{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T08:03:18Z","timestamp":1763193798349,"version":"3.45.0"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11228898","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-9","source":"Crossref","is-referenced-by-count":0,"title":["ODE: Decision-based Black-box Adversarial Attack through Orthogonal Distribution Evolution"],"prefix":"10.1109","author":[{"given":"Hongyi","family":"Liu","sequence":"first","affiliation":[{"name":"Peking University,School of Software and Microelectronics,Beijing,China"}]},{"given":"Yutong","family":"Fang","sequence":"additional","affiliation":[{"name":"Peking University,School of Software and Microelectronics,Beijing,China"}]},{"given":"Tong","family":"Jia","sequence":"additional","affiliation":[{"name":"Peking University,Institute for Artificial Intelligence,Beijing,China"}]},{"given":"Ying","family":"Li","sequence":"additional","affiliation":[{"name":"Peking University,School of Software and Microelectronics,Beijing,China"}]}],"member":"263","reference":[{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.312"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2894272"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"article-title":"Explaining and harnessing adversarial examples","year":"2014","author":"Goodfellow","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/11007937_4"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref14","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"International conference on machine learning","author":"Ilyas"},{"journal-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2956553"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"article-title":"Delving into transferable adversarial examples and black-box attacks","year":"2016","author":"Liu","key":"ref18"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01029"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"article-title":"Very deep convolutional networks for large-scale image recognition","year":"2014","author":"Simonyan","key":"ref23"},{"article-title":"Intriguing properties of neural networks","year":"2013","author":"Szegedy","key":"ref24"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_10"},{"key":"ref26","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"International conference on machine learning","author":"Zhang"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11228898.pdf?arnumber=11228898","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T08:00:00Z","timestamp":1763193600000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11228898\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11228898","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}