{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,21]],"date-time":"2025-12-21T06:25:37Z","timestamp":1766298337287,"version":"3.41.2"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"UKRI Future Leaders Fellowship","award":["MR\/S017062\/1","MR\/X011135\/1"],"award-info":[{"award-number":["MR\/S017062\/1","MR\/X011135\/1"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62376056","62076056"],"award-info":[{"award-number":["62376056","62076056"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000288","name":"Royal Society","doi-asserted-by":"publisher","award":["IES\/R2\/212077"],"award-info":[{"award-number":["IES\/R2\/212077"]}],"id":[{"id":"10.13039\/501100000288","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"crossref","award":["2404317"],"award-info":[{"award-number":["2404317"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Kan Tong Po Fellowship","award":["KTP\/R1\/231017"],"award-info":[{"award-number":["KTP\/R1\/231017"]}]},{"DOI":"10.13039\/501100001809","name":"Amazon Research Award and Alan Turing Fellowship","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Evol. Computat."],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1109\/tevc.2024.3391063","type":"journal-article","created":{"date-parts":[[2024,4,18]],"date-time":"2024-04-18T13:27:24Z","timestamp":1713446844000},"page":"1343-1355","source":"Crossref","is-referenced-by-count":2,"title":["Evolutionary Art Attack for Black-Box Adversarial Example Generation"],"prefix":"10.1109","volume":"29","author":[{"given":"Phoenix Neale","family":"Williams","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7200-4244","authenticated-orcid":false,"given":"Ke","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1395-7314","authenticated-orcid":false,"given":"Geyong","family":"Min","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1312.4400"},{"key":"ref2","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Simonyan"},{"article-title":"Striving for simplicity: The all convolutional net","volume-title":"Proc. Int. Conf. Learn. Represent. Workshop Track (ICLR)","author":"Springenberg","key":"ref3"},{"key":"ref4","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Goodfellow"},{"key":"ref5","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Szegedy"},{"key":"ref6","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016","journal-title":"arXiv:1605.07277"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref9","first-page":"3820","article-title":"Subspace attack: Exploiting promising subspaces for query-efficient black-box attacks","volume-title":"Proc. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Guo"},{"key":"ref10","first-page":"10932","article-title":"Improving black-box adversarial attacks with a transfer-based prior","volume-title":"Proc. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Cheng"},{"key":"ref11","first-page":"2142","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Ilyas"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3321707.3321749"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref14","first-page":"1","article-title":"Re-examining linear embeddings for high-dimensional Bayesian optimization","volume-title":"Proc. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Letham"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.2307\/1576418"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-03789-4_18"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1142\/S2196888822500075"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-35664-4_1"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102847"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MASSW.2019.00012"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3208131"},{"key":"ref23","first-page":"1","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Ilyas"},{"key":"ref24","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Guo"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01183"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i6.20595"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref30","first-page":"1","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Brendel"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref33","first-page":"5032","article-title":"Adversarial risk and the dangers of evaluating against weak attacks","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Uesato"},{"key":"ref34","first-page":"1","article-title":"Adam: A method for stochastic optimization","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Kingma"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3449726.3463137"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3151373"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.10.028"},{"volume-title":"Learning Multiple Layers of Features From Tiny Images","year":"2009","author":"Krizhevsky","key":"ref38"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref40","first-page":"4218","article-title":"Improving robustness using generated data","volume-title":"Proc. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Gowal"},{"key":"ref41","article-title":"A study of the effect of JPG compression on adversarial images","author":"Dziugaite","year":"2016","journal-title":"arXiv:1608.00853"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/0167-2789(92)90242-F"},{"key":"ref43","article-title":"MobileNets: Efficient convolutional neural networks for mobile vision applications","author":"Howard","year":"2017","journal-title":"arXiv:1704.04861"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00907"},{"key":"ref46","first-page":"1","article-title":"Do adversarially robust ImageNet models transfer better?","volume-title":"Proc. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Salman"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-4380-9_16"},{"key":"ref49","first-page":"1","article-title":"CamoPatch: An evolutionary strategy for generating camoflauged adversarial patches","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","author":"Williams"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CEC53210.2023.10254060"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3307908"}],"container-title":["IEEE Transactions on Evolutionary Computation"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4235\/11106177\/10504779.pdf?arnumber=10504779","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T18:14:50Z","timestamp":1754072090000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10504779\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":51,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tevc.2024.3391063","relation":{},"ISSN":["1089-778X","1089-778X","1941-0026"],"issn-type":[{"type":"print","value":"1089-778X"},{"type":"print","value":"1089-778X"},{"type":"electronic","value":"1941-0026"}],"subject":[],"published":{"date-parts":[[2025,8]]}}}