{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T07:02:46Z","timestamp":1782889366569,"version":"3.54.5"},"reference-count":75,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Project of China","award":["2019YFB1312000"],"award-info":[{"award-number":["2019YFB1312000"]}]},{"name":"National Key Research and Development Project of China","award":["2020AAA0105600"],"award-info":[{"award-number":["2020AAA0105600"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62076195"],"award-info":[{"award-number":["62076195"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62006183"],"award-info":[{"award-number":["62006183"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2020M683489"],"award-info":[{"award-number":["2020M683489"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tifs.2021.3081247","type":"journal-article","created":{"date-parts":[[2021,5,17]],"date-time":"2021-05-17T20:49:55Z","timestamp":1621284595000},"page":"3442-3455","source":"Crossref","is-referenced-by-count":27,"title":["Beyond Universal Person Re-Identification Attack"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6092-3072","authenticated-orcid":false,"given":"Wenjie","family":"Ding","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5025-3941","authenticated-orcid":false,"given":"Xing","family":"Wei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9163-2932","authenticated-orcid":false,"given":"Rongrong","family":"Ji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0611-0636","authenticated-orcid":false,"given":"Xiaopeng","family":"Hong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7252-5047","authenticated-orcid":false,"given":"Qi","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1793-5836","authenticated-orcid":false,"given":"Yihong","family":"Gong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00730"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00735"},{"key":"ref71","article-title":"Revisiting temporal modeling for video-based person ReID","author":"gao","year":"2018","journal-title":"arXiv 1805 02104"},{"key":"ref70","first-page":"116","article-title":"Shufflenet V2: Practical guidelines for efficient CNN architecture design","author":"ma","year":"2018","journal-title":"Proc Eur Conf Comput Vis (ECCV)"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2963764"},{"key":"ref75","first-page":"4278","article-title":"Inception-V4, inception-resnet and the impact of residual connections on learning","volume":"31","author":"szegedy","year":"2017","journal-title":"Proc AAAI Conf Artif Intell"},{"key":"ref38","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"brendel","year":"2018","journal-title":"Proc 6th Int Conf Learn Represent (ICLR)"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.172"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_28"},{"key":"ref31","article-title":"The space of transferable adversarial examples","author":"tram\u00e8r","year":"2017","journal-title":"arXiv 1704 03453"},{"key":"ref30","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2017","journal-title":"Proc ICLR"},{"key":"ref37","first-page":"2142","article-title":"Black-box adversarial attacks with limited queries and information","author":"ilyas","year":"2018","journal-title":"Proc 35th Int Conf Mach Learn (ICML)"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00506"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00668"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1977.10515"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.133"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref63","first-page":"17","article-title":"Performance measures and a data set for multi-target, multi-camera tracking","author":"ristani","year":"2016","journal-title":"Proc ECCV"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00303"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00016"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00042"},{"key":"ref65","first-page":"868","article-title":"MARS: A video benchmark for large-scale person re-identification","author":"zheng","year":"2016","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref66","first-page":"630","article-title":"Identity mappings in deep residual networks","author":"he","year":"2016","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.5244\/C.31.30"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref68","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2015","journal-title":"Proc 3rd Int Conf Learn Represent (ICLR)"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00190"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2939750"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413933"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.149"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5891"},{"key":"ref24","article-title":"Query attack via opposite-direction feature:Towards robust image retrieval","author":"zheng","year":"2018","journal-title":"arXiv 1809 02681"},{"key":"ref23","article-title":"Adversarial metric attack and defense for person re-identification","author":"bai","year":"2019","journal-title":"arXiv 1901 10650"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00843"},{"key":"ref25","article-title":"Unsupervised adversarial attacks on deep feature-based retrieval with GAN","author":"zhao","year":"2019","journal-title":"arXiv 1907 05793"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00500"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/0167-2789(92)90242-F"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00423"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00521"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00243"},{"key":"ref56","article-title":"Parameter-free spatial attention network for person re-identification","author":"wang","year":"2018","journal-title":"arXiv 1811 12150"},{"key":"ref55","first-page":"480","article-title":"Beyond part models: Person retrieval with refined part pooling (and a strong convolutional baseline)","volume":"2018","author":"sun","year":"0","journal-title":"Proc ECCV"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2019.05.028"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33018933"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240552"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2894031"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2956591"},{"key":"ref12","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc 2nd Int Conf Learn Represent ICLR"},{"key":"ref13","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2017","journal-title":"Proc 5th Int Conf Learn Represent (ICLR)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2861800"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33018618"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2018.2870522"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2019.2929036"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107569"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2019.2898618"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2777183"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.2980070"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00798"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3003571"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP40778.2020.9191166"},{"key":"ref49","first-page":"395","article-title":"Bias-based universal adversarial patch attack for automatic check-out","volume":"12358","author":"liu","year":"2020","journal-title":"Proc Comput Vis ECCV 16th Eur Conf"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2934069"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3036801"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3000372"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref47","first-page":"484","article-title":"Square attack: A query-efficient black-box adversarial attack via random search","author":"andriushchenko","year":"2020","journal-title":"Proc Eur Conf Comput Vis (ECCV)"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01291"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1038\/s41591-020-0791-x"},{"key":"ref44","article-title":"Fooling detection alone is not enough: Adversarial attack against multiple object tracking","author":"jia","year":"2020","journal-title":"Proc 8th Int Conf Learn Represent (ICLR)"},{"key":"ref43","first-page":"1474","article-title":"Invisible adversarial attack against deep neural networks: An adaptive penalization approach","volume":"18","author":"wang","year":"2021","journal-title":"IEEE Trans Dependable Secure Comput"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9151439\/09432915.pdf?arnumber=9432915","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:52:34Z","timestamp":1652194354000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9432915\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":75,"URL":"https:\/\/doi.org\/10.1109\/tifs.2021.3081247","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}