036605835},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5143486261367798},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.244198739528656},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3731715.3733325","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3731715.3733325","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 International Conference on Multimedia Retrieval","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.47999998927116394,"id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1880944740","https://openalex.org/W1920328734","https://openalex.org/W2117539524","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2774644650","https://openalex.org/W2807436399","https://openalex.org/W2888233014","https://openalex.org/W2919491917","https://openalex.org/W2962847335","https://openalex.org/W2963178695","https://openalex.org/W2963446712","https://openalex.org/W2964350391","https://openalex.org/W2984699060","https://openalex.org/W2990138404","https://openalex.org/W2997583194","https://openalex.org/W3014320879","https://openalex.org/W3107235539","https://openalex.org/W3130423852","https://openalex.org/W3171288285","https://openalex.org/W4214588794","https://openalex.org/W4214634256","https://openalex.org/W4214636423","https://openalex.org/W4285600276","https://openalex.org/W4291745724","https://openalex.org/W4295136046","https://openalex.org/W4297789521","https://openalex.org/W4312697129","https://openalex.org/W4380136652","https://openalex.org/W4390872679","https://openalex.org/W4396214365","https://openalex.org/W4402727921","https://openalex.org/W4402754002","https://openalex.org/W4409346678","https://openalex.org/W6600424091"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4409346678","https://openalex.org/W4392340763","https://openalex.org/W4283325551"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"have":[4],"demonstrated":[5],"remarkable":[6],"success":[7],"in":[8,112],"tasks":[9],"such":[10,41],"as":[11,42],"image":[12],"classification":[13],"and":[14,50,108,115,127,161,176],"object":[15],"detection,":[16],"but":[17,53],"remain":[18],"vulnerable":[19],"to":[20,34,106,187],"adversarial":[21,26,81,92,136],"attacks.":[22],"To":[23],"enhance":[24],"the":[25,62,89,146,169],"transferability":[27,82,93,137],"across":[28,98],"different":[29],"architectures":[30],"(e.g.,":[31,61],"from":[32],"CNNs":[33],"ViTs),":[35],"existing":[36,185],"attacks":[37,186],"leverage":[38,101],"various":[39],"strategies":[40],"input":[43],"transformations,":[44],"gradient":[45],"rectification,":[46],"custom":[47],"optimization":[48],"objectives,":[49],"model":[51,123],"ensembles,":[52],"struggle":[54],"with":[55,83,95,184],"limited":[56],"effectiveness":[57],"under":[58],"minimal":[59,84],"knowledge":[60],"number":[63],"of":[64,157],"surrogate":[65,142],"models).":[66],"In":[67],"this":[68],"work,":[69],"we":[70,100],"propose":[71],"a":[72,121],"novel":[73],"self-ensemble":[74],"feature":[75,96,130],"alignment(SEFA)":[76],"strategy":[77],"that":[78,91,150],"significantly":[79],"boosts":[80],"resource":[85],"overhead.":[86],"Motivated":[87],"by":[88,174],"observation":[90],"correlates":[94],"similarity":[97],"models,":[99],"Centered":[102],"Kernel":[103],"Alignment":[104],"(CKA)":[105],"measure":[107],"investigate":[109],"intermediate":[110],"features":[111],"both":[113],"inter-":[114],"intra-model":[116],"representation":[117],"spaces.":[118],"By":[119],"splitting":[120],"single":[122],"into":[124],"multiple":[125],"sub-networks":[126],"aligning":[128],"their":[129],"spaces,":[131],"our":[132,151],"method":[133,171],"effectively":[134],"enhances":[135],"without":[138],"relying":[139],"on":[140,145,165],"additional":[141],"models.":[143],"Experiments":[144],"ImageNet":[147],"dataset":[148],"demonstrate":[149],"approach":[152],"achieves":[153],"an":[154],"average":[155],"ASR":[156],"80.0%":[158],"(ResNet-50":[159],"surrogate)":[160,164],"75.9%":[162],"(Inc-v3":[163],"ImageNet,":[166],"which":[167],"outperform":[168],"second-best":[170],"(i.e.,":[172],"BSR)":[173],"+8.3%":[175],"+4.7%":[177],"respectively.":[178],"Further,":[179],"it":[180],"can":[181],"seamlessly":[182],"integrate":[183],"further":[188],"increase":[189],"cross":[190],"architecture":[191],"transferability.":[192]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}