{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,18]],"date-time":"2025-12-18T18:42:48Z","timestamp":1766083368596,"version":"3.48.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Key R&D Plan Projects in Zhejiang Province","award":["2023C01243"],"award-info":[{"award-number":["2023C01243"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["52293424"],"award-info":[{"award-number":["52293424"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Open Foundation of the State Key Laboratory of Fluid Power and Mechatronic Systems","award":["GZKF-202329"],"award-info":[{"award-number":["GZKF-202329"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1109\/tr.2025.3600691","type":"journal-article","created":{"date-parts":[[2025,9,4]],"date-time":"2025-09-04T18:21:44Z","timestamp":1757010104000},"page":"5219-5228","source":"Crossref","is-referenced-by-count":0,"title":["A Second-Order Optimization-Based Adaptive Attack Method for Deep Convolutional Neural Networks"],"prefix":"10.1109","volume":"74","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6571-8142","authenticated-orcid":false,"given":"Jin","family":"Ding","sequence":"first","affiliation":[{"name":"School of Automation and Electrical Engineering and Key Institute of Robotics of Zhejiang Province, Zhejiang University of Science and Technology, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie-Chao","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Automation and Electrical Engineering and Key Institute of Robotics of Zhejiang Province, Zhejiang University of Science and Technology, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong-Zhi","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Automation and Electrical Engineering and Key Institute of Robotics of Zhejiang Province, Zhejiang University of Science and Technology, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8656-3514","authenticated-orcid":false,"given":"Ping","family":"Tan","sequence":"additional","affiliation":[{"name":"School of Automation and Electrical Engineering and Key Institute of Robotics of Zhejiang Province, Zhejiang University of Science and Technology, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9080-8668","authenticated-orcid":false,"given":"Ji-En","family":"Ma","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8521-4184","authenticated-orcid":false,"given":"You-Tong","family":"Fang","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2024.3355905"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2023.3298685"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2022.3215757"},{"key":"ref4","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Szegedy","year":"2014"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2022.3161138"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref8","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow","year":"2015"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3021899"},{"key":"ref11","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye","year":"2018"},{"article-title":"Natural gradient methods: Perspectives, efficient-scalable approximations, and analysis","year":"2023","author":"Shrestha","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611976236.23"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i12.17275"},{"article-title":"Binarized neural networks: Training deep neural networks with weights and activations constrained to 1 or -1","year":"2016","author":"Courbariaux","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2020.3032744"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref20","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Croce","year":"2020"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1090\/qam\/10666"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1137\/0111030"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1093\/imamat\/6.1.76"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.2307\/2006193"},{"key":"ref25","first-page":"735","article-title":"Deep learning via Hessian-free optimization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Martens","year":"2010"},{"key":"ref26","first-page":"2408","article-title":"Optimizing neural networks with Kronecker-factored approximate curvature","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Martens","year":"2015"},{"key":"ref27","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang","year":"2019"},{"key":"ref28","article-title":"Robust learning meets generative models: Can proxy distributions improve adversarial robustness","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Sehwag","year":"2022"},{"article-title":"Uncovering the limits of adversarial training against norm-bounded adversarial examples","year":"2020","author":"Gowal","key":"ref29"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2023.3306614"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1816-4_2"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1080\/03610918908812806"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1944345.1944349"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref34"},{"author":"LeCun","key":"ref35","article-title":"The MNIST database of handwritten digits"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.2118\/18761-MS"},{"key":"ref37","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Simonyan","year":"2014"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01161"},{"article-title":"Second-order adversarial attack and certifiable robustness","year":"2018","author":"Li","key":"ref42"},{"article-title":"Hessian-free second-order adversarial examples for adversarial learning","year":"2022","author":"Qian","key":"ref43"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00624"},{"key":"ref45","article-title":"Diffusion models for adversarial purification","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Nie","year":"2022"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1049\/el:20080522"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/24\/11273031\/11151644.pdf?arnumber=11151644","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,18]],"date-time":"2025-12-18T18:33:05Z","timestamp":1766082785000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11151644\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":47,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tr.2025.3600691","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"type":"print","value":"0018-9529"},{"type":"electronic","value":"1558-1721"}],"subject":[],"published":{"date-parts":[[2025,12]]}}}