{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T10:25:24Z","timestamp":1763202324299,"version":"3.37.3"},"reference-count":37,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2018YFB1004402"],"award-info":[{"award-number":["2018YFB1004402"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004826","name":"Natural Science Foundation of Beijing Municipality","doi-asserted-by":"publisher","award":["4172053"],"award-info":[{"award-number":["4172053"]}],"id":[{"id":"10.13039\/501100004826","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772477","61876019"],"award-info":[{"award-number":["61772477","61876019"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006407","name":"Natural Science Foundation of Henan Province","doi-asserted-by":"publisher","award":["162300410322"],"award-info":[{"award-number":["162300410322"]}],"id":[{"id":"10.13039\/501100006407","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2956553","type":"journal-article","created":{"date-parts":[[2019,12,4]],"date-time":"2019-12-04T23:03:52Z","timestamp":1575500632000},"page":"172938-172947","source":"Crossref","is-referenced-by-count":4,"title":["A CMA-ES-Based Adversarial Attack on Black-Box Deep Neural Networks"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3816-402X","authenticated-orcid":false,"given":"Xiaohui","family":"Kuang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3651-6960","authenticated-orcid":false,"given":"Hongyi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7024-0067","authenticated-orcid":false,"given":"Ye","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2980-7695","authenticated-orcid":false,"given":"Qikun","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5094-7388","authenticated-orcid":false,"given":"Quanxin","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1947-0921","authenticated-orcid":false,"given":"Jun","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.01.011"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.03.007"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2017.10.015"},{"key":"ref30","doi-asserted-by":"crossref","first-page":"87085","DOI":"10.1109\/ACCESS.2019.2926404","article-title":"Group key agreement protocol based on privacy protection and attribute authentication","volume":"7","author":"zhang","year":"2019","journal-title":"IEEE Access"},{"key":"ref37","article-title":"The CMA evolution strategy: A tutorial","author":"hansen","year":"2016","journal-title":"arXiv 1604 00772"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1049\/cje.2018.05.010"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.09.024"},{"key":"ref34","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1016\/j.jpdc.2019.03.003","article-title":"The security of machine learning in an adversarial setting: A survey","volume":"130","author":"wang","year":"2019","journal-title":"J Parallel Distrib Comput"},{"key":"ref10","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref11","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv 1607 02533"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref13","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1705 07204"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref15","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2016","journal-title":"arXiv 1611 02770"},{"key":"ref16","article-title":"The space of transferable adversarial examples","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1704 03453"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref18","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"brendel","year":"2017","journal-title":"arXiv 1712 04248"},{"key":"ref19","article-title":"‘Query-efficient black-box adversarial examples (superceded)","author":"ilyas","year":"2017","journal-title":"arXiv 1712 07113"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CEC.2008.4631255"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.02.069"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.07.011"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-018-6281-1"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.3390\/app9112286"},{"key":"ref29","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"arXiv 1802 00420"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-018-9451-y"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.01.019"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref21","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"xu","year":"2017","journal-title":"arXiv 1704 01155"},{"key":"ref24","article-title":"Generative adversarial trainer: Defense to adversarial perturbations with GAN","author":"lee","year":"2017","journal-title":"arXiv 1705 03387"},{"key":"ref23","article-title":"Object detectors emerge in deep scene CNNs","author":"zhou","year":"2017","journal-title":"arXiv 1412 6856"},{"key":"ref26","doi-asserted-by":"crossref","first-page":"24064","DOI":"10.1109\/ACCESS.2018.2799007","article-title":"A dynamic and cross-domain authentication asymmetric group key agreement in telemedicine application","volume":"6","author":"zhang","year":"2018","journal-title":"IEEE Access"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1016\/j.jnca.2018.11.001","article-title":"A packet-reordering covert channel over VoLTE voice and video traffics","volume":"126","author":"zhang","year":"2019","journal-title":"J Netw Comput Appl"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08917642.pdf?arnumber=8917642","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,27]],"date-time":"2022-01-27T09:54:49Z","timestamp":1643277289000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8917642\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2956553","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2019]]}}}