{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T00:46:31Z","timestamp":1774399591371,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":59,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,10]],"date-time":"2024-07-10T00:00:00Z","timestamp":1720569600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Youth Innovation Promotion Association CAS","award":["2021100"],"award-info":[{"award-number":["2021100"]}]},{"name":"Strategic Priority Research Program of the CAS","award":["XDB0680102"],"award-info":[{"award-number":["XDB0680102"]}]},{"name":"National Key Research and Development Program of China","award":["2023YFA1011602, 2021QY1701"],"award-info":[{"award-number":["2023YFA1011602, 2021QY1701"]}]},{"name":"10-year program"},{"name":"National Natural Science Foundation of China (NSFC)","award":["62372431"],"award-info":[{"award-number":["62372431"]}]},{"name":"FINDHR","award":["101070212"],"award-info":[{"award-number":["101070212"]}]},{"name":"Lenovo-CAS Joint Lab Youth Scientist Project","award":["JCKY2022130C039"],"award-info":[{"award-number":["JCKY2022130C039"]}]},{"name":"LESSEN","award":["NWA.1389.20.183"],"award-info":[{"award-number":["NWA.1389.20.183"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7,10]]},"DOI":"10.1145\/3626772.3657704","type":"proceedings-article","created":{"date-parts":[[2024,7,11]],"date-time":"2024-07-11T12:40:05Z","timestamp":1720701605000},"page":"1391-1400","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Multi-granular Adversarial Attacks against Black-box Neural Ranking Models"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9125-5097","authenticated-orcid":false,"given":"Yu-An","family":"Liu","sequence":"first","affiliation":[{"name":"CAS Key Lab of Network Data Science and Technology, ICT, CAS, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4294-2541","authenticated-orcid":false,"given":"Ruqing","family":"Zhang","sequence":"additional","affiliation":[{"name":"CAS Key Lab of Network Data Science and Technology, ICT, CAS, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9509-8674","authenticated-orcid":false,"given":"Jiafeng","family":"Guo","sequence":"additional","affiliation":[{"name":"CAS Key Lab of Network Data Science and Technology, ICT, CAS, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1086-0202","authenticated-orcid":false,"given":"Maarten","family":"de Rijke","sequence":"additional","affiliation":[{"name":"University of Amsterdam, Amsterdam, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4317-2702","authenticated-orcid":false,"given":"Yixing","family":"Fan","sequence":"additional","affiliation":[{"name":"CAS Key Lab of Network Data Science and Technology, ICT, CAS, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5201-8195","authenticated-orcid":false,"given":"Xueqi","family":"Cheng","sequence":"additional","affiliation":[{"name":"CAS Key Lab of Network Data Science and Technology, ICT, CAS, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7,11]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"A Markovian Decision Process. Journal of mathematics and mechanics","author":"Bellman Richard","year":"1957","unstructured":"Richard Bellman. 1957. A Markovian Decision Process. Journal of mathematics and mechanics (1957), 679--684."},{"key":"e_1_3_2_1_2_1","unstructured":"Wieland Brendel Jonas Rauber and Matthias Bethge. 2018. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. In ICLR."},{"key":"e_1_3_2_1_3_1","volume-title":"CAME: Competitively Learning a Mixture-of-Experts Model for First-stage Retrieval. arXiv preprint arXiv:2311.02834","author":"Cai Yinqiong","year":"2023","unstructured":"Yinqiong Cai, Yixing Fan, Keping Bi, Jiafeng Guo, Wei Chen, Ruqing Zhang, and Xueqi Cheng. 2023. CAME: Competitively Learning a Mixture-of-Experts Model for First-stage Retrieval. arXiv preprint arXiv:2311.02834 (2023)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1561\/1500000021"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Xuanang Chen Ben He Zheng Ye Le Sun and Yingfei Sun. 2023. Towards Imperceptible Document Manipulations against Neural Ranking Models. In ACL. 6648--6664.","DOI":"10.18653\/v1\/2023.findings-acl.416"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Yangyi Chen Jin Su and Wei Wei. 2021. Multi-granularity Textual Adversarial Attack with Behavior Cloning. In EMNLP. 4511--4526.","DOI":"10.18653\/v1\/2021.emnlp-main.371"},{"key":"e_1_3_2_1_7_1","volume-title":"Overview of the TREC 2009 Web Track. Technical Report","author":"Clarke Charles L","year":"2009","unstructured":"Charles L Clarke, Nick Craswell, and Ian Soboroff. 2009. Overview of the TREC 2009 Web Track. Technical Report. Waterloo University."},{"key":"e_1_3_2_1_8_1","volume-title":"Overview of the TREC 2012 Web Track. Technical Report. NIST Gaithersburg MD.","author":"Clarke Charles L","year":"2012","unstructured":"Charles L Clarke, Nick Craswell, and Ellen M Voorhees. 2012. Overview of the TREC 2012 Web Track. Technical Report. NIST Gaithersburg MD."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Zhuyun Dai and Jamie Callan. 2019. Deeper Text Understanding for IR with Contextual Neural Language Modeling. In SIGIR.","DOI":"10.1145\/3331184.3331303"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Mostafa Dehghani Hamed Zamani Aliaksei Severyn Jaap Kamps and W Bruce Croft. 2017. Neural Ranking Models with Weak Supervision. In SIGIR. 65--74.","DOI":"10.1145\/3077136.3080832"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Javid Ebrahimi Anyi Rao Daniel Lowd and Dejing Dou. 2018. HotFlip: White-Box Adversarial Examples for Text Classification. In ACL. 31--36.","DOI":"10.18653\/v1\/P18-2006"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Yixing Fan Jiafeng Guo Yanyan Lan Jun Xu Chengxiang Zhai and Xueqi Cheng. 2018. Modeling Diverse Relevance Patterns in Ad-hoc Retrieval. In SIGIR. 375--384.","DOI":"10.1145\/3209978.3209980"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1561\/1500000100"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Xuanjie Fang Sijie Cheng Yang Liu and Wei Wang. 2023. Modeling Adversarial Attack on Pre-trained Language Models as Sequential Decision Making. In Findings of the Association for Computational Linguistics. 7322--7336.","DOI":"10.18653\/v1\/2023.findings-acl.461"},{"key":"e_1_3_2_1_15_1","unstructured":"Grammarly. 2023. https:\/\/app.grammarly.com\/."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Jiafeng Guo Yixing Fan Qingyao Ai and W Bruce Croft. 2016. A Deep Relevance Matching Model for Ad-hoc Retrieval. In CIKM. 55--64.","DOI":"10.1145\/2983323.2983769"},{"key":"e_1_3_2_1_17_1","unstructured":"Zoltan Gyongyi and Hector Garcia-Molina. 2005. Web Spam Taxonomy. In AIRWeb."},{"key":"e_1_3_2_1_18_1","unstructured":"Pengcheng He Xiaodong Liu Jianfeng Gao and Weizhu Chen. 2020. DeBERTa: Decoding-enhanced BERT with Disentangled Attention. In ICLR."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103455"},{"key":"e_1_3_2_1_20_1","volume-title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding. In NAACL-HLT.","author":"Ming-Wei Chang Jacob Devlin","year":"2019","unstructured":"Jacob Devlin Ming-Wei Chang Kenton and Lee Kristina Toutanova. 2019. BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding. In NAACL-HLT."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Levente Kocsis and Csaba Szepesv\u00e1ri. 2006. Bandit Based Monte-Carlo Planning. In ECML.","DOI":"10.1007\/11871842_29"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Oren Kurland and Moshe Tennenholtz. 2022. Competitive Search. In SIGIR.","DOI":"10.1145\/3477495.3532771"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00276"},{"key":"e_1_3_2_1_24_1","volume-title":"Nature","volume":"521","author":"LeCun Yann","year":"2015","unstructured":"Yann LeCun, Yoshua Bengio, and Geoffrey Hinton. 2015. Deep Learning. Nature, Vol. 521, 7553 (2015), 436--444."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.findings-naacl.83"},{"key":"e_1_3_2_1_26_1","volume-title":"BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension. In ACL. 7871--7880.","author":"Lewis Mike","year":"2020","unstructured":"Mike Lewis, Yinhan Liu, Naman Goyal, Marjan Ghazvininejad, Abdelrahman Mohamed, Omer Levy, Veselin Stoyanov, and Luke Zettlemoyer. 2020. BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension. In ACL. 7871--7880."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/3019285"},{"key":"e_1_3_2_1_28_1","unstructured":"Jinfeng Li Shouling Ji Tianyu Du Bo Li and Ting Wang. 2019. TextBugger: Generating Adversarial Text Against Real-world Applications. In NDSS."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Jiawei Liu Yangyang Kang Di Tang Kaisong Song Changlong Sun Xiaofeng Wang Wei Lu and Xiaozhong Liu. 2022. Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models. In CCS. 2025--2039.","DOI":"10.1145\/3548606.3560683"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1561\/1500000016"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Yu-An Liu Ruqing Zhang Jiafeng Guo Maarten de Rijke Wei Chen Yixing Fan and Xueqi Cheng. 2023. Topic-Oriented Adversarial Attacks against Black-Box Neural Ranking Models. In SIGIR. 1700--1709.","DOI":"10.1145\/3539618.3591777"},{"key":"e_1_3_2_1_32_1","volume-title":"Prop: Pre-training with Representative Words Prediction for Ad-hoc Retrieval. In WSDM. 283--291.","author":"Ma Xinyu","year":"2021","unstructured":"Xinyu Ma, Jiafeng Guo, Ruqing Zhang, Yixing Fan, Xiang Ji, and Xueqi Cheng. 2021. Prop: Pre-training with Representative Words Prediction for Ad-hoc Retrieval. In WSDM. 283--291."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"crossref","unstructured":"Bhaskar Mitra Fernando Diaz and Nick Craswell. 2017. Learning to Match Using Local and Distributed Representations of Text for Web Search. In WWW.","DOI":"10.1145\/3038912.3052579"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.10708"},{"key":"e_1_3_2_1_35_1","volume-title":"MS MARCO: A Human Generated Machine Reading Comprehension Dataset. In CoCo@NIPS.","author":"Nguyen Tri","year":"2016","unstructured":"Tri Nguyen, Mir Rosenberg, Xia Song, Jianfeng Gao, Saurabh Tiwary, Rangan Majumder, and Li Deng. 2016. MS MARCO: A Human Generated Machine Reading Comprehension Dataset. In CoCo@NIPS."},{"key":"e_1_3_2_1_36_1","volume-title":"Passage Re-ranking with BERT. arXiv preprint arXiv:1901.04085","author":"Nogueira Rodrigo","year":"2019","unstructured":"Rodrigo Nogueira and Kyunghyun Cho. 2019. Passage Re-ranking with BERT. arXiv preprint arXiv:1901.04085 (2019)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10791-017-9321-y"},{"key":"e_1_3_2_1_38_1","unstructured":"OpenAI. 2022. Introducing ChatGPT. https:\/\/openai.com\/blog\/chatgpt."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Jay Ponte and W. Bruce Croft. 1998. A Language Modeling Approach to Information Retrieval. SIGIR.","DOI":"10.1145\/290941.291008"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","unstructured":"Danish Pruthi Bhuwan Dhingra and Zachary C Lipton. 2019. Combating Adversarial Misspellings with Robust Word Recognition. In ACL. 5582--5591.","DOI":"10.18653\/v1\/P19-1561"},{"key":"e_1_3_2_1_41_1","volume-title":"Language Models Are Unsupervised Multitask Learners. OpenAI blog","author":"Radford Alec","year":"2019","unstructured":"Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, and Ilya Sutskever. 2019. Language Models Are Unsupervised Multitask Learners. OpenAI blog, Vol. 1, 8 (2019), 9."},{"key":"e_1_3_2_1_42_1","volume-title":"One Word at a Time: Adversarial Attacks on Retrieval Models. arXiv preprint arXiv:2008.02197","author":"Raval Nisarg","year":"2020","unstructured":"Nisarg Raval and Manisha Verma. 2020. One Word at a Time: Adversarial Attacks on Retrieval Models. arXiv preprint arXiv:2008.02197 (2020)."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-2099-5_24"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"David E Rumelhart Geoffrey E Hinton and Ronald J Williams. 1985. Learning Internal Representations by Error Propagation. Technical Report. California Univ San Diego La Jolla Inst for Cognitive Science.","DOI":"10.21236\/ADA164453"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/361219.361220"},{"key":"e_1_3_2_1_46_1","volume-title":"Towards Crafting Text Adversarial Samples. arXiv preprint arXiv:1707.02812","author":"Samanta Suranjana","year":"2017","unstructured":"Suranjana Samanta and Sameep Mehta. 2017. Towards Crafting Text Adversarial Samples. arXiv preprint arXiv:1707.02812 (2017)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Congzheng Song Alexander M. Rush and Vitaly Shmatikov. 2020. Adversarial Semantic Collisions. In EMNLP.","DOI":"10.18653\/v1\/2020.emnlp-main.344"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.repl4nlp-1.20"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"crossref","unstructured":"Weiwei Sun Lingyong Yan Xinyu Ma Shuaiqiang Wang Pengjie Ren Zhumin Chen Dawei Yin and Zhaochun Ren. 2023. Is ChatGPT Good at Search? Investigating Large Language Models as Re-Ranking Agents. In EMNLP. 14918--14937.","DOI":"10.18653\/v1\/2023.emnlp-main.923"},{"key":"e_1_3_2_1_50_1","volume-title":"Barto","author":"Sutton Richard S.","year":"2018","unstructured":"Richard S. Sutton and Andrew G. Barto. 2018. Reinforcement Learning: An Introduction. MIT Press."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","unstructured":"Henry Tsai Jason Riesa Melvin Johnson Naveen Arivazhagan Xin Li and Amelia Archer. 2019. Small and Practical BERT Models for Sequence Labeling. In EMNLP. 3632--3636.","DOI":"10.18653\/v1\/D19-1374"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"crossref","unstructured":"Yumeng Wang Lijun Lyu and Avishek Anand. 2022. BERT Rankers are Brittle: A Study using Adversarial Document Perturbations. In ICTIR.","DOI":"10.1145\/3539813.3545122"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576923"},{"key":"e_1_3_2_1_54_1","volume-title":"2023 a. Imperceptible Adversarial Attack with Multi-granular Spatio-temporal Attention for Video Action Recognition","author":"Wu Guoming","year":"2023","unstructured":"Guoming Wu, Yangfan Xu, Jun Li, Zhiping Shi, and Xianglong Liu. 2023 a. Imperceptible Adversarial Attack with Multi-granular Spatio-temporal Attention for Video Action Recognition. IEEE Internet of Things Journal (2023)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3239571"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3374217","article-title":"Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey","volume":"11","author":"Zhang Wei Emma","year":"2020","unstructured":"Wei Emma Zhang, Quan Z Sheng, Ahoud Alhazmi, and Chenliang Li. 2020. Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey. ACM TIST, Vol. 11, 3 (2020), 1--41.","journal-title":"ACM TIST"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"Xiaoqing Zheng Jiehang Zeng Yi Zhou Cho-Jui Hsieh Minhao Cheng and Xuan-Jing Huang. 2020. Evaluating and Enhancing the Robustness of Neural Network-based Dependency Parsing Models with Adversarial Examples. In ACL. 6600--6610.","DOI":"10.18653\/v1\/2020.acl-main.590"},{"key":"e_1_3_2_1_58_1","volume-title":"OSD: An Online Web Spam Detection System. In In Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD","volume":"9","author":"Zhou Bin","year":"2009","unstructured":"Bin Zhou and Jian Pei. 2009. OSD: An Online Web Spam Detection System. In In Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD, Vol. 9."},{"key":"e_1_3_2_1_59_1","volume-title":"Automatic Expert Selection for Multi-Scenario and Multi-Task Search. arXiv preprint arXiv:2205.14321","author":"Zou Xinyu","year":"2022","unstructured":"Xinyu Zou, Zhi Hu, Yiming Zhao, Xuchu Ding, Zhongyi Liu, Chenliang Li, and Aixin Sun. 2022. Automatic Expert Selection for Multi-Scenario and Multi-Task Search. arXiv preprint arXiv:2205.14321 (2022)."}],"event":{"name":"SIGIR 2024: The 47th International ACM SIGIR Conference on Research and Development in Information Retrieval","location":"Washington DC USA","acronym":"SIGIR 2024","sponsor":["SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3626772.3657704","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3626772.3657704","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:37:44Z","timestamp":1755841064000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3626772.3657704"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7,10]]},"references-count":59,"alternative-id":["10.1145\/3626772.3657704","10.1145\/3626772"],"URL":"https:\/\/doi.org\/10.1145\/3626772.3657704","relation":{},"subject":[],"published":{"date-parts":[[2024,7,10]]},"assertion":[{"value":"2024-07-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}