{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T20:13:33Z","timestamp":1783714413446,"version":"3.55.0"},"reference-count":48,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Pattern Recognition"],"published-print":{"date-parts":[[2026,12]]},"DOI":"10.1016\/j.patcog.2026.114378","type":"journal-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:38:16Z","timestamp":1783006696000},"page":"114378","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"PD","title":["Leveraging Neural Architecture Search for improved downstream-agnostic adversarial attack"],"prefix":"10.1016","volume":"180","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-6848-0010","authenticated-orcid":false,"given":"Haodong","family":"Xiao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenbo","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiahui","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4798-230X","authenticated-orcid":false,"given":"Bin","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hao","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yulin","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuan","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhi","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shu-Tao","family":"Xia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.patcog.2026.114378_b1","series-title":"International Conference on Machine Learning","first-page":"1597","article-title":"A simple framework for contrastive learning of visual representations","author":"Chen","year":"2020"},{"key":"10.1016\/j.patcog.2026.114378_b2","series-title":"Improved baselines with momentum contrastive learning","author":"Chen","year":"2020"},{"key":"10.1016\/j.patcog.2026.114378_b3","doi-asserted-by":"crossref","unstructured":"S.-M. Moosavi-Dezfooli, A. Fawzi, O. Fawzi, P. Frossard, Universal Adversarial Perturbations, in: 2017 IEEE Conference on Computer Vision and Pattern Recognition, CVPR, 2017.","DOI":"10.1109\/CVPR.2017.17"},{"key":"10.1016\/j.patcog.2026.114378_b4","series-title":"Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XVII 16","first-page":"174","article-title":"Design and interpretation of universal adversarial patches in face detection","author":"Yang","year":"2020"},{"key":"10.1016\/j.patcog.2026.114378_b5","doi-asserted-by":"crossref","unstructured":"Z. Zhou, S. Hu, R. Zhao, Q. Wang, L.Y. Zhang, J. Hou, H. Jin, Downstream-agnostic adversarial examples, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2023, pp. 4345\u20134355.","DOI":"10.1109\/ICCV51070.2023.00401"},{"key":"10.1016\/j.patcog.2026.114378_b6","series-title":"2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition","article-title":"High-frequency component helps explain the generalization of convolutional neural networks","author":"Wang","year":"2020"},{"key":"10.1016\/j.patcog.2026.114378_b7","series-title":"Proceedings of the IEEE International Conference on Acoustics, Speech and Signal Processing","first-page":"13637","article-title":"Diffusion-based natural adversarial perturbations towards segment anything model","author":"Xiao","year":"2026"},{"key":"10.1016\/j.patcog.2026.114378_b8","doi-asserted-by":"crossref","unstructured":"H. Fang, J. Kong, W. Yu, B. Chen, J. Li, H. Wu, S.-T. Xia, K. Xu, One perturbation is enough: On generating universal adversarial perturbations against vision-language pre-training models, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2025, pp. 4090\u20134100.","DOI":"10.1109\/ICCV51701.2025.00390"},{"key":"10.1016\/j.patcog.2026.114378_b9","doi-asserted-by":"crossref","unstructured":"V. Khrulkov, I. Oseledets, Art of singular vectors and universal adversarial perturbations, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 8562\u20138570.","DOI":"10.1109\/CVPR.2018.00893"},{"key":"10.1016\/j.patcog.2026.114378_b10","doi-asserted-by":"crossref","unstructured":"O. Poursaeed, I. Katsman, B. Gao, S. Belongie, Generative adversarial perturbations, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2018, pp. 4422\u20134431.","DOI":"10.1109\/CVPR.2018.00465"},{"key":"10.1016\/j.patcog.2026.114378_b11","doi-asserted-by":"crossref","unstructured":"D. Lu, Z. Wang, T. Wang, W. Guan, H. Gao, F. Zheng, Set-level guidance attack: Boosting adversarial transferability of vision-language pre-training models, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2023, pp. 102\u2013111.","DOI":"10.1109\/ICCV51070.2023.00016"},{"key":"10.1016\/j.patcog.2026.114378_b12","doi-asserted-by":"crossref","unstructured":"P.-F. Zhang, Z. Huang, G. Bai, Universal adversarial perturbations for vision-language pre-trained models, in: Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval, 2024, pp. 862\u2013871.","DOI":"10.1145\/3626772.3657781"},{"key":"10.1016\/j.patcog.2026.114378_b13","doi-asserted-by":"crossref","unstructured":"Z. Zhou, S. Hu, M. Li, H. Zhang, Y. Zhang, H. Jin, Advclip: Downstream-agnostic adversarial examples in multimodal contrastive learning, in: Proceedings of the 31st ACM International Conference on Multimedia, 2023, pp. 6311\u20136320.","DOI":"10.1145\/3581783.3612454"},{"key":"10.1016\/j.patcog.2026.114378_b14","article-title":"Gradient pruning interactive attack for vision-language pre-training models","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.patcog.2026.114378_b15","article-title":"Modality-specific interactive attack for vision-language pre-training models","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.patcog.2026.114378_b16","article-title":"Trajectory-enhanced transferable attacks for vision-language pre-trained models","author":"Zhang","year":"2026","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.114378_b17","doi-asserted-by":"crossref","first-page":"1196","DOI":"10.52202\/068431-0088","article-title":"Pre-trained adversarial perturbations","volume":"35","author":"Ban","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.114378_b18","doi-asserted-by":"crossref","DOI":"10.1109\/TIFS.2025.3589127","article-title":"Gi-nas: boosting gradient inversion attacks through adaptive neural architecture search","author":"Yu","year":"2025","journal-title":"IEEE Trans. Inform. Forensics Secur."},{"key":"10.1016\/j.patcog.2026.114378_b19","series-title":"International Conference on Machine Learning","first-page":"24646","article-title":"Analyzing and mitigating interference in neural architecture search","author":"Xu","year":"2022"},{"key":"10.1016\/j.patcog.2026.114378_b20","series-title":"International Conference on Machine Learning","first-page":"7105","article-title":"Nas-bench-101: Towards reproducible neural architecture search","author":"Ying","year":"2019"},{"key":"10.1016\/j.patcog.2026.114378_b21","series-title":"A novel evolutionary algorithm for hierarchical neural architecture search","author":"Chrostoforidis","year":"2021"},{"key":"10.1016\/j.patcog.2026.114378_b22","unstructured":"B. Zoph, Q. Le, Neural Architecture Search with Reinforcement Learning, in: International Conference on Learning Representations,International Conference on Learning Representations, 2016."},{"key":"10.1016\/j.patcog.2026.114378_b23","series-title":"International Conference on Machine Learning","first-page":"2902","article-title":"Large-scale evolution of image classifiers","author":"Real","year":"2017"},{"key":"10.1016\/j.patcog.2026.114378_b24","doi-asserted-by":"crossref","unstructured":"J. Jia, Y. Liu, N.Z. Gong, BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning, in: 2022 IEEE Symposium on Security and Privacy, SP, 2022.","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"10.1016\/j.patcog.2026.114378_b25","series-title":"Representation learning with contrastive predictive coding","author":"Oord","year":"2018"},{"key":"10.1016\/j.patcog.2026.114378_b26","series-title":"Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XVIII 16","first-page":"442","article-title":"Nas-dip: Learning deep image prior with neural architecture search","author":"Chen","year":"2020"},{"key":"10.1016\/j.patcog.2026.114378_b27","doi-asserted-by":"crossref","unstructured":"Q. Zhou, K. Sheng, X. Zheng, K. Li, X. Sun, Y. Tian, J. Chen, R. Ji, Training-free transformer architecture search, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2022, pp. 10894\u201310903.","DOI":"10.1109\/CVPR52688.2022.01062"},{"issue":"56","key":"10.1016\/j.patcog.2026.114378_b28","first-page":"1","article-title":"Solo-learn: A library of self-supervised methods for visual representation learning","volume":"23","author":"Da Costa","year":"2022","journal-title":"J. Mach. Learn. Res."},{"key":"10.1016\/j.patcog.2026.114378_b29","series-title":"International Conference on Machine Learning","first-page":"12310","article-title":"Barlow twins: Self-supervised learning via redundancy reduction","author":"Zbontar","year":"2021"},{"key":"10.1016\/j.patcog.2026.114378_b30","article-title":"Bootstrap your own latent: A new approach to self-supervised learning","author":"Grill","year":"2020","journal-title":"Le Cent. Pour Commun. Sci. Directe - HAL - Diderot"},{"key":"10.1016\/j.patcog.2026.114378_b31","article-title":"Unsupervised learning of visual features by contrasting cluster assignments","author":"Caron","year":"2020","journal-title":"Le Cent. Pour Commun. Sci. Directe - HAL - Universit\u00c9 Paris Descartes"},{"key":"10.1016\/j.patcog.2026.114378_b32","series-title":"2021 IEEE\/CVF International Conference on Computer Vision","article-title":"Emerging properties in self-supervised vision transformers","author":"Caron","year":"2021"},{"key":"10.1016\/j.patcog.2026.114378_b33","doi-asserted-by":"crossref","unstructured":"X. Chen, S. Xie, K. He, An empirical study of training self-supervised vision transformers, in: Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2021, pp. 9640\u20139649.","DOI":"10.1109\/ICCV48922.2021.00950"},{"key":"10.1016\/j.patcog.2026.114378_b34","doi-asserted-by":"crossref","unstructured":"D. Dwibedi, Y. Aytar, J. Tompson, P. Sermanet, A. Zisserman, With a Little Help from My Friends: Nearest-Neighbor Contrastive Learning of Visual Representations, in: 2021 IEEE\/CVF International Conference on Computer Vision, ICCV, 2021.","DOI":"10.1109\/ICCV48922.2021.00945"},{"key":"10.1016\/j.patcog.2026.114378_b35","article-title":"ReSSL: Relational self-supervised learning with weak augmentation","author":"Zheng","year":"2021","journal-title":"Neural Inf. Process. Syst. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.114378_b36","article-title":"Supervised contrastive learning","author":"Khosla","year":"2020","journal-title":"Neural Inf. Process. Syst. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.114378_b37","series-title":"VIbCReg: Variance-invariance-better-covariance regularization for self-supervised learning on time series","author":"Lee","year":"2021"},{"key":"10.1016\/j.patcog.2026.114378_b38","article-title":"VICReg: Variance-invariance-covariance regularization for self-supervised learning","author":"Adrien","year":"2022","journal-title":"Le Cent. Pour Commun. Sci. Directe - HAL - Diderot"},{"key":"10.1016\/j.patcog.2026.114378_b39","unstructured":"A. Ermolov, A. Siarohin, E. Sangineto, N. Sebe, Whitening for Self-Supervised Representation Learning, in: International Conference on Machine Learning,International Conference on Machine Learning, 2021."},{"key":"10.1016\/j.patcog.2026.114378_b40","unstructured":"A. Coates, A. Ng, H. Lee, An analysis of single-layer networks in unsupervised feature learning, in: International Conference on Artificial Intelligence and Statistics,International Conference on Artificial Intelligence and Statistics, 2011."},{"key":"10.1016\/j.patcog.2026.114378_b41","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1016\/j.neunet.2012.02.016","article-title":"Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition","volume":"32","author":"Stallkamp","year":"2012","journal-title":"Neural Netw."},{"key":"10.1016\/j.patcog.2026.114378_b42","doi-asserted-by":"crossref","unstructured":"L. Yuan, T. Wang, X. Zhang, F.E. Tay, Z. Jie, W. Liu, J. Feng, Central similarity quantization for efficient image and video retrieval, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 3083\u20133092.","DOI":"10.1109\/CVPR42600.2020.00315"},{"key":"10.1016\/j.patcog.2026.114378_b43","series-title":"MMDetection: Open mmlab detection toolbox and benchmark","author":"Chen","year":"2019"},{"key":"10.1016\/j.patcog.2026.114378_b44","doi-asserted-by":"crossref","unstructured":"K. He, G. Gkioxari, P. Doll\u00e1r, R. Girshick, Mask r-cnn, in: Proceedings of the IEEE International Conference on Computer Vision, 2017, pp. 2961\u20132969.","DOI":"10.1109\/ICCV.2017.322"},{"key":"10.1016\/j.patcog.2026.114378_b45","doi-asserted-by":"crossref","unstructured":"S.-M. Moosavi-Dezfooli, A. Fawzi, O. Fawzi, P. Frossard, Universal adversarial perturbations, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2017, pp. 1765\u20131773.","DOI":"10.1109\/CVPR.2017.17"},{"key":"10.1016\/j.patcog.2026.114378_b46","doi-asserted-by":"crossref","unstructured":"M. Naseer, S. Khan, M. Hayat, F.S. Khan, F. Porikli, A self-supervised approach for adversarial robustness, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 262\u2013271.","DOI":"10.1109\/CVPR42600.2020.00034"},{"key":"10.1016\/j.patcog.2026.114378_b47","series-title":"To prune, or not to prune: exploring the efficacy of pruning for model compression","author":"Zhu","year":"2017"},{"key":"10.1016\/j.patcog.2026.114378_b48","first-page":"16199","article-title":"Robust pre-training by adversarial contrastive learning","volume":"33","author":"Jiang","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."}],"container-title":["Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326013439?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326013439?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T19:28:42Z","timestamp":1783711722000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0031320326013439"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,12]]},"references-count":48,"alternative-id":["S0031320326013439"],"URL":"https:\/\/doi.org\/10.1016\/j.patcog.2026.114378","relation":{},"ISSN":["0031-3203"],"issn-type":[{"value":"0031-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Leveraging Neural Architecture Search for improved downstream-agnostic adversarial attack","name":"articletitle","label":"Article Title"},{"value":"Pattern Recognition","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.patcog.2026.114378","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"114378"}}