English
Related papers

Related papers: Fooling Object Detectors: Adversarial Attacks by H…

200 papers

Adversarial attacks on deep learning models have received increased attention in recent years. Work in this area has mostly focused on gradient-based techniques, so-called 'white-box' attacks, where the attacker has access to the targeted…

Computer Vision and Pattern Recognition · Computer Science 2025-10-21 Raz Lapid , Eylon Mizrahi , Moshe Sipper

In recent years, the study of adversarial robustness in object detection systems, particularly those based on deep neural networks (DNNs), has become a pivotal area of research. Traditional physical attacks targeting object detectors, such…

Computer Vision and Pattern Recognition · Computer Science 2024-10-15 Tao Lin , Lijia Yu , Gaojie Jin , Renjue Li , Peng Wu , Lijun Zhang

Adversarial images pose a severe security threat to multimodal large language models through prompt injection. Existing defenses largely lack a principled understanding of the underlying mechanisms and struggle to balance efficiency and…

Machine Learning · Computer Science 2026-05-26 Dongpeng Zhang , Ke Ma , Yangbangyan Jiang , Gaozheng Pei , Longtao Huang , Qianqian Xu , Qingming Huang

Textual adversarial examples pose serious threats to the reliability of natural language processing systems. Recent studies suggest that adversarial examples tend to deviate from the underlying manifold of normal texts, whereas pre-trained…

Computation and Language · Computer Science 2025-04-15 Xiaomei Zhang , Zhaoxi Zhang , Yanjun Zhang , Xufei Zheng , Leo Yu Zhang , Shengshan Hu , Shirui Pan

In this paper, we propose a new Deep Neural Network (DNN) testing algorithm called the Constrained Gradient Descent (CGD) method, and an implementation we call CGDTest aimed at exposing security and robustness issues such as adversarial…

Machine Learning · Computer Science 2023-04-05 Vineel Nagisetty , Laura Graves , Guanting Pan , Piyush Jha , Vijay Ganesh

Numerous recent studies have demonstrated how Deep Neural Network (DNN) classifiers can be fooled by adversarial examples, in which an attacker adds perturbations to an original sample, causing the classifier to misclassify the sample.…

Machine Learning · Computer Science 2021-02-09 Yigit Alparslan , Ken Alparslan , Jeremy Keim-Shenk , Shweta Khade , Rachel Greenstadt

Recent studies show that the deep neural networks (DNNs) have achieved great success in various tasks. However, even the \emph{state-of-the-art} deep learning based classifiers are extremely vulnerable to adversarial examples, resulting in…

Computer Vision and Pattern Recognition · Computer Science 2022-05-24 Sen Pei , Jiaxi Sun , Xiaopeng Zhang , Gaofeng Meng

Deep learning has proven to be a powerful tool for computer vision and has seen widespread adoption for numerous tasks. However, deep learning algorithms are known to be vulnerable to adversarial examples. These adversarial inputs are…

Cryptography and Security · Computer Science 2018-07-25 Kevin Eykholt , Ivan Evtimov , Earlence Fernandes , Bo Li , Dawn Song , Tadayoshi Kohno , Amir Rahmati , Atul Prakash , Florian Tramer

Neural networks are vulnerable to adversarial examples, which poses a threat to their application in security sensitive systems. We propose high-level representation guided denoiser (HGD) as a defense for image classification. Standard…

Computer Vision and Pattern Recognition · Computer Science 2018-05-09 Fangzhou Liao , Ming Liang , Yinpeng Dong , Tianyu Pang , Xiaolin Hu , Jun Zhu

Despite a large amount of attention on adversarial examples, very few works have demonstrated an effective defense against this threat. We examine Deep k-Nearest Neighbor (DkNN), a proposed defense that combines k-Nearest Neighbor (kNN) and…

Cryptography and Security · Computer Science 2019-03-21 Chawin Sitawarin , David Wagner

Deep Learning methods have become state-of-the-art for solving tasks such as Face Recognition (FR). Unfortunately, despite their success, it has been pointed out that these learning models are exposed to adversarial inputs - images to which…

Computer Vision and Pattern Recognition · Computer Science 2020-11-23 Fabio Valerio Massoli , Fabio Carrara , Giuseppe Amato , Fabrizio Falchi

Recent studies have shown that deep learning models are vulnerable to specifically crafted adversarial inputs that are quasi-imperceptible to humans. In this letter, we propose a novel method to detect adversarial inputs, by augmenting the…

Machine Learning · Computer Science 2020-02-25 Kirthi Shankar Sivamani , Rajeev Sahay , Aly El Gamal

Adversarial perturbations can deceive neural networks by adding small, imperceptible noise to the input. Recent object trackers with transformer backbones have shown strong performance on tracking datasets, but their adversarial robustness…

Computer Vision and Pattern Recognition · Computer Science 2024-11-27 Fatemeh Nourilenjan Nokabadi , Yann Batiste Pequignot , Jean-Francois Lalonde , Christian Gagné

Deep neural networks based object detection models have revolutionized computer vision and fueled the development of a wide range of visual recognition applications. However, recent studies have revealed that deep object detectors can be…

Cryptography and Security · Computer Science 2020-07-14 Ka-Ho Chow , Ling Liu , Mehmet Emre Gursoy , Stacey Truex , Wenqi Wei , Yanzhao Wu

Deep neural networks (DNNs) can easily be cheated by some imperceptible but purposeful noise added to images, and erroneously classify them. Previous defensive work mostly focused on retraining the models or detecting the noise, but has…

Artificial Intelligence · Computer Science 2024-05-31 Jing Wen

Deep neural networks (DNNs) have been found to be vulnerable to adversarial examples. Adversarial examples are malicious images with visually imperceptible perturbations. While these carefully crafted perturbations restricted with tight…

Computer Vision and Pattern Recognition · Computer Science 2021-07-06 Yajie Wang , Shangbo Wu , Wenyi Jiang , Shengang Hao , Yu-an Tan , Quanxin Zhang

State-of-the-art object detectors are vulnerable to localized patch hiding attacks, where an adversary introduces a small adversarial patch to make detectors miss the detection of salient objects. The patch attacker can carry out a…

Computer Vision and Pattern Recognition · Computer Science 2021-10-28 Chong Xiang , Prateek Mittal

Adversarial noises are useful tools to probe the weakness of deep learning based computer vision algorithms. In this paper, we describe a robust adversarial perturbation (R-AP) method to attack deep proposal-based object detectors and…

Computer Vision and Pattern Recognition · Computer Science 2019-11-05 Yuezun Li , Daniel Tian , Ming-Ching Chang , Xiao Bian , Siwei Lyu

In this paper, we propose an approach that exploits object segmentation in order to improve the accuracy of object detection. We frame the problem as inference in a Markov Random Field, in which each detection hypothesis scores object…

Computer Vision and Pattern Recognition · Computer Science 2015-02-17 Yukun Zhu , Raquel Urtasun , Ruslan Salakhutdinov , Sanja Fidler

Current adversarial attack research reveals the vulnerability of learning-based classifiers against carefully crafted perturbations. However, most existing attack methods have inherent limitations in cross-dataset generalization as they…

Computer Vision and Pattern Recognition · Computer Science 2022-03-25 Cheng Luo , Qinliang Lin , Weicheng Xie , Bizhu Wu , Jinheng Xie , Linlin Shen