{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T16:04:21Z","timestamp":1774541061935,"version":"3.50.1"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61702470"],"award-info":[{"award-number":["61702470"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Consumer Electron."],"published-print":{"date-parts":[[2024,2]]},"DOI":"10.1109\/tce.2024.3358179","type":"journal-article","created":{"date-parts":[[2024,1,24]],"date-time":"2024-01-24T18:39:07Z","timestamp":1706121547000},"page":"2038-2048","source":"Crossref","is-referenced-by-count":9,"title":["GCSA: A New Adversarial Example-Generating Scheme Toward Black-Box Adversarial Attacks"],"prefix":"10.1109","volume":"70","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6659-7431","authenticated-orcid":false,"given":"Xinxin","family":"Fan","sequence":"first","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mengfan","family":"Li","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jia","family":"Zhou","sequence":"additional","affiliation":[{"name":"Bank of Communications, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Quanliang","family":"Jing","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0302-5102","authenticated-orcid":false,"given":"Chi","family":"Lin","sequence":"additional","affiliation":[{"name":"School of Software Technology, Dalian University of Technology, Dalian, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunfeng","family":"Lu","sequence":"additional","affiliation":[{"name":"School of Reliability and Systems, Beihang University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingping","family":"Bi","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017","journal-title":"arXiv:1712.04248"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00506"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01587"},{"key":"ref7","article-title":"Query-efficient hard-label black-box attack: An optimization-based approach","author":"Cheng","year":"2018","journal-title":"arXiv:1807.04457"},{"key":"ref8","first-page":"10934","article-title":"Improving black-box adversarial attacks with a transfer-based prior","volume-title":"Proc. 33rd Int. Conf. Neural Inf. Process. Syst.","author":"Cheng"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref10","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref11","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume-title":"Proc. 36th Int. Conf. Mach. Learn. (ICML)","author":"Guo"},{"key":"ref12","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","author":"Ilyas","year":"2018","journal-title":"arXiv:1807.07978"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363201"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1038\/nphys1746"},{"key":"ref16","first-page":"1200","article-title":"Query-efficient black-box attack by active learning","volume-title":"Proc. IEEE Int. Conf. Data Min. (ICDM)","author":"Li"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.102.052312"},{"key":"ref19","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017","journal-title":"arXiv:1705.07204"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892161"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-020-59616-w"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.5555\/3327345.3327389"},{"key":"ref25","first-page":"20834","article-title":"Adversarial attacks on deep graph matching","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.432"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00072"},{"key":"ref28","first-page":"12719","article-title":"Expressive 1-Lipschitz neural networks for robust multiple graph learning against adversarial attacks","volume-title":"Proc. 38th Int. Conf. Mach. Learn.","author":"Zhao"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00031"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00192"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3477050"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449823"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01614"}],"container-title":["IEEE Transactions on Consumer Electronics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/30\/10510045\/10413509.pdf?arnumber=10413509","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,12]],"date-time":"2025-02-12T18:20:59Z","timestamp":1739384459000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10413509\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2]]},"references-count":33,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tce.2024.3358179","relation":{},"ISSN":["0098-3063","1558-4127"],"issn-type":[{"value":"0098-3063","type":"print"},{"value":"1558-4127","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2]]}}}