{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T00:16:31Z","timestamp":1791418591053,"version":"4.3.3"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Xiamen Research Project for the Natural Science Foundation of Xiamen","award":["3502Z202472028"],"award-info":[{"award-number":["3502Z202472028"]}]},{"name":"Xiamen Science and Technology Plan Project","award":["3502Z20231042"],"award-info":[{"award-number":["3502Z20231042"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["1082204112364"],"award-info":[{"award-number":["1082204112364"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003009","name":"Science and Technology Development Fund","doi-asserted-by":"publisher","award":["0193\/2023\/RIA3"],"award-info":[{"award-number":["0193\/2023\/RIA3"]}],"id":[{"id":"10.13039\/501100003009","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003009","name":"Science and Technology Development Fund","doi-asserted-by":"publisher","award":["0079\/2025\/AFJ"],"award-info":[{"award-number":["0079\/2025\/AFJ"]}],"id":[{"id":"10.13039\/501100003009","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/tdsc.2025.3636741","type":"journal-article","created":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T19:03:12Z","timestamp":1764010992000},"page":"3423-3435","source":"Crossref","is-referenced-by-count":16,"title":["Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6298-846X","authenticated-orcid":false,"given":"Xia","family":"Du","sequence":"first","affiliation":[{"name":"School of Computer and Information Engineering, Xiamen University of Technology, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-7863-5772","authenticated-orcid":false,"given":"Xiaoyuan","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer and Information Engineering, Xiamen University of Technology, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2447-1806","authenticated-orcid":false,"given":"Jizhe","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Computer Science, Engineering Research Center of Machine Learning and Industry Intelligence, Sichuan University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4463-5652","authenticated-orcid":false,"given":"Zheng","family":"Lin","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1788-3746","authenticated-orcid":false,"given":"Chi-man","family":"Pun","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, Faculty of Science and Technology, University of Macau, Macau, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7120-9003","authenticated-orcid":false,"given":"Cong","family":"Wu","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5528-3737","authenticated-orcid":false,"given":"Tao","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3215-2696","authenticated-orcid":false,"given":"Zhe","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Space Internet, Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4933-594X","authenticated-orcid":false,"given":"Wei","family":"Ni","sequence":"additional","affiliation":[{"name":"Data61, CSIRO, Marsfield, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7036-5158","authenticated-orcid":false,"given":"Jun","family":"Luo","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ton.2025.3577790"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2025.3565509"},{"key":"ref3","first-page":"1","article-title":"Crafting adversarial examples for speech paralinguistics applications","volume-title":"Proc. DYnamic Novel Adv. Mach. Learn. Intell. Cyber Secur. Workshop","author":"Gong"},{"key":"ref4","first-page":"6977","article-title":"Houdini: Fooling deep structured prediction models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Cisse"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/tmc.2025.3601371"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2718479"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3359040"},{"key":"ref8","article-title":"EDICT: Exact diffusion inversion via coupled transformations","author":"Wallace","year":"2022"},{"key":"ref9","article-title":"SL-ACC: A communication-efficient split learning framework with adaptive channel-wise compression","author":"Lin","year":"2025","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref10","article-title":"MUTEEN: Boosting gradient-based adversarial attacks via mutant-based ensembles","author":"Guo","year":"2021"},{"key":"ref11","article-title":"GADT: Enhancing transferable adversarial attacks through gradient-guided adversarial data transformation","author":"Ma","year":"2024"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"ref13","article-title":"Constructing unrestricted adversarial examples with generative models","author":"Song","year":"2018"},{"key":"ref14","article-title":"AdvDiff: Generating unrestricted adversarial examples using diffusion models","author":"Dai","year":"2024"},{"key":"ref15","article-title":"DiffAttack: Evasion attacks against diffusion-based adversarial purification","author":"Kang","year":"2024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3481275"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3601175"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2021.3071395"},{"key":"ref19","doi-asserted-by":"crossref","DOI":"10.1117\/12.2655934","article-title":"Robust image-based CAPTCHA generation using adversarial attack","volume-title":"Proc. Conf. Intell. Comput. Human-Comput. Interaction","author":"Wen"},{"key":"ref20","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2017"},{"key":"ref21","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR.2016.282","article-title":"DeepFool: A simple and accurate method to fool deep neural networks","author":"Moosavi-Dezfooli","year":"2016"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2018.00013"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.014.2300319"},{"key":"ref24","article-title":"Generating adversarial examples with adversarial networks","author":"Xiao","year":"2019"},{"key":"ref25","article-title":"Improved denoising diffusion probabilistic models","author":"Nichol","year":"2021"},{"key":"ref26","article-title":"Denoising diffusion implicit models","author":"Song","year":"2022"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR52688.2022.01042","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.37"},{"key":"ref29","article-title":"LLaMA: Open and efficient foundation language models","author":"Touvron","year":"2023"},{"key":"ref30","article-title":"Vicuna: An open-source chatbot impressing GPT-4 with 90%* chatgpt quality","author":"Chiang","year":"2023"},{"key":"ref31","article-title":"The Claude 3 model family: Opus, Sonnet, Haiku"},{"key":"ref32","article-title":"Learning transferable visual models from natural language supervision","author":"Radford","year":"2021"},{"key":"ref33","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR.2017.634","article-title":"Aggregated residual transformations for deep neural networks","author":"Xie","year":"2017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref35","article-title":"Deep residual learning for image recognition","author":"He","year":"2015"},{"key":"ref36","article-title":"Going deeper with convolutions","author":"Szegedy","year":"2014"},{"key":"ref37","article-title":"EfficientNet: Rethinking model scaling for convolutional neural networks","author":"Tan","year":"2020"},{"key":"ref38","article-title":"Rethinking the inception architecture for computer vision","author":"Szegedy","year":"2015"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref40","article-title":"Clipscore: A reference-free evaluation metric for image captioning","author":"Hessel","year":"2022"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.1109\/CVPRW.2018.00212","article-title":"Semantic adversarial examples","author":"Hosseini","year":"2018"},{"key":"ref42","article-title":"ADef: An iterative algorithm to construct adversarial deformations","author":"Alaifari","year":"2019"},{"key":"ref43","article-title":"Functional adversarial attacks","author":"Laidlaw","year":"2019"},{"key":"ref44","article-title":"Unrestricted adversarial examples via semantic manipulation","author":"Bhattad","year":"2020"},{"key":"ref45","doi-asserted-by":"crossref","DOI":"10.5244\/C.34.26","article-title":"Adversarial color enhancement: Generating unrestricted adversarial images by optimizing a color filter","author":"Zhao","year":"2020"},{"key":"ref46","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR42600.2020.00123","article-title":"Colorfool: Semantic adversarial colorization","author":"Shamsabadi","year":"2020"},{"key":"ref47","article-title":"Natural color fool: Towards boosting black-box unrestricted attacks","author":"Yuan","year":"2022"},{"key":"ref48","doi-asserted-by":"crossref","DOI":"10.52202\/075280-2253","article-title":"Content-based unrestricted adversarial attack","author":"Chen","year":"2023"},{"key":"ref49","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2019"},{"key":"ref50","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015"},{"key":"ref51","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2017"},{"key":"ref52","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR42600.2020.00034","article-title":"A self-supervised approach for adversarial robustness","author":"Naseer","year":"2020"},{"key":"ref53","article-title":"Certified adversarial robustness via randomized smoothing","author":"Cohen","year":"2019"},{"key":"ref54","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2018"},{"key":"ref55","doi-asserted-by":"crossref","DOI":"10.1109\/CVPR.2018.00191","article-title":"Defense against adversarial attacks using high-level representation guided denoiser","author":"Liao","year":"2018"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11434575\/11267085.pdf?arnumber=11267085","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T01:15:42Z","timestamp":1773710142000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11267085\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":55,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3636741","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3]]}}}