{"id":"https://openalex.org/W4385768256","doi":"https://doi.org/10.24963/ijcai.2023/133","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","display_name":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","publication_year":2023,"publication_date":"2023-08-01","ids":{"openalex":"https://openalex.org/W4385768256","doi":"https://doi.org/10.24963/ijcai.2023/133"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2023/133","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/133","pdf_url":"https://www.ijcai.org/proceedings/2023/0133.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2023/0133.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100657632","display_name":"Han Liu","orcid":"https://orcid.org/0009-0000-8384-7933"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Liu","raw_affiliation_strings":["Dalian University of Technology","Dalian University of Technology, Dalian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalian University of Technology","institution_ids":["https://openalex.org/I27357992"]},{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083369574","display_name":"Xingshuo Huang","orcid":"https://orcid.org/0000-0001-8491-5176"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingshuo Huang","raw_affiliation_strings":["Dalian University of Technology","Dalian University of Technology, Dalian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalian University of Technology","institution_ids":["https://openalex.org/I27357992"]},{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100403816","display_name":"Xiaotong Zhang","orcid":"https://orcid.org/0000-0002-5013-8476"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaotong Zhang","raw_affiliation_strings":["Dalian University of Technology","Dalian University of Technology, Dalian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalian University of Technology","institution_ids":["https://openalex.org/I27357992"]},{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014322699","display_name":"Qimai Li","orcid":"https://orcid.org/0000-0002-6705-7939"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qimai Li","raw_affiliation_strings":["The Hong Kong Polytechnic University","The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]},{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001030192","display_name":"Fenglong Ma","orcid":"https://orcid.org/0000-0002-4999-0303"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fenglong Ma","raw_affiliation_strings":["The Pennsylvania State University","The Pennsylvania State University, Pennsylvania, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University, Pennsylvania, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100757829","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-8598-0831"},"institutions":[{"id":"https://openalex.org/I4210152380","display_name":"Shenzhen Technology University","ror":"https://ror.org/04qzpec27","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210152380"]},{"id":"https://openalex.org/I4388482657","display_name":"Shenzhen MSU-BIT University","ror":"https://ror.org/02q963474","country_code":null,"type":"education","lineage":["https://openalex.org/I4388482657"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Shenzhen MSU-BIT University","Shenzhen MSU-BIT University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shenzhen MSU-BIT University","institution_ids":["https://openalex.org/I4210152380","https://openalex.org/I4388482657"]},{"raw_affiliation_string":"Shenzhen MSU-BIT University, Shenzhen, China","institution_ids":["https://openalex.org/I4210152380","https://openalex.org/I4388482657"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008473103","display_name":"Hongyang Chen","orcid":"https://orcid.org/0000-0002-7626-0162"},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyang Chen","raw_affiliation_strings":["Zhejiang Lab","Zhejiang Lab, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Lab","institution_ids":["https://openalex.org/I4210123185"]},{"raw_affiliation_string":"Zhejiang Lab, Hangzhou, China","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102728606","display_name":"Hong Yu","orcid":"https://orcid.org/0000-0003-4807-1812"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hong Yu","raw_affiliation_strings":["Dalian University of Technology","Dalian University of Technology, Dalian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalian University of Technology","institution_ids":["https://openalex.org/I27357992"]},{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006269113","display_name":"Xianchao Zhang","orcid":"https://orcid.org/0000-0002-0180-3740"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xianchao Zhang","raw_affiliation_strings":["Dalian University of Technology","Dalian University of Technology, Dalian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalian University of Technology","institution_ids":["https://openalex.org/I27357992"]},{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1195","last_page":"1203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9279999732971191,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/prior-probability","display_name":"Prior probability","score":0.7898826003074646},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6735599637031555},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.5811693668365479},{"id":"https://openalex.org/keywords/gradient-boosting","display_name":"Gradient boosting","score":0.508740246295929},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4130997657775879},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.36900240182876587},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3491356372833252},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.26599740982055664},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.12803775072097778},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.10910773277282715}],"concepts":[{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.7898826003074646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6735599637031555},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.5811693668365479},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.508740246295929},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4130997657775879},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.36900240182876587},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3491356372833252},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26599740982055664},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.12803775072097778},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.10910773277282715}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2023/133","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/133","pdf_url":"https://www.ijcai.org/proceedings/2023/0133.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2023/133","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/133","pdf_url":"https://www.ijcai.org/proceedings/2023/0133.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5400000214576721,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G11042728","display_name":null,"funder_award_id":"62206038","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1288713985","display_name":null,"funder_award_id":"62106035","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1675944683","display_name":null,"funder_award_id":"DUT20RC(3)066","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G391097201","display_name":null,"funder_award_id":"2022PI0AC01","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G414079634","display_name":null,"funder_award_id":"61972065","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5441420046","display_name":null,"funder_award_id":"DUT20RC(3)040, DUT20RC(3)066","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5811024370","display_name":null,"funder_award_id":"61972065","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6264733588","display_name":null,"funder_award_id":"62106035, 62206038","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7554543229","display_name":null,"funder_award_id":"2022YFB4500300","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7607137348","display_name":null,"funder_award_id":"DUT20RC","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G7980169782","display_name":null,"funder_award_id":"DUT20RC(3)040","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G945562959","display_name":null,"funder_award_id":"DUT20RC(3)040","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385768256.pdf","grobid_xml":"https://content.openalex.org/works/W4385768256.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1834627138","https://openalex.org/W1945616565","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2565439473","https://openalex.org/W2883285025","https://openalex.org/W2906208681","https://openalex.org/W2936774411","https://openalex.org/W2950782995","https://openalex.org/W2962824709","https://openalex.org/W2963070423","https://openalex.org/W2963857521","https://openalex.org/W2972986629","https://openalex.org/W3006076803","https://openalex.org/W3015625436","https://openalex.org/W3034856597","https://openalex.org/W3034892461","https://openalex.org/W3044714385","https://openalex.org/W3088909400","https://openalex.org/W3112288498","https://openalex.org/W3117037102","https://openalex.org/W3156877806","https://openalex.org/W3173859330","https://openalex.org/W3175582404","https://openalex.org/W3187497581","https://openalex.org/W3204362682","https://openalex.org/W4235705169","https://openalex.org/W4239072543","https://openalex.org/W4244324388","https://openalex.org/W4288103143","https://openalex.org/W4293846201","https://openalex.org/W4306177406","https://openalex.org/W4313138527","https://openalex.org/W4394663350"],"related_works":["https://openalex.org/W2580650124","https://openalex.org/W4386190339","https://openalex.org/W2968424575","https://openalex.org/W3142333283","https://openalex.org/W3122088529","https://openalex.org/W3041320102","https://openalex.org/W2111669074","https://openalex.org/W2085259108","https://openalex.org/W3123087812","https://openalex.org/W2474854304"],"abstract_inverted_index":{"Decision-based":[0,95],"methods":[1,55],"have":[2,46,191],"shown":[3],"to":[4,20,48,52,56,82,85,125,170],"be":[5],"effective":[6],"in":[7,32,138],"black-box":[8,33],"adversarial":[9,34],"attacks,":[10,35],"as":[11,36,158,160],"they":[12],"can":[13,132,179],"obtain":[14,57],"satisfactory":[15],"performance":[16],"and":[17,72,110],"only":[18],"require":[19],"access":[21],"the":[22,41,67,73,106,114,121,135,146,152,155,173,181,186,194],"final":[23],"model":[24],"prediction.":[25],"Gradient":[26,100],"estimation":[27,116],"is":[28],"a":[29,93,165],"critical":[30],"step":[31],"it":[37],"will":[38],"directly":[39],"affect":[40],"query":[42,187],"efficiency.":[43,188],"Recent":[44],"works":[45],"attempted":[47],"utilize":[49],"gradient":[50,62,69,76,108,115,148,167,176],"priors":[51,63],"facilitate":[53],"score-based":[54],"better":[58],"results.":[59],"However,":[60],"these":[61],"still":[64],"suffer":[65],"from":[66],"edge":[68,139,147],"discrepancy":[70],"issue":[71],"successive":[74,174],"iteration":[75,175],"direction":[77],"issue,":[78],"thus":[79,150,184],"are":[80,141],"difficult":[81],"simply":[83],"extend":[84],"decision-based":[86],"methods.":[87],"In":[88],"this":[89],"paper,":[90],"we":[91],"propose":[92],"novel":[94],"Black-box":[96],"Attack":[97],"framework":[98],"with":[99,127],"Priors":[101],"(DBA-GP),":[102],"which":[103],"seamlessly":[104],"integrates":[105],"data-dependent":[107],"prior":[109,112],"time-dependent":[111],"into":[113],"procedure.":[117],"First,":[118],"by":[119,163],"leveraging":[120],"joint":[122],"bilateral":[123],"filter":[124],"deal":[126],"each":[128],"random":[129],"perturbation,":[130],"DBA-GP":[131,178],"guarantee":[133],"that":[134,193],"generated":[136],"perturbations":[137],"locations":[140],"hardly":[142],"smoothed,":[143],"i.e.,":[144],"alleviating":[145],"discrepancy,":[149],"remaining":[151],"characteristics":[153],"of":[154],"original":[156],"image":[157],"much":[159],"possible.":[161],"Second,":[162],"utilizing":[164],"new":[166],"updating":[168],"strategy":[169],"automatically":[171],"adjust":[172],"direction,":[177],"accelerate":[180],"convergence":[182],"speed,":[183],"improving":[185],"Extensive":[189],"experiments":[190],"demonstrated":[192],"proposed":[195],"method":[196],"outperforms":[197],"other":[198],"strong":[199],"baselines":[200],"significantly.":[201]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}