{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T00:58:11Z","timestamp":1781225891195,"version":"3.54.1"},"reference-count":52,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100010882","name":"Tianjin Municipal Education Commission","doi-asserted-by":"publisher","award":["2024ZX008"],"award-info":[{"award-number":["2024ZX008"]}],"id":[{"id":"10.13039\/501100010882","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276182"],"award-info":[{"award-number":["62276182"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276004"],"award-info":[{"award-number":["62276004"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006606","name":"Natural Science Foundation of Tianjin Municipality","doi-asserted-by":"publisher","award":["24JCYBJC01460"],"award-info":[{"award-number":["24JCYBJC01460"]}],"id":[{"id":"10.13039\/501100006606","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006606","name":"Natural Science Foundation of Tianjin Municipality","doi-asserted-by":"publisher","award":["24JCYBJC01230"],"award-info":[{"award-number":["24JCYBJC01230"]}],"id":[{"id":"10.13039\/501100006606","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Knowledge-Based Systems"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.knosys.2026.115894","type":"journal-article","created":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T17:29:31Z","timestamp":1775150971000},"page":"115894","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Boosting adversarial transferability via diversified sampling and flatness-aware momentum"],"prefix":"10.1016","volume":"343","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-7265-106X","authenticated-orcid":false,"given":"Siyuan","family":"Deng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fanhua","family":"Shang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengchao","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5601-2262","authenticated-orcid":false,"given":"Ji","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5961-5569","authenticated-orcid":false,"given":"Hongying","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingyuan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.knosys.2026.115894_bib0001","series-title":"Proceedings of the 8th International Conference On Computing and Artificial Intelligence, ICCAI \u201922","first-page":"432","article-title":"Deep learning-based small object detection: a survey","author":"Liang","year":"2022"},{"key":"10.1016\/j.knosys.2026.115894_bib0002","doi-asserted-by":"crossref","first-page":"214","DOI":"10.3390\/s25010214","article-title":"A comprehensive survey of machine learning techniques and models for object detection","volume":"25","author":"Trigka","year":"2025","journal-title":"Sensors"},{"key":"10.1016\/j.knosys.2026.115894_bib0003","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"1280","article-title":"Masked-attention mask transformer for universal image segmentation","author":"Cheng","year":"2022"},{"key":"10.1016\/j.knosys.2026.115894_bib0004","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"11901","article-title":"Variational prototype learning for deep face recognition","author":"Deng","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0005","doi-asserted-by":"crossref","DOI":"10.1049\/2024\/7886911","article-title":"A survey on automatic face recognition using side-view face images","volume":"2024","author":"Santemiz","year":"2024","journal-title":"IET Biometrics"},{"key":"10.1016\/j.knosys.2026.115894_bib0006","author":"Goodfellow","year":"2014","journal-title":"Explaining and harnessing adversarial examples"},{"key":"10.1016\/j.knosys.2026.115894_bib0007","author":"Gu","year":"2024","journal-title":"A survey on transferability of adversarial examples across deep neural networks"},{"key":"10.1016\/j.knosys.2026.115894_bib0008","author":"Madry","year":"2017","journal-title":"Towards deep learning models resistant to adversarial attacks"},{"key":"10.1016\/j.knosys.2026.115894_bib0009","author":"Zhang","year":"2022","journal-title":"Proving common mechanisms shared by twelve methods of boosting adversarial transferability"},{"key":"10.1016\/j.knosys.2026.115894_bib0010","series-title":"Proceedings of the International Conference on Machine Learning (ICML)","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","author":"Cohen","year":"2019"},{"key":"10.1016\/j.knosys.2026.115894_bib0011","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"1778","article-title":"Defense against adversarial attacks using high-level representation guided denoiser","author":"Liao","year":"2018"},{"key":"10.1016\/j.knosys.2026.115894_bib0012","author":"Wang","year":"2023","journal-title":"Adversarial attacks and defenses in machine learning-powered networks: A contemporary survey"},{"key":"10.1016\/j.knosys.2026.115894_bib0013","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"9185","article-title":"Boosting adversarial attacks with momentum","author":"Dong","year":"2018"},{"key":"10.1016\/j.knosys.2026.115894_bib0014","author":"Lei","year":"2025","journal-title":"Towards more transferable adversarial attack in black-box manner"},{"key":"10.1016\/j.knosys.2026.115894_bib0015","author":"Papernot","year":"2016","journal-title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples"},{"key":"10.1016\/j.knosys.2026.115894_bib0016","series-title":"The NeurIPS \u201917 Competition: Building Intelligent Systems","first-page":"195","article-title":"Adversarial attacks and defences competition","author":"Kurakin","year":"2018"},{"key":"10.1016\/j.knosys.2026.115894_bib0017","first-page":"29845","article-title":"Boosting the transferability of adversarial attacks with reverse adversarial perturbation","volume":"35","author":"Qin","year":"2022","journal-title":"Adv. Neural Inf. Process Syst."},{"key":"10.1016\/j.knosys.2026.115894_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.124757","article-title":"Boosting the transferability of adversarial attacks with global momentum initialization","volume":"255","author":"Wang","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.knosys.2026.115894_bib0019","author":"Liu","year":"2016","journal-title":"Delving into transferable adversarial examples and black-box attacks"},{"key":"10.1016\/j.knosys.2026.115894_bib0020","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"24377","article-title":"Ensemble diversity facilitates adversarial transferability","author":"Tang","year":"2024"},{"key":"10.1016\/j.knosys.2026.115894_bib0021","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"14983","article-title":"Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability","author":"Xiong","year":"2022"},{"key":"10.1016\/j.knosys.2026.115894_bib0022","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"4312","article-title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","author":"Dong","year":"2019"},{"key":"10.1016\/j.knosys.2026.115894_bib0023","author":"Lin","year":"2019","journal-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks"},{"key":"10.1016\/j.knosys.2026.115894_bib0024","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"16158","article-title":"Admix: enhancing the transferability of adversarial attacks","author":"Wang","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0025","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"2730","article-title":"Improving transferability of adversarial examples with input diversity","author":"Xie","year":"2019"},{"key":"10.1016\/j.knosys.2026.115894_bib0026","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"24273","article-title":"Learning to transform dynamically for better adversarial transferability","author":"Zhu","year":"2024"},{"key":"10.1016\/j.knosys.2026.115894_bib0027","doi-asserted-by":"crossref","first-page":"70141","DOI":"10.52202\/075280-3073","article-title":"Boosting adversarial transferability by achieving flat local maxima","volume":"36","author":"Ge","year":"2023","journal-title":"Adv. Neural Inf. Process Syst."},{"key":"10.1016\/j.knosys.2026.115894_bib0028","author":"Izmailov","year":"2018","journal-title":"Averaging weights leads to wider optima and better generalization"},{"key":"10.1016\/j.knosys.2026.115894_bib0029","author":"Andriushchenko","year":"2019","journal-title":"Square attack: a query-efficient black-box adversarial attack via random search"},{"key":"10.1016\/j.knosys.2026.115894_bib0030","author":"Bhambri","year":"2019","journal-title":"A study of black box adversarial attacks in computer vision"},{"key":"10.1016\/j.knosys.2026.115894_bib0031","doi-asserted-by":"crossref","first-page":"998","DOI":"10.1109\/ACCESS.2021.3138338","article-title":"Back in black: a comparative evaluation of recent state-of-the-art black-box attacks","volume":"10","author":"Mahmood","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.115894_bib0032","author":"Zhao","year":"2021","journal-title":"On success and simplicity: A second look at transferable targeted attacks"},{"key":"10.1016\/j.knosys.2026.115894_bib0033","author":"Wu","year":"2020","journal-title":"Skip connections matter: On the transferability of adversarial examples generated with ResNets"},{"key":"10.1016\/j.knosys.2026.115894_bib0034","author":"Tashiro","year":"2020","journal-title":"Output diversified initialization for adversarial attacks"},{"key":"10.1016\/j.knosys.2026.115894_bib0035","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1162\/neco.1997.9.1.1","article-title":"Flat minima","volume":"9","author":"Hochreiter","year":"1997","journal-title":"Neural Comput."},{"key":"10.1016\/j.knosys.2026.115894_bib0036","author":"Foret","year":"2020","journal-title":"Sharpness-aware minimization for efficiently improving generalization"},{"key":"10.1016\/j.knosys.2026.115894_bib0037","author":"Qiu","year":"2024","journal-title":"Enhancing adversarial transferability through neighborhood conditional sampling"},{"key":"10.1016\/j.knosys.2026.115894_bib0038","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"2818","article-title":"Rethinking the Inception architecture for computer vision","author":"Szegedy","year":"2016"},{"key":"10.1016\/j.knosys.2026.115894_bib0039","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","article-title":"Inception-v4, Inception-ResNet and the impact of residual connections on learning","volume":"31","author":"Szegedy","year":"2017"},{"key":"10.1016\/j.knosys.2026.115894_bib0040","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.knosys.2026.115894_bib0041","author":"Tram\u00e8r","year":"2017","journal-title":"Ensemble adversarial training: Attacks and defenses"},{"key":"10.1016\/j.knosys.2026.115894_bib0042","author":"Dosovitskiy","year":"2020","journal-title":"An image is worth 16x16 words: Transformers for image recognition at scale"},{"key":"10.1016\/j.knosys.2026.115894_bib0043","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"10012","article-title":"Swin Transformer: hierarchical vision transformer using shifted windows","author":"Liu","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0044","series-title":"International Conference on Machine Learning (ICML)","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","author":"Touvron","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0045","series-title":"International Conference on Machine Learning (ICML)","first-page":"2286","article-title":"ConViT: improving vision transformers with soft convolutional inductive biases","author":"d\u2019Ascoli","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0046","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"4700","article-title":"Densely connected convolutional networks","author":"Huang","year":"2017"},{"key":"10.1016\/j.knosys.2026.115894_bib0047","author":"Simonyan","year":"2014","journal-title":"Very deep convolutional networks for large-scale image recognition"},{"key":"10.1016\/j.knosys.2026.115894_bib0048","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"12259","article-title":"LeViT: a vision transformer in ConvNet\u2019s clothing for faster inference","author":"Graham","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0049","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"589","article-title":"VisFormer: the vision-friendly transformer","author":"Chen","year":"2021"},{"key":"10.1016\/j.knosys.2026.115894_bib0050","author":"Guo","year":"2017","journal-title":"Countering adversarial images using input transformations"},{"key":"10.1016\/j.knosys.2026.115894_bib0051","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"860","article-title":"Feature distillation: DNN-oriented JPEG compression against adversarial examples","author":"Liu","year":"2019"},{"key":"10.1016\/j.knosys.2026.115894_bib0052","author":"Xu","year":"2017","journal-title":"Feature squeezing: Detecting adversarial examples in deep neural networks"}],"container-title":["Knowledge-Based Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126006209?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126006209?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T00:09:34Z","timestamp":1781222974000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0950705126006209"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":52,"alternative-id":["S0950705126006209"],"URL":"https:\/\/doi.org\/10.1016\/j.knosys.2026.115894","relation":{},"ISSN":["0950-7051"],"issn-type":[{"value":"0950-7051","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Boosting adversarial transferability via diversified sampling and flatness-aware momentum","name":"articletitle","label":"Article Title"},{"value":"Knowledge-Based Systems","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.knosys.2026.115894","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"115894"}}