{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,29]],"date-time":"2026-10-29T16:12:28Z","timestamp":1793290348882,"version":"4.5.0"},"reference-count":91,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Singapore Ministry of Education AcRF Tier 2","award":["MOE-T2EP20121-0006"],"award-info":[{"award-number":["MOE-T2EP20121-0006"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20176"],"award-info":[{"award-number":["U20A20176"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072062"],"award-info":[{"award-number":["62072062"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2024.3520016","type":"journal-article","created":{"date-parts":[[2024,12,18]],"date-time":"2024-12-18T19:27:50Z","timestamp":1734550070000},"page":"898-913","source":"Crossref","is-referenced-by-count":6,"title":["Stealthiness Assessment of Adversarial Perturbation: From a Visual Perspective"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4392-2254","authenticated-orcid":false,"given":"Hangcheng","family":"Liu","sequence":"first","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1583-7570","authenticated-orcid":false,"given":"Yuan","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Zhejiang Sci-Tech University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0617-455X","authenticated-orcid":false,"given":"Ying","family":"Yang","sequence":"additional","affiliation":[{"name":"Agency for Science, Technology and Research (A*STAR), Institute of High Performance Computing (IHPC) and the Centre for Frontier AI Research (CFAR), Fusionopolis, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-2846","authenticated-orcid":false,"given":"Qingchuan","family":"Zhao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Kowloon Tong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9439-4623","authenticated-orcid":false,"given":"Tao","family":"Xiang","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. ICLR","author":"Szegedy"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00428"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref8","first-page":"8312","article-title":"Constructing unrestricted adversarial examples with generative models","volume-title":"Proc. NeurIPS","volume":"31","author":"Song"},{"key":"ref9","first-page":"1","article-title":"Unrestricted adversarial examples via semantic manipulation","volume-title":"Proc. ICLR","author":"Bhattad"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00465"},{"key":"ref11","first-page":"2142","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"80","author":"Ilyas"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00229"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/VR51125.2022.00073"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00290"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/QoMEX.2019.8743213"},{"key":"ref17","volume-title":"Methodology for the Subjective Assessment of the Quality of Television Pictures","year":"2002"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00123"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00576"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2006.881959"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1117\/1.3267105"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.image.2014.10.009"},{"key":"ref23","first-page":"633","article-title":"PIPAL: A large-scale image quality assessment dataset for perceptual image restoration","volume-title":"Proc. Eur. Conf. Comput. Vis. (ECCV)","author":"Gu"},{"key":"ref24","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. ICLR","author":"Goodfellow"},{"key":"ref25","first-page":"12885","article-title":"Cross-domain transferability of adversarial perturbations","volume-title":"Proc. NeurIPS","author":"Naseer"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00186"},{"key":"ref28","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guo"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892966"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref32","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref33","article-title":"EfficientNet: Rethinking model scaling for convolutional neural networks","author":"Tan","year":"2019","journal-title":"arXiv:1905.11946"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/WACV51458.2022.00289"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16394"},{"key":"ref37","first-page":"1","article-title":"On evaluating adversarial robustness of large vision-language models","volume-title":"Proc. NeurIPS","volume":"36","author":"Zhao"},{"key":"ref38","first-page":"1","article-title":"Adversarial examples in the physical world","volume-title":"Proc. ICLR","author":"Kurakin"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref40","first-page":"1","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","volume-title":"Proc. ICLR","author":"Brendel"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00112"},{"key":"ref42","first-page":"7546","article-title":"Natural color fool: Towards boosting black-box unrestricted attacks","volume-title":"Proc. NeurIPS","author":"Yuan"},{"key":"ref43","first-page":"34136","article-title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition","volume-title":"Proc. NeurIPS","volume":"35","author":"Jia"},{"key":"ref44","article-title":"Diffusion models for imperceptible and transferable adversarial attack","author":"Chen","year":"2023","journal-title":"arXiv:2305.08192"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00212"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3244662"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2935415"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3096060"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3181496"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2019.2914883"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3033402"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00396"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00054"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2760518"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2013.2293423"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2011.2109730"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2005.859378"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2014.2346028"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01488"},{"key":"ref60","first-page":"12868","article-title":"Sparse and imperceptible adversarial attack via a homotopy algorithm","volume-title":"Proc. ICML","author":"Zhu"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3168038"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i1.25115"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/EUVIP53989.2022.9922753"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2018.2831899"},{"key":"ref65","first-page":"1","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume-title":"Proc. NeurIPS","volume":"30","author":"Heusel"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref68","volume-title":"The PASCAL Visual Object Classes Challenge 2012 (VOC2012) Results","author":"Everingham","year":"2012"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2002.1017623"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.1973.4309314"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3245625"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.2972566"},{"key":"ref73","article-title":"An image is worth 16\u00d716 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020","journal-title":"arXiv:2010.11929"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00049"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00042"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.89"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01625"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00949"},{"key":"ref79","article-title":"Adam: A method for stochastic optimization","volume-title":"Proc. ICLR","author":"Kingma"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2003.1292216"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2005.1415469"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4206741"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.213"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00044"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2016.16.HVEI-103"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3045810"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3552469.3555715"},{"key":"ref89","article-title":"Fast adversarial CNN-based perturbation attack on no-reference image- and video-quality metrics","author":"Shumitskaya","year":"2023","journal-title":"arXiv:2305.15544"},{"key":"ref90","first-page":"2916","article-title":"Perceptual attacks of no-reference image quality models with human-in-the-loop","volume-title":"Proc. 36th Conf. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.153"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10806803.pdf?arnumber=10806803","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,14]],"date-time":"2025-01-14T19:45:01Z","timestamp":1736883901000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10806803\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":91,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3520016","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}