{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T07:50:44Z","timestamp":1781941844838,"version":"3.54.5"},"reference-count":52,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T00:00:00Z","timestamp":1776297600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T00:00:00Z","timestamp":1776297600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["IJDAR"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1007\/s10032-026-00576-8","type":"journal-article","created":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T06:12:19Z","timestamp":1776319939000},"page":"611-628","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["DR-SigAttack: distribution-relevant signature attack withstands defense mechanisms for offline signature verification"],"prefix":"10.1007","volume":"29","author":[{"given":"Wei","family":"Jia","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lidong","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiaen","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingjian","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Da","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuchen","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,4,16]]},"reference":[{"key":"576_CR1","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1109\/TCSVT.2003.818349","volume":"1","author":"AK Jain","year":"2004","unstructured":"Jain, A.K., Ross, A., Prabhakar, S.: An introduction to biometric recognition. IEEE Trans. Circuits Syst. Video Technol. 1, 4\u201320 (2004)","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"576_CR2","doi-asserted-by":"crossref","unstructured":"Hafemann, L.G., Sabourin, R., Oliveira, L.S.: Offline handwritten signature verification\u2013literature review. In: International Conference on Image Processing Theory, Tools and Applications, pp. 1\u20138 (2017)","DOI":"10.1109\/IPTA.2017.8310112"},{"key":"576_CR3","unstructured":"Dey, S., Dutta, A., Toledo, J.I., Ghosh, S.K., Llad\u00f3s, J., Pal, U.: Signet: Convolutional siamese network for writer independent offline signature verification. arXiv preprint arXiv:1707.02131 (2017)"},{"key":"576_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2024.109640","volume":"139","author":"L Zheng","year":"2025","unstructured":"Zheng, L., Zhao, X., Xu, S., Ren, Y., Zheng, Y.: Learning discriminative representations by a canonical correlation analysis-based siamese network for offline signature verification. Eng. Appl. Artif. Intell. 139, 109640 (2025)","journal-title":"Eng. Appl. Artif. Intell."},{"key":"576_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.111146","volume":"159","author":"L Zheng","year":"2025","unstructured":"Zheng, L., Wu, D., Xu, S., Zheng, Y.: Htcsignet: A hybrid transformer and convolution signature network for offline signature verification. Pattern Recogn. 159, 111146 (2025)","journal-title":"Pattern Recogn."},{"key":"576_CR6","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. arXiv Preprint arXiv:1312.6199 (2013)"},{"key":"576_CR7","doi-asserted-by":"crossref","unstructured":"Bai, Y., Zeng, Y., Jiang, Y., Wang, Y., Xia, S.-T., Guo, W.: Improving query efficiency of black-box adversarial attack. In: European Conference on Computer Vision, pp. 101\u2013116 (2020)","DOI":"10.1007\/978-3-030-58595-2_7"},{"key":"576_CR8","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.109037","volume":"133","author":"Y Bai","year":"2023","unstructured":"Bai, Y., Wang, Y., Zeng, Y., Jiang, Y., Xia, S.-T.: Query efficient black-box adversarial attack on deep neural networks. Pattern Recogn. 133, 109037 (2023)","journal-title":"Pattern Recogn."},{"key":"576_CR9","doi-asserted-by":"crossref","unstructured":"Zhang, J., Huang, Y., Wu, W., Lyu, M.R.: Transferable adversarial attacks on vision transformers with token gradient regularization. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 16415\u201316424 (2023)","DOI":"10.1109\/CVPR52729.2023.01575"},{"key":"576_CR10","doi-asserted-by":"publisher","first-page":"722","DOI":"10.1109\/TIP.2023.3345136","volume":"33","author":"D Wang","year":"2023","unstructured":"Wang, D., Yao, W., Jiang, T., Chen, X.: Improving transferability of universal adversarial perturbation with feature disruption. IEEE Trans. Image Process. 33, 722\u2013737 (2023)","journal-title":"IEEE Trans. Image Process."},{"key":"576_CR11","doi-asserted-by":"publisher","first-page":"2972","DOI":"10.1109\/TIP.2023.3276331","volume":"32","author":"X Sun","year":"2023","unstructured":"Sun, X., Cheng, G., Li, H., Pei, L., Han, J.: On single-model transferable targeted attacks: A closer look at decision-level optimization. IEEE Trans. Image Process. 32, 2972\u20132984 (2023)","journal-title":"IEEE Trans. Image Process."},{"key":"576_CR12","doi-asserted-by":"crossref","unstructured":"Liang, K., Dai, X., Li, Y., Wang, D., Xiao, B.: Improving transferable targeted attacks with feature tuning mixup. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 25802\u201325811 (2025)","DOI":"10.1109\/CVPR52734.2025.02403"},{"key":"576_CR13","doi-asserted-by":"publisher","first-page":"5207","DOI":"10.1109\/TIFS.2024.3390609","volume":"19","author":"R Liu","year":"2024","unstructured":"Liu, R., Zhou, W., Zhang, T., Chen, K., Zhao, J., Lam, K.-Y.: Boosting black-box attack to deep neural networks with conditional diffusion models. IEEE Trans. Inf. Forensics Secur. 19, 5207\u20135219 (2024)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"576_CR14","doi-asserted-by":"crossref","unstructured":"Lun, L., Feng, K., Ni, Q., Liang, L., Wang, Y., Li, Y., Yu, D., Cui, X.: Towards effective and sparse adversarial attack on spiking neural networks via breaking invisible surrogate gradients. In: Proceedings of the Computer Vision and Pattern Recognition Conference, pp. 3540\u20133551 (2025)","DOI":"10.1109\/CVPR52734.2025.00335"},{"key":"576_CR15","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv Preprint arXiv:1412.6572 (2014)"},{"key":"576_CR16","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3627100","volume":"3","author":"J Dong","year":"2024","unstructured":"Dong, J., Chen, J., Xie, X., Lai, J., Chen, H.: Survey on adversarial attack and defense for medical image analysis: Methods and challenges. ACM Comput. Surv. 3, 1\u201338 (2024)","journal-title":"ACM Comput. Surv."},{"key":"576_CR17","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2025.112983","volume":"174","author":"YM Khedr","year":"2025","unstructured":"Khedr, Y.M., Liu, X., Lu, H., He, K.: Transferable adversarial attacks against face recognition using surrogate model fine-tuning. Appl. Soft Comput. 174, 112983 (2025)","journal-title":"Appl. Soft Comput."},{"key":"576_CR18","doi-asserted-by":"crossref","unstructured":"Kim, B., Sagduyu, Y.E., Erpek, T., Davaslioglu, K., Ulukus, S.: Channel effects on surrogate models of adversarial attacks against wireless signal classifiers. In: IEEE International Conference on Communications, pp. 1\u20136 (2021)","DOI":"10.1109\/ICC42927.2021.9500374"},{"issue":"4","key":"576_CR19","doi-asserted-by":"publisher","first-page":"497","DOI":"10.2197\/ipsjjip.23.497","volume":"23","author":"Y Kaneda","year":"2015","unstructured":"Kaneda, Y., Pei, Y., Zhao, Q., Liu, Y.: Improving the performance of the decision boundary making algorithm via outlier detection. Journal of information processing 23(4), 497\u2013504 (2015)","journal-title":"Journal of information processing"},{"key":"576_CR20","doi-asserted-by":"publisher","first-page":"2153","DOI":"10.1109\/TIFS.2019.2894031","volume":"8","author":"LG Hafemann","year":"2019","unstructured":"Hafemann, L.G., Sabourin, R., Oliveira, L.S.: Characterizing and evaluating adversarial examples for offline handwritten signature verification. IEEE Trans. Inf. Forensics Secur. 8, 2153\u20132166 (2019)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"576_CR21","first-page":"23","volume":"285\u2013296","author":"N Otsu","year":"1975","unstructured":"Otsu, N., et al.: A threshold selection method from gray-level histograms. Automatica 285\u2013296, 23\u201327 (1975)","journal-title":"Automatica"},{"key":"576_CR22","unstructured":"Bojanowski, P., Joulin, A.: Unsupervised learning by predicting noise. In: International Conference on Machine Learning, pp. 517\u2013526 (2017)"},{"key":"576_CR23","doi-asserted-by":"crossref","unstructured":"Brooks, T., Mildenhall, B., Xue, T., Chen, J., Sharlet, D., Barron, J.T.: Unprocessing images for learned raw denoising. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 11036\u201311045 (2019)","DOI":"10.1109\/CVPR.2019.01129"},{"key":"576_CR24","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1049\/trit.2018.1054","volume":"1","author":"C Tian","year":"2019","unstructured":"Tian, C., Xu, Y., Fei, L., Wang, J., Wen, J., Luo, N.: Enhanced cnn for image denoising. CAAI Transactions on Intelligence Technology 1, 17\u201323 (2019)","journal-title":"CAAI Transactions on Intelligence Technology"},{"key":"576_CR25","unstructured":"Chen, J., Li, Y., Wu, X., Liang, Y., Jha, S.: Robust out-of-distribution detection for neural networks. arXiv preprint arXiv:2003.09711 (2020)"},{"key":"576_CR26","doi-asserted-by":"crossref","unstructured":"Misra, D., Nalamada, T., Arasanipalai, A.U., Hou, Q.: Rotate to attend: Convolutional triplet attention module. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 3139\u20133148 (2021)","DOI":"10.1109\/WACV48630.2021.00318"},{"key":"576_CR27","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"576_CR28","doi-asserted-by":"crossref","unstructured":"Williams, P.N., Li, K.: Black-box sparse adversarial attack via multi-objective optimisation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 12291\u201312301 (2023)","DOI":"10.1109\/CVPR52729.2023.01183"},{"key":"576_CR29","doi-asserted-by":"crossref","unstructured":"Yin, F., Zhang, Y., Wu, B., Feng, Y., Zhang, J., Fan, Y., Yang, Y.: Generalizable black-box adversarial attack with meta learning. IEEE transactions on pattern analysis and machine intelligence, 1804\u20131818 (2023)","DOI":"10.1109\/TPAMI.2022.3194988"},{"key":"576_CR30","unstructured":"Brendel, W., Rauber, J., Bethge, M.: Decision-based adversarial attacks: Reliable attacks against black-box machine learning models. arXiv Preprint arXiv:1712.04248 (2017)"},{"key":"576_CR31","first-page":"10","volume":"1","author":"D Bertsimas","year":"1993","unstructured":"Bertsimas, D., Tsitsiklis, J.: Simulated annealing. Stat. Sci. 1, 10\u201315 (1993)","journal-title":"Stat. Sci."},{"key":"576_CR32","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy, pp. 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"576_CR33","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107689","volume":"111","author":"H Li","year":"2021","unstructured":"Li, H., Li, H., Zhang, H., Yuan, W.: Black-box attack against handwritten signature verification with region-restricted adversarial perturbations. Pattern Recogn. 111, 107689 (2021)","journal-title":"Pattern Recogn."},{"key":"576_CR34","doi-asserted-by":"crossref","unstructured":"Jahangir, M., Malik, M.I., Shafait, F.: Adversarial attacks on convolutional siamese signature verification networks. In: International Conference on Document Analysis and Recognition, pp. 350\u2013365 (2023)","DOI":"10.1007\/978-3-031-41685-9_22"},{"key":"576_CR35","doi-asserted-by":"crossref","unstructured":"Jahangir, M., Basit, A., Younis, M.S., Shafait, F.: Pca-based adversarial attacks on signature verification systems. In: International Conference on Document Analysis and Recognition, pp. 364\u2013379 (2024)","DOI":"10.1007\/978-3-031-70536-6_22"},{"key":"576_CR36","doi-asserted-by":"publisher","first-page":"433","DOI":"10.1002\/wics.101","volume":"4","author":"H Abdi","year":"2010","unstructured":"Abdi, H., Williams, L.J.: Principal component analysis. Wiley interdisciplinary reviews: computational statistics 4, 433\u2013459 (2010)","journal-title":"Wiley interdisciplinary reviews: computational statistics"},{"key":"576_CR37","doi-asserted-by":"publisher","first-page":"6487","DOI":"10.1109\/TIP.2022.3211736","volume":"31","author":"Y Zhu","year":"2022","unstructured":"Zhu, Y., Chen, Y., Li, X., Chen, K., He, Y., Tian, X., Zheng, B., Chen, Y., Huang, Q.: Toward understanding and boosting adversarial transferability from a distribution perspective. IEEE Trans. Image Process. 31, 6487\u20136501 (2022)","journal-title":"IEEE Trans. Image Process."},{"key":"576_CR38","doi-asserted-by":"publisher","first-page":"6177","DOI":"10.1029\/JC094iC05p06177","volume":"C5","author":"WC Thacker","year":"1989","unstructured":"Thacker, W.C.: The role of the hessian matrix in fitting models to measurements. Journal of Geophysical Research: Oceans C5, 6177\u20136196 (1989)","journal-title":"Journal of Geophysical Research: Oceans"},{"key":"576_CR39","doi-asserted-by":"publisher","first-page":"1059","DOI":"10.1080\/03610918908812806","volume":"2","author":"MF Hutchinson","year":"1989","unstructured":"Hutchinson, M.F.: A stochastic estimator of the trace of the influence matrix for laplacian smoothing splines. Communications in Statistics - Simulation and Computation 2, 1059\u20131076 (1989)","journal-title":"Communications in Statistics - Simulation and Computation"},{"key":"576_CR40","first-page":"667","volume":"3","author":"MA Ferrer","year":"2014","unstructured":"Ferrer, M.A., Diaz-Cabrera, M., Morales, A.: Static signature synthesis: A neuromotor inspired approach for biometrics. IEEE Trans. Pattern Anal. Mach. Intell. 3, 667\u2013680 (2014)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"576_CR41","doi-asserted-by":"publisher","first-page":"1339","DOI":"10.1142\/S0218001404003630","volume":"07","author":"MK Kalera","year":"2004","unstructured":"Kalera, M.K., Srihari, S., Xu, A.: Offline signature verification and identification using distance statistics. Int. J. Pattern Recognit Artif Intell. 07, 1339\u20131360 (2004)","journal-title":"Int. J. Pattern Recognit Artif Intell."},{"key":"576_CR42","doi-asserted-by":"crossref","unstructured":"Hafemann, L.G., Sabourin, R., Oliveira, L.S.: Analyzing features learned for offline signature verification using deep cnns. In: International Conference on Pattern Recognition, pp. 2989\u20132994 (2016)","DOI":"10.1109\/ICPR.2016.7900092"},{"key":"576_CR43","unstructured":"Nilsson, J., Akenine-M\u00f6ller, T.: Understanding ssim. arXiv Preprint arXiv:2006.13846 (2020)"},{"key":"576_CR44","doi-asserted-by":"crossref","unstructured":"Liang, K., Xiao, B.: Styless: Boosting the transferability of adversarial examples. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 8163\u20138172 (2023)","DOI":"10.1109\/CVPR52729.2023.00789"},{"key":"576_CR45","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., Li, J.: Boosting adversarial attacks with momentum. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"576_CR46","unstructured":"Wu, D., Wang, Y., Xia, S.-T., Bailey, J., Ma, X.: Skip connections matter: On the transferability of adversarial examples generated with resnets. arXiv preprint arXiv:2002.05990 (2020)"},{"key":"576_CR47","doi-asserted-by":"crossref","unstructured":"Xie, C., Zhang, Z., Zhou, Y., Bai, S., Wang, J., Ren, Z., Yuille, A.L.: Improving transferability of adversarial examples with input diversity. Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"576_CR48","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"576_CR49","doi-asserted-by":"crossref","unstructured":"Hafemann, L.G., Sabourin, R., Oliveira, L.S.: Learning features for offline handwritten signature verification using deep convolutional neural networks. Pattern Recognition, 163\u2013176 (2017)","DOI":"10.1016\/j.patcog.2017.05.012"},{"key":"576_CR50","doi-asserted-by":"publisher","first-page":"803","DOI":"10.1007\/s10462-018-9614-6","volume":"2","author":"VK Chauhan","year":"2019","unstructured":"Chauhan, V.K., Dahiya, K., Sharma, A.: Problem formulations and solvers in linear svm: A review. Artif. Intell. Rev. 2, 803\u2013855 (2019)","journal-title":"Artif. Intell. Rev."},{"key":"576_CR51","first-page":"317","volume":"1","author":"B-C Kuo","year":"2013","unstructured":"Kuo, B.-C., Ho, H.-H., Li, C.-H., Hung, C.-C., Taur, J.-S.: A kernel-based feature selection method for svm with rbf kernel for hyperspectral image classification. IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing 1, 317\u2013326 (2013)","journal-title":"IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing"},{"key":"576_CR52","unstructured":"Maaten, L.v.d., Hinton, G.: Visualizing data using t-sne. Journal of machine learning research (Nov), 2579\u20132605 (2008)"}],"container-title":["International Journal on Document Analysis and Recognition (IJDAR)"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10032-026-00576-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10032-026-00576-8","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10032-026-00576-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T07:07:12Z","timestamp":1781939232000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10032-026-00576-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,16]]},"references-count":52,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,6]]}},"alternative-id":["576"],"URL":"https:\/\/doi.org\/10.1007\/s10032-026-00576-8","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-8107718\/v1","asserted-by":"object"}]},"ISSN":["1433-2833","1433-2825"],"issn-type":[{"value":"1433-2833","type":"print"},{"value":"1433-2825","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,4,16]]},"assertion":[{"value":"13 November 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 February 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 March 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 April 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}]}}