{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:02:11Z","timestamp":1750309331332,"version":"3.41.0"},"reference-count":67,"publisher":"Association for Computing Machinery (ACM)","issue":"5","license":[{"start":{"date-parts":[[2024,9,20]],"date-time":"2024-09-20T00:00:00Z","timestamp":1726790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62472054, 62072061, 61976030 and U20A20176"],"award-info":[{"award-number":["62472054, 62072061, 61976030 and U20A20176"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Funds for Creative Research Groups of Chongqing Municipal Education Commission","award":["CXQT21034"],"award-info":[{"award-number":["CXQT21034"]}]},{"name":"National Science Foundation","award":["CNS-2153393"],"award-info":[{"award-number":["CNS-2153393"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Sen. Netw."],"published-print":{"date-parts":[[2024,9,30]]},"abstract":"<jats:p>Deep neural networks can be easily fooled by the adversarial example, which is a specially crafted example with subtle and intentional perturbations. A plethora of papers have proposed to use filters to effectively defend against adversarial example attacks. However, we demonstrate that the automatic filter-based defenses may not be reliable. In this article, we present URL2AED, Using a Reinforcement Learning scheme TO escape the automatic filter-based Adversarial Example Defenses. Specifically, URL2AED uses a specially crafted policy gradient reinforcement learning (RL) algorithm to generate adversarial examples (AEs) that can escape automatic filter-based AE defenses. In particular, we properly design reward functions in policy-gradient RL for targeted attacks and non-targeted attacks, respectively. Furthermore, we customize training algorithms to reduce the possible action space in policy-gradient RL to accelerate URL2AED training while still ensuring that URL2AED generates successful AEs. To demonstrate the performance of the proposed URL2AED, we conduct extensive experiments on three public datasets in terms of different perturbation degrees of parameter, different filter parameters, transferability, and time consumption. The experimental results show that URL2AED achieves high attack success rates for automatic filter-based defenses and good cross-model transferability.<\/jats:p>","DOI":"10.1145\/3688847","type":"journal-article","created":{"date-parts":[[2024,8,15]],"date-time":"2024-08-15T10:22:18Z","timestamp":1723717338000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Using Reinforcement Learning to Escape Automatic Filter-based Adversarial Example Defense"],"prefix":"10.1145","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7648-5671","authenticated-orcid":false,"given":"Yantao","family":"Li","sequence":"first","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8194-3832","authenticated-orcid":false,"given":"Kaijian","family":"Dan","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8799-7875","authenticated-orcid":false,"given":"Xinyu","family":"Lei","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Michigan Technological University, Houghton, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4911-0393","authenticated-orcid":false,"given":"Huafeng","family":"Qin","sequence":"additional","affiliation":[{"name":"School of Computer Science and Information Engineering, Chongqing Technology and Business University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1246-7399","authenticated-orcid":false,"given":"Shaojiang","family":"Deng","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4425-9837","authenticated-orcid":false,"given":"Gang","family":"Zhou","sequence":"additional","affiliation":[{"name":"Computer Science Department, William &amp; Mary, Williamsburg, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,9,20]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"crossref","first-page":"274","DOI":"10.1109\/TII.2022.3168887","article-title":"Hercules: Deep hierarchical attentive multilevel fusion model with uncertainty quantification for medical image classification","volume":"19","author":"Abdar M.","year":"2023","unstructured":"M. Abdar, M. A. Fahami, L. Rundo, P. Radeva, A. F. Frangi, U. R. Acharya, A. Khosravi, H.-K. Lam, A. Jung, and S. Nahavandi. 2023. Hercules: Deep hierarchical attentive multilevel fusion model with uncertainty quantification for medical image classification. IEEE Trans. Ind. Inform. 19, 1 (2023), 274\u2013285.","journal-title":"IEEE Trans. Ind. Inform."},{"volume-title":"Proc. CVPR, 1701\u20131708","author":"Taigman Y.","unstructured":"Y. Taigman, M. Yang, M. Ranzato, and L. Wolf. 2014. Deepface: Closing the gap to human-level performance in face verification. In Proc. CVPR, 1701\u20131708.","key":"e_1_3_1_3_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_4_2","DOI":"10.1109\/TDSC.2022.3202544"},{"volume-title":"Proc. ECCV, 299\u2013315","author":"Yang T.","unstructured":"T. Yang, S. Zhu, C. Chen, S. Yan, M. Zhang, and A. Willis. 2020. Mutualnet: Adaptive convnet via mutual learning from network width and resolution. In Proc. ECCV, 299\u2013315.","key":"e_1_3_1_5_2"},{"volume-title":"Proc. ECCV, 775\u2013793","author":"Li X.","unstructured":"X. Li, A. You, Z. Zhu, H. Zhao, M. Yang, K. Yang, S. Tan, and Y. Tong. 2020. Semantic flow for fast and accurate scene parsing. In Proc. ECCV, 775\u2013793.","key":"e_1_3_1_6_2"},{"volume-title":"Proc. ECCV, 347\u2013365","author":"Sun G.","unstructured":"G. Sun, W. Wang, J. Dai, and L. Van Gool. 2020. Mining cross-image semantics for weakly supervised semantic segmentation. In Proc. ECCV, 347\u2013365.","key":"e_1_3_1_7_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_8_2","DOI":"10.1109\/TII.2022.3149931"},{"volume-title":"Proc. ECCV, 213\u2013229","author":"Carion N.","unstructured":"N. Carion, F. Massa, G. Synnaeve, N. Usunier, A. Kirillov, and S. Zagoruyko. 2020. End-to-end object detection with transformers. In Proc. ECCV, 213\u2013229.","key":"e_1_3_1_9_2"},{"volume-title":"Proc. AAAI, 3117\u20133124","author":"Ye J.","unstructured":"J. Ye, Y. Mao, J. Song, X. Wang, C. Jin, and M. Song. 2022. Safe distillation box. In Proc. AAAI, 3117\u20133124.","key":"e_1_3_1_10_2"},{"volume-title":"Proc. ECCV. 87\u2013103","author":"Ye J.","unstructured":"J. Ye, Y. Fu, J. Song, X. Yang, S. Liu, X. Jin, and M. Song. Learning with recoverable forgetting. In Proc. ECCV. 87\u2013103.","key":"e_1_3_1_11_2"},{"volume-title":"Proc. ECCV, 73\u201391","author":"Yang X.","unstructured":"X. Yang, J. Ye, and X. Wang. 2022. Factorizing knowledge in neural networks. In Proc. ECCV, 73\u201391.","key":"e_1_3_1_12_2"},{"volume-title":"Proc. NeurIPS, 1\u201314","author":"Yang X.","unstructured":"X. Yang, D. Zhou, S. Liu, J. Ye, and X. Wang. 2022. Deep model reassembly. In Proc. NeurIPS, 1\u201314.","key":"e_1_3_1_13_2"},{"unstructured":"A. Turner D. Tsipras and A. Madry. 2018. Clean-label backdoor attack. https:\/\/people.csail.mit.edu\/madry\/lab\/cleanlabel.pdf","key":"e_1_3_1_14_2"},{"volume-title":"Proc. AAAI, 11957\u201311965","author":"Saha A.","unstructured":"A. Saha, A. Subramanya, and H. Pirsiavash. 2020. Hidden trigger backdoor attacks. In Proc. AAAI, 11957\u201311965.","key":"e_1_3_1_15_2"},{"volume-title":"Proc. CVPR, 1625\u20131634","author":"Eykholt K.","unstructured":"K. Eykholt, I. Evtimov, E. Fernandes, B. Li, A. Rahmati, C. Xiao, A. Prakash, T. Kohno, and D. Song. 2018. Robust physical-world attacks on deep learning models. In Proc. CVPR, 1625\u20131634.","key":"e_1_3_1_16_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_17_2","DOI":"10.1109\/TDSC.2018.2874243"},{"doi-asserted-by":"crossref","unstructured":"W. Xu D. Evans and Y. Qi. 2018. Feature squeezing: Detecting adversarial examples in deep neural networks. In NDSS 1\u201315.","key":"e_1_3_1_18_2","DOI":"10.14722\/ndss.2018.23198"},{"volume-title":"Proc. ICCV, 5764\u20135772","author":"Li X.","unstructured":"X. Li and F. Li. 2017. Adversarial examples detection in deep networks with convolutional filter statistics. In Proc. ICCV, 5764\u20135772.","key":"e_1_3_1_19_2"},{"volume-title":"Proc. ICLR, 1\u201312","author":"Metzen J. H.","unstructured":"J. H. Metzen, T. Genewein, V. Fischer, and B. Bischoff. 2017. On detecting adversarial perturbations. In Proc. ICLR, 1\u201312.","key":"e_1_3_1_20_2"},{"unstructured":"W. He J. Wei X. Chen N. Carlini and D. Song. 2017. Adversarial example defense: Ensembles of weak defenses are not strong. In USENIX WOOT 1\u201315.","key":"e_1_3_1_21_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_22_2","DOI":"10.1109\/TIFS.2017.2718479"},{"unstructured":"E. Quiring D. Klein D. Arp M. Johns and K. Rieck. 2020. Adversarial preprocessing: Understanding and preventing image-scaling attacks in machine learning. In USENIX Security 1363\u20131380.","key":"e_1_3_1_23_2"},{"volume-title":"Proc. ICLR, 1\u201320","author":"Song Y.","unstructured":"Y. Song, T. Kim, S., Ermon, S. Nowozin, and N. Kushman. 2018. Pixeldefend: Leveraging generative models to understand and defend against adversarial examples. In Proc. ICLR, 1\u201320.","key":"e_1_3_1_24_2"},{"volume-title":"Proc. S&P, 707\u2013723","author":"Wang B.","unstructured":"B. Wang, Y. Yao, S. Shan, H. Li, B. Viswanath, H. Zheng, and B. Y. Zhao. 2019. Neural cleanse: Identifying and mitigating backdoor attacks in neural networks. In Proc. S&P, 707\u2013723.","key":"e_1_3_1_25_2"},{"unstructured":"Q. Xiao Y. Chen C. Shen Y. Chen and K. Li. 2019. Seeing is not believing: Camouflage attacks on image scaling algorithms. In USENIX Security 443\u2013460.","key":"e_1_3_1_26_2"},{"volume-title":"Proc. MASS. 1\u20139.","author":"Dan K.","unstructured":"K. Dan, Y. Li, X. Lei, H. Qin, S. Deng, and G. Zhou. 2022. Escaping filter-based adversarial example defense: A reinforcement learning approach. In Proc. MASS. 1\u20139.","key":"e_1_3_1_27_2"},{"volume-title":"Proc. CVPR, 4312\u20134321","author":"Dong Y.","unstructured":"Y. Dong, T. Pang, H. Su, and J. Zhu. 2019. Evading defenses to transferable adversarial examples by translation-invariant attacks. In Proc. CVPR, 4312\u20134321.","key":"e_1_3_1_28_2"},{"volume-title":"Proc. ICLR, 1\u201312","author":"Lin J.","unstructured":"J. Lin, C. Song, K. He, L. Wang, and J. E. Hopcroft. 2020. Nesterov accelerated gradient and scale invariance for adversarial attacks. In Proc. ICLR, 1\u201312.","key":"e_1_3_1_29_2"},{"volume-title":"Proc. ICLR, 1\u201311","author":"Goodfellow I. J.","unstructured":"I. J. Goodfellow, J. Shlens, and C. Szegedy. 2015. Explaining and harnessing adversarial examples. In Proc. ICLR, 1\u201311.","key":"e_1_3_1_30_2"},{"volume-title":"Proc. ICLR, 1\u201323","author":"Madry A.","unstructured":"A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu. 2018. Towards deep learning models resistant to adversarial attacks. In Proc. ICLR, 1\u201323.","key":"e_1_3_1_31_2"},{"volume-title":"Proc. CVPR, 9185\u20139193","author":"Dong Y.","unstructured":"Y. Dong, F. Liao, T. Pang, H. Su, J. Zhu, X. Hu, and J. Li. 2018. Boosting adversarial attacks with momentum. In Proc. CVPR, 9185\u20139193.","key":"e_1_3_1_32_2"},{"volume-title":"Proc. ICLR, 1\u201310","author":"Szegedy C.","unstructured":"C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus. 2014. Intriguing properties of neural networks. In Proc. ICLR, 1\u201310.","key":"e_1_3_1_33_2"},{"volume-title":"Proc. S&P, 39\u201357","author":"Carlini N.","unstructured":"N. Carlini and D. Wagner. 2017. Towards evaluating the robustness of neural networks. In Proc. S&P, 39\u201357.","key":"e_1_3_1_34_2"},{"volume-title":"Proc. ICLR. 1\u201317","author":"Kurakin A.","unstructured":"A. Kurakin, I. Goodfellow, and S. Bengio. 2017. Adversarial machine learning at scale. In Proc. ICLR. 1\u201317.","key":"e_1_3_1_35_2"},{"doi-asserted-by":"crossref","unstructured":"N. Papernot P. McDaniel S. Jha M. Fredrikson Z. B. Celik and A. Swami. 2016. The limitations of deep learning in adversarial settings. In EuroS&P 372\u2013387.","key":"e_1_3_1_36_2","DOI":"10.1109\/EuroSP.2016.36"},{"volume-title":"Proc. CVPR, 2574\u20132582","author":"Moosavi-Dezfooli S. M.","unstructured":"S. M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard. 2016. Deepfool: A simple and accurate method to fool deep neural networks. In Proc. CVPR, 2574\u20132582.","key":"e_1_3_1_37_2"},{"volume-title":"Proc. AISec, 15\u201326","author":"Chen P. Y.","unstructured":"P. Y. Chen, H. Zhang, Y. Sharma, J. Yi, and C. J. Hsieh. 2017. Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In Proc. AISec, 15\u201326.","key":"e_1_3_1_38_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_39_2","DOI":"10.1109\/TEVC.2019.2890858"},{"doi-asserted-by":"publisher","key":"e_1_3_1_40_2","DOI":"10.1109\/TCSVT.2020.3017006"},{"volume-title":"Proc. CVPR, 501\u2013509","author":"Xie C.","unstructured":"C. Xie, Y. Wu, L. Maaten, A. L. Yuille, and K. He. 2019. Feature denoising for improving adversarial robustness. In Proc. CVPR, 501\u2013509.","key":"e_1_3_1_41_2"},{"volume-title":"Proc. AAAI, 4008\u20134015","author":"Sankaranarayanan S.","unstructured":"S. Sankaranarayanan, A. Jain, R. Chellappa, and S. N. Lim. 2018. Regularizing deep networks using efficient layerwise adversarial training. In Proc. AAAI, 4008\u20134015.","key":"e_1_3_1_42_2"},{"volume-title":"Proc. CVPR Workshops. 1132\u20131140","author":"Lim B.","unstructured":"B. Lim, S. Son, H. Kim, S. Nah, and K. M. Lee. 2017. Enhanced deep residual networks for single image super-resolution. In Proc. CVPR Workshops. 1132\u20131140.","key":"e_1_3_1_43_2"},{"volume-title":"Proc. CVPR, 3389\u20133398","author":"Akhtar N.","unstructured":"N. Akhtar, J. Liu, and A. Mian. 2018. Defense against universal adversarial perturbations. In Proc. CVPR, 3389\u20133398.","key":"e_1_3_1_44_2"},{"volume-title":"Proc. CVPR, 6528\u20136537","author":"Raff E.","unstructured":"E. Raff, J. Sylvester, S. Forsyth, and M. McLean. 2019. Barrage of random transforms for adversarially robust defense. In Proc. CVPR, 6528\u20136537.","key":"e_1_3_1_45_2"},{"key":"e_1_3_1_46_2","first-page":"1474","article-title":"Invisible adversarial attack against deep neural networks: An adaptive penalization approach","volume":"18","author":"Wang Z.","year":"2021","unstructured":"Z. Wang, M. Song, S. Zheng, Z. Zhang, Y. Song, and Q. Wang. 2021. Invisible adversarial attack against deep neural networks: An adaptive penalization approach. IEEE Trans. Dependable Secure Comput. 18, 3 (2021), 1474\u20131488.","journal-title":"IEEE Trans. Dependable Secure Comput."},{"doi-asserted-by":"publisher","key":"e_1_3_1_47_2","DOI":"10.1109\/TIP.2019.2940533"},{"doi-asserted-by":"publisher","key":"e_1_3_1_48_2","DOI":"10.1109\/83.862633"},{"volume-title":"Proc. ICCV, 2488\u20132496","author":"Aicedo J. C.","unstructured":"J. C. Aicedo and S. Lazebnik. 2015. Active object localization with deep reinforcement learning. In Proc. ICCV, 2488\u20132496.","key":"e_1_3_1_49_2"},{"volume-title":"Proc. NeurIPS, 2863\u20132871","author":"Oh J.","unstructured":"J. Oh, X. Guo, H. Lee, R. L. Lewis, and S. Singh. 2015. Action-conditional video prediction using deep networks in Atari games. In Proc. NeurIPS, 2863\u20132871.","key":"e_1_3_1_50_2"},{"volume-title":"Proc. NeurIPS, 1\u20139.","author":"Andrychowicz M.","unstructured":"M. Andrychowicz, M. Denil, S. Gomez, M. W. Hoffman, D. Pfau, T. Schaul, B. Shillingford, and N. De Freitas. 2016. Learning to learn by gradient descent by gradient descent. In Proc. NeurIPS, 1\u20139.","key":"e_1_3_1_51_2"},{"unstructured":"S. Hansen. 2016. Using deep q-learning to control optimization hyperparameters. arXiv preprint arXiv:1602.04062.","key":"e_1_3_1_52_2"},{"volume-title":"Proc. ICML, 49\u201358","author":"Inn C.","unstructured":"C. Inn, S. Levine, and P. Abbeel. 2016. Guided cost learning: Deep inverse optimal control via policy optimization. In Proc. ICML, 49\u201358.","key":"e_1_3_1_53_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_54_2","DOI":"10.5555\/2946645.2946684"},{"volume-title":"Proc. NeurIPS. 1\u20139.","author":"Mnih V.","unstructured":"V. Mnih, K. Kavukcuoglu, D. Silver, A. Graves, I. Antonoglou, D. Wierstra, and M. Riedmiller. 2013. Playing Atari with deep reinforcement learning. In Proc. NeurIPS. 1\u20139.","key":"e_1_3_1_56_2"},{"volume-title":"Proc. NeurIPS, 1057\u20131063","author":"Sutton R. S.","unstructured":"R. S. Sutton, D. McAllester, S. Singh, and Y. Mansour. 1999. Policy gradient methods for reinforcement learning with function approximation. In Proc. NeurIPS, 1057\u20131063.","key":"e_1_3_1_57_2"},{"volume-title":"Proc. ICML, 387\u2013395","author":"Silver D.","unstructured":"D. Silver, G. Lever, N. Heess, T. Degris, D. Wierstra, and M. Riedmiller. 2014. Deterministic policy gradient algorithms. In Proc. ICML, 387\u2013395.","key":"e_1_3_1_58_2"},{"doi-asserted-by":"publisher","key":"e_1_3_1_59_2","DOI":"10.1109\/TDSC.2022.3143566"},{"unstructured":"Y. LeCun C. Cortes and C. J. C. Burges. 1998. The MNIST database of handwritten digits. http:\/\/yann.lecun.com\/exdb\/mnist\/","key":"e_1_3_1_60_2"},{"volume-title":"Proc. ACV. 138\u2013142","author":"Samaria F. S.","unstructured":"F. S. Samaria and A. C. Harter. 1994. Parameterisation of a stochastic model for human face identification. In Proc. ACV. 138\u2013142.","key":"e_1_3_1_61_2"},{"unstructured":"A. Krizhevsky and G. Hinton. 2009. Learning Multiple Layers of Features from Tiny Images. Technical Report University of Toronto.","key":"e_1_3_1_62_2"},{"volume-title":"CleverHans v1.0.0: An adversarial machine learning library","author":"Papernot N.","unstructured":"N. Papernot, I. Goodfellow, R. Sheatsley, R. Feinman, and P. McDaniel. 2016. CleverHans v1.0.0: An adversarial machine learning library. Technical Report, Pennsylvania State University.","key":"e_1_3_1_63_2"},{"volume-title":"Proc. CVPR, 770\u2013778","author":"He K.","unstructured":"K. He, X. Zhang, and S. Ren. 2016. Deep residual learning for image recognition. In Proc. CVPR, 770\u2013778.","key":"e_1_3_1_64_2"},{"volume-title":"Proc. CVPR, 860\u2013868","author":"Liu Z.","unstructured":"Z. Liu, Q. Liu, T. Liu, N. Xu, X. Lin, Y. Wang, and W. Wen. 2019. Feature distillation: DNN-oriented jpeg compression against adversarial examples. In Proc. CVPR, 860\u2013868.","key":"e_1_3_1_65_2"},{"key":"e_1_3_1_66_2","volume-title":"Proc. ICLR, 1\u201312","author":"Guo C.","year":"2018","unstructured":"C. Guo, M. Rana, M. Cisse, and L. V. D. Maaten. 2018. Countering adversarial images using input transformations. In Proc. ICLR, 1\u201312."},{"doi-asserted-by":"publisher","key":"e_1_3_1_67_2","DOI":"10.1109\/5.726791"},{"volume-title":"Proc. NeurIPS, 1\u20139.","author":"Krizhevsky A.","unstructured":"A. Krizhevsky, I. Sutskever, and G. E. Hinton. 2012. Imagenet classification with deep convolutional neural networks. In Proc. NeurIPS, 1\u20139.","key":"e_1_3_1_68_2"},{"volume-title":"Proc. ICLR. 1\u201314","author":"Simonyan K.","unstructured":"K. Simonyan and A. Zisserman. 2015. Very deep convolutional networks for large-scale image recognition. In Proc. ICLR. 1\u201314.","key":"e_1_3_1_69_2"}],"container-title":["ACM Transactions on Sensor Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3688847","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3688847","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:04:10Z","timestamp":1750291450000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3688847"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,20]]},"references-count":67,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2024,9,30]]}},"alternative-id":["10.1145\/3688847"],"URL":"https:\/\/doi.org\/10.1145\/3688847","relation":{},"ISSN":["1550-4859","1550-4867"],"issn-type":[{"type":"print","value":"1550-4859"},{"type":"electronic","value":"1550-4867"}],"subject":[],"published":{"date-parts":[[2024,9,20]]},"assertion":[{"value":"2024-02-06","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-08-11","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-09-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}