{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T16:33:39Z","timestamp":1781714019658,"version":"3.54.5"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072412"],"award-info":[{"award-number":["62072412"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902359"],"award-info":[{"award-number":["61902359"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61702148"],"award-info":[{"award-number":["61702148"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672468"],"award-info":[{"award-number":["61672468"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100019055","name":"Shanghai Key Laboratory of Integrated Administration Technologies for Information Security","doi-asserted-by":"publisher","award":["AGK2018001"],"award-info":[{"award-number":["AGK2018001"]}],"id":[{"id":"10.13039\/501100019055","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key Lab of Information Network Security, Ministry of Public Security","award":["C20607"],"award-info":[{"award-number":["C20607"]}]},{"name":"Scientific Research Project of National University of Defense Technology","award":["22-ZZCX-07"],"award-info":[{"award-number":["22-ZZCX-07"]}]},{"name":"Hefei Comprehensive National Science Center"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1109\/tdsc.2023.3339802","type":"journal-article","created":{"date-parts":[[2023,12,6]],"date-time":"2023-12-06T19:25:32Z","timestamp":1701890732000},"page":"3901-3916","source":"Crossref","is-referenced-by-count":9,"title":["TextCheater: A Query-Efficient Textual Adversarial Attack in the Hard-Label Setting"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0586-7132","authenticated-orcid":false,"given":"Hao","family":"Peng","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-1763-5221","authenticated-orcid":false,"given":"Shixin","family":"Guo","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9375-2997","authenticated-orcid":false,"given":"Dandan","family":"Zhao","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8571-9780","authenticated-orcid":false,"given":"Xuhong","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Cyberspace Research, College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4053-8409","authenticated-orcid":false,"given":"Jianmin","family":"Han","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4268-372X","authenticated-orcid":false,"given":"Shouling","family":"Ji","sequence":"additional","affiliation":[{"name":"Institute of Cyberspace Research, College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8824-1356","authenticated-orcid":false,"given":"Xing","family":"Yang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Pulsed Power Laser Technology, and Electronic Engineering Institute, National University of Defense Technology, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9132-3782","authenticated-orcid":false,"given":"Ming","family":"Zhong","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. 3rd Int. Conf. Learn. Representations","author":"Goodfellow","year":"2015"},{"key":"ref2","article-title":"Intriguing properties of neural networks","volume-title":"Proc. 2nd Int. Conf. Learn. Representations","author":"Szegedy","year":"2014"},{"key":"ref3","article-title":"Generating natural adversarial examples","volume-title":"Proc. 6th Int. Conf. Learn. Representations","author":"Zhao","year":"2018"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1316"},{"key":"ref5","first-page":"653","article-title":"On adversarial examples for character-level neural machine translation","volume-title":"Proc. 27th Int. Conf. Comput. Linguistics","author":"Ebrahimi"},{"key":"ref6","first-page":"1373","article-title":"White-to-black: Efficient distillation of black-box adversarial attacks","volume-title":"Proc. Conf. North Amer. Assoc. Comput. Linguistics: Hum. Lang. Technol.","author":"Gorodissky"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8682430"},{"key":"ref9","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2019.23138","article-title":"TextBugger: Generating adversarial text against real-world applications","volume-title":"Proc. 26th Annu. Netw. Distrib. Syst. Secur. Symp.","author":"Li","year":"2019"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.500"},{"key":"ref12","first-page":"6174","article-title":"BAE: BERT based adversarial examples for text classification","volume-title":"Proc. Conf. Empirical Methods Natural Lang. Process.","author":"Siddhant"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.540"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1103"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.naacl-main.400"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i15.17595"},{"key":"ref17","article-title":"Query-efficient hard-label black-box attack: An optimization-based approach","volume-title":"Proc. 7th Int. Conf. Learn. Representations","author":"Cheng","year":"2019"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/0305-0548(86)90048-1"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795300"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/0893-6080(88)90007-X"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-2006"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1559"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i4.20303"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539357"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01029"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/n16-1018"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.3115\/1219840.1219855"},{"key":"ref31","first-page":"649","article-title":"Character-level convolutional networks for text classification","volume-title":"Proc. Annu. Conf. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref32","first-page":"142","article-title":"Learning word vectors for sentiment analysis","volume-title":"Proc. Conf. Assoc. Comput. Linguistics","author":"Maas"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d15-1075"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N18-1101"},{"issue":"8","key":"ref35","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI Blog"},{"key":"ref36","article-title":"Specific measurement method of perplexity","year":"2021"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/d14-1181"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-demos.16"},{"key":"ref41","article-title":"Huggingface of textattack","year":"2022"},{"key":"ref42","article-title":"Huggingface datasets","year":"2021"},{"key":"ref43","article-title":"Universal sentence encoder","year":"2021"},{"key":"ref44","article-title":"Language tool","year":"2020"},{"key":"ref45","first-page":"820","article-title":"Hownet-a hybrid language and knowledge resource","volume-title":"Proc. Int. Conf. Natural Lang. Process. Knowl. Eng.","author":"Dong"},{"key":"ref46","article-title":"Tweet sentiment extraction","year":"2020"},{"key":"ref47","first-page":"1631","article-title":"Recursive deep models for semantic compositionality over a sentiment treebank","volume-title":"Proc. Conf. Empirical Methods Natural Lang. Process.","author":"Socher"},{"key":"ref48","article-title":"Amazon review dataset","author":"Bittlingmayer","year":"2019"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/e17-2068"},{"key":"ref50","article-title":"FastText.zip: Compressing text classification models","author":"Joulin","year":"2016"},{"key":"ref51","article-title":"Fasttext supervised models","year":"2016"},{"key":"ref52","article-title":"Allen NLP sentiment analysis","year":"2022"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref54","article-title":"Toxic comment classification challenge","year":"2017"},{"key":"ref55","article-title":"RoBERTa: A robustly optimized BERT pretraining approach","author":"Liu","year":"2019"},{"key":"ref56","article-title":"RoBERTa-base-IMDB model","year":"2021"},{"key":"ref57","article-title":"RoBERTa-base-MR model","year":"2021"},{"key":"ref58","article-title":"RoBERTa toxicity classifier","year":"2021"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i16.17648"},{"key":"ref60","article-title":"Adversarial training models by AFTL","year":"2020"},{"key":"ref61","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10592103\/10345721.pdf?arnumber=10345721","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,6]],"date-time":"2024-09-06T18:45:16Z","timestamp":1725648316000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10345721\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":61,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2023.3339802","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,7]]}}}