{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T14:57:21Z","timestamp":1776783441750,"version":"3.51.2"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T00:00:00Z","timestamp":1667520000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T00:00:00Z","timestamp":1667520000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100012247","name":"Program of Shanghai Academic Research Leader","doi-asserted-by":"publisher","award":["21XD1421500"],"award-info":[{"award-number":["21XD1421500"]}],"id":[{"id":"10.13039\/501100012247","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872230"],"award-info":[{"award-number":["61872230"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936213"],"award-info":[{"award-number":["U1936213"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Peer-to-Peer Netw. Appl."],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1007\/s12083-022-01390-9","type":"journal-article","created":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T20:19:11Z","timestamp":1667593151000},"page":"295-311","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Practical black-box adversarial attack on open-set recognition: Towards robust autonomous driving"],"prefix":"10.1007","volume":"16","author":[{"given":"Yanfei","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kejie","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yun","family":"Xiong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mi","family":"Wen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,11,4]]},"reference":[{"issue":"-","key":"1390_CR1","doi-asserted-by":"publisher","first-page":"113816","DOI":"10.1016\/j.eswa.2020.113816","volume":"165","author":"C Badue","year":"2021","unstructured":"Badue C, Guidolini R, Carneiro RV, Azevedo P, Cardoso VB, Forechi A, Jesus L, Berriel R, Paixao TM, Mutz F, de Paula Veronese L, Oliveira-Santos T, De Souza AF (2021) Self-driving cars: A survey. Expert Syst Appl 165:113816","journal-title":"Expert Syst Appl"},{"key":"1390_CR2","doi-asserted-by":"crossref","unstructured":"Deng Y, Zhang T, Lou G, Zheng X, Jin J, Han QL (2021) Deep learning-based autonomous driving systems: A survey of attacks and defenses. IEEE Trans Ind Inf","DOI":"10.1109\/TII.2021.3071405"},{"key":"1390_CR3","doi-asserted-by":"publisher","first-page":"1427","DOI":"10.1109\/TITS.2019.2913588","volume":"21","author":"D Tabernik","year":"2020","unstructured":"Tabernik D, Skocaj D (2020) Deep learning for large-scale traffic-sign detection and recognition. IEEE Trans Intell Transp Syst 21:1427\u20131440","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"1390_CR4","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1109\/MCE.2020.2969156","volume":"9","author":"D Vitas","year":"2020","unstructured":"Vitas D, Tomic M, Burul M (2020) Traffic light detection in autonomous driving systems. IEEE Consum Electron Mag 9:90\u201396","journal-title":"IEEE Consum Electron Mag"},{"key":"1390_CR5","doi-asserted-by":"publisher","first-page":"1757","DOI":"10.1109\/TPAMI.2012.256","volume":"35","author":"WJ Scheirer","year":"2013","unstructured":"Scheirer WJ, De Rezende A, Rocha AS, Boult TE (2013) Toward open set recognition. IEEE Trans Pattern Anal Mach Intell 35:1757\u20131772","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"1390_CR6","doi-asserted-by":"crossref","unstructured":"Li F, Li X, Luo J, Fan S, Zhang H (2021) Open-set intersection intention prediction for autonomous driving","DOI":"10.1109\/ICRA48506.2021.9561660"},{"key":"1390_CR7","first-page":"1048","volume":"-","author":"A Roitberg","year":"2020","unstructured":"Roitberg A, Ma C, Haurilet M, Stiefelhagen R (2020) Open set driver activity recognition. IEEE Intell Veh Symp 1048\u20131053","journal-title":"IEEE Intell Veh Symp"},{"key":"1390_CR8","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus R (2013) Intriguing properties of neural networks. 2nd International Conference on Learning Representations, ICLR 2014 - Conference Track Proceedings"},{"key":"1390_CR9","first-page":"1563","volume":"-","author":"A Bendale","year":"2016","unstructured":"Bendale A, Boult TE (2016) Towards open set deep networks. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 1563\u20131572","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR10","unstructured":"Zheng Z, Zheng L, Hu Z, Yang Y (2018) Open set adversarial examples. arXiv preprint\u00a0arXiv:1809.02681"},{"key":"1390_CR11","doi-asserted-by":"crossref","unstructured":"Shao R, Perera P, Yuen PC, Patel VM (2020) Open-set adversarial defense. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 12362 LNCS:682\u2013698","DOI":"10.1007\/978-3-030-58520-4_40"},{"issue":"3","key":"1390_CR12","doi-asserted-by":"publisher","first-page":"1458","DOI":"10.1007\/s12083-020-01031-z","volume":"14","author":"M Xue","year":"2021","unstructured":"Xue M, He C, Wang J, Liu W (2021) Backdoors hidden in facial features: a novel invisible backdoor attack against face recognition systems. Peer Peer Netw Appl 14(3):1458\u20131474","journal-title":"Peer Peer Netw Appl"},{"key":"1390_CR13","first-page":"1218","volume":"-","author":"H Li","year":"2020","unstructured":"Li H, Xu X, Zhang X, Yang S, Li B (2020) Qeba: Query-efficient boundary-based blackbox attack. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 1218\u20131227","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR14","first-page":"11027","volume":"-","author":"Y Chen","year":"2020","unstructured":"Chen Y, Dai X, Liu M, Chen D, Yuan L, Liu Z (2020) Dynamic convolution: Attention over convolution kernels. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 11027\u201311036","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"issue":"4","key":"1390_CR15","first-page":"2021","volume":"012071","author":"I Sonata","year":"1869","unstructured":"Sonata I, Heryadi Y, Lukas L, Wibowo A (1869) Autonomous car using cnn deep learning algorithm. J Phys: Conf Ser 012071(4):2021","journal-title":"J Phys: Conf Ser"},{"key":"1390_CR16","doi-asserted-by":"crossref","unstructured":"Babiker MA, Elawad MA, Ahmed AH (2019) Convolutional neural network for a self-driving car in a virtual environment. Proceedings of the International Conference on Computer, Control, Electrical, and Electronics Engineering 2019, ICCCEEE 2019","DOI":"10.1109\/ICCCEEE46830.2019.9070826"},{"key":"1390_CR17","doi-asserted-by":"crossref","unstructured":"Zeiler MD, Fergus R (2014) Visualizing and understanding convolutional networks. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 8689 LNCS:818\u2013833","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"1390_CR18","unstructured":"Simonyan K, Zisserman A (2014) Very deep convolutional networks for large-scale image recognition. 3rd International Conference on Learning Representations, ICLR 2015 - Conference Track Proceedings"},{"key":"1390_CR19","first-page":"770","volume":"-","author":"K He","year":"2016","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Deep residual learning for image recognition. In Proceedings of the IEEE Conf Comput Vis Pattern Recognit 770\u2013778","journal-title":"In Proceedings of the IEEE Conf Comput Vis Pattern Recognit"},{"key":"1390_CR20","first-page":"2420","volume-title":"Single-sided deafness (ssd)","author":"Abdul Aleem Kadar","year":"2013","unstructured":"Abdul Aleem Kadar (2013) Single-sided deafness (ssd). Encyclopedia of Otolaryngology, Head and Neck Surgery, pp 2420\u20132420"},{"key":"1390_CR21","doi-asserted-by":"crossref","unstructured":"Cai Y, Luan T, Gao H, Wang H, Chen L, Li Y, Sotelo MA, Li Z (2021) Yolov4\u20135d: An effective and efficient object detector for autonomous driving. IEEE Trans Instrum Meas 70","DOI":"10.1109\/TIM.2021.3065438"},{"key":"1390_CR22","first-page":"779","volume":"-","author":"J Redmon","year":"2016","unstructured":"Redmon J, Divvala S, Girshick R, Farhadi A (2016) You only look once: Unified, real-time object detection. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 779\u2013788","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR23","doi-asserted-by":"publisher","first-page":"244","DOI":"10.1016\/j.iatssr.2019.11.008","volume":"43","author":"H Fujiyoshi","year":"2019","unstructured":"Fujiyoshi H, Hirakawa T, Yamashita T (2019) Deep learning-based image recognition for autonomous driving. IATSS Res 43:244\u2013252","journal-title":"IATSS Res"},{"key":"1390_CR24","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2014) Explaining and harnessing adversarial examples. 3rd International Conference on Learning Representations, ICLR 2015 Conference Track Proceedings"},{"key":"1390_CR25","unstructured":"Kurakin A, Goodfellow I, Bengio S et al (2016) Adversarial examples in the physical world. arXiv preprint\u00a0arXiv:1607.02533"},{"key":"1390_CR26","first-page":"2574","volume":"-","author":"SM Moosavi-Dezfooli","year":"2016","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Frossard P (2016) Deepfool: A simple and accurate method to fool deep neural networks. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 2574\u20132582","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR27","doi-asserted-by":"crossref","unstructured":"Papernot N, Mcdaniel P, Jha S, Fredrikson M, Celik ZB, Swami A (2016) The limitations of deep learning in adversarial settings. Proceedings 2016 IEEE European Symposium on Security and Privacy, EURO S and P 2016, pages 372\u2013387","DOI":"10.1109\/EuroSP.2016.36"},{"key":"1390_CR28","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2017) Towards deep learning models resistant to adversarial attacks. 6th International Conference on Learning Representations, ICLR 2018 - Conference Track Proceedings"},{"key":"1390_CR29","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1109\/MSP.2017.76","volume":"-","author":"N Carlini","year":"2017","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. Proc IEEE Symp Secur Privacy 39\u201357","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"1390_CR30","doi-asserted-by":"crossref","unstructured":"Papernot N, McDaniel P, Goodfellow I, Jha S, Celik ZB, Swami A (2017) Practical black-box attacks against machine learning. Proc\u00a02017 ACM Asia Conf Comput Commun Secur","DOI":"10.1145\/3052973.3053009"},{"key":"1390_CR31","doi-asserted-by":"crossref","unstructured":"Chen PY, Zhang H, Sharma Y, Yi J, Hsieh CJ (2017) Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. Proc ACM Workshop Artif Intell Secur","DOI":"10.1145\/3128572.3140448"},{"key":"1390_CR32","unstructured":"Brendel W, Rauber J, Bethge M (2017) Decision-based adversarial attacks: Reliable attacks against black-box machine learning models. 6th International Conference on Learning Representations, ICLR 2018 - Conference Track Proceedings"},{"key":"1390_CR33","unstructured":"Ilyas A, Engstrom L, Madry A (2018) Prior convictions: Black-box adversarial attacks with bandits and priors. 7th International Conference on Learning Representations, ICLR 2019"},{"key":"1390_CR34","first-page":"742","volume":"33","author":"CC Tu","year":"2019","unstructured":"Tu CC, Ting P, Chen PY, Liu S, Zhang H, Yi J, Hsieh CJ, Cheng SM (2019) Autozoom: Autoencoder-based zeroth order optimization method for attacking black-box neural networks. Proc AAAI Conf Artif Intell 33:742\u2013749","journal-title":"Proc AAAI Conf Artif Intell"},{"key":"1390_CR35","unstructured":"Mahmood K, Nguyen PH, Nguyen LM, Nguyen T, van Dijk M (2019) Buzz: Buffer zones for defending adversarial examples in image classification"},{"key":"1390_CR36","first-page":"4889","volume":"-","author":"Y Liu","year":"2019","unstructured":"Liu Y, Moosavi-Dezfooli SM, Frossard Pascal (2019) A geometry-inspired decision-based attack. Proc IEEE Int Conf Comput Vis 4889\u20134897","journal-title":"Proc IEEE Int Conf Comput Vis"},{"key":"1390_CR37","doi-asserted-by":"crossref","unstructured":"Andriushchenko M, Croce F, Flammarion N, Hein M (2020) Square attack: A query-efficient black-box adversarial attack via random search. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 12368 LNCS:484\u2013501","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"1390_CR38","first-page":"231","volume":"-","author":"M Zhou","year":"2020","unstructured":"Zhou M, Wu J, Liu Y, Liu S, Zhu C (2020) Dast: Data-free substitute training for adversarial attacks. Proc IEEE Computer Soc Conf Comput Vis Pattern Recognit 231\u2013240","journal-title":"Proc IEEE Computer Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR39","first-page":"638","volume":"-","author":"M Li","year":"2020","unstructured":"Li M, Deng C, Li T, Yan J, Gao X, Huang H (2020) Towards transferable targeted attack. Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit 638\u2013646","journal-title":"Proc IEEE Comput Soc Conf Comput Vis Pattern Recognit"},{"key":"1390_CR40","first-page":"15095","volume":"-","author":"Y Feng","year":"2022","unstructured":"Feng Y, Wu B, Fan Y, Liu L, Li Z, Xia ST (2022) Boosting black-box attack with partially transferred conditional adversarial distribution. Proc IEEE\/CVF Conf Comput Vis Pattern Recognit 15095\u201315104","journal-title":"Proc IEEE\/CVF Conf Comput Vis Pattern Recognit"},{"key":"1390_CR41","unstructured":"Huang Z, Zhang T (2019) Black-box adversarial attack with transferable model-based embedding.\u00a0ICLR2020"},{"key":"1390_CR42","doi-asserted-by":"crossref","unstructured":"Zhang J, Lou Y, Wang J, Wu K, Lu K, Jia X (2021) Evaluating adversarial attacks on driving safety in vision-based autonomous vehicles. IEEE Internet Things J","DOI":"10.1109\/JIOT.2021.3099164"},{"key":"1390_CR43","doi-asserted-by":"publisher","first-page":"1140","DOI":"10.1109\/JIOT.2020.3011690","volume":"8","author":"J Zhang","year":"2021","unstructured":"Zhang J, Zhang Y, Lu K, Wang J, Wu K, Jia X, Liu B (2021) Detecting and identifying optical signal attacks on autonomous driving systems. IEEE Internet Things J 8:1140\u20131153","journal-title":"IEEE Internet Things J"},{"key":"1390_CR44","first-page":"1","volume":"-","author":"S Garg","year":"2021","unstructured":"Garg S, Mehrotra D, Pandey HM, Pandey S (2021) Accessible review of internet of vehicle models for intelligent transportation and research gaps for potential future directions. Peer Peer Network Appl 1\u201328","journal-title":"Peer Peer Network Appl"},{"key":"1390_CR45","doi-asserted-by":"crossref","unstructured":"Neal L, Olson M, Fern X, Wong WK, Li F (2018) Open set learning with counterfactual images. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 11210 LNCS:620\u2013635","DOI":"10.1007\/978-3-030-01231-1_38"},{"key":"1390_CR46","unstructured":"Kim H (2020) Torchattacks: A pytorch repository for adversarial attacks. arXiv preprint\u00a0arXiv:2010.01950"}],"container-title":["Peer-to-Peer Networking and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12083-022-01390-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s12083-022-01390-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12083-022-01390-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,3,21]],"date-time":"2023-03-21T04:59:09Z","timestamp":1679374749000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s12083-022-01390-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,4]]},"references-count":46,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1]]}},"alternative-id":["1390"],"URL":"https:\/\/doi.org\/10.1007\/s12083-022-01390-9","relation":{},"ISSN":["1936-6442","1936-6450"],"issn-type":[{"value":"1936-6442","type":"print"},{"value":"1936-6450","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,11,4]]},"assertion":[{"value":"20 January 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 September 2022","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 November 2022","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}