{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:07:51Z","timestamp":1783976871600,"version":"3.55.0"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62103330"],"award-info":[{"award-number":["62103330"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62233014"],"award-info":[{"award-number":["62233014"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62425308"],"award-info":[{"award-number":["62425308"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100007128","name":"Natural Science Foundation of Shaanxi Province","doi-asserted-by":"publisher","award":["20241C-TBZC-03"],"award-info":[{"award-number":["20241C-TBZC-03"]}],"id":[{"id":"10.13039\/501100007128","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3680667","type":"journal-article","created":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T19:56:55Z","timestamp":1775246215000},"page":"8128-8145","source":"Crossref","is-referenced-by-count":0,"title":["Latent Danger Zone: Distilling Unified Attention for Cross-Architecture Black-Box Attacks"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5672-4110","authenticated-orcid":false,"given":"Yang","family":"Li","sequence":"first","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0510-3307","authenticated-orcid":false,"given":"Chenyu","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-6107-9812","authenticated-orcid":false,"given":"Tingrui","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9712-8964","authenticated-orcid":false,"given":"Yongwei","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-2366-7287","authenticated-orcid":false,"given":"Haonan","family":"Li","sequence":"additional","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7144-7449","authenticated-orcid":false,"given":"Zhunga","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8162-2896","authenticated-orcid":false,"given":"Quan","family":"Pan","sequence":"additional","affiliation":[{"name":"School of Automation, Northwestern Polytechnical University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01167"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00427"},{"key":"ref3","first-page":"611","article-title":"An image is worth 16 \u00d7 16 words: Transformers for image recognition at scale","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Dosovitskiy","year":"2021"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00951"},{"key":"ref5","first-page":"20014","article-title":"XCiT: Cross-covariance image transformers","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Ali","year":"2021"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3390609"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i7.32722"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00414"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02301"},{"key":"ref11","article-title":"Use as many surrogates as you want: Selective ensemble attack to unleash transferability without sacrificing resource efficiency","author":"Yang","year":"2025"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref13","first-page":"12116","article-title":"Do vision transformers see like convolutional neural networks?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"2021","author":"Raghu"},{"key":"ref14","first-page":"20887","article-title":"Boosting the transferability of adversarial attack on vision transformer with adaptive token tuning","volume-title":"Proc. 38th Annu. Conf. Neural Inf. Process. Syst.","author":"Ming","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109849"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref17","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ilyas","year":"2018"},{"key":"ref18","first-page":"1983","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Brendel","year":"2018"},{"key":"ref19","article-title":"Discovering adversarial examples with momentum","author":"Dong","year":"2017"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"ref22","article-title":"Improved robustness to adversarial examples using lipschitz regularization of the loss","author":"Finlay","year":"2019"},{"key":"ref23","first-page":"2235","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Int. Conf. Learn. Representations","author":"Liu","year":"2017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"ref25","first-page":"12905","article-title":"Cross-domain transferability of adversarial perturbations","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Naseer","year":"2019"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00465"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3480519"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i13.29323"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3468908"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00124"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref34","first-page":"1489","article-title":"Paying more attention to attention: Improving the performance of convolutional neural networks via attention transfer","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zagoruyko","year":"2017"},{"key":"ref35","article-title":"SDXL: Improving latent diffusion models for high-resolution image synthesis","author":"Podell","year":"2023"},{"key":"ref36","article-title":"Learning multiple layers of features from tiny images","volume-title":"Handbook of Systemic Autoimmune Diseases","volume":"1","author":"Krizhevsky","year":"2009"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403225"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3194988"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i7.32821"},{"key":"ref41","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. 3rd Int. Conf. Learn. Representations","author":"Simonyan","year":"2015"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref46","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Touvron","year":"2021"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02291"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00425"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"ref50","article-title":"Jpeg-resistant adversarial images","volume-title":"Proc. Neural Inf. Process. Syst. 2017 Workshop Mach. Learn. Comput. Secur.","volume":"1","author":"Shin","year":"2017"},{"key":"ref51","article-title":"Guided diffusion model for adversarial purification","author":"Wang","year":"2022"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00894"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11474508.pdf?arnumber=11474508","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:09:04Z","timestamp":1783973344000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11474508\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":53,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3680667","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}