{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,23]],"date-time":"2025-09-23T03:14:01Z","timestamp":1758597241317,"version":"3.44.0"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T00:00:00Z","timestamp":1757030400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T00:00:00Z","timestamp":1757030400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62276216"],"award-info":[{"award-number":["62276216"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100018542","name":"Natural Science Foundation of Sichuan Province","doi-asserted-by":"publisher","award":["2024NSFSC0501"],"award-info":[{"award-number":["2024NSFSC0501"]}],"id":[{"id":"10.13039\/501100018542","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["SIViP"],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1007\/s11760-025-04571-0","type":"journal-article","created":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T16:01:18Z","timestamp":1757088078000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["SEIDA: stable and effective image degradation attack"],"prefix":"10.1007","volume":"19","author":[{"given":"Zitian","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongjun","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tianrui","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,5]]},"reference":[{"key":"4571_CR1","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. Computer Science (2013)"},{"key":"4571_CR2","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: Bengio, Y., LeCun, Y. (eds.) 3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7-9, 2015, Conference Track Proceedings ( 2015)"},{"key":"4571_CR3","unstructured":"Mao, X., Chen, Y., Duan, R., Zhu, Y., Qi, G., ye, s., Li, X., Zhang, R., Xue\u2019, H.: Enhance the visual representation via discrete adversarial training. In: Koyejo, S., Mohamed, S., Agarwal, A., Belgrave, D., Cho, K., Oh, A. (eds.) Advances in Neural Information Processing Systems, vol. 35, pp. 7520\u2013 7533. Curran Associates, Inc., ( 2022)"},{"key":"4571_CR4","doi-asserted-by":"crossref","unstructured":"Wang, Z., Li, X., Zhu, H., Xie, C.: Revisiting adversarial training at scale. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 24675\u2013 24685 ( 2024)","DOI":"10.1109\/CVPR52733.2024.02330"},{"key":"4571_CR5","doi-asserted-by":"publisher","unstructured":"Grigorieva, N.M., Petrenko, S.A.: Known adversarial attacks by 2023. In: 2023 Seminar on Information Systems Theory and Practice (ISTP), pp. 32\u2013 36 ( 2023). https:\/\/doi.org\/10.1109\/ISTP60767.2023.10427453","DOI":"10.1109\/ISTP60767.2023.10427453"},{"key":"4571_CR6","doi-asserted-by":"crossref","unstructured":"Xu, K., Zhang, G., Liu, S., Fan, Q., Sun, M., Chen, H., Chen, P.-Y., Wang, Y., Lin, X.: Adversarial t-shirt! evading person detectors in a physical world. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) Computer Vision \u2013 ECCV 2020, pp. 665\u2013 681. Springer, Cham ( 2020)","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"4571_CR7","doi-asserted-by":"publisher","first-page":"88279","DOI":"10.1109\/ACCESS.2024.3416965","volume":"12","author":"AR Bhanushali","year":"2024","unstructured":"Bhanushali, A.R., Mun, H., Yun, J.: Adversarial attacks on automatic speech recognition (asr): A survey. IEEE Access 12, 88279\u201388302 (2024). https:\/\/doi.org\/10.1109\/ACCESS.2024.3416965","journal-title":"IEEE Access"},{"key":"4571_CR8","unstructured":"Liu, H., Xu, Z., Zhang, X., Zhang, F., Ma, F., Chen, H., Yu, H., Zhang, X.: Hqa-attack: Toward high quality black-box hard-label adversarial attack on text. In: Oh, A., Naumann, T., Globerson, A., Saenko, K., Hardt, M., Levine, S. (eds.) Advances in Neural Information Processing Systems, vol. 36, pp. 51347\u2013 51358. Curran Associates, Inc., ( 2023)"},{"key":"4571_CR9","doi-asserted-by":"publisher","first-page":"6795","DOI":"10.1109\/TIFS.2024.3422920","volume":"19","author":"M Zhou","year":"2024","unstructured":"Zhou, M., Zhou, W., Huang, J., Yang, J., Du, M., Li, Q.: Stealthy and effective physical adversarial attacks in autonomous driving. IEEE Trans. Inf. Forensics Secur. 19, 6795\u20136809 (2024). https:\/\/doi.org\/10.1109\/TIFS.2024.3422920","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4571_CR10","doi-asserted-by":"publisher","unstructured":"Peng, B., Xia, J., Peng, B., Zhou, J., Zhi, S., Liu, Y.: Target segmentation based adversarial attack for sar images. In: 2021 CIE International Conference on Radar (Radar), pp. 2146\u2013 2150 ( 2021). https:\/\/doi.org\/10.1109\/Radar53847.2021.10028291","DOI":"10.1109\/Radar53847.2021.10028291"},{"key":"4571_CR11","unstructured":"*, W.B., *, J.R., Bethge, M.: Decision-based adversarial attacks: Reliable attacks against black-box machine learning models. In: International Conference on Learning Representations ( 2018)"},{"key":"4571_CR12","doi-asserted-by":"publisher","unstructured":"Rahmati, A., Moosavi-Dezfooli, S.-M., Frossard, P., Dai, H.: Geoda: A geometric framework for black-box adversarial attacks. In: 2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 8443\u2013 8452 ( 2020). https:\/\/doi.org\/10.1109\/CVPR42600.2020.00847","DOI":"10.1109\/CVPR42600.2020.00847"},{"key":"4571_CR13","doi-asserted-by":"crossref","unstructured":"Chen, J., Jordan, M.I., Wainwright, M.J.: Hopskipjumpattack: A query-efficient decision-based attack. In: 2020 Ieee Symposium on Security and Privacy (sp), pp. 1277\u2013 1294 ( 2020). IEEE","DOI":"10.1109\/SP40000.2020.00045"},{"key":"4571_CR14","doi-asserted-by":"crossref","unstructured":"Chen, P.-Y., Zhang, H., Sharma, Y., Yi, J., Hsieh, C.-J.: Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp. 15\u2013 26 ( 2017)","DOI":"10.1145\/3128572.3140448"},{"key":"4571_CR15","doi-asserted-by":"publisher","unstructured":"Su, J., Vargas, D.V., Sakurai, K.: One pixel attack for fooling deep neural networks. IEEE Transactions on Evolutionary Computation, 828\u2013841 (2019) https:\/\/doi.org\/10.1109\/tevc.2019.2890858","DOI":"10.1109\/tevc.2019.2890858"},{"key":"4571_CR16","doi-asserted-by":"crossref","unstructured":"Andriushchenko, M., Croce, F., Flammarion, N., Hein, M.: Square attack: a query-efficient black-box adversarial attack via random search. In: European Conference on Computer Vision, pp. 484\u2013 501 ( 2020). Springer","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"4571_CR17","first-page":"6437","volume":"36","author":"F Croce","year":"2022","unstructured":"Croce, F., Andriushchenko, M., Singh, N.D., Flammarion, N., Hein, M.: Sparse-rs: a versatile framework for query-efficient sparse black-box adversarial attacks. In: Proceedings of the AAAI Conference on Artificial Intelligence 36, 6437\u20136445 (2022)","journal-title":"In: Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"4571_CR18","unstructured":"Papernot, N., McDaniel, P., Goodfellow, I.: Transferability in machine learning: from phenomena to black-box attacks using adversarial samples (2016)"},{"key":"4571_CR19","doi-asserted-by":"crossref","unstructured":"Wu, W., Su, Y., Chen, X., Zhao, S., King, I., Lyu, M.R., Tai, Y.-W.: Boosting the transferability of adversarial samples via attention. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) ( 2020)","DOI":"10.1109\/CVPR42600.2020.00124"},{"key":"4571_CR20","doi-asserted-by":"publisher","unstructured":"Wang, X., He, K.: Enhancing the transferability of adversarial attacks through variance tuning. In: 2021 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) ( 2021). https:\/\/doi.org\/10.1109\/cvpr46437.2021.00196","DOI":"10.1109\/cvpr46437.2021.00196"},{"key":"4571_CR21","unstructured":"Zhang, Q., Wang, X., Ren, J., Cheng, X., Lin, S., Wang, Y., Zhu, X.: Proving common mechanisms shared by twelve methods of boosting adversarial transferability. arXiv preprint arXiv:2207.11694 (2022)"},{"key":"4571_CR22","unstructured":"Zhang, H., Wang, J.: Defense against adversarial attacks using feature scattering-based adversarial training. In: Wallach, H., Larochelle, H., Beygelzimer, A., Alch\u00e9-Buc, F., Fox, E., Garnett, R. (eds.) Advances in Neural Information Processing Systems, vol. 32. Curran Associates, Inc., ( 2019)"},{"key":"4571_CR23","unstructured":"Hinton, G., Vinyals, O., Dean, J.: Distilling the knowledge in a neural network. arXiv preprint arXiv:1503.02531 (2015)"},{"key":"4571_CR24","doi-asserted-by":"publisher","first-page":"22617","DOI":"10.1109\/ACCESS.2020.2969288","volume":"8","author":"J Yuan","year":"2020","unstructured":"Yuan, J., He, Z.: Adversarial dual network learning with randomized image transform for restoring attacked images. IEEE Access 8, 22617\u201322624 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.2969288","journal-title":"IEEE Access"},{"key":"4571_CR25","unstructured":"Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., Madry, A.: Robustness may be at odds with accuracy. In: International Conference on Learning Representations ( 2019)"},{"key":"4571_CR26","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial machine learning at scale. In: International Conference on Learning Representations ( 2017)"},{"key":"4571_CR27","unstructured":"Vargas, D.V., Su, J.: Understanding the one-pixel attack: Propagation maps and locality analysis. arXiv preprint arXiv:1902.02947 (2019)"},{"key":"4571_CR28","doi-asserted-by":"publisher","unstructured":"Wang, W., Sun, J., Wang, G.: Visualizing one pixel attack using adversarial maps. In: 2020 Chinese Automation Congress (CAC), pp. 924\u2013 929 ( 2020). https:\/\/doi.org\/10.1109\/CAC51589.2020.9327603","DOI":"10.1109\/CAC51589.2020.9327603"},{"key":"4571_CR29","doi-asserted-by":"crossref","unstructured":"Zhou, B., Khosla, A., Lapedriza, A., Oliva, A., Torralba, A.: Learning deep features for discriminative localization. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2921\u2013 2929 ( 2016)","DOI":"10.1109\/CVPR.2016.319"},{"key":"4571_CR30","unstructured":"Ilyas, A., Engstrom, L., Athalye, A., Lin, J.: Black-box adversarial attacks with limited queries and information. In: Proceedings of the 35th International Conference on Machine Learning, ICML 2018 ( 2018)"},{"key":"4571_CR31","unstructured":"Ilyas, A., Engstrom, L., Madry, A.: Prior convictions: Black-box adversarial attacks with bandits and priors. ICLR 2019 (2018)"},{"key":"4571_CR32","doi-asserted-by":"crossref","unstructured":"Bai, Y., Zeng, Y., Jiang, Y., Wang, Y., Xia, S.-T., Guo, W.: Improving query efficiency of black-box adversarial attack. In: Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XXV 16, pp. 101\u2013 116 ( 2020). Springer","DOI":"10.1007\/978-3-030-58595-2_7"}],"container-title":["Signal, Image and Video Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11760-025-04571-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11760-025-04571-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11760-025-04571-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T13:15:07Z","timestamp":1758546907000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11760-025-04571-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,5]]},"references-count":32,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["4571"],"URL":"https:\/\/doi.org\/10.1007\/s11760-025-04571-0","relation":{},"ISSN":["1863-1703","1863-1711"],"issn-type":[{"type":"print","value":"1863-1703"},{"type":"electronic","value":"1863-1711"}],"subject":[],"published":{"date-parts":[[2025,9,5]]},"assertion":[{"value":"11 April 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 July 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 July 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"998"}}