{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T05:45:07Z","timestamp":1767678307229,"version":"3.48.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"\u201cDouble Hundred Tackling Action\u201d Program of Taiyuan City","award":["2024TYJB0126"],"award-info":[{"award-number":["2024TYJB0126"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2025.3649234","type":"journal-article","created":{"date-parts":[[2025,12,29]],"date-time":"2025-12-29T18:39:29Z","timestamp":1767033569000},"page":"642-651","source":"Crossref","is-referenced-by-count":0,"title":["Improving Adversarial Transferability on Vision Transformers via Dual-Flow Adversarial Attack"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-4451-0012","authenticated-orcid":false,"given":"Bohai","family":"Zhou","sequence":"first","affiliation":[{"name":"School of Information Engineering, Wuhan University of Technology, Wuhan, China"}]},{"given":"Anlu","family":"Shi","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Wuhan University of Technology, Wuhan, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1781-5129","authenticated-orcid":false,"given":"Wei","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Wuhan University of Technology, Wuhan, China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58452-8_13"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00858"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00301"},{"key":"ref4","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3321118"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02322"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3610085"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3536611"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3251719"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref12","first-page":"2854","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Lin"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.119273"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i7.32722"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6810"},{"key":"ref17","first-page":"1905","article-title":"Rethinking the backward propagation for adversarial transferability","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Xiaosen"},{"key":"ref18","first-page":"1","article-title":"Skip connections matter: On the transferability of adversarial examples generated with ResNets","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Wu"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.02334"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref21","article-title":"Mamba: Linear-time sequence modeling with selective state spaces","author":"Gu","year":"2023","journal-title":"arXiv:2312.00752"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_28"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00425"},{"key":"ref27","article-title":"TESSER: Transfer-enhancing adversarial attacks from vision transformers via spectral and semantic regularization","author":"Guesmi","year":"2025","journal-title":"arXiv:2505.19613"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i3.20169"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01575"},{"key":"ref30","first-page":"32951","article-title":"Enhancing transferable adversarial attacks on vision transformers through gradient normalization scaling and high-frequency adaptation","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Zhu"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0658"},{"key":"ref32","first-page":"70","article-title":"Diversifying the high-level features for better adversarial transferability","volume-title":"Proc. 34th Brit. Mach. Vis. Conf. (BMVC)","author":"Wang"},{"key":"ref33","first-page":"1","article-title":"Boosting adversarial transferability with spatial adversarial alignment","volume-title":"Proc. NeurIPS","author":"Chen"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref35","first-page":"611","article-title":"An image is worth 16\u00d716 words: Transformers for image recognition at scale","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Dosovitskiy"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01172"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00010"},{"key":"ref38","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Touvron"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00063"},{"key":"ref40","first-page":"15908","article-title":"Transformer in transformer","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Han"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01204"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/ac9830"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.5555\/3298023.3298188"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02297"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11317987.pdf?arnumber=11317987","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T05:40:07Z","timestamp":1767678007000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11317987\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3649234","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2026]]}}}