{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T01:58:09Z","timestamp":1760147889595,"version":"build-2065373602"},"reference-count":52,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2023,3,10]],"date-time":"2023-03-10T00:00:00Z","timestamp":1678406400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"National Natural Science Foundation of China","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Guizhou Province Science and Technology Plan Project","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Guizhou University for Talent Introduction","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Guizhou University","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Key Laboratory of Advanced Manufacturing Technology, Ministry of Education","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Postgraduate Innovation Program in Guizhou Province","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]},{"name":"Education Department of Guizhou province","award":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"],"award-info":[{"award-number":["2022YFB2701401","62272124","[2020]5017","[2020]61","[2019]56","GZUAMT2021KF[01]","YJSKYJJ[2021]028","[2018]141"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Adversarial example generation techniques for neural network models have exploded in recent years. In the adversarial attack scheme for image recognition models, it is challenging to achieve a high attack success rate with very few pixel modifications. To address this issue, this paper proposes an adversarial example generation method based on adaptive parameter adjustable differential evolution. The method realizes the dynamic adjustment of the algorithm performance by adjusting the control parameters and operation strategies of the adaptive differential evolution algorithm, while searching for the optimal perturbation. Finally, the method generates adversarial examples with a high success rate, modifying just a very few pixels. The attack effectiveness of the method is confirmed in CIFAR10 and MNIST datasets. The experimental results show that our method has a greater attack success rate than the One Pixel Attack based on the conventional differential evolution. In addition, it requires significantly less perturbation to be successful compared to global or local perturbation attacks, and is more resistant to perception and detection.<\/jats:p>","DOI":"10.3390\/e25030487","type":"journal-article","created":{"date-parts":[[2023,3,13]],"date-time":"2023-03-13T04:04:00Z","timestamp":1678680240000},"page":"487","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Image Adversarial Example Generation Method Based on Adaptive Parameter Adjustable Differential Evolution"],"prefix":"10.3390","volume":"25","author":[{"given":"Zhiyi","family":"Lin","sequence":"first","affiliation":[{"name":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang 550025, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8733-4596","authenticated-orcid":false,"given":"Changgen","family":"Peng","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang 550025, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6590-5757","authenticated-orcid":false,"given":"Weijie","family":"Tan","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang 550025, China"},{"name":"Key Laboratory of Advanced Manufacturing Technology, Ministry of Education, Guizhou University, Guiyang 550025, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xing","family":"He","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang 550025, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,3,10]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"216","DOI":"10.1016\/j.neucom.2020.05.062","article-title":"FoolChecker: A platform to evaluate the robustness of images against adversarial attacks","volume":"412","author":"Liu","year":"2020","journal-title":"Neurocomputing"},{"key":"ref_2","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R. (2013). Intriguing properties of neural networks. arXiv."},{"key":"ref_3","unstructured":"Goodfellow, I.J., Shlens, J., and Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I.J., and Bengio, S. (2018). Adversarial examples in the physical world. Artificial Intelligence Safety and Security. arXiv.","DOI":"10.1201\/9781351251389-8"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., and Li, J. (2018, January 18\u201323). Boosting adversarial attacks with momentum. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Salt Lake City, UT, USA.","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., and Frossard, P. (2016, January 27\u201330). A simple and accurate method to fool deep neural networks. Proceedings of the Computer Vision and Pattern Recognition, Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., and Swami, A. (2016, January 21\u201324). The limitations of deep learning in adversarial settings. Proceedings of the 2016 IEEE European Symposium on Security and Privacy, Saarbruecken, Germany.","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Phan, H., Xie, Y., Liao, S., Chen, J., and Yuan, B. (2020, January 7\u201312). Cag: A real-time low-cost enhanced-robustness high-transferability content-aware adversarial attack generator. Proceedings of the AAAI Conference on Artificial Intelligence, New York, NY, USA.","DOI":"10.1609\/aaai.v34i04.5990"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Carlini, N., and Wagner, D. (2017, January 22\u201326). Towards evaluating the robustness of neural networks. Proceedings of the 2017 IEEE Symposium on Security and Privacy, San Jose, CA, USA.","DOI":"10.1109\/SP.2017.49"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Zhang, C., Benz, P., Imtiaz, T., and Kweon, I.S. (2020, January 13\u201319). Understanding adversarial examples from the mutual influence of images and perturbations. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.01453"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z.B., and Swami, A. (2017, January 2\u20136). Practical black-box attacks against machine learning. Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, Abu Dhabi, United Arab Emirates.","DOI":"10.1145\/3052973.3053009"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Wang, X., He, X., Wang, J., and He, K. (2021, January 10\u201317). Admix: Enhancing the transferability of adversarial attacks. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Montreal, QC, Canada.","DOI":"10.1109\/ICCV48922.2021.01585"},{"key":"ref_13","unstructured":"Gao, L., Zhang, Q., Song, J., Liu, X., and Shen, H. (2020). Computer Vision\u2013ECCV 2020, 16th European Conference, Glasgow, UK, 23\u201328 August 2020, Springer International Publishing. Part XXVIII 16."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Yuan, Z., Zhang, J., Jia, Y., Tan, C., Xue, T., and Shan, S. (2021, January 10\u201317). Meta gradient adversarial attack. Proceedings of the IEEE\/CVF International Conference on Computer Vision, Montreal, QC, Canada.","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Wu, W., Su, Y., Lyu, M.R., and King, I. (2021, January 20\u201325). Improving the transferability of adversarial samples with adversarial transformations. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Nashville, TN, USA.","DOI":"10.1109\/CVPR46437.2021.00891"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Zhou, M., Wu, J., Liu, Y., Liu, S., and Zhu, C. (2020, January 13\u201319). DaST: Data-free substitute training for adversarial attacks. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00031"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Wang, W., Yin, B., Yao, T., Zhang, L., Fu, Y., Ding, S., Li, J., Huang, F., and Xue, X. (2021, January 20\u201325). Delving into data: Effectively substitute training for black-box attack. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Nashville, TN, USA.","DOI":"10.1109\/CVPR46437.2021.00473"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Narodytska, N., and Kasiviswanathan, S.P. (2017, January 21\u201326). Simple black-box adversarial attacks on deep neural networks. Proceedings of the Computer Vision and Pattern Recognition Workshops, Honolulu, HI, USA.","DOI":"10.1109\/CVPRW.2017.172"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","article-title":"One pixel attack for fooling deep neural networks","volume":"23","author":"Su","year":"2019","journal-title":"IEEE Trans. Evol. Comput."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"107102","DOI":"10.1016\/j.knosys.2021.107102","article-title":"A low-query black-box adversarial attack based on transferability","volume":"226","author":"Ding","year":"2021","journal-title":"Knowl. Based Syst."},{"key":"ref_21","unstructured":"Lin, J., Song, C., He, K., Wang, L., and Hopcroft, J.E. (2020). Nesterov accelerated gradient and scale invariance for adversarial attacks. arXiv."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"2349","DOI":"10.1007\/s10994-020-05916-1","article-title":"Spanning attack: Reinforce black-box attacks with unlabeled data","volume":"109","author":"Wang","year":"2020","journal-title":"Mach. Learn."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Rahmati, A., Moosavi-Dezfooli, S.M., Frossard, P., and Dai, H. (2020, January 13\u201319). Geoda: A geometric framework for black-box adversarial attacks. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00847"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Shi, Y., Han, Y., and Tian, Q. (2020, January 13\u201319). Polishing decision-based adversarial noise with a customized sampling. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, Seattle, WA, USA.","DOI":"10.1109\/CVPR42600.2020.00111"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Chen, J., Jordan, M.I., and Wainwright, M.J. Hop skip jump attack: A query-efficient decision-based attack. Proceedings of the 2020 IEEE Symposium on Security and Privacy, San Francisco, CA, USA, 18\u201321 May 2020.","DOI":"10.1109\/SP40000.2020.00045"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., and Frossard, P. (2017, January 21-26). Universal adversarial perturbations. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref_27","unstructured":"Sarkar, S., Bansal, A., Mahbub, U., and Chellappa, R. (2017). UPSET and ANGRI: Breaking high performance image classifiers. Computing Research Repository. arXiv."},{"key":"ref_28","unstructured":"Feng, Y., Wu, B., Fan, Y., Liu, L., Li, Z., and Xia, S. (2020, January 13\u201319). Efficient black-box adversarial attack guided by the distribution of adversarial perturbations. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), Seattle, WA, USA."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"341","DOI":"10.1023\/A:1008202821328","article-title":"Differential evolution\u2014A simple and efficient heuristic for global optimization over continuous spaces","volume":"11","author":"Storn","year":"1997","journal-title":"J. Glob. Optim."},{"key":"ref_30","first-page":"5","article-title":"Attacking convolutional neural network using differential evolution","volume":"11","author":"Su","year":"2019","journal-title":"IPSJ Trans. Comput. Vis. Appl."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"398","DOI":"10.1109\/TEVC.2008.927706","article-title":"Differential evolution algorithm with strategy adaptation for global numerical optimization","volume":"13","author":"Qin","year":"2008","journal-title":"IEEE Trans. Evol. Comput."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"945","DOI":"10.1109\/TEVC.2009.2014613","article-title":"JADE: Adaptive differential evolution with optional external archive","volume":"13","author":"Zhang","year":"2009","journal-title":"IEEE Trans. Evol. Comput."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Tanabe, R., and Fukunaga, A. (2013, January 20\u201323). Success-history based parameter adaptation for differential evolution. Proceedings of the 2013 IEEE Congress on Evolutionary Computation, Cancun, Mexico.","DOI":"10.1109\/CEC.2013.6557555"},{"key":"ref_34","unstructured":"Zhang, C. (2014). Theory and Application of Differential Evolutionary Algorithms, Beijing University of Technology Press."},{"key":"ref_35","first-page":"405","article-title":"Generation of adversarial examples using adaptive differential evolution","volume":"16","author":"Kushida","year":"2020","journal-title":"Int. J. Innov. Comput. Inf. Control."},{"key":"ref_36","unstructured":"Wang, K., Mao, L., Wu, M., Wang, K., and Wang, Y. (2020). Optimized one-pixel attack algorithm and its defense research. Netw. Secur. Technol. Appl., 63\u201366."},{"key":"ref_37","unstructured":"Vargas, D.V., and Kotyan, S. (2019). Model agnostic dual quality assessment for adversarial machine learning and an analysis of current neural networks and defenses. arXiv."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Kotyan, S., and Vargas, D.V. (2022). Adversarial robustness assessment: Why both L0 and L\u221e attacks are necessary. PLoS ONE, 17.","DOI":"10.1371\/journal.pone.0265723"},{"key":"ref_39","unstructured":"Vargas, D.V. (2020). Deep Neural Evolution: Deep Learning with Evolutionary Computation, Springer."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., and Sun, J. (2016, January 27\u201330). Deep residual learning for image recognition. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref_41","unstructured":"Lin, M., Chen, Q., and Yan, S. (2013). Network in network. arXiv."},{"key":"ref_42","unstructured":"Simonyan, K., and Zisserman, A. (2014). Very deep convolutional networks for large-scale image recognition. International Conference on Learning Representations. arXiv."},{"key":"ref_43","unstructured":"Krizhevsky, A., and Hinton, G. (2009). Handbook of Systemic Autoimmune Diseases, Springer."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"2278","DOI":"10.1109\/5.726791","article-title":"Gradient-based learning applied to document recognition","volume":"86","author":"Lecun","year":"1998","journal-title":"Proc. IEEE"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"329","DOI":"10.1016\/j.ins.2015.09.009","article-title":"Differential evolution with multi-population based ensemble of mutation strategies","volume":"329","author":"Wu","year":"2016","journal-title":"Inf. Sci."},{"key":"ref_46","first-page":"106","article-title":"Differential evolution algorithm with stage-based strategy adaption","volume":"46","author":"Ni","year":"2019","journal-title":"Comput. Sci."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Yang, S., and Sato, Y. (2016, January 24\u201329). Modified bare bones particle swarm optimization with differential evolution for large scale problem. Proceedings of the 2016 IEEE Congress on Evolutionary Computation, Vancouver, BC, Canada.","DOI":"10.1109\/CEC.2016.7744137"},{"key":"ref_48","first-page":"93","article-title":"Hybrid optimization algorithm based on grey wolf optimization and differential evolution for function optimization","volume":"44","author":"Zhang","year":"2017","journal-title":"Comput. Sci."},{"key":"ref_49","unstructured":"Carlini, N., and Wagner, D. (2016). Defensive distillation is not robust to adversarial examples. arXiv."},{"key":"ref_50","unstructured":"Carlini, N., and Wagner, D. (2017). Magnet and \u201cEfficient defenses against adversarial attacks\u201d are not robust to adversarial examples. arXiv."},{"key":"ref_51","unstructured":"Athalye, A., Carlini, N., and Wagner, D. (2018, January 10\u201315). Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. Proceedings of the International Conference on Machine Learning, Stockholmsm\u00e4ssan, Stockholm, Sweden."},{"key":"ref_52","first-page":"202","article-title":"Survey on adversarial attacks towards deep learning","volume":"8","author":"Liu","year":"2021","journal-title":"J. Cryptologic Res."}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/3\/487\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:52:27Z","timestamp":1760122347000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/3\/487"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,10]]},"references-count":52,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2023,3]]}},"alternative-id":["e25030487"],"URL":"https:\/\/doi.org\/10.3390\/e25030487","relation":{},"ISSN":["1099-4300"],"issn-type":[{"type":"electronic","value":"1099-4300"}],"subject":[],"published":{"date-parts":[[2023,3,10]]}}}