{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T10:09:26Z","timestamp":1777889366029,"version":"3.51.4"},"reference-count":70,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62425305,U22B2050,62221002"],"award-info":[{"award-number":["62425305,U22B2050,62221002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.02098","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"22599-22609","source":"Crossref","is-referenced-by-count":0,"title":["Prompt-Driven Transferable Adversarial Attack on Person Re-identification with Attribute-Aware Textual Inversion"],"prefix":"10.1109","author":[{"given":"Yuan","family":"Bian","sequence":"first","affiliation":[{"name":"School of Artificial Intelligence and Robotics, Hunan University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Min","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Robotics, Hunan University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunqi","family":"Yi","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Robotics, Hunan University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xueping","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Information Science and Engineering, Hunan Normal University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuai","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Robotics, Hunan University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yaonan","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Robotics, Hunan University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7299016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2675"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2020.3031625"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01407"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2023.3331192"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00405"},{"key":"ref7","article-title":"Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression","author":"Das","year":"2017","journal-title":"arXiv preprint"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3081247"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref11","article-title":"An image is worth 16 \u00d7 16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref12","article-title":"Clip-guided networks for transferable targeted attacks","author":"Fang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref13","article-title":"An image is worth one word: Personalizing text-to-image generation using textual inversion","author":"Gal","year":"2023","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58604-1_19"},{"key":"ref15","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv preprint"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref17","first-page":"1501315022","article-title":"Transreid: Transformer-based object reidentification","author":"He","year":"2021","journal-title":"Int. Conf. Comput. Vis."},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00483"},{"key":"ref20","first-page":"4904","article-title":"Scaling up visual and vision-language representation learning with noisy text supervision","author":"Jia","year":"2021","journal-title":"Int. Conf. Mach. Learn."},{"key":"ref21","article-title":"Adam: a method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i1.25225"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2014.27"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00243"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6810"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i2.25239"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3346168"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2024.3361491"},{"key":"ref29","article-title":"Delving into transferable adversarial examples and blackbox attacks","author":"Liu","year":"2016","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00190"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00063"},{"key":"ref32","article-title":"Clipcap: Clip prefix for image captioning","author":"Mokady","year":"2021","journal-title":"arXiv preprint"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref34","article-title":"Cross-domain transferability of adversarial perturbations","author":"Muzammal Naseer","year":"2019","journal-title":"Adv. Neural Inform. Process. Syst."},{"key":"ref35","first-page":"1128011289","article-title":"Part-aware transformer for generalizable person reidentification","author":"Ni","year":"2023","journal-title":"Int. Conf. Comput. Vis."},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00465"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.577"},{"key":"ref38","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","author":"Radford","year":"2021","journal-title":"Int. Conf. Mach. Learn."},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-48881-3_2"},{"key":"ref40","article-title":"Learning transferable adversarial perturbations","volume":"34","author":"Salzmann","year":"2021","journal-title":"Adv. Neural Inform. Process. Syst."},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01805"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3237808"},{"key":"ref43","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240552"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr42600.2020.00042"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/541"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00754"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00016"},{"key":"ref50","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2018","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16422"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2022.3199013"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72775-7_3"},{"key":"ref55","first-page":"36","article-title":"Promptdriven contrastive learning for transferable adversarial at-tacks","author":"Yang","year":"2025","journal-title":"Eur. Conf. Comput. Vis."},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01857"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01642"},{"key":"ref58","article-title":"Filip: Fine-grained interactive language-image pre-training","author":"Yao","year":"2022","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i7.28488"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2021.3054775"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547801"},{"key":"ref62","article-title":"Beyond imagenet attack: Towards crafting adversarial examples for black-box domains","author":"Zhang","year":"2021","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref63","article-title":"Beyond imagenet attack: Towards crafting adversarial examples for black-box domains","author":"Zhang","year":"2022","journal-title":"Int. Conf. Learn. Represent."},{"key":"ref64","article-title":"Alignedreid: Surpassing human-level performance in person reidentification","author":"Zhang","year":"2017","journal-title":"arXiv preprint"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.133"},{"key":"ref66","article-title":"Person re-identification: Past, present and future","author":"Zheng","year":"2016","journal-title":"arXiv preprint"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.405"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-022-01737-y"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-022-01653-1"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19781-9_12"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11445671.pdf?arnumber=11445671","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:12:10Z","timestamp":1777612330000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11445671\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":70,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.02098","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}