{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T15:11:18Z","timestamp":1778166678738,"version":"3.51.4"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62376202"],"award-info":[{"award-number":["62376202"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2025,1]]},"DOI":"10.1109\/tpami.2024.3461686","type":"journal-article","created":{"date-parts":[[2024,9,16]],"date-time":"2024-09-16T17:55:32Z","timestamp":1726509332000},"page":"161-171","source":"Crossref","is-referenced-by-count":10,"title":["Optimizing Latent Variables in Integrating Transfer and Query Based Attack Framework"],"prefix":"10.1109","volume":"47","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2391-7319","authenticated-orcid":false,"given":"Chao","family":"Li","sequence":"first","affiliation":[{"name":"School of Artificial Intelligence, Xidian University, Xi&#x2019;an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1637-2928","authenticated-orcid":false,"given":"Tingsong","family":"Jiang","sequence":"additional","affiliation":[{"name":"Defense Innovation Institute, Chinese Academy of Military Science, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4805-3780","authenticated-orcid":false,"given":"Handing","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Xidian University, Xi&#x2019;an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5224-9834","authenticated-orcid":false,"given":"Wen","family":"Yao","sequence":"additional","affiliation":[{"name":"Defense Innovation Institute, Chinese Academy of Military Science, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4685-8232","authenticated-orcid":false,"given":"Donghua","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108224"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i2.20141"},{"key":"ref3","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00076"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CEC.2019.8790213"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref10","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref11","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110767"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3033291"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3321707.3321749"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2019.105886"},{"key":"ref19","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","author":"Lin","year":"2019"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108979"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref23","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"Liu","year":"2016"},{"key":"ref24","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"Brendel","year":"2017"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref26","article-title":"Black-box adversarial attacks with Bayesian optimization","author":"Shukla","year":"2019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3214627"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3168038"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2948146"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3449726.3463137"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3151373"},{"key":"ref33","article-title":"BEGAN: Boundary equilibrium generative adversarial networks","author":"Berthelot","year":"2017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICNN.1995.488968"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref36","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.4324\/9781410605337-29"},{"key":"ref39","first-page":"6105","article-title":"EfficientNet: Rethinking model scaling for convolutional neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Tan"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00293"},{"key":"ref41","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","author":"Ilyas","year":"2018"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2010.2059031"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1968.1098903"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.634"},{"key":"ref47","article-title":"A study of the effect of JPG compression on adversarial images","author":"Dziugaite","year":"2016"},{"key":"ref48","article-title":"Countering adversarial images using input transformations","author":"Guo","year":"2017"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.485"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/34\/10777928\/10681296.pdf?arnumber=10681296","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,5]],"date-time":"2024-12-05T05:58:46Z","timestamp":1733378326000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10681296\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1]]},"references-count":49,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2024.3461686","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1]]}}}