{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,3]],"date-time":"2025-12-03T18:05:25Z","timestamp":1764785125609,"version":"3.37.3"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,6,1]],"date-time":"2024-06-01T00:00:00Z","timestamp":1717200000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62177046","61977062","62202500"],"award-info":[{"award-number":["62177046","61977062","62202500"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Hunan Natural Science Foundation of China","award":["2021JJ30866"],"award-info":[{"award-number":["2021JJ30866"]}]},{"name":"National Key R&amp;D Program of China","award":["2022YFB3104003"],"award-info":[{"award-number":["2022YFB3104003"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2024,6]]},"DOI":"10.1109\/tr.2023.3261986","type":"journal-article","created":{"date-parts":[[2023,4,13]],"date-time":"2023-04-13T17:35:07Z","timestamp":1681407307000},"page":"1160-1171","source":"Crossref","is-referenced-by-count":6,"title":["Cube-Evo: A Query-Efficient Black-Box Attack on Video Classification System"],"prefix":"10.1109","volume":"73","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5441-3033","authenticated-orcid":false,"given":"Yu","family":"Zhan","sequence":"first","affiliation":[{"name":"Central South University, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5329-2586","authenticated-orcid":false,"given":"Ying","family":"Fu","sequence":"additional","affiliation":[{"name":"National University of Defense Technology, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liang","family":"Huang","sequence":"additional","affiliation":[{"name":"Central South University, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6872-6383","authenticated-orcid":false,"given":"Jianmin","family":"Guo","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9040-7247","authenticated-orcid":false,"given":"Heyuan","family":"Shi","sequence":"additional","affiliation":[{"name":"Central South University, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2631-9223","authenticated-orcid":false,"given":"Houbing","family":"Song","sequence":"additional","affiliation":[{"name":"University of Maryland, Baltimore County, Baltimore, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Hu","sequence":"additional","affiliation":[{"name":"Central South University, Changsha, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Sign bits are all you need for black-box attacks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Al-Dujaili","year":"2020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref4","first-page":"4724","volume-title":"Proc. IEEE Conf. Comput. Vis. Pattern Recognit.","author":"Carreira","year":"2017"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1023\/B:JMIV.0000011321.19549.88","article-title":"An algorithm for total variation minimization and applications","volume":"20","author":"Chambolle","year":"2004","journal-title":"J. Math. Imag. Vis"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11302"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00324"},{"key":"ref9","first-page":"10932","article-title":"Improving black-box adversarial attacks with a transfer-based prior","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Cheng","year":"2019"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00482"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i6.20595"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01225-0_18"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00630"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3264835"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.2997359"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3114353"},{"key":"ref17","first-page":"3820","article-title":"Subspace attack: Exploiting promising subspaces for query-efficient black-box attacks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Guo","year":"2019"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2007.383267"},{"key":"ref19","article-title":"Prior convictions: Black-box adversarial attacks with bandits and priors","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Ilyas","year":"2019"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3343031.3351088"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref22","article-title":"Adversarial examples in the physical world","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Kurakin","year":"2017"},{"key":"ref23","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2019.23202","article-title":"Stealthy adversarial perturbations against real-time video classification systems","volume-title":"Proc. Netw. Distribut. Syst. Secur. Symp.","author":"Li","year":"2019"},{"key":"ref24","first-page":"2085","article-title":"Adversarial attacks on black box video classifiers: Leveraging the power of geometric transformations","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Li","year":"2021"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00021"},{"key":"ref26","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Liu","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18074.2021.9586169"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2019.00349"},{"article-title":"Yet another but more efficient black-box adversarial attack: Tiling and evolution strategies,","year":"2019","author":"Meunier","key":"ref29"},{"key":"ref30","first-page":"4636","article-title":"Parsimonious black-box adversarial attacks via efficient combinatorial optimization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Moon","year":"2019"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2938527"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00058"},{"key":"ref33","first-page":"3353","article-title":"Adversarial training for free!","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Shafahi","year":"2019"},{"key":"ref34","article-title":"UCF101: A dataset of 101 human actions classes from videos in the wild","author":"Soomro","year":"2012","journal-title":"Proc. Int. Conf. Comput. Vis."},{"key":"ref35","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy","year":"2014"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.510"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref38","article-title":"Query efficient decision based sparse attacks against black-box deep learning models","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Vo","year":"2022"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33018973"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6918"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i3.20169"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i3.20168"},{"key":"ref43","article-title":"Structured adversarial attack: Towards general implementation and better interpretability","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Xu","year":"2019"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475395"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00067"},{"key":"ref46","first-page":"12288","article-title":"Learning black-box attackers with transferable priors and query feedback","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Yang","year":"2020"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.554"},{"key":"ref48","first-page":"13255","article-title":"A Fourier perspective on model robustness in computer vision","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Yin","year":"2019"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58565-5_15"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464809"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/24\/10547161\/10102317.pdf?arnumber=10102317","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,11]],"date-time":"2024-12-11T01:00:29Z","timestamp":1733878829000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10102317\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6]]},"references-count":50,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tr.2023.3261986","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"type":"print","value":"0018-9529"},{"type":"electronic","value":"1558-1721"}],"subject":[],"published":{"date-parts":[[2024,6]]}}}