{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T14:59:48Z","timestamp":1784041188194,"version":"3.55.0"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"PROMETEO","award":["2022?CIPROM\/2021\/017"],"award-info":[{"award-number":["2022?CIPROM\/2021\/017"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3319389","type":"journal-article","created":{"date-parts":[[2023,9,26]],"date-time":"2023-09-26T17:53:20Z","timestamp":1695750800000},"page":"105545-105556","source":"Crossref","is-referenced-by-count":8,"title":["Exploring Transferability on Adversarial Attacks"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-3913-3065","authenticated-orcid":false,"given":"Enrique","family":"\u00c1lvarez","sequence":"first","affiliation":[{"name":"Department of Computer Science and AI, University of Alicante, Alicante, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8254-6255","authenticated-orcid":false,"given":"Rafael","family":"\u00c1lvarez","sequence":"additional","affiliation":[{"name":"Department of Computer Science and AI, University of Alicante, Alicante, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6805-3633","authenticated-orcid":false,"given":"Miguel","family":"Cazorla","sequence":"additional","affiliation":[{"name":"Department of Computer Science and AI, University of Alicante, Alicante, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","article-title":"Going deeper with convolutions","author":"szegedy","year":"2014","journal-title":"arXiv 1409 4842"},{"key":"ref35","article-title":"Adversarial patch","author":"brown","year":"2017","journal-title":"arXiv 1712 09665"},{"key":"ref12","article-title":"Densely connected convolutional networks","author":"huang","year":"2016","journal-title":"arXiv 1608 06993"},{"key":"ref34","article-title":"ImageNet large scale visual recognition challenge","author":"russakovsky","year":"2014","journal-title":"arXiv 1409 0575"},{"key":"ref15","article-title":"The limitations of deep learning in adversarial settings","author":"papernot","year":"2015","journal-title":"arXiv 1511 07528"},{"key":"ref14","article-title":"DeepFool: A simple and accurate method to fool deep neural networks","author":"moosavi-dezfooli","year":"2015","journal-title":"arXiv 1511 04599"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00847"},{"key":"ref30","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"brendel","year":"2017","journal-title":"arXiv 1712 04248"},{"key":"ref11","article-title":"EfficientNet: Rethinking model scaling for convolutional neural networks","author":"tan","year":"2019","journal-title":"arXiv 1905 11946"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref32","first-page":"1632","article-title":"Robustness of classifiers: From adversarial to random noise","author":"fawzi","year":"2016","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref2","article-title":"Hierarchical text-conditional image generation with CLIP latents","author":"ramesh","year":"2022","journal-title":"arXiv 2204 06125"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref17","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref16","article-title":"Towards evaluating the robustness of neural networks","author":"carlini","year":"2016","journal-title":"arXiv 1608 04644"},{"key":"ref19","article-title":"HopSkipJumpAttack: A query-efficient decision-based attack","author":"chen","year":"2019","journal-title":"arXiv 1904 02144"},{"key":"ref18","article-title":"One pixel attack for fooling deep neural networks","author":"su","year":"2017","journal-title":"arXiv 1710 08864"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref23","article-title":"Practical black-box attacks against machine learning","author":"papernot","year":"2016","journal-title":"arXiv 1602 02697"},{"key":"ref26","article-title":"Robust physical-world attacks on deep learning models","author":"eykholt","year":"2017","journal-title":"arXiv 1707 08945"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref20","article-title":"Simple black-box adversarial attacks","author":"guo","year":"2019","journal-title":"arXiv 1905 07121"},{"key":"ref22","article-title":"SurFree: A fast surrogate-free black-box attack","author":"maho","year":"2020","journal-title":"arXiv 2011 12807"},{"key":"ref21","article-title":"Square attack: A query-efficient black-box adversarial attack via random search","author":"andriushchenko","year":"2019","journal-title":"arXiv 1912 00049"},{"key":"ref28","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv 1607 02533"},{"key":"ref27","article-title":"Adversarial robustness toolbox v1.0.0","author":"nicolae","year":"2018","journal-title":"arXiv 1807 01069"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94042-7_11"},{"key":"ref8","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"arXiv 1409 1556"},{"key":"ref7","article-title":"Measuring the transferability of adversarial examples","author":"petrov","year":"2019","journal-title":"arXiv 1907 06291"},{"key":"ref9","article-title":"Deep residual learning for image recognition","author":"he","year":"2015","journal-title":"arXiv 1512 03385"},{"key":"ref4","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref3","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref6","article-title":"The space of transferable adversarial examples","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1704 03453"},{"key":"ref5","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2016","journal-title":"arXiv 1611 02770"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10264069.pdf?arnumber=10264069","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,23]],"date-time":"2023-10-23T18:23:06Z","timestamp":1698085386000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10264069\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":35,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3319389","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}