{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T06:12:31Z","timestamp":1774419151629,"version":"3.50.1"},"reference-count":39,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,4,6]],"date-time":"2025-04-06T00:00:00Z","timestamp":1743897600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,4,6]],"date-time":"2025-04-06T00:00:00Z","timestamp":1743897600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100018599","name":"Guangdong Province Key Laboratory of Information Security Technology","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100018599","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,4,6]]},"DOI":"10.1109\/icassp49660.2025.10890045","type":"proceedings-article","created":{"date-parts":[[2025,3,12]],"date-time":"2025-03-12T13:52:43Z","timestamp":1741787563000},"page":"1-5","source":"Crossref","is-referenced-by-count":0,"title":["Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability"],"prefix":"10.1109","author":[{"given":"Hui","family":"Zeng","sequence":"first","affiliation":[{"name":"Southwest University of Sci. & Tech.,Mianyang,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sanshuai","family":"Cui","sequence":"additional","affiliation":[{"name":"City University of Macau,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Biwei","family":"Chen","sequence":"additional","affiliation":[{"name":"Beijing Normal University,Zhuhai,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anjie","family":"Peng","sequence":"additional","affiliation":[{"name":"Southwest University of Sci. & Tech.,Mianyang,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Intriguing properties of neural networks","volume-title":"Int. Conf. on Learning Representations","author":"Szegedy"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/0041-5553(64)90137-5"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref5","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","volume-title":"Int. Conf. on Learning Representations","author":"Lin"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref8","first-page":"3365","article-title":"Learning with pseudo-ensembles","author":"Bachman","year":"2014","journal-title":"Advances in Neural Inf. Processing Systems"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00483"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58517-4_15"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP48485.2024.10446654"},{"key":"ref12","article-title":"Averaging weights leads to wider optima and better generalization","author":"Izmailov","year":"2018","journal-title":"Uncertainty in Artificial Intelligence"},{"key":"ref13","article-title":"There are many consistent explanations of unlabeled data: why you should average","volume-title":"Int. Conf. on Learning Representations","author":"Athiwaratkun"},{"key":"ref14","article-title":"Transferable perturbations of deep feature distributions","volume-title":"Int. Conf. on Learning Representations","author":"Inkawhich"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00761"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_42"},{"key":"ref17","first-page":"2483","article-title":"LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations","volume-title":"26th Euro. Conf. on Artificial Intelligence","author":"Shi"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00072"},{"key":"ref20","first-page":"6115","article-title":"On success and simplicity: a second look at transferable targeted attacks","volume":"34","author":"Zhao","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP49359.2023.10222841"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3284649"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01182"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02361"},{"key":"ref26","article-title":"Conditional generative adversarial nets","author":"Mirza","year":"2014"},{"key":"ref27","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Int. Conf. on Learning Representations","author":"Liu"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/233"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58604-1_19"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref33","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Int. Conf. on Learning Representations","author":"Simonyan"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref37","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"Int. Conf. on Learning Representations","author":"Dosovitskiy"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01172"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00063"},{"key":"ref40","first-page":"9759","article-title":"A little robustness goes a long way: Leveraging robust features for targeted transfer attacks","volume-title":"35th Conf. on Neural Information Processing Systems","author":"Springer"}],"event":{"name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","location":"Hyderabad, India","start":{"date-parts":[[2025,4,6]]},"end":{"date-parts":[[2025,4,11]]}},"container-title":["ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10887540\/10887541\/10890045.pdf?arnumber=10890045","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T05:20:51Z","timestamp":1774416051000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10890045\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,6]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/icassp49660.2025.10890045","relation":{},"subject":[],"published":{"date-parts":[[2025,4,6]]}}}