{"id":"https://openalex.org/W4317812176","doi":"https://doi.org/10.3390/e25020215","title":"ELAA: An Ensemble-Learning-Based Adversarial Attack Targeting Image-Classification Model","display_name":"ELAA: An Ensemble-Learning-Based Adversarial Attack Targeting Image-Classification Model","publication_year":2023,"publication_date":"2023-01-22","ids":{"openalex":"https://openalex.org/W4317812176","doi":"https://doi.org/10.3390/e25020215","pmid":"https://pubmed.ncbi.nlm.nih.gov/36832581"},"language":"en","primary_location":{"id":"doi:10.3390/e25020215","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25020215","pdf_url":"https://www.mdpi.com/1099-4300/25/2/215/pdf?version=1675413808","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1099-4300/25/2/215/pdf?version=1675413808","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058604742","display_name":"Zhongwang Fu","orcid":"https://orcid.org/0000-0002-1710-547X"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongwang Fu","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan 430001, China","School of Cyber Science and Engineering, Wuhan University, Wuhan 430001, China"],"raw_orcid":"https://orcid.org/0000-0002-1710-547X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan 430001, China","institution_ids":[]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan 430001, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041280931","display_name":"Xiaohui Cui","orcid":"https://orcid.org/0000-0001-6079-009X"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaohui Cui","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan 430001, China","School of Cyber Science and Engineering, Wuhan University, Wuhan 430001, China"],"raw_orcid":"https://orcid.org/0000-0001-6079-009X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan 430001, China","institution_ids":[]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan 430001, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5041280931"],"corresponding_institution_ids":["https://openalex.org/I37461747"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":0.995,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.79710045,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"25","issue":"2","first_page":"215","last_page":"215"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.940500020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7595679759979248},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7218917608261108},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7174685001373291},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6873462200164795},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6180688142776489},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5999739170074463},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.5892630815505981},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.5136820673942566},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.5109719038009644},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.43882229924201965},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.43129903078079224},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3358737528324127},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22177061438560486}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7595679759979248},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7218917608261108},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7174685001373291},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6873462200164795},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6180688142776489},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5999739170074463},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.5892630815505981},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.5136820673942566},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.5109719038009644},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.43882229924201965},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.43129903078079224},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3358737528324127},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22177061438560486},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/e25020215","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25020215","pdf_url":"https://www.mdpi.com/1099-4300/25/2/215/pdf?version=1675413808","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},{"id":"pmid:36832581","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/36832581","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:pubmedcentral.nih.gov:9955872","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/9955872","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC9955872/pdf/entropy-25-00215.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy (Basel)","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:8879abd584ca43ff964e09b9fdbb3d00","is_oa":true,"landing_page_url":"https://doaj.org/article/8879abd584ca43ff964e09b9fdbb3d00","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy, Vol 25, Iss 2, p 215 (2023)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1099-4300/25/2/215/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/e25020215","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy; Volume 25; Issue 2; Pages: 215","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/e25020215","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25020215","pdf_url":"https://www.mdpi.com/1099-4300/25/2/215/pdf?version=1675413808","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5199999809265137,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G7332686149","display_name":null,"funder_award_id":"2018YFC1604000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320324116","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4317812176.pdf"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W2603766943","https://openalex.org/W2746600820","https://openalex.org/W2781800156","https://openalex.org/W2792806930","https://openalex.org/W2798801120","https://openalex.org/W2807455131","https://openalex.org/W2887850625","https://openalex.org/W2890883923","https://openalex.org/W2893099989","https://openalex.org/W2915002466","https://openalex.org/W2943646750","https://openalex.org/W2963178695","https://openalex.org/W2963726920","https://openalex.org/W2963857521","https://openalex.org/W2969866298","https://openalex.org/W2997127238","https://openalex.org/W3007384386","https://openalex.org/W3012846134","https://openalex.org/W3084992427","https://openalex.org/W3094116649","https://openalex.org/W3097206420","https://openalex.org/W3101903411","https://openalex.org/W3105806188","https://openalex.org/W3106412272","https://openalex.org/W3108072218","https://openalex.org/W3169650660","https://openalex.org/W3170378827","https://openalex.org/W3176237058","https://openalex.org/W3179647175","https://openalex.org/W3207416200","https://openalex.org/W3208354430","https://openalex.org/W3212790025","https://openalex.org/W4212883601","https://openalex.org/W4226065283","https://openalex.org/W4226474468","https://openalex.org/W6682262322","https://openalex.org/W6741036071","https://openalex.org/W6763151900"],"related_works":["https://openalex.org/W4303198045","https://openalex.org/W3021340315","https://openalex.org/W4390693192","https://openalex.org/W4320075939","https://openalex.org/W4295159184","https://openalex.org/W2936028052","https://openalex.org/W3158598208","https://openalex.org/W2957377429","https://openalex.org/W4298217332","https://openalex.org/W2992338883"],"abstract_inverted_index":{"The":[0,133],"research":[1],"on":[2],"image-classification-adversarial":[3,18],"attacks":[4,43],"is":[5,33,124,139],"crucial":[6],"in":[7,73],"the":[8,17,46,74,106,116,121,145],"realm":[9],"of":[10,16,80,108,137,144],"artificial":[11],"intelligence":[12],"(AI)":[13],"security.":[14],"Most":[15],"attack":[19,75,88,117,134],"methods":[20],"are":[21],"for":[22,120,129],"white-box":[23],"settings,":[24],"demanding":[25],"target":[26],"model":[27,123],"gradients":[28],"and":[29,49,95],"network":[30],"architectures,":[31],"which":[32,93,103],"less":[34],"practical":[35],"when":[36],"facing":[37],"real-world":[38],"cases.":[39],"However,":[40],"black-box":[41],"adversarial":[42,87],"immune":[44],"to":[45,54,59],"above":[47],"limitations":[48],"reinforcement":[50,98],"learning":[51,99],"(RL)":[52,100],"seem":[53],"be":[55],"a":[56,130],"feasible":[57],"solution":[58],"explore":[60],"an":[61,85],"optimized":[62],"evasion":[63],"policy.":[64],"Unfortunately,":[65],"existing":[66],"RL-based":[67],"works":[68],"perform":[69],"worse":[70],"than":[71,128,142],"expected":[72],"success":[76,118,135],"rate.":[77],"In":[78],"light":[79],"these":[81],"challenges,":[82],"we":[83],"propose":[84],"ensemble-learning-based":[86],"(ELAA)":[89],"targeting":[90],"image-classification":[91,110],"models":[92],"aggregate":[94],"optimize":[96],"multiple":[97],"base":[101],"learners,":[102],"further":[104],"reveals":[105],"vulnerabilities":[107],"learning-based":[109],"models.":[111],"Experimental":[112],"results":[113],"show":[114],"that":[115],"rate":[119,136],"ensemble":[122],"about":[125],"35%":[126],"higher":[127,141],"single":[131],"model.":[132],"ELAA":[138],"15%":[140],"those":[143],"baseline":[146],"methods.":[147]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-22T09:01:20.584952","created_date":"2025-10-10T00:00:00"}