{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T17:49:27Z","timestamp":1772905767358,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":18,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,15]],"date-time":"2024-11-15T00:00:00Z","timestamp":1731628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,15]]},"DOI":"10.1145\/3718751.3718815","type":"proceedings-article","created":{"date-parts":[[2025,4,28]],"date-time":"2025-04-28T06:29:37Z","timestamp":1745821777000},"page":"405-410","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Rethinking Translation Invariance in Transfer-based Adversarial Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0859-2747","authenticated-orcid":false,"given":"Bo","family":"Yang","sequence":"first","affiliation":[{"name":"Information Engineering University, Zhengzhou, Henan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6753-3016","authenticated-orcid":false,"given":"Leyu","family":"Dai","sequence":"additional","affiliation":[{"name":"Information Engineering University, Zhengzhou, Henan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1649-7336","authenticated-orcid":false,"given":"Hengwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Information Engineering University, Zhengzhou, Henan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,4,27]]},"reference":[{"key":"e_1_3_3_1_1_2","first-page":"4139","article-title":"Feature selective networks for object detection","author":"Zhai Y.","year":"2018","unstructured":"Zhai, Y., Fu, J., Lu, Y., & Li, H. (2018). Feature selective networks for object detection. In CVPR: 4139-4147.","journal-title":"CVPR"},{"key":"e_1_3_3_1_2_2","first-page":"11906","article-title":"Variational prototype learning for deep face recognition","author":"Deng J.","year":"2021","unstructured":"Deng, J., Guo, J., Yang, J., Lattas, A., & Zafeiriou, S. (2021). Variational prototype learning for deep face recognition. In CVPR: 11906-11915.","journal-title":"CVPR"},{"key":"e_1_3_3_1_3_2","first-page":"213","article-title":"Intriguing Properties of Neural Networks","author":"Szegedy C.","year":"2014","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2014). Intriguing Properties of Neural Networks. In ICLR: 213-222.","journal-title":"ICLR"},{"key":"e_1_3_3_1_4_2","first-page":"321","article-title":"Explaining and Harnessing Adversarial Examples","author":"Goodfellow I. J.","year":"2015","unstructured":"I Goodfellow, I. J., Shlens, J., & Szegedy, C. (2015). Explaining and Harnessing Adversarial Examples. In ICLR: 321-320.","journal-title":"ICLR"},{"key":"e_1_3_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"e_1_3_3_1_7_2","first-page":"4312","article-title":"Evading defenses to transferable adversarial examples by translation-invariant attacks. In","author":"Dong Y.","year":"2019","unstructured":"Dong, Y., Pang, T., Su, H., & Zhu, J. (2019). Evading defenses to transferable adversarial examples by translation-invariant attacks. In: CVPR: 4312-4321.","journal-title":"CVPR"},{"key":"e_1_3_3_1_8_2","first-page":"412","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","author":"Lin J.","year":"2020","unstructured":"Lin, J., Song, C., He, K., Wang, L., & Hopcroft, J. E. (2020). Nesterov accelerated gradient and scale invariance for adversarial attacks. In ICLR: 412-421.","journal-title":"ICLR"},{"key":"e_1_3_3_1_9_2","volume-title":"ICLR Workshop Track Proceedings: 545-553","author":"Kurakin A.","year":"2017","unstructured":"Kurakin, A., Goodfellow, I. J., & Bengio, S. (2017). Adversarial examples in the physical world. In ICLR Workshop Track Proceedings: 545-553."},{"key":"e_1_3_3_1_10_2","first-page":"306","article-title":"Adversarial Machine Learning at Scale","author":"Kurakin A.","year":"2017","unstructured":"Kurakin, A., Goodfellow, I., & Bengio, S. (2017). Adversarial Machine Learning at Scale. In ICLR: 306-315.","journal-title":"ICLR"},{"key":"e_1_3_3_1_11_2","first-page":"1778","article-title":"Defense against adversarial attacks using high-level representation guided denoiser. In","author":"Liao F.","year":"2018","unstructured":"Liao, F., Liang, M., Dong, Y., Pang, T., Hu, X., & Zhu, J. (2018). Defense against adversarial attacks using high-level representation guided denoiser. In: CVPR: 1778-1787.","journal-title":"CVPR"},{"key":"e_1_3_3_1_12_2","first-page":"734","article-title":"Mitigating adversarial effects through randomization. In","author":"Xie C.","year":"2018","unstructured":"Xie, C., Wang, J., Zhang, Z., Ren, Z., & Yuille, A. (2018). Mitigating adversarial effects through randomization. In: ICLR: 734-742.","journal-title":"ICLR"},{"key":"e_1_3_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00095"},{"key":"e_1_3_3_1_14_2","volume-title":"ICML: 1310\u20131320.","author":"Cohen J.","year":"2019","unstructured":"Cohen, J., Rosenfeld, E., & Kolter, Z. (2019). Certified adversarial robustness via randomized smoothing. In ICML: 1310\u20131320."},{"key":"e_1_3_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"e_1_3_3_1_16_2","first-page":"4278","article-title":"Inception-v4, inception-ResNet and the impact of residual connections on learning","author":"Szegedy C.","year":"2017","unstructured":"Szegedy, C., Ioffe, S., Vanhoucke, V., & Alemi, A. (2017). Inception-v4, inception-ResNet and the impact of residual connections on learning. In AAAI: 4278-4284.","journal-title":"AAAI"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"e_1_3_3_1_18_2","first-page":"953","article-title":"Ensemble Adversarial Training: Attacks and Defenses","author":"Tram\u00e8r F.","year":"2018","unstructured":"Tram\u00e8r, F., Kurakin, A., Papernot, N., Goodfellow, I., Boneh, D., & McDaniel, P. (2018). Ensemble Adversarial Training: Attacks and Defenses. In ICLR: 953-962.","journal-title":"ICLR"}],"event":{"name":"ICBAR 2024: 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management","location":"Chengdu Guangdong China","acronym":"ICBAR 2024"},"container-title":["Proceedings of the 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3718751.3718815","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3718751.3718815","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:56:41Z","timestamp":1750298201000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3718751.3718815"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,15]]},"references-count":18,"alternative-id":["10.1145\/3718751.3718815","10.1145\/3718751"],"URL":"https:\/\/doi.org\/10.1145\/3718751.3718815","relation":{},"subject":[],"published":{"date-parts":[[2024,11,15]]},"assertion":[{"value":"2025-04-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}