{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,15]],"date-time":"2025-05-15T09:47:42Z","timestamp":1747302462440,"version":"3.37.3"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2023,6,1]],"date-time":"2023-06-01T00:00:00Z","timestamp":1685577600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,6,1]],"date-time":"2023-06-01T00:00:00Z","timestamp":1685577600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,6,1]],"date-time":"2023-06-01T00:00:00Z","timestamp":1685577600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102178","62072234","62125302","61732006"],"award-info":[{"award-number":["62102178","62072234","62125302","61732006"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Foundation of Jiangsu Province of China","award":["BK20200443","BK20181288"],"award-info":[{"award-number":["BK20200443","BK20181288"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Emerg. Top. Comput. Intell."],"published-print":{"date-parts":[[2023,6]]},"DOI":"10.1109\/tetci.2022.3214627","type":"journal-article","created":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T00:54:48Z","timestamp":1667523288000},"page":"780-790","source":"Crossref","is-referenced-by-count":8,"title":["SA-ES: Subspace Activation Evolution Strategy for Black-Box Adversarial Attacks"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6212-6384","authenticated-orcid":false,"given":"Zhenhua","family":"Li","sequence":"first","affiliation":[{"name":"Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huilin","family":"Cheng","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5208-7254","authenticated-orcid":false,"given":"Xinye","family":"Cai","sequence":"additional","affiliation":[{"name":"Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3573-152X","authenticated-orcid":false,"given":"Jun","family":"Zhao","sequence":"additional","affiliation":[{"name":"Key Laboratory of Intelligent Control and Optimization for Industrial Equipment of Ministry of Education (MOE), School of Control Science and Engineering, Dalian University of Technology, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0786-0671","authenticated-orcid":false,"given":"Qingfu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICESS.2019.8782514"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2017.2765682"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3151373"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2017.2765682"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"krizhevsky","key":"ref37"},{"key":"ref14","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","author":"ilyas","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553522"},{"key":"ref11","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"brendel","year":"0","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref33","first-page":"913","article-title":"An efficient rank-1 update for Cholesky CMA-ES using auxiliary evolution path","author":"li","year":"0","journal-title":"Proc IEEE Congr Evol Comput"},{"key":"ref10","first-page":"3866","article-title":"Nattack: Learning the distributions of adversarial examples for an improved black-box attack on deep neural networks","author":"li","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref32","article-title":"The CMA evolution strategy: A tutorial","author":"hansen","year":"2016","journal-title":"CoRR"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741667"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1002\/int.22808"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108279"},{"key":"ref38","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"0","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00506"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00396"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref20","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","author":"ilyas","year":"0","journal-title":"Int Conf Learn Representations"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref21","article-title":"Defending against physically realizable attacks on image classification","author":"wu","year":"0","journal-title":"Int Conf Learn Representations"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.swevo.2020.100694"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref29","first-page":"949","article-title":"Natural evolution strategies","volume":"15","author":"wierstra","year":"2014","journal-title":"J Mach Learn Res"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref9","article-title":"Structured adversarial attack: Towards general implementation and better interpretability","author":"xu","year":"0","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref4","first-page":"1858","article-title":"Unsupervised learning of spoken language with visual context","author":"harwath","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref3","first-page":"2577","article-title":"Ex2: Exploration with exemplar models for deep reinforcement learning","author":"fu","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref6","first-page":"2484","article-title":"Simple black-box adversarial attacks","author":"guo","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref5","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"0","journal-title":"Proc 2nd Int Conf Learn Representations"}],"container-title":["IEEE Transactions on Emerging Topics in Computational Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7433297\/10132901\/09932273.pdf?arnumber=9932273","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,19]],"date-time":"2023-06-19T18:23:47Z","timestamp":1687199027000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9932273\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6]]},"references-count":39,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tetci.2022.3214627","relation":{},"ISSN":["2471-285X"],"issn-type":[{"type":"electronic","value":"2471-285X"}],"subject":[],"published":{"date-parts":[[2023,6]]}}}