{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T00:08:14Z","timestamp":1755907694500,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":15,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1145\/3672919.3672953","type":"proceedings-article","created":{"date-parts":[[2024,7,24]],"date-time":"2024-07-24T12:39:43Z","timestamp":1721824783000},"page":"173-177","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Generating Transferable Adversarial Examples From the Perspective of Ensemble and Distribution"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-0500-5923","authenticated-orcid":false,"given":"Huangyi","family":"Zhang","sequence":"first","affiliation":[{"name":"College of Computer and Data Science, Fuzhou University, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4238-3295","authenticated-orcid":false,"given":"Ximeng","family":"Liu","sequence":"additional","affiliation":[{"name":"College of Computer and Data Science, Fuzhou University, China"}]}],"member":"320","published-online":{"date-parts":[[2024,7,24]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Intriguing properties of neural networks,\" arXiv preprint arXiv:1312.6199","author":"Szegedy C.","year":"2013","unstructured":"C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, \"Intriguing properties of neural networks,\" arXiv preprint arXiv:1312.6199, 2013.6."},{"key":"e_1_3_2_1_2_1","first-page":"1625","article-title":"Robust physical-world attacks on deep learning visual classification","author":"Eykholt K.","year":"2018","unstructured":"K. Eykholt, I. Evtimov, E. Fernandes, B. Li, A. Rahmati, C. Xiao, A. Prakash, T. Kohno, and D. Song, \"Robust physical-world attacks on deep learning visual classification,\" in Proceedings of the IEEE conference on computer vision and pattern recognition, 2018, pp. 1625\u20131634.","journal-title":"Proceedings of the IEEE conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107332"},{"key":"e_1_3_2_1_4_1","first-page":"112","volume-title":"Adversarial examples in the physical world,\" in Artificial intelligence safety and security","author":"Kurakin A.","year":"2018","unstructured":"A. Kurakin, I. J. Goodfellow, and S. Bengio, \"Adversarial examples in the physical world,\" in Artificial intelligence safety and security. Chapman and Hall\/CRC, 2018, pp. 99\u2013112."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3211736"},{"key":"e_1_3_2_1_6_1","volume-title":"Cross-domain transferability of adversarial perturbations,\" Advances in Neural Information Processing Systems","author":"Naseer M. M.","year":"2019","unstructured":"M. M. Naseer, S. H. Khan, M. H. Khan, F. Shahbaz Khan, and F. Porikli, \"Cross-domain transferability of adversarial perturbations,\" Advances in Neural Information Processing Systems, vol. 32, 2019."},{"key":"e_1_3_2_1_7_1","first-page":"9185","article-title":"Boosting adversarial attacks with momentum","author":"Dong Y.","year":"2018","unstructured":"Y. Dong, F. Liao, T. Pang, H. Su, J. Zhu, X. Hu, and J. Li, \"Boosting adversarial attacks with momentum,\" in Proceedings of the IEEE conference on computer vision and pattern recognition, 2018, pp. 9185\u20139193.","journal-title":"Proceedings of the IEEE conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_8_1","first-page":"2730","article-title":"Improving transferability of adversarial examples with input diversity","author":"Xie C.","year":"2019","unstructured":"C. Xie, Z. Zhang, Y. Zhou, S. Bai, J. Wang, Z. Ren, and A. L. Yuille, \"Improving transferability of adversarial examples with input diversity,\" in Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, 2019, pp. 2730\u20132739.","journal-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition"},{"key":"e_1_3_2_1_9_1","first-page":"7708","article-title":"On generating transferable targeted perturbations","author":"Naseer M.","year":"2021","unstructured":"M. Naseer, S. Khan, M. Hayat, F. S. Khan, and F. Porikli, \"On generating transferable targeted perturbations,\" in Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2021, pp. 7708\u20137717.","journal-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision"},{"key":"e_1_3_2_1_10_1","volume-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,\" arXiv preprint arXiv:1908.06281","author":"Lin J.","year":"2019","unstructured":"J. Lin, C. Song, K. He, L. Wang, and J. E. Hopcroft, \"Nesterov accelerated gradient and scale invariance for adversarial attacks,\" arXiv preprint arXiv:1908.06281, 2019."},{"key":"e_1_3_2_1_11_1","first-page":"158","article-title":"Admix: Enhancing the transferability of adversarial attacks","author":"Wang X.","year":"2021","unstructured":"X. Wang, X. He, J. Wang, and K. He, \"Admix: Enhancing the transferability of adversarial attacks,\" in Proceedings of the IEEE\/CVF International Conference on Computer Vision, 2021, pp. 16 158\u201316 167.","journal-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision"},{"key":"e_1_3_2_1_12_1","volume-title":"A unified approach to interpreting and boosting adversarial transferability,\" arXiv preprint arXiv:2010.04055","author":"Wang X.","year":"2020","unstructured":"X. Wang, J. Ren, S. Lin, X. Zhu, Y. Wang, and Q. Zhang, \"A unified approach to interpreting and boosting adversarial transferability,\" arXiv preprint arXiv:2010.04055, 2020."},{"key":"e_1_3_2_1_13_1","first-page":"4733","article-title":"Enhancing adversarial example transferability with an intermediate level attack","author":"Huang Q.","year":"2019","unstructured":"Q. Huang, I. Katsman, H. He, Z. Gu, S. Belongie, and S.-N. Lim, \"Enhancing adversarial example transferability with an intermediate level attack,\" in Proceedings of the IEEE\/CVF international conference on computer vision, 2019, pp. 4733\u20134742.7","journal-title":"Proceedings of the IEEE\/CVF international conference on computer vision"},{"key":"e_1_3_2_1_14_1","volume-title":"Skip connections matter: On the transferability of adversarial examples generated with resnets,\" arXiv preprint arXiv:2002.05990","author":"Wu D.","year":"2020","unstructured":"D. Wu, Y. Wang, S.-T. Xia, J. Bailey, and X. Ma, \"Skip connections matter: On the transferability of adversarial examples generated with resnets,\" arXiv preprint arXiv:2002.05990, 2020."},{"key":"e_1_3_2_1_15_1","first-page":"03528","article-title":"Backpropagating linearly improves transferability of adversarial examples","volume":"2012","author":"Guo Y.","year":"2020","unstructured":"Y. Guo, Q. Li, and H. Chen, \"Backpropagating linearly improves transferability of adversarial examples,\" ArXiv, vol. abs\/2012.03528, 2020. [Online]. Available: https:\/\/api.semanticscholar.org\/CorpusID:227276380.","journal-title":"ArXiv"}],"event":{"name":"CSAIDE 2024: 2024 3rd International Conference on Cyber Security, Artificial Intelligence and Digital Economy","acronym":"CSAIDE 2024","location":"Nanjing China"},"container-title":["Proceedings of the 2024 3rd International Conference on Cyber Security, Artificial Intelligence and Digital Economy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3672919.3672953","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3672919.3672953","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T16:34:43Z","timestamp":1755880483000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3672919.3672953"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":15,"alternative-id":["10.1145\/3672919.3672953","10.1145\/3672919"],"URL":"https:\/\/doi.org\/10.1145\/3672919.3672953","relation":{},"subject":[],"published":{"date-parts":[[2024,3]]},"assertion":[{"value":"2024-07-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}