{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T21:23:36Z","timestamp":1772227416913,"version":"3.50.1"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302116"],"award-info":[{"award-number":["62302116"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["22404034"],"award-info":[{"award-number":["22404034"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62406083"],"award-info":[{"award-number":["62406083"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong Basic and Applied Basic Research Project","award":["2023A1515012697"],"award-info":[{"award-number":["2023A1515012697"]}]},{"name":"Guangdong Basic and Applied Basic Research Project","award":["2024A1515011475"],"award-info":[{"award-number":["2024A1515011475"]}]},{"name":"Guangdong Basic and Applied Basic Research Project","award":["2025A1515010264"],"award-info":[{"award-number":["2025A1515010264"]}]},{"name":"Guangdong Basic and Applied Basic Research Project","award":["2023A1515011575"],"award-info":[{"award-number":["2023A1515011575"]}]},{"name":"Guangdong Basic and Applied Basic Research Project","award":["2025A1515012874"],"award-info":[{"award-number":["2025A1515012874"]}]},{"DOI":"10.13039\/501100010256","name":"Guangzhou Municipal Science and Technology Project","doi-asserted-by":"publisher","award":["2024A03J0092"],"award-info":[{"award-number":["2024A03J0092"]}],"id":[{"id":"10.13039\/501100010256","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010256","name":"Guangzhou Municipal Science and Technology Project","doi-asserted-by":"publisher","award":["2025A03J3122"],"award-info":[{"award-number":["2025A03J3122"]}],"id":[{"id":"10.13039\/501100010256","id-type":"DOI","asserted-by":"publisher"}]},{"name":"University Research Project of Guangzhou Municipal Education Bureau","award":["2024312350"],"award-info":[{"award-number":["2024312350"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tr.2026.3664878","type":"journal-article","created":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T21:06:29Z","timestamp":1771275989000},"page":"1006-1019","source":"Crossref","is-referenced-by-count":0,"title":["Harnessing Transferable Adversarial Examples via Multilayer Attention-Guided Spatial Transformations"],"prefix":"10.1109","volume":"75","author":[{"given":"Pengfei","family":"Dong","sequence":"first","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1510-3443","authenticated-orcid":false,"given":"Yatie","family":"Xiao","sequence":"additional","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1788-3746","authenticated-orcid":false,"given":"Chi-Man","family":"Pun","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Macau, Macau, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8053-4587","authenticated-orcid":false,"given":"Fei","family":"Peng","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2439-3518","authenticated-orcid":false,"given":"Kongyang","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8193-1234","authenticated-orcid":false,"given":"Qingxian","family":"Guan","sequence":"additional","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9272-4804","authenticated-orcid":false,"given":"Siyuan","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangyu","family":"Ye","sequence":"additional","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenbang","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-025-01041-7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02605"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00767"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW67362.2025.00063"},{"key":"ref6","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow","year":"2015"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2024.3509414"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00031"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3545781"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3435937"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01398"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01457"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3526067"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00754"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103135"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref18","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Lin","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01585"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00437"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_28"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.319"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2025.3528256"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2025.3535716"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref26","article-title":"Intriguing properties of neural networks","volume-title":"Proc. 2nd Int. Conf. Learn. Representations","author":"Szegedy","year":"2014"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670309"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00068"},{"issue":"11","key":"ref34","first-page":"2748","article-title":"Delving into transferable adversarial examples and black-box attacks","volume":"12","author":"Liu","year":"2017","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_35"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58542-6_34"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2024.3354965"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00891"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-96-0850-8_14"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02297"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02196-3"},{"key":"ref43","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang","year":"2019"},{"key":"ref44","article-title":"Augmix: A simple data processing method to improve robustness and uncertainty","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Hendrycks","year":"2020"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1811.12231"},{"key":"ref46","first-page":"4033","article-title":"Noisymix: Boosting model robustness to common corruptions","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Erichson","year":"2024"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref48","first-page":"12934","article-title":"EfficientFormer: Vision transformers at mobilenet speed","volume-title":"Proc. the Adv. Neural Informat. Process. Syst","volume":"35","author":"Li","year":"2022"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref50","first-page":"9355","article-title":"Twins: Revisiting the design of spatial attention in vision transformers","volume-title":"Proc. the Adv. Neural Informat. Process. Syst.","volume":"34","author":"Chu","year":"2021"},{"key":"ref51","first-page":"11960","article-title":"Not all images are worth 16 x 16 words: Dynamic transformers for efficient image recognition","volume-title":"Proc. the Adv. Neural Informat. Process. Syst.","volume":"34","author":"Wang","year":"2021"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref53","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Touvron","year":"2021"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3645088"},{"key":"ref55","article-title":"Fast is better than free: Revisiting adversarial training","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Wong","year":"2020"},{"key":"ref56","first-page":"1","article-title":"Memorisation in machine learning: A survey of results","author":"Usynin","year":"2024","journal-title":"Trans. Mach. Learn. Res."}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/24\/11317936\/11397227.pdf?arnumber=11397227","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T20:48:55Z","timestamp":1772225335000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11397227\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":56,"URL":"https:\/\/doi.org\/10.1109\/tr.2026.3664878","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}