English
Related papers

Related papers: Transferability of Adversarial Examples to Attack …

200 papers

Deep Learning methods have become state-of-the-art for solving tasks such as Face Recognition (FR). Unfortunately, despite their success, it has been pointed out that these learning models are exposed to adversarial inputs - images to which…

Computer Vision and Pattern Recognition · Computer Science 2020-11-23 Fabio Valerio Massoli , Fabio Carrara , Giuseppe Amato , Fabrizio Falchi

Adversarial face examples possess two critical properties: Visual Quality and Transferability. However, existing approaches rarely address these properties simultaneously, leading to subpar results. To address this issue, we propose a novel…

Computer Vision and Pattern Recognition · Computer Science 2024-03-20 Fengfan Zhou , Hefei Ling , Yuxuan Shi , Jiazhong Chen , Ping Li

Adversarial attacks on face recognition (FR) systems pose a significant security threat, yet most are confined to the digital domain or require white-box access. We introduce GaP (Gaussian Patch), a novel method to generate a universal,…

Computer Vision and Pattern Recognition · Computer Science 2025-09-30 Andrey Kaznacheev , Matvey Mikhalchuk , Andrey Kuznetsov , Aleksandr Petiushko , Anton Razzhigaev

Deep neural networks (DNNs) have shown superior performance comparing to traditional image denoising algorithms. However, DNNs are inevitably vulnerable while facing adversarial attacks. In this paper, we propose an adversarial attack…

Computer Vision and Pattern Recognition · Computer Science 2026-05-01 Jie Ning , Jiebao Sun , Yao Li , Zhichang Guo , Wangmeng Zuo

Deep neural networks have made tremendous progress in 3D point-cloud recognition. Recent works have shown that these 3D recognition networks are also vulnerable to adversarial samples produced from various attack methods, including…

Computer Vision and Pattern Recognition · Computer Science 2020-11-03 Hang Zhou , Dongdong Chen , Jing Liao , Weiming Zhang , Kejiang Chen , Xiaoyi Dong , Kunlin Liu , Gang Hua , Nenghai Yu

This paper investigates a class of attacks targeting the confidentiality aspect of security in Deep Reinforcement Learning (DRL) policies. Recent research have established the vulnerability of supervised machine learning models (e.g.,…

Machine Learning · Computer Science 2019-06-05 Vahid Behzadan , William Hsu

Deep neural networks have been shown to exhibit an intriguing vulnerability to adversarial input images corrupted with imperceptible perturbations. However, the majority of adversarial attacks assume global, fine-grained control over the…

Computer Vision and Pattern Recognition · Computer Science 2019-08-19 Ameya Joshi , Amitangshu Mukherjee , Soumik Sarkar , Chinmay Hegde

We consider the blackbox transfer-based targeted adversarial attack threat model in the realm of deep neural network (DNN) image classifiers. Rather than focusing on crossing decision boundaries at the output layer of the source model, our…

Cryptography and Security · Computer Science 2020-05-01 Nathan Inkawhich , Kevin J Liang , Binghui Wang , Matthew Inkawhich , Lawrence Carin , Yiran Chen

Face recognition (FR) models can be easily fooled by adversarial examples, which are crafted by adding imperceptible perturbations on benign face images. The existence of adversarial face examples poses a great threat to the security of…

Computer Vision and Pattern Recognition · Computer Science 2023-07-20 Fengfan Zhou , Hefei Ling , Yuxuan Shi , Jiazhong Chen , Zongyi Li , Ping Li

Convolutional Neural Networks (CNNs) models are one of the most frequently used deep learning networks, and extensively used in both academia and industry. Recent studies demonstrated that adversarial attacks against such models can…

Cryptography and Security · Computer Science 2022-04-01 Ehsan Nowroozi , Yassine Mekdad , Mohammad Hajian Berenjestanaki , Mauro Conti , Abdeslam EL Fergougui

In this paper, we propose a novel framework for ownership verification of deep neural network (DNN) models for image classification tasks. It allows verification of model identity by both the rightful owner and third party without…

Machine Learning · Computer Science 2025-07-31 Teruki Sano , Minoru Kuribayashi , Masao Sakai , Shuji Isobe , Eisuke Koizumi

Most existing adversarial attack methods for remote sensing images merely add adversarial perturbations or patches, resulting in unnatural modifications. Clouds are common atmospheric effects in remote sensing images. Generating clouds on…

Computer Vision and Pattern Recognition · Computer Science 2024-09-24 Fei Ma , Yuqiang Feng , Fan Zhang , Yongsheng Zhou

Credit card fraud detection (CCFD) is a critical application of Machine Learning (ML) in the financial sector, where accurately identifying fraudulent transactions is essential for mitigating financial losses. ML models have demonstrated…

Cryptography and Security · Computer Science 2025-08-21 Jan Lum Fok , Qingwen Zeng , Shiping Chen , Oscar Fawkes , Huaming Chen

Recent research has revealed that the security of deep neural networks that directly process 3D point clouds to classify objects can be threatened by adversarial samples. Although existing adversarial attack methods achieve high success…

Computer Vision and Pattern Recognition · Computer Science 2021-10-11 Atrin Arya , Hanieh Naderi , Shohreh Kasaei

Adversarial training is the most empirically successful approach in improving the robustness of deep neural networks for image classification.For text classification, however, existing synonym substitution based adversarial attacks are…

Computation and Language · Computer Science 2020-12-17 Xiaosen Wang , Yichen Yang , Yihe Deng , Kun He

Recent research has proved that deep neural networks (DNNs) are vulnerable to adversarial examples, the legitimate input added with imperceptible and well-designed perturbations can fool DNNs easily in the testing stage. However, most of…

Machine Learning · Computer Science 2021-01-26 Yixiang Wang , Jiqiang Liu , Xiaolin Chang

Deep neural networks are vulnerable to adversarial examples, which are crafted by adding human-imperceptible perturbations to original images. Most existing adversarial attack methods achieve nearly 100% attack success rates under the…

Computer Vision and Pattern Recognition · Computer Science 2022-04-15 Guoqiu Wang , Huanqian Yan , Ying Guo , Xingxing Wei

Federated Learning (FL) is a distributed machine learning diagram that enables multiple clients to collaboratively train a global model without sharing their private local data. However, FL systems are vulnerable to attacks that are…

Machine Learning · Computer Science 2024-08-20 Qilei Li , Ahmed M. Abdelmoniem

Adversarial examples are of wide concern due to their impact on the reliability of contemporary machine learning systems. Effective adversarial examples are mostly found via white-box attacks. However, in some cases they can be transferred…

Machine Learning · Computer Science 2019-07-16 Deyan Petrov , Timothy M. Hospedales

Deep learning (DL) has shown great success in many human-related tasks, which has led to its adoption in many computer vision based applications, such as security surveillance systems, autonomous vehicles and healthcare. Such…

Computer Vision and Pattern Recognition · Computer Science 2022-01-10 Ahmed Aldahdooh , Wassim Hamidouche , Sid Ahmed Fezza , Olivier Deforges