{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T01:59:50Z","timestamp":1770688790536,"version":"3.49.0"},"reference-count":29,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2023,12,7]],"date-time":"2023-12-07T00:00:00Z","timestamp":1701907200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,7]],"date-time":"2023-12-07T00:00:00Z","timestamp":1701907200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276127"],"award-info":[{"award-number":["62276127"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Comput & Applic"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1007\/s00521-023-09259-5","type":"journal-article","created":{"date-parts":[[2023,12,7]],"date-time":"2023-12-07T07:02:21Z","timestamp":1701932541000},"page":"3725-3736","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Improving the transferability of adversarial examples with separable positive and negative disturbances"],"prefix":"10.1007","volume":"36","author":[{"given":"Yuanjie","family":"Yan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuxuan","family":"Bu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4308-9247","authenticated-orcid":false,"given":"Furao","family":"Shen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,12,7]]},"reference":[{"key":"9259_CR1","unstructured":"Adam P, Sam G, Soumith C et\u00a0al (2017) Automatic differentiation in pytorch. In: Proceedings of neural information processing systems"},{"key":"9259_CR2","doi-asserted-by":"publisher","first-page":"14410","DOI":"10.1109\/ACCESS.2018.2807385","volume":"6","author":"N Akhtar","year":"2018","unstructured":"Akhtar N, Mian A (2018) Threat of adversarial attacks on deep learning in computer vision: a survey. IEEE Access 6:14410\u201314430","journal-title":"IEEE Access"},{"key":"9259_CR3","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: 2017 IEEE symposium on security and privacy (sp), pp 39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"9259_CR4","doi-asserted-by":"crossref","unstructured":"Deng J, Dong W, Socher R et\u00a0al (2009) Imagenet: a large-scale hierarchical image database. In: Proceedings of the IEEE conference on computer vision and pattern recognition, IEEE, pp 248\u2013255","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"9259_CR5","doi-asserted-by":"crossref","unstructured":"Dong Y, Liao F, Pang T et\u00a0al (2018) Boosting adversarial attacks with momentum. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 9185\u20139193","DOI":"10.1109\/CVPR.2018.00957"},{"key":"9259_CR6","doi-asserted-by":"crossref","unstructured":"Dong Y, Pang T, Su H et\u00a0al (2019) Evading defenses to transferable adversarial examples by translation-invariant attacks. Proceedings of the IEEE conference on computer vision and pattern recognition","DOI":"10.1109\/CVPR.2019.00444"},{"key":"9259_CR7","doi-asserted-by":"crossref","unstructured":"Drenkow N, Fendley N, Burlina P (2022) Attack agnostic detection of adversarial examples via random subspace analysis. In: Proceedings of the IEEE winter conference on applications of computer vision, pp 472\u2013482","DOI":"10.1109\/WACV51458.2022.00287"},{"key":"9259_CR8","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2014) Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572"},{"key":"9259_CR9","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/10761.001.0001","volume-title":"Perturbations, optimization, and statistics","author":"T Hazan","year":"2016","unstructured":"Hazan T, Papandreou G, Tarlow D (2016) Perturbations, optimization, and statistics. MIT Press, Cambridge"},{"key":"9259_CR10","doi-asserted-by":"crossref","unstructured":"Huang G, Liu Z, Van Der\u00a0Maaten L et\u00a0al (2017) Densely connected convolutional networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 4700\u20134708","DOI":"10.1109\/CVPR.2017.243"},{"key":"9259_CR11","unstructured":"Krizhevsky A, Hinton G et\u00a0al (2009) Learning multiple layers of features from tiny images. Citeseer"},{"key":"9259_CR12","doi-asserted-by":"crossref","unstructured":"Li Y, Bai S, Xie C et\u00a0al (2020) Regional homogeneity: towards learning transferable universal adversarial perturbations against defenses. Lecture Notes in Computer Science p 795-813","DOI":"10.1007\/978-3-030-58621-8_46"},{"key":"9259_CR13","unstructured":"Madry A, Makelov A, Schmidt L et\u00a0al (2017) Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083"},{"key":"9259_CR14","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Fawzi O et\u00a0al (2017) Universal adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 1765\u20131773","DOI":"10.1109\/CVPR.2017.17"},{"key":"9259_CR15","unstructured":"Song Y, Shu R, Kushman N et\u00a0al (2018) Constructing unrestricted adversarial examples with generative models. In: Advances in Neural Information Processing Systems, pp 8312\u20138323"},{"issue":"5","key":"9259_CR16","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su J, Vargas DV, Sakurai K (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evolut Comput 23(5):828\u2013841","journal-title":"IEEE Trans Evolut Comput"},{"key":"9259_CR17","unstructured":"Szegedy C, Zaremba W, Sutskever I et\u00a0al (2013) Intriguing properties of neural networks. arXiv preprint arXiv:1312f6199"},{"key":"9259_CR18","unstructured":"Tan M, Le Q (2019) Efficientnet: rethinking model scaling for convolutional neural networks. In: Proceedings of the IEEE international conference on machine learning, PMLR, pp 6105\u20136114"},{"key":"9259_CR19","unstructured":"Tram\u00e8r F, Kurakin A, Papernot N et\u00a0al (2017) Ensemble adversarial training: attacks and defenses. arXiv preprint arXiv:1705.07204"},{"key":"9259_CR20","unstructured":"Wang X, He K, Hopcroft JE (2019) At-gan: A generative attack model for adversarial transferring on generative adversarial nets. arXiv preprint arXiv:1904.07793 3(4)"},{"key":"9259_CR21","doi-asserted-by":"crossref","unstructured":"Wang Z, Guo H, Zhang Z et\u00a0al (2021) Feature importance-aware transferable adversarial attacks. In: Proceedings of the IEEE International Conference on Computer Vision, pp 7639\u20137648","DOI":"10.1109\/ICCV48922.2021.00754"},{"key":"9259_CR22","doi-asserted-by":"crossref","unstructured":"Wei Z, Chen J, Wu Z et\u00a0al (2022) Boosting the transferability of video adversarial examples via temporal translation. In: Proceedings of the AAAI Conference on Artificial Intelligence, pp 2659\u20132667","DOI":"10.1609\/aaai.v36i3.20168"},{"key":"9259_CR23","unstructured":"Wu L, Zhu Z, Tai C et\u00a0al (2018) Understanding and enhancing the transferability of adversarial examples. arXiv preprint arXiv:1802.09707"},{"key":"9259_CR24","doi-asserted-by":"crossref","unstructured":"Wu W, Su Y, Lyu MR et\u00a0al (2021) Improving the transferability of adversarial samples with adversarial transformations. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 9024\u20139033","DOI":"10.1109\/CVPR46437.2021.00891"},{"key":"9259_CR25","doi-asserted-by":"crossref","unstructured":"Xiao C, Li B, Zhu JY et\u00a0al (2018) Generating adversarial examples with adversarial networks. arXiv preprint arXiv:1801.02610","DOI":"10.24963\/ijcai.2018\/543"},{"key":"9259_CR26","doi-asserted-by":"crossref","unstructured":"Xie C, Zhang Z, Zhou Y et\u00a0al (2019) Improving transferability of adversarial examples with input diversity. Proceedings of the IEEE conference on computer vision and pattern recognition","DOI":"10.1109\/CVPR.2019.00284"},{"key":"9259_CR27","doi-asserted-by":"crossref","unstructured":"Zhang X, Zhou X, Lin M et\u00a0al (2018) Shufflenet: an extremely efficient convolutional neural network for mobile devices. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 6848\u20136856","DOI":"10.1109\/CVPR.2018.00716"},{"key":"9259_CR28","doi-asserted-by":"publisher","first-page":"126","DOI":"10.1016\/j.ins.2023.03.139","volume":"635","author":"Y Zhang","year":"2023","unstructured":"Zhang Y, Ya Tan, Sun H et al (2023) Improving the invisibility of adversarial examples with perceptually adaptive perturbation. Inf Sci 635:126\u2013137","journal-title":"Inf Sci"},{"key":"9259_CR29","doi-asserted-by":"crossref","unstructured":"Zheng T, Chen C, Ren K (2019) Distributionally adversarial attack. In: Proceedings of the AAAI conference on artificial intelligence, pp 2253\u20132260","DOI":"10.1609\/aaai.v33i01.33012253"}],"container-title":["Neural Computing and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-09259-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00521-023-09259-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-09259-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,9]],"date-time":"2024-02-09T12:13:10Z","timestamp":1707480790000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00521-023-09259-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,7]]},"references-count":29,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2024,3]]}},"alternative-id":["9259"],"URL":"https:\/\/doi.org\/10.1007\/s00521-023-09259-5","relation":{},"ISSN":["0941-0643","1433-3058"],"issn-type":[{"value":"0941-0643","type":"print"},{"value":"1433-3058","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,7]]},"assertion":[{"value":"27 April 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 November 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 December 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"No potential conflict of interest is reported by the authors.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}