{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T07:35:12Z","timestamp":1773214512449,"version":"3.50.1"},"publisher-location":"Singapore","reference-count":37,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819543977","type":"print"},{"value":"9789819543984","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,11,9]],"date-time":"2025-11-09T00:00:00Z","timestamp":1762646400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,9]],"date-time":"2025-11-09T00:00:00Z","timestamp":1762646400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-4398-4_27","type":"book-chapter","created":{"date-parts":[[2025,11,8]],"date-time":"2025-11-08T16:36:42Z","timestamp":1762619802000},"page":"381-396","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Frequency-Guided Adaptive Gradient Attack for\u00a0Transferable Adversarial Examples"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-0503-0438","authenticated-orcid":false,"given":"Zewei","family":"Fu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-3095-3707","authenticated-orcid":false,"given":"Ya","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-9151-2576","authenticated-orcid":false,"given":"Yan","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,11,9]]},"reference":[{"issue":"1","key":"27_CR1","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1109\/T-C.1974.223784","volume":"100","author":"N Ahmed","year":"2006","unstructured":"Ahmed, N., Natarajan, T., Rao, K.R.: Discrete cosine transform. IEEE Trans. Comput. 100(1), 90\u201393 (2006)","journal-title":"IEEE Trans. Comput."},{"key":"27_CR2","doi-asserted-by":"crossref","unstructured":"Braunschweig, B., Ghallab, M.: Reflections on artificial intelligence for humanity. Springer (2021)","DOI":"10.1007\/978-3-030-69128-8"},{"key":"27_CR3","unstructured":"Cohen, J., Rosenfeld, E., Kolter, Z.: Certified adversarial robustness via randomized smoothing. In: International Conference on Machine Learning, pp. 1310\u20131320. PMLR (2019)"},{"key":"27_CR4","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., Li, J.: Boosting adversarial attacks with momentum. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"27_CR5","doi-asserted-by":"crossref","unstructured":"Dong, Y., Pang, T., Su, H., Zhu, J.: Evading defenses to transferable adversarial examples by translation-invariant attacks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 4312\u20134321 (2019)","DOI":"10.1109\/CVPR.2019.00444"},{"key":"27_CR6","doi-asserted-by":"crossref","unstructured":"Duan, R., Chen, Y., Niu, D., Yang, Y., Qin, A.K., He, Y.: Advdrop: adversarial attack to dnns by dropping information. In: Proc. IEEE International Conference on Computer Vision, pp. 7506\u20137515 (2021)","DOI":"10.1109\/ICCV48922.2021.00741"},{"key":"27_CR7","first-page":"70141","volume":"36","author":"Z Ge","year":"2023","unstructured":"Ge, Z., Liu, H., Xiaosen, W., Shang, F., Liu, Y.: Boosting adversarial transferability by achieving flat local maxima. NeurIPS 36, 70141\u201370161 (2023)","journal-title":"NeurIPS"},{"key":"27_CR8","doi-asserted-by":"crossref","unstructured":"Ge, Z., Shang, F., Liu, H., Liu, Y., Wan, L., Feng, W., Wang, X.: Improving the transferability of adversarial examples with arbitrary style transfer. In: Proceedings of 31st ACM International Conference on Multimedia, pp. 4440\u20134449 (2023)","DOI":"10.1145\/3581783.3612070"},{"key":"27_CR9","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"27_CR10","unstructured":"Guo, C., Rana, M., Cisse, M., Van Der\u00a0Maaten, L.: Countering adversarial images using input transformations. arXiv preprint arXiv:1711.00117 (2017)"},{"key":"27_CR11","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"27_CR12","unstructured":"Huang, G., Liu, Z., van\u00a0der Maaten, L., Weinberger, K.: Deep convolutional networks for large-scale image recognition. In: ICLR (2017)"},{"key":"27_CR13","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Van Der\u00a0Maaten, L., Weinberger, K.Q.: Densely connected convolutional networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 4700\u20134708 (2017)","DOI":"10.1109\/CVPR.2017.243"},{"key":"27_CR14","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. In: AI Safety and Security, pp. 99\u2013112. Chapman and Hall\/CRC (2018)","DOI":"10.1201\/9781351251389-8"},{"key":"27_CR15","unstructured":"Lin, J., Song, C., He, K., Wang, L., Hopcroft, J.E.: Nesterov accelerated gradient and scale invariance for adversarial attacks. In: ICLR (2019)"},{"key":"27_CR16","unstructured":"Liu, Y., Chen, X., Liu, C., Song, D.: Delving into transferable adversarial examples and black-box attacks. arXiv preprint arXiv:1611.02770 (2016)"},{"key":"27_CR17","doi-asserted-by":"crossref","unstructured":"Liu, Z., et al.: Feature distillation: Dnn-oriented jpeg compression against adversarial examples. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 860\u2013868. IEEE (2019)","DOI":"10.1109\/CVPR.2019.00095"},{"key":"27_CR18","doi-asserted-by":"publisher","unstructured":"Long, Y. et al.: Frequency domain model augmentation for adversarial attack. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds) Computer Vision \u2013 ECCV 2022. ECCV 2022. LNCS, vol. 13664. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19772-7_32","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"27_CR19","unstructured":"M\u0105dry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. Stat 1050(9) (2017)"},{"key":"27_CR20","unstructured":"Maiya, S.R., Ehrlich, M., Agarwal, V., Lim, S.N., Goldstein, T., Shrivastava, A.: A frequency perspective of adversarial robustness. arXiv preprint arXiv:2111.00861 (2021)"},{"key":"27_CR21","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., Hayat, M., Khan, F.S., Porikli, F.: A self-supervised approach for adversarial robustness. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 262\u2013271 (2020)","DOI":"10.1109\/CVPR42600.2020.00034"},{"key":"27_CR22","unstructured":"Nesterov, Y.: A method for unconstrained convex minimization problem with the rate of convergence o (1\/k2). In: Dokl. Akad. Nauk. SSSR, vol.\u00a0269, p.\u00a0543 (1983)"},{"key":"27_CR23","doi-asserted-by":"publisher","first-page":"7633","DOI":"10.1109\/TIFS.2024.3430508","volume":"19","author":"Y Qian","year":"2024","unstructured":"Qian, Y., et al.: Enhancing transferability of adversarial examples through mixed-frequency inputs. IEEE Trans. Inf. Forensics Secur. 19, 7633\u20137645 (2024). https:\/\/doi.org\/10.1109\/TIFS.2024.3430508","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"27_CR24","doi-asserted-by":"crossref","unstructured":"Sharma, Y., Ding, G.W., Brubaker, M.: On the effectiveness of low frequency perturbations. arXiv preprint arXiv:1903.00073 (2019)","DOI":"10.24963\/ijcai.2019\/470"},{"key":"27_CR25","doi-asserted-by":"crossref","unstructured":"Szegedy, C., Ioffe, S., Vanhoucke, V., Alemi, A.: Inception-v4, inception-resnet and the impact of residual connections on learning. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a031 (2017)","DOI":"10.1609\/aaai.v31i1.11231"},{"key":"27_CR26","doi-asserted-by":"crossref","unstructured":"Szegedy, C., Vanhoucke, V., Ioffe, S., Shlens, J., Wojna, Z.: Rethinking the inception architecture for computer vision. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2818\u20132826 (2016)","DOI":"10.1109\/CVPR.2016.308"},{"key":"27_CR27","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)"},{"key":"27_CR28","unstructured":"Tram\u00e8r, F., et al.: Ensemble adversarial training: Attacks and defenses. arXiv preprint arXiv:1705.07204 (2017)"},{"key":"27_CR29","doi-asserted-by":"crossref","unstructured":"Wang, X., He, X., Wang, J., He, K.: Admix: enhancing the transferability of adversarial attacks. In: Proceedings of the IEEE Conference on Computer Vision, pp. 16158\u201316167 (2021)","DOI":"10.1109\/ICCV48922.2021.01585"},{"key":"27_CR30","doi-asserted-by":"crossref","unstructured":"Wang, X., Jin, Z., Zhu, Z., Zhang, J., Chen, H.: Improving adversarial transferability via frequency-guided sample relevance attack. In: roceedings of the 33rd ACM International Conference on Information and Knowledge Management, pp. 2410\u20132419 (2024)","DOI":"10.1145\/3627673.3679858"},{"key":"27_CR31","unstructured":"Xie, C., Wang, J., Zhang, Z., Ren, Z., Yuille, A.: Mitigating adversarial effects through randomization. arXiv preprint arXiv:1711.01991 (2017)"},{"key":"27_CR32","doi-asserted-by":"crossref","unstructured":"Xie, C., et al.: Improving transferability of adversarial examples with input diversity. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"27_CR33","doi-asserted-by":"crossref","unstructured":"Xiong, Y., Lin, J., Zhang, M., Hopcroft, J.E., He, K.: Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 14983\u201314992 (2022)","DOI":"10.1109\/CVPR52688.2022.01456"},{"key":"27_CR34","doi-asserted-by":"crossref","unstructured":"Xu, K., Qin, M., Sun, F., Wang, Y., Chen, Y.K., Ren, F.: Learning in the frequency domain. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 1740\u20131749 (2020)","DOI":"10.1109\/CVPR42600.2020.00181"},{"key":"27_CR35","doi-asserted-by":"publisher","unstructured":"Xu, K., Qin, M., Sun, F., Wang, Y., Chen, Y.K., Ren, F.: Learning in the frequency domain. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (Jun 2020). https:\/\/doi.org\/10.1109\/cvpr42600.2020.00181","DOI":"10.1109\/cvpr42600.2020.00181"},{"key":"27_CR36","doi-asserted-by":"crossref","unstructured":"Xu, W.: Feature squeezing: Detecting adversarial exa mples in deep neural networks. arXiv preprint arXiv:1704.01155 (2017)","DOI":"10.14722\/ndss.2018.23198"},{"key":"27_CR37","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2023.111088","volume":"150","author":"H Zhu","year":"2024","unstructured":"Zhu, H., Ren, Y., Liu, C., Sui, X., Zhang, L.: Frequency-based methods for improving the imperceptibility and transferability of adversarial examples. Appl. Soft Comput. 150, 111088 (2024)","journal-title":"Appl. Soft Comput."}],"container-title":["Lecture Notes in Computer Science","Pattern Recognition and Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-4398-4_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,8]],"date-time":"2025-11-08T23:02:23Z","timestamp":1762642943000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-4398-4_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,9]]},"ISBN":["9789819543977","9789819543984"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-4398-4_27","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,9]]},"assertion":[{"value":"9 November 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACPR","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Asian Conference on Pattern Recognition","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Gold Coast, QLD","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acpr2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.acpr2025.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}