{"id":"https://openalex.org/W4392305761","doi":"https://doi.org/10.5220/0012314700003636","title":"GenGradAttack: Efficient and Robust Targeted Adversarial Attacks Using Genetic Algorithms and Gradient-Based Fine-Tuning","display_name":"GenGradAttack: Efficient and Robust Targeted Adversarial Attacks Using Genetic Algorithms and Gradient-Based Fine-Tuning","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4392305761","doi":"https://doi.org/10.5220/0012314700003636"},"language":"en","primary_location":{"id":"doi:10.5220/0012314700003636","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012314700003636","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Agents and Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dx.doi.org/10.5220/0012314700003636","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007875487","display_name":"Naman Agarwal","orcid":"https://orcid.org/0000-0003-0320-0238"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]},{"id":"https://openalex.org/I4210161128","display_name":"Bristol Robotics Laboratory","ror":"https://ror.org/056sbyc67","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210161128"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Naman Agarwal","raw_affiliation_strings":["Intelligent Systems Laboratory, School of Engineering Mathematics and Technology, University of Bristol, Bristol, U.K., --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intelligent Systems Laboratory, School of Engineering Mathematics and Technology, University of Bristol, Bristol, U.K., --- Select a Country ---","institution_ids":["https://openalex.org/I36234482","https://openalex.org/I4210161128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002563560","display_name":"James Pope","orcid":"https://orcid.org/0000-0003-2656-363X"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]},{"id":"https://openalex.org/I4210161128","display_name":"Bristol Robotics Laboratory","ror":"https://ror.org/056sbyc67","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210161128"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"James Pope","raw_affiliation_strings":["Intelligent Systems Laboratory, School of Engineering Mathematics and Technology, University of Bristol, Bristol, U.K., --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intelligent Systems Laboratory, School of Engineering Mathematics and Technology, University of Bristol, Bristol, U.K., --- Select a Country ---","institution_ids":["https://openalex.org/I36234482","https://openalex.org/I4210161128"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"202","last_page":"209"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9577000141143799,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.940500020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6703094840049744},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6507024765014648},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5386189818382263},{"id":"https://openalex.org/keywords/genetic-algorithm","display_name":"Genetic algorithm","score":0.4555566906929016},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3065146803855896},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.19828951358795166}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6703094840049744},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6507024765014648},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5386189818382263},{"id":"https://openalex.org/C8880873","wikidata":"https://www.wikidata.org/wiki/Q187787","display_name":"Genetic algorithm","level":2,"score":0.4555566906929016},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3065146803855896},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.19828951358795166}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.5220/0012314700003636","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012314700003636","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Agents and Artificial Intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:research-information.bris.ac.uk:publications/0ee1948e-fac8-4a81-b0ae-8013cabb9776","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/0ee1948e-fac8-4a81-b0ae-8013cabb9776","pdf_url":"https://research-information.bris.ac.uk/files/389474944/123147.pdf","source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Agarwal, N & Pope, J 2024, GenGradAttack : Efficient and Robust Targeted Adversarial Attacks Using Genetic Algorithms and Gradient-Based Fine-Tuning. in A P Rocha, L Steels & J van den Herik (eds), Proceedings of the 16th International Conference on Agents and Artificial Intelligence : ICAART. vol. 3, ICAART - International Conference on Agents and Artificial Intelligence, SciTePress, pp. 202-209. https://doi.org/10.5220/0012314700003636","raw_type":"contributionToPeriodical"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire/0ee1948e-fac8-4a81-b0ae-8013cabb9776","is_oa":true,"landing_page_url":"https://hdl.handle.net/1983/0ee1948e-fac8-4a81-b0ae-8013cabb9776","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Agarwal, N & Pope, J 2024, GenGradAttack : Efficient and Robust Targeted Adversarial Attacks Using Genetic Algorithms and Gradient-Based Fine-Tuning. in A P Rocha, L Steels & J van den Herik (eds), Proceedings of the 16th International Conference on Agents and Artificial Intelligence : ICAART. vol. 3, ICAART - International Conference on Agents and Artificial Intelligence, SciTePress, pp. 202-209. https://doi.org/10.5220/0012314700003636","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"doi:10.5220/0012314700003636","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012314700003636","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Agents and Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4249671053","display_name":"Countering HArms caused by Ransomware in the Internet Of Things (CHARIOT)","funder_award_id":"EP/X036871/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8264230299","display_name":null,"funder_award_id":"EP/X036871/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492"],"abstract_inverted_index":{"Adversarial":[0,147],"attacks":[1,47,79],"pose":[2],"a":[3,73,144,154],"critical":[4],"threat":[5],"to":[6,37,67,101,123,174],"the":[7,114,139,196],"reliability":[8],"of":[9,57,141,158,200,214],"machine":[10,20],"learning":[11,21],"models,":[12],"potentially":[13],"undermining":[14],"trust":[15],"in":[16,25,80,203,217],"practical":[17,218],"applications.":[18],"As":[19],"models":[22,130],"find":[23],"deployment":[24],"vital":[26],"domains":[27],"like":[28],"autonomous":[29],"vehicles,":[30],"healthcare,":[31],"and":[32,60,87,176,185,189,198],"finance,":[33],"they":[34],"become":[35],"susceptible":[36],"adversarial":[38,78,205,215],"examples\u2014crafted":[39],"inputs":[40],"that":[41,126],"induce":[42],"erroneous":[43],"high-confidence":[44],"predictions.":[45],"These":[46,193],"fall":[48],"into":[49],"two":[50],"main":[51],"categories:":[52],"white-box,":[53],"with":[54,62,113,153,183,207],"full":[55],"knowledge":[56],"model":[58,103],"architecture,":[59],"black-box,":[61],"limited":[63],"or":[64],"no":[65],"access":[66,100],"internal":[68,102],"details.":[69,104],"This":[70,119],"paper":[71],"introduces":[72],"novel":[74],"approach":[75,202],"for":[76,96],"targeted":[77],"black-box":[81],"scenarios.":[82],"By":[83],"combining":[84],"genetic":[85],"algorithms":[86],"gradient-based":[88,106],"fine-tuning,":[89],"our":[90,201,212],"method":[91],"efficiently":[92],"explores":[93],"input":[94],"space":[95],"perturbations":[97,125],"without":[98],"requiring":[99],"Subsequently,":[105],"fine-tuning":[107],"optimizes":[108],"these":[109],"perturbations,":[110],"aligning":[111],"them":[112],"target":[115,129],"model\u2019s":[116],"decision":[117],"boundary.":[118],"dual":[120],"strategy":[121],"aims":[122],"evolve":[124],"effectively":[127],"mislead":[128],"while":[131],"minimizing":[132],"queries,":[133],"ensuring":[134],"stealthy":[135],"attacks.":[136],"Results":[137],"demonstrate":[138],"efficacy":[140],"GenGradAttack,":[142],"achieving":[143],"remarkable":[145],"95.06%":[146],"Success":[148],"Rate":[149],"(ASR)":[150],"on":[151,178],"MNIST":[152],"median":[155,191],"query":[156,209],"count":[157],"556.":[159],"In":[160],"contrast,":[161],"conventional":[162],"GenAttack":[163,182],"achieved":[164],"100%":[165,184],"ASR":[166],"but":[167],"required":[168],"significantly":[169],"more":[170],"queries.":[171,192],"When":[172],"applied":[173],"InceptionV3":[175],"Ens4AdvInceptionV3":[177],"ImageNet,":[179],"GenGradAttack":[180],"outperformed":[181],"96%":[186],"ASR,":[187],"respectively,":[188],"fewer":[190],"results":[194],"highlight":[195],"efficiency":[197],"effectiveness":[199],"generating":[204],"examples":[206],"reduced":[208],"counts,":[210],"advancing":[211],"understanding":[213],"vulnerabilities":[216],"contexts.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}