{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,12]],"date-time":"2025-06-12T04:48:19Z","timestamp":1749703699214,"version":"3.37.3"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902082","U1636215","61572492"],"award-info":[{"award-number":["61902082","U1636215","61572492"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"project \u201cPCL Future Regional Network Facilities for Large-scale Experiments and Applications\u201d","award":["PCL2018KP001"],"award-info":[{"award-number":["PCL2018KP001"]}]},{"name":"Guangdong Province Universities and Colleges Pearl River Scholar Funded Scheme"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.2971004","type":"journal-article","created":{"date-parts":[[2020,2,4]],"date-time":"2020-02-04T00:55:38Z","timestamp":1580777738000},"page":"25262-25271","source":"Crossref","is-referenced-by-count":4,"title":["Restricted Region Based Iterative Gradient Method for Non-Targeted Attack"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7546-852X","authenticated-orcid":false,"given":"Zhaoquan","family":"Gu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5474-991X","authenticated-orcid":false,"given":"Weixiong","family":"Hu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1503-8274","authenticated-orcid":false,"given":"Chuanjing","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3610-9185","authenticated-orcid":false,"given":"Le","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8041-0197","authenticated-orcid":false,"given":"Chunsheng","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9409-5359","authenticated-orcid":false,"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Simple black-box adversarial perturbations for deep networks","author":"narodytska","year":"2016","journal-title":"arXiv 1612 06299"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"},{"key":"ref31","article-title":"CAAD 2018: Powerful none-access black-box attack based on adversarial transformation network","author":"dong","year":"2018","journal-title":"arXiv 1811 01225"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref37","article-title":"UPSET and ANGRI: Breaking high performance image classifiers","author":"sarkar","year":"2017","journal-title":"arXiv 1707 01159"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref34","article-title":"Adversarial manipulation of deep representations","author":"sabour","year":"2015","journal-title":"arXiv 1511 05122"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600822"},{"key":"ref40","article-title":"Physical adversarial examples for object detectors","author":"eykholt","year":"2018","journal-title":"arXiv 1807 07769"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1700212"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2907754"},{"key":"ref13","first-page":"1","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"Proc ICLR"},{"key":"ref14","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016","journal-title":"arXiv 1605 07277"},{"key":"ref15","article-title":"Towards evaluating the robustness of neural networks","author":"carlini","year":"2016","journal-title":"arXiv 1608 04644"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref18","article-title":"The space of transferable adversarial examples","author":"tramer","year":"2017","journal-title":"arXiv 1704 03453"},{"key":"ref19","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tramer","year":"2018","journal-title":"Proc ICLR"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.5772\/intechopen.80026"},{"key":"ref4","first-page":"1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N16-1062"},{"key":"ref3","first-page":"1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref6","first-page":"1","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2017","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref5","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2017","journal-title":"arXiv 1611 01236"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301962"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.12.054"},{"key":"ref9","article-title":"Synthesizing robust adversarial examples","author":"athalye","year":"2017","journal-title":"arXiv 1707 07397"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2938778"},{"key":"ref20","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"arXiv 1802 00420"},{"key":"ref45","first-page":"630","article-title":"Identity mappings in deep residual networks","author":"he","year":"2016","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref21","first-page":"1","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2017","journal-title":"Proc ICLR"},{"key":"ref42","article-title":"Adversarial generative nets: Neural network attacks on state-of-the-art face recognition","author":"sharif","year":"2017","journal-title":"arXiv 1801 00349"},{"key":"ref24","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"Proc CVPR"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref23","first-page":"1","article-title":"Towards deep neural network architectures robust to adversarial examples","author":"gu","year":"2015","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref44","first-page":"1","article-title":"Inception-v4, inception-resnet and the impact of residual connections on learning","author":"szegedy","year":"2017","journal-title":"Proc AAAI"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref43","article-title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","author":"komkov","year":"2019","journal-title":"arXiv 1908 08705"},{"key":"ref25","article-title":"Deep residual learning for image recognition","author":"he","year":"2015","journal-title":"arXiv 1512 03385"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/08978619.pdf?arnumber=8978619","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:51:20Z","timestamp":1639770680000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8978619\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/access.2020.2971004","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2020]]}}}