{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,27]],"date-time":"2025-07-27T07:35:02Z","timestamp":1753601702463,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,21]],"date-time":"2023-10-21T00:00:00Z","timestamp":1697846400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key R&D Program of China","award":["2020AAA0107704"],"award-info":[{"award-number":["2020AAA0107704"]}]},{"DOI":"10.13039\/100017052","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62073263"],"award-info":[{"award-number":["62073263"]}],"id":[{"id":"10.13039\/100017052","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,21]]},"DOI":"10.1145\/3583780.3615198","type":"proceedings-article","created":{"date-parts":[[2023,10,21]],"date-time":"2023-10-21T07:45:26Z","timestamp":1697874326000},"page":"4064-4068","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["HEPT Attack: Heuristic Perpendicular Trial for Hard-label Attacks under Limited Query Budgets"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3294-2858","authenticated-orcid":false,"given":"Qi","family":"Li","sequence":"first","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3494-2552","authenticated-orcid":false,"given":"Xingyu","family":"Li","sequence":"additional","affiliation":[{"name":"University of Alberta, Edmonton, AB, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4762-6161","authenticated-orcid":false,"given":"Xiaodong","family":"Cui","sequence":"additional","affiliation":[{"name":"Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0377-1022","authenticated-orcid":false,"given":"Keke","family":"Tang","sequence":"additional","affiliation":[{"name":"Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8389-1093","authenticated-orcid":false,"given":"Peican","family":"Zhu","sequence":"additional","affiliation":[{"name":"Northwestern Polytechnical University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,10,21]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2014.2339736"},{"key":"e_1_3_2_1_2_1","first-page":"484","volume-title":"Proceedings, Part XXIII. Springer.","author":"Maksym","year":"2020","unstructured":"Maksym Andriushchenko et al. Square attack: a query-efficient black-box adversarial attack via random search\". In: Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020 , Proceedings, Part XXIII. Springer. 2020 , pp. 484 -- 501 . Maksym Andriushchenko et al. Square attack: a query-efficient black-box adversarial attack via random search\". In: Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XXIII. Springer. 2020, pp. 484--501."},{"key":"e_1_3_2_1_3_1","first-page":"154","volume-title":"Proceedings of the European conference on computer vision (ECCV).","author":"Nitin Arjun","year":"2018","unstructured":"Arjun Nitin Bhagoji et al. Practical black-box attacks on deep neural networks using efficient query mechanisms \". In: Proceedings of the European conference on computer vision (ECCV). 2018 , pp. 154 -- 169 . Arjun Nitin Bhagoji et al. Practical black-box attacks on deep neural networks using efficient query mechanisms\". In: Proceedings of the European conference on computer vision (ECCV). 2018, pp. 154--169."},{"key":"e_1_3_2_1_4_1","volume-title":"International Conference on Learning Representations.","author":"Brendel Wieland","year":"2018","unstructured":"Wieland Brendel , Jonas Rauber , and Matthias Bethge . Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models \". In: International Conference on Learning Representations. 2018 . Wieland Brendel, Jonas Rauber, and Matthias Bethge. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models\". In: International Conference on Learning Representations. 2018."},{"key":"e_1_3_2_1_5_1","first-page":"39","volume-title":"Ieee.","author":"Carlini Nicholas","year":"2017","unstructured":"Nicholas Carlini and David Wagner . Towards evaluating the robustness of neural networks\". In: 2017 ieee symposium on security and privacy (sp) . Ieee. 2017 , pp. 39 -- 57 . Nicholas Carlini and David Wagner. Towards evaluating the robustness of neural networks\". In: 2017 ieee symposium on security and privacy (sp). Ieee. 2017, pp. 39--57."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403225"},{"key":"e_1_3_2_1_8_1","volume-title":"International Conference on Learning Representations.","author":"Minhao","year":"2019","unstructured":"Minhao Cheng et al. Query-Efficient Hard-label Black-box Attack: An Optimizationbased Approach \". In: International Conference on Learning Representations. 2019 . Minhao Cheng et al. Query-Efficient Hard-label Black-box Attack: An Optimizationbased Approach\". In: International Conference on Learning Representations. 2019."},{"volume-title":"International Conference on Learning Representations.","author":"Minhao","key":"e_1_3_2_1_9_1","unstructured":"Minhao Cheng et al. Sign-OPT: A Query-Efficient Hard-label Adversarial Attack \". In: International Conference on Learning Representations. Minhao Cheng et al. Sign-OPT: A Query-Efficient Hard-label Adversarial Attack\". In: International Conference on Learning Representations."},{"key":"e_1_3_2_1_10_1","volume-title":"Empirical evaluation of gated recurrent neural networks on sequence modeling\". In: arXiv preprint arXiv:1412.3555","author":"Junyoung Chung","year":"2014","unstructured":"Junyoung Chung et al. Empirical evaluation of gated recurrent neural networks on sequence modeling\". In: arXiv preprint arXiv:1412.3555 ( 2014 ). Junyoung Chung et al. Empirical evaluation of gated recurrent neural networks on sequence modeling\". In: arXiv preprint arXiv:1412.3555 (2014)."},{"key":"e_1_3_2_1_11_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding\". In: arXiv preprint arXiv:1810.04805","author":"Jacob Devlin","year":"2018","unstructured":"Jacob Devlin et al. Bert: Pre-training of deep bidirectional transformers for language understanding\". In: arXiv preprint arXiv:1810.04805 ( 2018 ). Jacob Devlin et al. Bert: Pre-training of deep bidirectional transformers for language understanding\". In: arXiv preprint arXiv:1810.04805 (2018)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2023.110388"},{"key":"e_1_3_2_1_13_1","first-page":"770","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition.","author":"Kaiming","year":"2016","unstructured":"Kaiming He et al. Deep residual learning for image recognition \". In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 2016 , pp. 770 -- 778 . Kaiming He et al. Deep residual learning for image recognition\". In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 2016, pp. 770-- 778."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i12.26738"},{"key":"e_1_3_2_1_15_1","first-page":"7132","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition.","author":"Hu Jie","year":"2018","unstructured":"Jie Hu , Li Shen , and Gang Sun . Squeeze-and-excitation networks\". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2018 , pp. 7132 -- 7141 . Jie Hu, Li Shen, and Gang Sun. Squeeze-and-excitation networks\". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2018, pp. 7132--7141."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"e_1_3_2_1_18_1","first-page":"1221","volume-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition.","author":"Huichen","year":"2020","unstructured":"Huichen Li et al. Qeba: Query-efficient boundary-based blackbox attack \". In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 2020 , pp. 1221 -- 1230 . Huichen Li et al. Qeba: Query-efficient boundary-based blackbox attack\". In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 2020, pp. 1221--1230."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2014.2315920"},{"key":"e_1_3_2_1_20_1","article-title":"An Escalated Eavesdropping Attack on Mobile Devices via Low-Resolution Vibration Signals","author":"Yunji Liang","year":"2022","unstructured":"Yunji Liang et al . An Escalated Eavesdropping Attack on Mobile Devices via Low-Resolution Vibration Signals \". In: IEEE Transactions on Dependable and Secure Computing ( 2022 ). Yunji Liang et al. An Escalated Eavesdropping Attack on Mobile Devices via Low-Resolution Vibration Signals\". In: IEEE Transactions on Dependable and Secure Computing (2022).","journal-title":"IEEE Transactions on Dependable and Secure Computing ("},{"key":"e_1_3_2_1_21_1","first-page":"19288","article-title":"Finding optimal tangent points for reducing distortions of hard-label attacks","volume":"34","author":"Chen Ma","year":"2021","unstructured":"Chen Ma et al . Finding optimal tangent points for reducing distortions of hard-label attacks \". In: Advances in Neural Information Processing Systems 34 ( 2021 ), pp. 19288 -- 19300 . Chen Ma et al. Finding optimal tangent points for reducing distortions of hard-label attacks\". In: Advances in Neural Information Processing Systems 34 (2021), pp. 19288--19300.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_22_1","volume-title":"Towards Deep Learning Models Resistant to Adversarial Attacks","author":"Aleksander Madry","year":"2018","unstructured":"Aleksander Madry et al. Towards Deep Learning Models Resistant to Adversarial Attacks \". In : ICLR. 2018 . Aleksander Madry et al. Towards Deep Learning Models Resistant to Adversarial Attacks\". In: ICLR. 2018."},{"key":"e_1_3_2_1_23_1","first-page":"10430","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition.","author":"Maho Thibault","year":"2021","unstructured":"Thibault Maho , Teddy Furon , and Erwan Le Merrer . Surfree : a fast surrogatefree black-box attack \". In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 2021 , pp. 10430 -- 10439 . Thibault Maho, Teddy Furon, and Erwan Le Merrer. Surfree: a fast surrogatefree black-box attack\". In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 2021, pp. 10430--10439."},{"key":"e_1_3_2_1_24_1","volume-title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples\". In: arXiv preprint arXiv:1605.07277","author":"Papernot Nicolas","year":"2016","unstructured":"Nicolas Papernot , Patrick McDaniel , and Ian Goodfellow . Transferability in machine learning: from phenomena to black-box attacks using adversarial samples\". In: arXiv preprint arXiv:1605.07277 ( 2016 ). Nicolas Papernot, Patrick McDaniel, and Ian Goodfellow. Transferability in machine learning: from phenomena to black-box attacks using adversarial samples\". In: arXiv preprint arXiv:1605.07277 (2016)."},{"key":"e_1_3_2_1_25_1","first-page":"779","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition.","author":"Joseph","year":"2016","unstructured":"Joseph Redmon et al. You only look once: Unified, real-time object detection \". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2016 , pp. 779 -- 788 . Joseph Redmon et al. You only look once: Unified, real-time object detection\". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2016, pp. 779--788."},{"key":"e_1_3_2_1_26_1","first-page":"234","volume-title":"U-net: Convolutional networks for biomedical image segmentation","author":"Ronneberger Olaf","year":"2015","unstructured":"Olaf Ronneberger , Philipp Fischer , and Thomas Brox . U-net: Convolutional networks for biomedical image segmentation \". In : Medical Image Computing and Computer-Assisted Intervention--MICCAI 2015 : 18th International Conference, Munich, Germany, October 5--9, 2015, Proceedings, Part III 18. Springer . 2015, pp. 234 -- 241 . Olaf Ronneberger, Philipp Fischer, and Thomas Brox. U-net: Convolutional networks for biomedical image segmentation\". In: Medical Image Computing and Computer-Assisted Intervention--MICCAI 2015: 18th International Conference, Munich, Germany, October 5--9, 2015, Proceedings, Part III 18. Springer. 2015, pp. 234--241."},{"key":"e_1_3_2_1_27_1","volume-title":"Advances in neural information processing systems 27","author":"Sutskever Ilya","year":"2014","unstructured":"Ilya Sutskever , Oriol Vinyals , and Quoc V Le . Sequence to sequence learning with neural networks \". In: Advances in neural information processing systems 27 ( 2014 ). Ilya Sutskever, Oriol Vinyals, and Quoc V Le. Sequence to sequence learning with neural networks\". In: Advances in neural information processing systems 27 (2014)."},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the AAAI conference on artificial intelligence.","volume":"31","author":"Christian","year":"2017","unstructured":"Christian Szegedy et al. Inception-v4, inception-resnet and the impact of residual connections on learning \". In: Proceedings of the AAAI conference on artificial intelligence. Vol. 31 . 1. 2017 . Christian Szegedy et al. Inception-v4, inception-resnet and the impact of residual connections on learning\". In: Proceedings of the AAAI conference on artificial intelligence. Vol. 31. 1. 2017."},{"key":"e_1_3_2_1_29_1","volume-title":"Intriguing properties of neural networks\". In: arXiv preprint arXiv:1312.6199","author":"Christian Szegedy","year":"2013","unstructured":"Christian Szegedy et al. Intriguing properties of neural networks\". In: arXiv preprint arXiv:1312.6199 ( 2013 ). Christian Szegedy et al. Intriguing properties of neural networks\". In: arXiv preprint arXiv:1312.6199 (2013)."},{"key":"e_1_3_2_1_30_1","first-page":"2818","volume-title":"Rethinking the inception architecture for computer vision","author":"Christian Szegedy","year":"2016","unstructured":"Christian Szegedy et al. Rethinking the inception architecture for computer vision \". In : CVPR. 2016 , pp. 2818 -- 2826 . Christian Szegedy et al. Rethinking the inception architecture for computer vision\". In: CVPR. 2016, pp. 2818--2826."},{"key":"e_1_3_2_1_31_1","article-title":"Decision fusion networks for image classification","author":"Keke Tang","year":"2022","unstructured":"Keke Tang et al . Decision fusion networks for image classification \". In: IEEE Transactions on Neural Networks and Learning Systems ( 2022 ). Keke Tang et al. Decision fusion networks for image classification\". In: IEEE Transactions on Neural Networks and Learning Systems (2022).","journal-title":"IEEE Transactions on Neural Networks and Learning Systems ("},{"key":"e_1_3_2_1_32_1","first-page":"2420","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence.","volume":"37","author":"Keke","year":"2023","unstructured":"Keke Tang et al. Deep Manifold Attack on Point Clouds via Parameter Plane Stretching \". In: Proceedings of the AAAI Conference on Artificial Intelligence. Vol. 37 . 2. 2023 , pp. 2420 -- 2428 . Keke Tang et al. Deep Manifold Attack on Point Clouds via Parameter Plane Stretching\". In: Proceedings of the AAAI Conference on Artificial Intelligence. Vol. 37. 2. 2023, pp. 2420--2428."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3222159"},{"key":"e_1_3_2_1_34_1","first-page":"5265","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition.","author":"Hao","year":"2018","unstructured":"Hao Wang et al. Cosface: Large margin cosine loss for deep face recognition \". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2018 , pp. 5265 -- 5274 . Hao Wang et al. Cosface: Large margin cosine loss for deep face recognition\". In: Proceedings of the IEEE conference on computer vision and pattern recognition. 2018, pp. 5265--5274."},{"key":"e_1_3_2_1_35_1","first-page":"7472","volume-title":"International Conference on Machine Learning. PMLR.","author":"Hongyang","year":"2019","unstructured":"Hongyang Zhang et al. Theoretically principled trade-off between robustness and accuracy \". In: International Conference on Machine Learning. PMLR. 2019 , pp. 7472 -- 7482 . Hongyang Zhang et al. Theoretically principled trade-off between robustness and accuracy\". In: International Conference on Machine Learning. PMLR. 2019, pp. 7472--7482."},{"key":"e_1_3_2_1_36_1","first-page":"1","volume-title":"SGMA: a novel adversarial attack approach with improved transferability","author":"Peican Zhu","year":"2023","unstructured":"Peican Zhu et al. SGMA: a novel adversarial attack approach with improved transferability \". In : Complex & Intelligent Systems ( 2023 ), pp. 1 -- 13 . Peican Zhu et al. SGMA: a novel adversarial attack approach with improved transferability\". In: Complex & Intelligent Systems (2023), pp. 1--13."}],"event":{"name":"CIKM '23: The 32nd ACM International Conference on Information and Knowledge Management","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGIR ACM Special Interest Group on Information Retrieval"],"location":"Birmingham United Kingdom","acronym":"CIKM '23"},"container-title":["Proceedings of the 32nd ACM International Conference on Information and Knowledge Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3583780.3615198","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3583780.3615198","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:36:43Z","timestamp":1750178203000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3583780.3615198"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,21]]},"references-count":36,"alternative-id":["10.1145\/3583780.3615198","10.1145\/3583780"],"URL":"https:\/\/doi.org\/10.1145\/3583780.3615198","relation":{},"subject":[],"published":{"date-parts":[[2023,10,21]]},"assertion":[{"value":"2023-10-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}