{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T03:20:23Z","timestamp":1767324023306,"version":"3.48.0"},"publisher-location":"Singapore","reference-count":42,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819556984","type":"print"},{"value":"9789819556991","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-5699-1_11","type":"book-chapter","created":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T03:18:38Z","timestamp":1767323918000},"page":"152-166","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Bridging the\u00a0Task Gap: Multi-task Adversarial Transferability in\u00a0CLIP and\u00a0Its Derivatives"],"prefix":"10.1007","author":[{"given":"Kuanrong","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siyuan","family":"Liang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cheng","family":"Qian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ming","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaochun","family":"Cao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,1,2]]},"reference":[{"key":"11_CR1","doi-asserted-by":"crossref","unstructured":"Caesar, H., Uijlings, J., Ferrari, V.: Coco-stuff: thing and stuff classes in context. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. pp. 1209\u20131218 (2018)","DOI":"10.1109\/CVPR.2018.00132"},{"key":"11_CR2","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy (sp), pp. 39\u201357. IEEE (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"11_CR3","unstructured":"Chen, R., et al.: Less is more: efficient black-box attribution via minimal interpretable subset selection. arXiv preprint arXiv:2504.00470 (2025)"},{"key":"11_CR4","unstructured":"Chen, R., Zhang, H., Liang, S., Li, J., Cao, X.: Less is more: fewer interpretable region via submodular subset selection. arXiv preprint arXiv:2402.09164 (2024)"},{"key":"11_CR5","unstructured":"Chen, T., Kornblith, S., Norouzi, M., Hinton, G.: A simple framework for contrastive learning of visual representations. In: International Conference on Machine Learning, pp. 1597\u20131607. PmLR (2020)"},{"issue":"1","key":"11_CR6","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1007\/s44267-023-00033-8","volume":"1","author":"R Cheng","year":"2023","unstructured":"Cheng, R., Wang, X., Sohel, F., Lei, H.: Topology-aware universal adversarial attack on 3d object tracking. Visual Intell. 1(1), 31 (2023)","journal-title":"Visual Intell."},{"key":"11_CR7","doi-asserted-by":"publisher","first-page":"61113","DOI":"10.1109\/ACCESS.2024.3395118","volume":"12","author":"JC Costa","year":"2024","unstructured":"Costa, J.C., Roxo, T., Proen\u00e7a, H., Inacio, P.R.M.: How deep learning sees the world: a survey on adversarial attacks & defenses. IEEE Access 12, 61113\u201361136 (2024)","journal-title":"IEEE Access"},{"key":"11_CR8","unstructured":"Dosovitskiy, A., et\u00a0al.: An image is worth 16x16 words: Transformers for image recognition at scale. arXiv preprint arXiv:2010.11929 (2020)"},{"key":"11_CR9","unstructured":"Faghri, F., Fleet, D.J., Kiros, J.R., Fidler, S.: Vse++: improving visual-semantic embeddings with hard negatives. arXiv preprint arXiv:1707.05612 (2017)"},{"key":"11_CR10","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"11_CR11","unstructured":"Gu, X., Lin, T.Y., Kuo, W., Cui, Y.: Open-vocabulary object detection via vision and language knowledge distillation. arXiv preprint arXiv:2104.13921 (2021)"},{"key":"11_CR12","unstructured":"Guo, J., Zhang, T., Li, L., Yang, H., Yu, H., Qin, M.: Stealthy multi-task adversarial attacks. arXiv preprint arXiv:2411.17936 (2024)"},{"issue":"1","key":"11_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s13635-021-00124-3","volume":"2021","author":"P Haleta","year":"2021","unstructured":"Haleta, P., Likhomanov, D., Sokol, O.: Multitask adversarial attack with dispersion amplification. EURASIP J. Inf. Secur. 2021(1), 1\u201310 (2021). https:\/\/doi.org\/10.1186\/s13635-021-00124-3","journal-title":"EURASIP J. Inf. Secur."},{"key":"11_CR14","doi-asserted-by":"crossref","unstructured":"He, K., Gkioxari, G., Doll\u00e1r, P., Girshick, R.: Mask r-cnn. In: Proceedings of the IEEE international Conference on Computer Vision, pp. 2961\u20132969 (2017)","DOI":"10.1109\/ICCV.2017.322"},{"key":"11_CR15","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"issue":"1","key":"11_CR16","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/s44267-024-00066-7","volume":"2","author":"D Kong","year":"2024","unstructured":"Kong, D., Liang, S., Zhu, X., Zhong, Y., Ren, W.: Patch is enough: naturalistic adversarial patch against vision-language pre-training models. Visual Intell. 2(1), 33 (2024)","journal-title":"Visual Intell."},{"issue":"2","key":"11_CR17","doi-asserted-by":"publisher","first-page":"130","DOI":"10.1007\/s41965-024-00142-3","volume":"6","author":"C Li","year":"2024","unstructured":"Li, C., Wang, H., Yao, W., Jiang, T.: Adversarial attacks in computer vision: a survey. J. Membrane Comput. 6(2), 130\u2013147 (2024)","journal-title":"J. Membrane Comput."},{"key":"11_CR18","first-page":"9694","volume":"34","author":"J Li","year":"2021","unstructured":"Li, J., Selvaraju, R., Gotmare, A., Joty, S., Xiong, C., Hoi, S.C.H.: Align before fuse: vision and language representation learning with momentum distillation. Adv. Neural. Inf. Process. Syst. 34, 9694\u20139705 (2021)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"11_CR19","doi-asserted-by":"crossref","unstructured":"Li, L.H., et\u00a0al.: Grounded language-image pre-training. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 10965\u201310975 (2022)","DOI":"10.1109\/CVPR52688.2022.01069"},{"key":"11_CR20","doi-asserted-by":"crossref","unstructured":"Liang, S., et al.: A large-scale multiple-objective method for black-box attack against object detection. In: European Conference on Computer Vision (2022)","DOI":"10.1007\/978-3-031-19772-7_36"},{"key":"11_CR21","doi-asserted-by":"crossref","unstructured":"Liang, S., et al.: A large-scale multiple-objective method for black-box attack against object detection. In: Proceedings of the European Conference on Computer Vision (ECCV), pp. 123\u2013139 (2022)","DOI":"10.1007\/978-3-031-19772-7_36"},{"key":"11_CR22","doi-asserted-by":"crossref","unstructured":"Liang, S., et al.: Revisiting backdoor attacks against large vision-language models from domain shift. In: Proceedings of the Computer Vision and Pattern Recognition Conference, pp. 9477\u20139486 (2025)","DOI":"10.1109\/CVPR52734.2025.00885"},{"key":"11_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1007\/978-3-030-58574-7_3","volume-title":"Computer Vision \u2013 ECCV 2020","author":"S Liang","year":"2020","unstructured":"Liang, S., Wei, X., Yao, S., Cao, X.: efficient adversarial attacks for visual object tracking. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) ECCV 2020. LNCS, vol. 12371, pp. 34\u201350. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58574-7_3"},{"key":"11_CR24","doi-asserted-by":"crossref","unstructured":"Liang, S., Wu, B., Fan, Y., Wei, X., Cao, X.: Parallel rectangle flip attack: a query-based black-box attack against object detection. arXiv preprint arXiv:2201.08970 (2022)","DOI":"10.1109\/ICCV48922.2021.00760"},{"key":"11_CR25","doi-asserted-by":"crossref","unstructured":"Liang, S., Zhu, M., Liu, A., Wu, B., Cao, X., Chang, E.C.: Badclip: dual-embedding guided backdoor attack on multimodal contrastive learning. arXiv preprint arXiv:2311.12075 (2023)","DOI":"10.1109\/CVPR52733.2024.02327"},{"key":"11_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"740","DOI":"10.1007\/978-3-319-10602-1_48","volume-title":"Computer Vision \u2013 ECCV 2014","author":"T-Y Lin","year":"2014","unstructured":"Lin, T.-Y., et al.: Microsoft COCO: common objects in context. In: Fleet, D., Pajdla, T., Schiele, B., Tuytelaars, T. (eds.) ECCV 2014. LNCS, vol. 8693, pp. 740\u2013755. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-10602-1_48"},{"key":"11_CR27","unstructured":"Liu, X., Yang, H., Liu, Z., Song, L., Li, H., Chen, Y.: Dpatch: an adversarial patch attack on object detectors. arXiv preprint arXiv:1806.02299 (2018)"},{"issue":"1","key":"11_CR28","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1007\/s44267-024-00061-y","volume":"2","author":"X Liu","year":"2024","unstructured":"Liu, X., Hu, J., Yang, Q., Jiang, M., He, J., Fang, H.: A divide-and-conquer reconstruction method for defending against adversarial example attacks. Visual Intell. 2(1), 30 (2024)","journal-title":"Visual Intell."},{"key":"11_CR29","doi-asserted-by":"crossref","unstructured":"Lu, D., Wang, Z., Wang, T., Guan, W., Gao, H., Zheng, F.: Set-level guidance attack: Boosting adversarial transferability of vision-language pre-training models. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 102\u2013111 (2023)","DOI":"10.1109\/ICCV51070.2023.00016"},{"key":"11_CR30","unstructured":"Luo, H., Bao, J., Wu, Y., He, X., Li, T.: Segclip: patch aggregation with learnable centers for open-vocabulary semantic segmentation. In: International Conference on Machine Learning, pp. 23033\u201323044. PMLR (2023)"},{"key":"11_CR31","doi-asserted-by":"crossref","unstructured":"Maag, K., Fischer, A.: Uncertainty-weighted loss functions for improved adversarial attacks on semantic segmentation. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 3906\u20133914 (2024)","DOI":"10.1109\/WACV57701.2024.00386"},{"key":"11_CR32","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"11_CR33","unstructured":"Radford, A., et\u00a0al.: Learning transferable visual models from natural language supervision. In: International Conference on Machine Learning, pp. 8748\u20138763. PmLR (2021)"},{"key":"11_CR34","doi-asserted-by":"crossref","unstructured":"Rao, Y., et al.: Denseclip: language-guided dense prediction with context-aware prompting. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 18082\u201318091 (2022)","DOI":"10.1109\/CVPR52688.2022.01755"},{"key":"11_CR35","doi-asserted-by":"crossref","unstructured":"Rony, J., Pesquet, J.C., Ben\u00a0Ayed, I.: Proximal splitting adversarial attack for semantic segmentation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 20524\u201320533 (2023)","DOI":"10.1109\/CVPR52729.2023.01966"},{"issue":"2","key":"11_CR36","first-page":"1","volume":"10","author":"W Wang","year":"2019","unstructured":"Wang, W., Zheng, V.W., Yu, H., Miao, C.: A survey of zero-shot learning: settings, methods, and applications. ACM Trans. Intell. Syst. Technol. (TIST) 10(2), 1\u201337 (2019)","journal-title":"ACM Trans. Intell. Syst. Technol. (TIST)"},{"key":"11_CR37","unstructured":"Wang, Z., Zhang, Z., Liang, S., Wang, X.: Diversifying the high-level features for better adversarial transferability. arXiv preprint arXiv:2304.10136 (2023)"},{"key":"11_CR38","doi-asserted-by":"crossref","unstructured":"Xie, C., Wang, J., Zhang, Z., Zhou, Y., Xie, L., Yuille, A.: Adversarial examples for semantic segmentation and object detection. In: Proceedings of the IEEE International Conference on Computer Vision, pp. 1369\u20131378 (2017)","DOI":"10.1109\/ICCV.2017.153"},{"key":"11_CR39","doi-asserted-by":"crossref","unstructured":"Zhang, J., Yi, Q., Sang, J.: Towards adversarial attack on vision-language pre-training models. In: Proceedings of the 30th ACM International Conference on Multimedia, pp. 5005\u20135013 (2022)","DOI":"10.1145\/3503161.3547801"},{"key":"11_CR40","doi-asserted-by":"crossref","unstructured":"Zhong, Y., et\u00a0al.: Regionclip: region-based language-image pretraining. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 16793\u201316803 (2022)","DOI":"10.1109\/CVPR52688.2022.01629"},{"key":"11_CR41","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Hu, S., Li, M., Zhang, H., Zhang, Y., Jin, H.: Advclip: downstream-agnostic adversarial examples in multimodal contrastive learning. In: Proceedings of the 31st ACM International Conference on Multimedia, pp. 6311\u20136320 (2023)","DOI":"10.1145\/3581783.3612454"},{"key":"11_CR42","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Lei, Y., Zhang, B., Liu, L., Liu, Y.: Zegclip: towards adapting clip for zero-shot semantic segmentation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 11175\u201311185 (2023)","DOI":"10.1109\/CVPR52729.2023.01075"}],"container-title":["Lecture Notes in Computer Science","Pattern Recognition and Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-5699-1_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T03:18:43Z","timestamp":1767323923000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-5699-1_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9789819556984","9789819556991"],"references-count":42,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-5699-1_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"2 January 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PRCV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Chinese Conference on Pattern Recognition and Computer Vision  (PRCV)","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Shanghai","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 October 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 October 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ccprcv2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/2025.prcv.cn\/index.asp","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}