{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T21:12:55Z","timestamp":1781644375177,"version":"3.54.5"},"publisher-location":"Cham","reference-count":72,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031733895","type":"print"},{"value":"9783031733901","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,10,31]],"date-time":"2024-10-31T00:00:00Z","timestamp":1730332800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,10,31]],"date-time":"2024-10-31T00:00:00Z","timestamp":1730332800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-73390-1_1","type":"book-chapter","created":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T16:24:01Z","timestamp":1730305441000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["CLIP-Guided Generative Networks for\u00a0Transferable Targeted Adversarial Attacks"],"prefix":"10.1007","author":[{"given":"Hao","family":"Fang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiawei","family":"Kong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bin","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Dai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hao","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shu-Tao","family":"Xia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,10,31]]},"reference":[{"key":"1_CR1","doi-asserted-by":"publisher","first-page":"14410","DOI":"10.1109\/ACCESS.2018.2807385","volume":"6","author":"N Akhtar","year":"2018","unstructured":"Akhtar, N., Mian, A.: Threat of adversarial attacks on deep learning in computer vision: A survey. Ieee Access 6, 14410\u201314430 (2018)","journal-title":"Ieee Access"},{"key":"1_CR2","doi-asserted-by":"crossref","unstructured":"Andriushchenko, M., Croce, F., Flammarion, N., Hein, M.: Square attack: a query-efficient black-box adversarial attack via random search. In: European conference on computer vision. pp. 484\u2013501. Springer (2020)","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"1_CR3","unstructured":"Athalye, A., Engstrom, L., Ilyas, A., Kwok, K.: Synthesizing robust adversarial examples. In: International conference on machine learning. pp. 284\u2013293. PMLR (2018)"},{"key":"1_CR4","unstructured":"BircanoAYlu, C.: https:\/\/www.kaggle.com\/datasets\/cenkbircanoglu\/comic-books-classification. Kaggle, 2017"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 ieee symposium on security and privacy (sp). pp. 39\u201357. Ieee (2017)","DOI":"10.1109\/SP.2017.49"},{"issue":"3","key":"1_CR6","doi-asserted-by":"publisher","first-page":"1051","DOI":"10.1109\/TNNLS.2020.3039295","volume":"33","author":"Z Che","year":"2020","unstructured":"Che, Z., Borji, A., Zhai, G., Ling, S., Li, J., Min, X., Guo, G., Le Callet, P.: Smgea: A new ensemble adversarial attack powered by long-term gradient memories. IEEE Transactions on Neural Networks and Learning Systems 33(3), 1051\u20131065 (2020)","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Chefer, H., Benaim, S., Paiss, R., Wolf, L.: Image-based clip-guided essence transfer. In: European Conference on Computer Vision. pp. 695\u2013711. Springer (2022)","DOI":"10.1007\/978-3-031-19778-9_40"},{"issue":"2","key":"1_CR8","doi-asserted-by":"publisher","first-page":"1388","DOI":"10.1109\/TPAMI.2022.3165024","volume":"45","author":"B Chen","year":"2022","unstructured":"Chen, B., Feng, Y., Dai, T., Bai, J., Jiang, Y., Xia, S.T., Wang, X.: Adversarial examples generation for deep product quantization networks on image retrieval. IEEE Trans. Pattern Anal. Mach. Intell. 45(2), 1388\u20131404 (2022)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.J., Li, K., Fei-Fei, L.: Imagenet: A large-scale hierarchical image database. In: 2009 IEEE conference on computer vision and pattern recognition. pp. 248\u2013255. Ieee (2009)","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"1_CR10","unstructured":"Ding, G.W., Wang, L., Jin, X.: Advertorch v0. 1: An adversarial robustness toolbox based on pytorch. arXiv preprint arXiv:1902.07623 (2019)"},{"key":"1_CR11","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., Li, J.: Boosting adversarial attacks with momentum. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"1_CR12","doi-asserted-by":"crossref","unstructured":"Dong, Y., Pang, T., Su, H., Zhu, J.: Evading defenses to transferable adversarial examples by translation-invariant attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 4312\u20134321 (2019)","DOI":"10.1109\/CVPR.2019.00444"},{"key":"1_CR13","unstructured":"Du, J., Zhang, H., Zhou, J.T., Yang, Y., Feng, J.: Query-efficient meta attack to deep neural networks. arXiv preprint arXiv:1906.02398 (2019)"},{"key":"1_CR14","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M.: A study of the effect of jpg compression on adversarial images. arXiv preprint arXiv:1608.00853 (2016)"},{"key":"1_CR15","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Xiao, C., Prakash, A., Kohno, T., Song, D.: Robust physical-world attacks on deep learning visual classification. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 1625\u20131634 (2018)","DOI":"10.1109\/CVPR.2018.00175"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Fang, H., Chen, B., Wang, X., Wang, Z., Xia, S.T.: Gifd: A generative gradient inversion method with feature domain optimization. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision. pp. 4967\u20134976 (2023)","DOI":"10.1109\/ICCV51070.2023.00458"},{"key":"1_CR17","unstructured":"Fang, H., Kong, J., Yu, W., Chen, B., Li, J., Xia, S., Xu, K.: One perturbation is enough: On generating universal adversarial perturbations against vision-language pre-training models. arXiv preprint arXiv:2406.05491 (2024)"},{"key":"1_CR18","unstructured":"Fang, H., Qiu, Y., Yu, H., Yu, W., Kong, J., Chong, B., Chen, B., Wang, X., Xia, S.T.: Privacy leakage on dnns: A survey of model inversion attacks and defenses. arXiv preprint arXiv:2402.04013 (2024)"},{"key":"1_CR19","doi-asserted-by":"crossref","unstructured":"Feng, W., Xu, N., Zhang, T., Zhang, Y.: Dynamic generative targeted attacks with pattern injection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 16404\u201316414 (2023)","DOI":"10.1109\/CVPR52729.2023.01574"},{"key":"1_CR20","unstructured":"Gao, K., Bai, Y., Bai, J., Yang, Y., Xia, S.T.: Adversarial robustness for visual grounding of multimodal large language models. In: ICLR Workshop (2024)"},{"key":"1_CR21","unstructured":"Gao, K., Bai, Y., Gu, J., Xia, S.T., Torr, P., Li, Z., Liu, W.: Inducing high energy-latency of large vision-language models with verbose images. In: ICLR (2024)"},{"key":"1_CR22","unstructured":"Gao, K., Gu, J., Bai, Y., Xia, S.T., Torr, P., Liu, W., Li, Z.: Energy-latency manipulation of multi-modal large language models via verbose samples. arXiv preprint arXiv:2404.16557 (2024)"},{"key":"1_CR23","doi-asserted-by":"crossref","unstructured":"Gao, L., Cheng, Y., Zhang, Q., Xu, X., Song, J.: Feature space targeted attacks by statistic alignment. arXiv preprint arXiv:2105.11645 (2021)","DOI":"10.24963\/ijcai.2021\/93"},{"key":"1_CR24","unstructured":"Geirhos, R., Rubisch, P., Michaelis, C., Bethge, M., Wichmann, F.A., Brendel, W.: Imagenet-trained cnns are biased towards texture; increasing shape bias improves accuracy and robustness. arXiv preprint arXiv:1811.12231 (2018)"},{"key":"1_CR25","unstructured":"Goodfellow, I., Pouget-Abadie, J., Mirza, M., Xu, B., Warde-Farley, D., Ozair, S., Courville, A., Bengio, Y.: Generative adversarial nets. Advances in neural information processing systems 27 (2014)"},{"key":"1_CR26","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"1_CR27","doi-asserted-by":"crossref","unstructured":"Han, J., Dong, X., Zhang, R., Chen, D., Zhang, W., Yu, N., Luo, P., Wang, X.: Once a man: Towards multi-target attack via learning multi-target adversarial network once. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision. pp. 5158\u20135167 (2019)","DOI":"10.1109\/ICCV.2019.00526"},{"key":"1_CR28","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2019.107184","volume":"101","author":"J Hang","year":"2020","unstructured":"Hang, J., Han, K., Chen, H., Li, Y.: Ensemble adversarial black-box attacks against deep learning systems. Pattern Recogn. 101, 107184 (2020)","journal-title":"Pattern Recogn."},{"key":"1_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"630","DOI":"10.1007\/978-3-319-46493-0_38","volume-title":"Computer Vision \u2013 ECCV 2016","author":"K He","year":"2016","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Identity Mappings in Deep Residual Networks. In: Leibe, B., Matas, J., Sebe, N., Welling, M. (eds.) ECCV 2016. LNCS, vol. 9908, pp. 630\u2013645. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-46493-0_38"},{"key":"1_CR30","volume":"107","author":"Z He","year":"2022","unstructured":"He, Z., Wang, W., Dong, J., Tan, T.: Revisiting ensemble adversarial attack. Signal Processing: Image Communication 107, 116747 (2022)","journal-title":"Signal Processing: Image Communication"},{"key":"1_CR31","unstructured":"Hendrycks, D., Mu, N., Cubuk, E.D., Zoph, B., Gilmer, J., Lakshminarayanan, B.: Augmix: A simple data processing method to improve robustness and uncertainty. arXiv preprint arXiv:1912.02781 (2019)"},{"key":"1_CR32","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Van Der\u00a0Maaten, L., Weinberger, K.Q.: Densely connected convolutional networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 4700\u20134708 (2017)","DOI":"10.1109\/CVPR.2017.243"},{"key":"1_CR33","doi-asserted-by":"crossref","unstructured":"Huang, Z., Zhou, A., Ling, Z., Cai, M., Wang, H., Lee, Y.J.: A sentence speaks a thousand images: Domain generalization through distilling clip with language guidance. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision. pp. 11685\u201311695 (2023)","DOI":"10.1109\/ICCV51070.2023.01073"},{"key":"1_CR34","first-page":"20791","volume":"33","author":"N Inkawhich","year":"2020","unstructured":"Inkawhich, N., Liang, K., Wang, B., Inkawhich, M., Carin, L., Chen, Y.: Perturbing across the feature hierarchy to improve standard and strict blackbox attack transferability. Adv. Neural. Inf. Process. Syst. 33, 20791\u201320801 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"1_CR35","doi-asserted-by":"crossref","unstructured":"Inkawhich, N., Wen, W., Li, H.H., Chen, Y.: Feature space perturbations yield more transferable adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 7066\u20137074 (2019)","DOI":"10.1109\/CVPR.2019.00723"},{"key":"1_CR36","doi-asserted-by":"crossref","unstructured":"Ju, C., Han, T., Zheng, K., Zhang, Y., Xie, W.: Prompting visual-language models for efficient video understanding. In: European Conference on Computer Vision. pp. 105\u2013124. Springer (2022)","DOI":"10.1007\/978-3-031-19833-5_7"},{"key":"1_CR37","doi-asserted-by":"crossref","unstructured":"Kong, Z., Guo, J., Li, A., Liu, C.: Physgan: Generating physical-world-resilient adversarial examples for autonomous driving. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 14254\u201314263 (2020)","DOI":"10.1109\/CVPR42600.2020.01426"},{"key":"1_CR38","unstructured":"Kurakin, A., Goodfellow, I., Bengio, S.: Adversarial machine learning at scale. arXiv preprint arXiv:1611.01236 (2016)"},{"key":"1_CR39","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1007\/978-3-030-58517-4_15","volume-title":"Computer Vision \u2013 ECCV 2020","author":"Q Li","year":"2020","unstructured":"Li, Q., Guo, Y., Chen, H.: Yet Another Intermediate-Level Attack. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) ECCV 2020. LNCS, vol. 12361, pp. 241\u2013257. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58517-4_15"},{"key":"1_CR40","unstructured":"Lin, J., Song, C., He, K., Wang, L., Hopcroft, J.E.: Nesterov accelerated gradient and scale invariance for adversarial attacks. arXiv preprint arXiv:1908.06281 (2019)"},{"key":"1_CR41","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"740","DOI":"10.1007\/978-3-319-10602-1_48","volume-title":"Computer Vision \u2013 ECCV 2014","author":"T-Y Lin","year":"2014","unstructured":"Lin, T.-Y., Maire, M., Belongie, S., Hays, J., Perona, P., Ramanan, D., Doll\u00e1r, P., Zitnick, C.L.: Microsoft COCO: Common Objects in Context. In: Fleet, D., Pajdla, T., Schiele, B., Tuytelaars, T. (eds.) ECCV 2014. LNCS, vol. 8693, pp. 740\u2013755. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-10602-1_48"},{"key":"1_CR42","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"395","DOI":"10.1007\/978-3-030-58601-0_24","volume-title":"Computer Vision \u2013 ECCV 2020","author":"A Liu","year":"2020","unstructured":"Liu, A., Wang, J., Liu, X., Cao, B., Zhang, C., Yu, H.: Bias-Based Universal Adversarial Patch Attack for Automatic Check-Out. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) ECCV 2020. LNCS, vol. 12358, pp. 395\u2013410. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58601-0_24"},{"key":"1_CR43","doi-asserted-by":"crossref","unstructured":"Lu, Y., Jia, Y., Wang, J., Li, B., Chai, W., Carin, L., Velipasalar, S.: Enhancing cross-task black-box transferability of adversarial examples with dispersion reduction. In: Proceedings of the IEEE\/CVF conference on Computer Vision and Pattern Recognition. pp. 940\u2013949 (2020)","DOI":"10.1109\/CVPR42600.2020.00102"},{"key":"1_CR44","doi-asserted-by":"crossref","unstructured":"Luo, J., Bai, T., Zhao, J.: Generating adversarial yet inconspicuous patches with a single image (student abstract). In: Proceedings of the AAAI Conference on Artificial Intelligence. vol.\u00a035, pp. 15837\u201315838 (2021)","DOI":"10.1609\/aaai.v35i18.17915"},{"key":"1_CR45","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., Frossard, P.: Universal adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 1765\u20131773 (2017)","DOI":"10.1109\/CVPR.2017.17"},{"key":"1_CR46","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"1_CR47","doi-asserted-by":"crossref","unstructured":"Mopuri, K.R., Uppala, P.K., Babu, R.V.: Ask, acquire, and attack: Data-free uap generation using class impressions. In: Proceedings of the European Conference on Computer Vision (ECCV). pp. 19\u201334 (2018)","DOI":"10.1007\/978-3-030-01240-3_2"},{"key":"1_CR48","unstructured":"Naseer, M.M., Khan, S.H., Khan, M.H., Shahbaz\u00a0Khan, F., Porikli, F.: Cross-domain transferability of adversarial perturbations. Advances in Neural Information Processing Systems 32 (2019)"},{"key":"1_CR49","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., Hayat, M., Khan, F.S., Porikli, F.: On generating transferable targeted perturbations. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision. pp. 7708\u20137717 (2021)","DOI":"10.1109\/ICCV48922.2021.00761"},{"key":"1_CR50","unstructured":"NeurIPS: https:\/\/www.kaggle.com\/c\/nips-2017-defense-against-adversarial-attack\/data. Kaggle, 2017"},{"key":"1_CR51","doi-asserted-by":"crossref","unstructured":"Poursaeed, O., Katsman, I., Gao, B., Belongie, S.: Generative adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 4422\u20134431 (2018)","DOI":"10.1109\/CVPR.2018.00465"},{"key":"1_CR52","unstructured":"Radford, A., Kim, J.W., Hallacy, C., Ramesh, A., Goh, G., Agarwal, S., Sastry, G., Askell, A., Mishkin, P., Clark, J., et\u00a0al.: Learning transferable visual models from natural language supervision. In: International conference on machine learning. pp. 8748\u20138763. PMLR (2021)"},{"key":"1_CR53","unstructured":"Sarkar, S.K., Oshiba, K., Giebisch, D., Singer, Y.: Robust classification of financial risk. arXiv preprint arXiv:1811.11079 (2018)"},{"key":"1_CR54","unstructured":"Simonyan, K., Zisserman, A.: Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556 (2014)"},{"key":"1_CR55","doi-asserted-by":"crossref","unstructured":"Szegedy, C., Ioffe, S., Vanhoucke, V., Alemi, A.: Inception-v4, inception-resnet and the impact of residual connections on learning. In: Proceedings of the AAAI conference on artificial intelligence. vol.\u00a031 (2017)","DOI":"10.1609\/aaai.v31i1.11231"},{"key":"1_CR56","doi-asserted-by":"crossref","unstructured":"Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., Rabinovich, A.: Going deeper with convolutions. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp.\u00a01\u20139 (2015)","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"1_CR57","doi-asserted-by":"crossref","unstructured":"Szegedy, C., Vanhoucke, V., Ioffe, S., Shlens, J., Wojna, Z.: Rethinking the inception architecture for computer vision. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 2818\u20132826 (2016)","DOI":"10.1109\/CVPR.2016.308"},{"key":"1_CR58","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"key":"1_CR59","doi-asserted-by":"crossref","unstructured":"Tao, M., Bao, B.K., Tang, H., Xu, C.: Galip: Generative adversarial clips for text-to-image synthesis. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 14214\u201314223 (2023)","DOI":"10.1109\/CVPR52729.2023.01366"},{"key":"1_CR60","doi-asserted-by":"crossref","unstructured":"Wang, X., He, K.: Enhancing the transferability of adversarial attacks through variance tuning. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 1924\u20131933 (2021)","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"1_CR61","unstructured":"Wang, X., He, K., Hopcroft, J.E.: At-gan: A generative attack model for adversarial transferring on generative adversarial nets. arXiv preprint arXiv:1904.077933(4), 3 (2019)"},{"key":"1_CR62","doi-asserted-by":"crossref","unstructured":"Wang, Z., Yang, H., Feng, Y., Sun, P., Guo, H., Zhang, Z., Ren, K.: Towards transferable targeted adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 20534\u201320543 (2023)","DOI":"10.1109\/CVPR52729.2023.01967"},{"key":"1_CR63","doi-asserted-by":"crossref","unstructured":"Wei, Z., Chen, J., Wu, Z., Jiang, Y.G.: Enhancing the self-universality for transferable targeted attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 12281\u201312290 (2023)","DOI":"10.1109\/CVPR52729.2023.01182"},{"key":"1_CR64","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.Y., He, W., Liu, M., Song, D.: Generating adversarial examples with adversarial networks. arXiv preprint arXiv:1801.02610 (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"1_CR65","doi-asserted-by":"crossref","unstructured":"Xie, C., Zhang, Z., Zhou, Y., Bai, S., Wang, J., Ren, Z., Yuille, A.L.: Improving transferability of adversarial examples with input diversity. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. pp. 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"1_CR66","doi-asserted-by":"crossref","unstructured":"Xiong, Y., Lin, J., Zhang, M., Hopcroft, J.E., He, K.: Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 14983\u201314992 (2022)","DOI":"10.1109\/CVPR52688.2022.01456"},{"key":"1_CR67","doi-asserted-by":"crossref","unstructured":"Yang, X., Dong, Y., Pang, T., Su, H., Zhu, J.: Boosting transferability of targeted adversarial examples via hierarchical generative networks. In: European Conference on Computer Vision. pp. 725\u2013742. Springer (2022)","DOI":"10.1007\/978-3-031-19772-7_42"},{"key":"1_CR68","unstructured":"Yu, W., Fang, H., Chen, B., Sui, X., Chen, C., Wu, H., Xia, S.T., Xu, K.: Gi-nas: Boosting gradient inversion attacks through adaptive neural architecture search. arXiv preprint arXiv:2405.20725 (2024)"},{"key":"1_CR69","doi-asserted-by":"crossref","unstructured":"Zha, Y., Ji, H., Li, J., Li, R., Dai, T., Chen, B., Wang, Z., Xia, S.T.: Towards compact 3d representations via point feature enhancement masked autoencoders. In: Proceedings of the AAAI Conference on Artificial Intelligence. vol.\u00a038, pp. 6962\u20136970 (2024)","DOI":"10.1609\/aaai.v38i7.28522"},{"key":"1_CR70","doi-asserted-by":"crossref","unstructured":"Zha, Y., Wang, J., Dai, T., Chen, B., Wang, Z., Xia, S.T.: Instance-aware dynamic prompt tuning for pre-trained point cloud models. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision. pp. 14161\u201314170 (2023)","DOI":"10.1109\/ICCV51070.2023.01302"},{"key":"1_CR71","doi-asserted-by":"crossref","unstructured":"Zhang, C., Benz, P., Imtiaz, T., Kweon, I.S.: Understanding adversarial examples from the mutual influence of images and perturbations. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. pp. 14521\u201314530 (2020)","DOI":"10.1109\/CVPR42600.2020.01453"},{"key":"1_CR72","first-page":"6115","volume":"34","author":"Z Zhao","year":"2021","unstructured":"Zhao, Z., Liu, Z., Larson, M.: On success and simplicity: A second look at transferable targeted attacks. Adv. Neural. Inf. Process. Syst. 34, 6115\u20136128 (2021)","journal-title":"Adv. Neural. Inf. Process. Syst."}],"container-title":["Lecture Notes in Computer Science","Computer Vision \u2013 ECCV 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-73390-1_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T16:24:49Z","timestamp":1730305489000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-73390-1_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,31]]},"ISBN":["9783031733895","9783031733901"],"references-count":72,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-73390-1_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,31]]},"assertion":[{"value":"31 October 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECCV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Computer Vision","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Milan","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 October 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eccv2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eccv2024.ecva.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}