{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:23:18Z","timestamp":1783786998320,"version":"3.55.0"},"reference-count":54,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2022,6,4]],"date-time":"2022-06-04T00:00:00Z","timestamp":1654300800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,6,4]],"date-time":"2022-06-04T00:00:00Z","timestamp":1654300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/100012551","name":"applied basic research program of sichuan province","doi-asserted-by":"publisher","award":["2020YJ0038"],"award-info":[{"award-number":["2020YJ0038"]}],"id":[{"id":"10.13039\/100012551","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["World Wide Web"],"published-print":{"date-parts":[[2022,7]]},"DOI":"10.1007\/s11280-022-01058-7","type":"journal-article","created":{"date-parts":[[2022,6,4]],"date-time":"2022-06-04T08:02:45Z","timestamp":1654329765000},"page":"1725-1746","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Universal adversarial perturbations generative network"],"prefix":"10.1007","volume":"25","author":[{"given":"Zheng","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingjing","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaofeng","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,6,4]]},"reference":[{"key":"1058_CR1","doi-asserted-by":"crossref","unstructured":"Akhtar, N., Liu, J., Mian, A.: Defense against universal adversarial perturbations. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2018)","DOI":"10.1109\/CVPR.2018.00357"},{"issue":"12","key":"1058_CR2","doi-asserted-by":"publisher","first-page":"3040","DOI":"10.1109\/TPAMI.2019.2919707","volume":"42","author":"A Arnab","year":"2020","unstructured":"Arnab, A., Miksik, O., Torr, P.H.S.: On the robustness of semantic segmentation models to adversarial attacks. IEEE Trans. Pattern Anal. Mach. Intell. 42 (12), 3040\u20133053 (2020)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"1058_CR3","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (SP), pp 39\u201357 (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"1058_CR4","doi-asserted-by":"crossref","unstructured":"Chen, H., Zhang, H., Chen, P.-Y., Yi, J., Hsieh, C.-J.: Attacking visual language grounding with adversarial examples: A case study on neural image captioning. In: Association for Computational Linguistics (ACL), pp 2587\u20132597 (2018)","DOI":"10.18653\/v1\/P18-1241"},{"key":"1058_CR5","doi-asserted-by":"crossref","unstructured":"Chen, Z., Xie, L., Pang, S., He, Y., Tian, Q.: Appending adversarial frames for universal video attack. In: IEEE Winter Conference on Applications of Computer Vision (WACV) (2021)","DOI":"10.1109\/WACV48630.2021.00324"},{"key":"1058_CR6","unstructured":"Cheng, S., Dong, Y., Pang, T., Su, H., Zhu, J.: Improving black-box adversarial attacks with a transfer-based prior. In: Neural Information Processing Systems (NeuralIPS) (2019)"},{"key":"1058_CR7","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., Fei-Fei, L.: Imagenet: A large-scale hierarchical image database. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp 248\u2013255. IEEE (2009)","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"1058_CR8","doi-asserted-by":"crossref","unstructured":"Denkowski, M., Lavie, A.: Meteor universal: Language specific translation evaluation for any target language. In: Proceedings of the Ninth Workshop on Statistical Machine Translation, pp 376\u2013380 (2014)","DOI":"10.3115\/v1\/W14-3348"},{"key":"1058_CR9","unstructured":"Ding, W., Wei, X., Hong, X., Ji, R., Gong, Y.: Universal adversarial perturbations against person re-identification. In: arXiv (2019)"},{"key":"1058_CR10","unstructured":"Goodfellow, I., Pouget-Abadie, J., Mirza, M., Xu, B., Warde-Farley, D., Ozair, S., Courville, A., Bengio, Y.: Generative adversarial nets. In: Neural Information Processing Systems (NeuralIPS), pp 2672\u20132680 (2014)"},{"key":"1058_CR11","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (ICLR) (2014)"},{"key":"1058_CR12","doi-asserted-by":"crossref","unstructured":"Jiang, L., Ma, X., Chen, S., Bailey, J., Jiang, Y.: Black-box adversarial attacks on video recognition models. In: ACM International Conference on Multimedia (ACM MM) (2019)","DOI":"10.1145\/3343031.3351088"},{"key":"1058_CR13","doi-asserted-by":"publisher","first-page":"110767","DOI":"10.1016\/j.jss.2020.110767","volume":"170","author":"L Junyu","year":"2020","unstructured":"Junyu, L., Lei, X., Yingqi, L., Xiangyu, Z.: Black-box adversarial sample generation based on differential evolution. J. Syst. Softw. 170, 110767 (2020)","journal-title":"J. Syst. Softw."},{"key":"1058_CR14","unstructured":"Kaiyi, L., Xing, X., Lianli, G., Zheng, W., Hengtao, S.: Learning cross-aligned latent embeddings for zero-shot cross-modal retrieval. In: Proceedings of the AAAI Conference on Artificial Intelligence (AAAI) (2020)"},{"key":"1058_CR15","unstructured":"Kingma, D.P., Adam, J.B.A.: A method for stochastic optimization. arXiv:1412.6980 (2014)"},{"key":"1058_CR16","unstructured":"Krizhevsky, A., Hinton, G., et al.: Learning multiple layers of features from tiny images. Technical report, Citeseer (2009)"},{"key":"1058_CR17","unstructured":"Krizhevsky, A., Sutskever, I., Hinton, G.E.: Imagenet classification with deep convolutional neural networks. In: Neural Information Processing Systems (NeuralIPS), pp 1097\u20131105 (2012)"},{"key":"1058_CR18","doi-asserted-by":"crossref","unstructured":"Kumar, K.N., Vishnu, C., Mitra, R., Mohan, C.K.: Black-box adversarial attacks in autonomous vehicle technology. In: 2020 IEEE Applied Imagery Pattern Recognition Workshop (AIPR), pp 1\u20137 (2020)","DOI":"10.1109\/AIPR50011.2020.9425267"},{"issue":"11","key":"1058_CR19","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y Lecun","year":"1998","unstructured":"Lecun, Y., Bottou, L., Bengio, Y., Haffner, P.: Gradient-based learning applied to document recognition. Proc. IEEE 86(11), 2278\u20132324 (1998)","journal-title":"Proc. IEEE"},{"key":"1058_CR20","doi-asserted-by":"crossref","unstructured":"Li, J., Ji, R., Liu, H., Hong, X., Gao, Y., Tian, Q.: Universal perturbation attack against image retrieval. In: International Conference on Computer Vision (ICCV) (2019)","DOI":"10.1109\/ICCV.2019.00500"},{"key":"1058_CR21","doi-asserted-by":"crossref","unstructured":"Liang, B., Li, H., Su, M., Bian, P., Li, X., Shi, W.: Deep text classification can be fooled. In: International Joint Conference on Artificial Intelligence (IJCAI), pp 4208\u20134215 (2018)","DOI":"10.24963\/ijcai.2018\/585"},{"key":"1058_CR22","doi-asserted-by":"crossref","unstructured":"Lin, T.-Y., Maire, M., Belongie, S., Hays, J., Perona, P., Ramanan, D., Doll\u00e1r, P., Zitnick, C.L.: Microsoft coco: Common objects in context. In: European Conference on Computer Vision (ECCV), pp 740\u2013755 (2014)","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"1058_CR23","doi-asserted-by":"crossref","unstructured":"Liu, H., Ji, R., Li, J., Zhang, B., Gao, Y., Wu, Y., Huang, F.: Universal adversarial perturbation via prior driven uncertainty approximation. In: International Conference on Computer Vision (ICCV) (2019)","DOI":"10.1109\/ICCV.2019.00303"},{"key":"1058_CR24","unstructured":"Madry, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (ICLR) (2018)"},{"key":"1058_CR25","doi-asserted-by":"crossref","unstructured":"Meng, L., Lin, C.-T., Jung, T.-P., Wu, D.: White-box target attack for EEG-based BCI regression problems. In: Neural Information Processing, pp 476\u2013488 (2019)","DOI":"10.1007\/978-3-030-36708-4_39"},{"key":"1058_CR26","doi-asserted-by":"crossref","unstructured":"Metzen, J.H., Kumar, M.C., Brox, T., Fischer, V.: Universal adversarial perturbations against semantic image segmentation. In: International Conference on Computer Vision (ICCV), pp 2774\u20132783 (2017)","DOI":"10.1109\/ICCV.2017.300"},{"key":"1058_CR27","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Fawzi, O., Frossard, P.: Universal adversarial perturbations. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2017)","DOI":"10.1109\/CVPR.2017.17"},{"key":"1058_CR28","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Frossard, P.: Deepfool: A simple and accurate method to fool deep neural networks. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"1058_CR29","doi-asserted-by":"crossref","unstructured":"Mopuri, K.R., Ojha, U., Garg, U., Babu, R.V.: Nag: Network for adversary generation. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp 742\u2013751 (2018)","DOI":"10.1109\/CVPR.2018.00084"},{"key":"1058_CR30","doi-asserted-by":"crossref","unstructured":"Oseledets, I., Khrulkov, V.: Art of singular vectors and universal adversarial perturbations. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp 8562\u20138570 (2018)","DOI":"10.1109\/CVPR.2018.00893"},{"key":"1058_CR31","doi-asserted-by":"crossref","unstructured":"Papineni, K., Roukos, S., Ward, T., Zhu, W.-J.: Bleu: A method for automatic evaluation of machine translation. In: Association for Computational Linguistics (ACL), pp 311\u2013318 (2002)","DOI":"10.3115\/1073083.1073135"},{"key":"1058_CR32","doi-asserted-by":"crossref","unstructured":"Pei, K., Cao, Y., Yang, J., Jana, S.: Deepxplore: Automated whitebox testing of deep learning systems. In: Proceedings of the 26th Symposium on Operating Systems Principles, pp 1\u201318 (2017)","DOI":"10.1145\/3132747.3132785"},{"key":"1058_CR33","doi-asserted-by":"publisher","unstructured":"Peng, L., Yang, Y., Wang, Z., Huang, Z., Shen, H.T.: Mra-net: Improving vqa via multi-modal relation attention network. IEEE Trans. Pattern Anal. Mach. Intell. https:\/\/doi.org\/10.1109\/TPAMI.2020.3004830 (2020)","DOI":"10.1109\/TPAMI.2020.3004830"},{"key":"1058_CR34","doi-asserted-by":"crossref","unstructured":"Poursaeed, O., Katsman, I., Gao, B., Belongie, S.: Generative adversarial perturbations. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2018)","DOI":"10.1109\/CVPR.2018.00465"},{"key":"1058_CR35","doi-asserted-by":"crossref","unstructured":"Shafahi, A., Najibi, M., Xu, Z., Dickerson, J.P., Davis, L.S., Goldstein, T.: Universal adversarial training. In: Proceedings of the AAAI Conference on Artificial Intelligence (AAAI) (2020)","DOI":"10.1609\/aaai.v34i04.6017"},{"key":"1058_CR36","doi-asserted-by":"crossref","unstructured":"Shi, Y., Wang, S., Han, Y.: Curls & Whey: Boosting black-box adversarial attacks. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2019)","DOI":"10.1109\/CVPR.2019.00668"},{"key":"1058_CR37","unstructured":"Simonyan, K., Zisserman, A.: Very deep convolutional networks for large-scale image recognition. In: International Conference on Learning Representations (ICLR) (2014)"},{"key":"1058_CR38","unstructured":"Sun, J., Cao, Y., Chen, Q.A., Mao, Z.M.: Towards robust lidar-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures. In: Proceedings of the 29th USENIX Conference on Security Symposium (2020)"},{"key":"1058_CR39","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. In: International Conference on Learning Representations (ICLR) (2014)"},{"key":"1058_CR40","unstructured":"Tang, S., Huang, X., Chen, M., Sun, C., Yang, J.: Adversarial attack type I: Cheat classifiers by significant changes. IEEE Trans. Pattern Anal. Mach. Intell. (2019)"},{"key":"1058_CR41","doi-asserted-by":"crossref","unstructured":"Tolias, G., Radenovic, F., Chum, O.: Targeted mismatch adversarial attack: Query with a flower to retrieve the tower. In: International Conference on Computer Vision (ICCV) (2019)","DOI":"10.1109\/ICCV.2019.00514"},{"key":"1058_CR42","doi-asserted-by":"crossref","unstructured":"Vinyals, O., Toshev, A., Bengio, S., Erhan, D.: Show and tell: A neural image caption generator. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp 3156\u20133164 (2015)","DOI":"10.1109\/CVPR.2015.7298935"},{"key":"1058_CR43","doi-asserted-by":"crossref","unstructured":"Wang, N., Wang, Z., Xu, X., Shen, F., Yang, Y., Shen, H.T.: Attention-based relation reasoning network for video-text retrieval. In: IEEE International Conference on Multimedia and Expo (ICME), pp 1\u20136 (2021)","DOI":"10.1109\/ICME51207.2021.9428215"},{"key":"1058_CR44","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1016\/j.patrec.2019.02.007","volume":"122","author":"Z Wang","year":"2019","unstructured":"Wang, Z., Chen, K., Zhang, M., He, P., Wang, Y., Zhu, P., Yang, Y.: Multi-scale aggregation network for temporal action proposals. Pattern Recogn. Lett. 122, 60\u201365 (2019)","journal-title":"Pattern Recogn. Lett."},{"key":"1058_CR45","doi-asserted-by":"crossref","unstructured":"Wang, Z., Zhou, J., Ma, J., Li, J., Ai, J., Yang, Y.: Discovering attractive segments in the user-generated video streams. Inf. Process. Manag., 57 (2020)","DOI":"10.1016\/j.ipm.2019.102130"},{"key":"1058_CR46","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.-Y., He, W., Liu, M., Song, D.: Generating adversarial examples with adversarial networks. In: International Joint Conference on Artificial Intelligence (IJCAI) (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"1058_CR47","unstructured":"Xu, K., Ba, J., Kiros, R., Cho, K., Courville, A., Salakhutdinov, R., Zemel, R., Bengio, Y.: Show, attend and tell: Neural image caption generation with visual attention. In: International Conference on Machine Learning (ICML) (2015)"},{"key":"1058_CR48","doi-asserted-by":"crossref","unstructured":"Xu, X., Chen, J., Xiao, J., Gao, L., Shen, F., Shen, H.T.: What Machines see is not what they get: Fooling scene text recognition models with adversarial text images. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2020)","DOI":"10.1109\/CVPR42600.2020.01232"},{"key":"1058_CR49","doi-asserted-by":"crossref","unstructured":"Xu, X., Chen, J., Xiao, J., Wang, Z., Yang, Y., Shen, H.T.: Learning optimization-based adversarial perturbations for attacking sequential recognition models. In: ACM International Conference on Multimedia (ACMMM) (2020)","DOI":"10.1145\/3394171.3413543"},{"key":"1058_CR50","unstructured":"Xu, X., Chen, X., Liu, C., Rohrbach, A., Darrell, T., Song, D.: Can you fool AI with adversarial examples on a visual turing test?. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2018)"},{"key":"1058_CR51","doi-asserted-by":"crossref","unstructured":"Xu, Y., Wu, B., Shen, F., Fan, Y., Zhang, Y., Shen, H.T., Liu, W.: Exact adversarial attack to image captioning via structured output learning with latent variables. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2019)","DOI":"10.1109\/CVPR.2019.00426"},{"key":"1058_CR52","doi-asserted-by":"crossref","unstructured":"Zhang, C., Benz, P., Imtiaz, T., Kweon, I.S.: Cd-uap: Class discriminative universal adversarial perturbation. In: Proceedings of the AAAI Conference on Artificial Intelligence (AAAI), pp 6754\u20136761 (2020)","DOI":"10.1609\/aaai.v34i04.6154"},{"key":"1058_CR53","doi-asserted-by":"crossref","unstructured":"Zhang, C., Benz, P., Imtiaz, T., Kweon, I.S.: Understanding adversarial examples from the mutual influence of images and perturbations. In: IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp 14509\u201314518 (2020)","DOI":"10.1109\/CVPR42600.2020.01453"},{"key":"1058_CR54","doi-asserted-by":"crossref","unstructured":"Zhang, S., Wang, Z., Xu, X., Guan, X., Yang, Y.: Fooled by imagination: Adversarial attack to image captioning via perturbation in complex domain. In: IEEE International Conference on Multimedia and Expo (ICME) (2020)","DOI":"10.1109\/ICME46284.2020.9102842"}],"container-title":["World Wide Web"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-022-01058-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11280-022-01058-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-022-01058-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,26]],"date-time":"2022-07-26T08:17:30Z","timestamp":1658823450000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11280-022-01058-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,4]]},"references-count":54,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2022,7]]}},"alternative-id":["1058"],"URL":"https:\/\/doi.org\/10.1007\/s11280-022-01058-7","relation":{},"ISSN":["1386-145X","1573-1413"],"issn-type":[{"value":"1386-145X","type":"print"},{"value":"1573-1413","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,6,4]]},"assertion":[{"value":"22 July 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 March 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 April 2022","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 June 2022","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"We declare that we do not have any commercial or associative interest that represents a conflict of interest in connection with the work submitted.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interests"}}]}}