English
Related papers

Related papers: Simple black-box universal adversarial attacks on …

200 papers

As Segment Anything Model (SAM) becomes a popular foundation model in computer vision, its adversarial robustness has become a concern that cannot be ignored. This works investigates whether it is possible to attack SAM with image-agnostic…

Computer Vision and Pattern Recognition · Computer Science 2024-08-21 Dongshen Han , Chaoning Zhang , Sheng Zheng , Chang Lu , Yang Yang , Heng Tao Shen

We introduce Universal and Transferable Adversarial Perturbations (UTAP) for pathology foundation models that reveal critical vulnerabilities in their capabilities. Optimized using deep learning, UTAP comprises a fixed and weak noise…

Computer Vision and Pattern Recognition · Computer Science 2025-10-21 Yuntian Wang , Xilin Yang , Che-Yung Shen , Nir Pillar , Aydogan Ozcan

It has been widely substantiated that deep neural networks (DNNs) are susceptible and vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks by corrupting targeted objects (physical attack) or images…

Computer Vision and Pattern Recognition · Computer Science 2025-08-06 Jiawei Lian , Shaohui Mei , Xiaofei Wang , Yi Wang , Lefan Wang , Yingjie Lu , Mingyang Ma , Lap-Pui Chau

Adversarial attacks against deep learning-based object detectors have been studied extensively in the past few years. Most of the attacks proposed have targeted the model's integrity (i.e., caused the model to make incorrect predictions),…

Computer Vision and Pattern Recognition · Computer Science 2022-11-18 Avishag Shapira , Alon Zolfi , Luca Demetrio , Battista Biggio , Asaf Shabtai

Recent advances in diffusion models have enabled powerful image editing capabilities guided by natural language prompts, unlocking new creative possibilities. However, they introduce significant ethical and legal risks, such as deepfakes…

Computer Vision and Pattern Recognition · Computer Science 2026-02-17 Chanhui Lee , Seunghyun Shin , Donggyu Choi , Hae-gon Jeon , Jeany Son

We study the problem of finding a universal (image-agnostic) perturbation to fool machine learning (ML) classifiers (e.g., neural nets, decision tress) in the hard-label black-box setting. Recent work in adversarial ML in the white-box…

Machine Learning · Computer Science 2018-11-14 Thomas A. Hogan , Bhavya Kailkhura

Deep neural networks (DNNs) have demonstrated excellent performance on various tasks, however they are under the risk of adversarial examples that can be easily generated when the target model is accessible to an attacker (white-box…

Machine Learning · Computer Science 2020-09-28 Yang Bai , Yuyuan Zeng , Yong Jiang , Yisen Wang , Shu-Tao Xia , Weiwei Guo

Deep Neural Networks (DNNs) have become prevalent in wireless communication systems due to their promising performance. However, similar to other DNN-based applications, they are vulnerable to adversarial examples. In this work, we propose…

Cryptography and Security · Computer Science 2021-02-02 Alireza Bahramali , Milad Nasr , Amir Houmansadr , Dennis Goeckel , Don Towsley

With the rapid advancement of deep learning, the model robustness has become a significant research hotspot, \ie, adversarial attacks on deep neural networks. Existing works primarily focus on image classification tasks, aiming to alter the…

Computer Vision and Pattern Recognition · Computer Science 2025-01-06 Yufei Song , Ziqi Zhou , Minghui Li , Xianlong Wang , Hangtao Zhang , Menghao Deng , Wei Wan , Shengshan Hu , Leo Yu Zhang

Embodied agents in vision navigation coupled with deep neural networks have attracted increasing attention. However, deep neural networks have been shown vulnerable to malicious adversarial noises, which may potentially cause catastrophic…

Machine Learning · Computer Science 2025-05-20 Chengyang Ying , You Qiaoben , Xinning Zhou , Hang Su , Wenbo Ding , Jianyong Ai

The output of Deep Neural Networks (DNN) can be altered by a small perturbation of the input in a black box setting by making multiple calls to the DNN. However, the high computation and time required makes the existing approaches unusable.…

Cryptography and Security · Computer Science 2022-05-05 Tianxun Zhou , Shubhankar Agrawal , Prateek Manocha

Vision-language pre-training (VLP) models, trained on large-scale image-text pairs, have become widely used across a variety of downstream vision-and-language (V+L) tasks. This widespread adoption raises concerns about their vulnerability…

Computer Vision and Pattern Recognition · Computer Science 2024-10-17 Fan Yang , Yihao Huang , Kailong Wang , Ling Shi , Geguang Pu , Yang Liu , Haoyu Wang

Deep Neural Networks (DNNs) are vulnerable to the black-box adversarial attack that is highly transferable. This threat comes from the distribution gap between adversarial and clean samples in feature space of the target DNNs. In this…

Computer Vision and Pattern Recognition · Computer Science 2022-12-13 Xiaogang Xu , Hengshuang Zhao , Philip Torr , Jiaya Jia

Deep learning models achieve excellent performance in numerous machine learning tasks. Yet, they suffer from security-related issues such as adversarial examples and poisoning (backdoor) attacks. A deep learning model may be poisoned by…

Machine Learning · Computer Science 2023-08-25 Xiaoyun Xu , Oguzhan Ersoy , Stjepan Picek

Studies show that Deep Neural Network (DNN)-based image classification models are vulnerable to maliciously constructed adversarial examples. However, little effort has been made to investigate how DNN-based image retrieval models are…

Computer Vision and Pattern Recognition · Computer Science 2019-07-15 Guoping Zhao , Mingyu Zhang , Jiajun Liu , Ji-Rong Wen

Attacking deep learning based biometric systems has drawn more and more attention with the wide deployment of fingerprint/face/speaker recognition systems, given the fact that the neural networks are vulnerable to the adversarial examples,…

Audio and Speech Processing · Electrical Eng. & Systems 2020-04-08 Jiguo Li , Xinfeng Zhang , Chuanmin Jia , Jizheng Xu , Li Zhang , Yue Wang , Siwei Ma , Wen Gao

In this paper, we propose a novel and practical mechanism which enables the service provider to verify whether a suspect model is stolen from the victim model via model extraction attacks. Our key insight is that the profile of a DNN…

Cryptography and Security · Computer Science 2022-05-10 Zirui Peng , Shaofeng Li , Guoxing Chen , Cheng Zhang , Haojin Zhu , Minhui Xue

In the last decade, deep neural networks have proven to be very powerful in computer vision tasks, starting a revolution in the computer vision and machine learning fields. However, deep neural networks, usually, are not robust to…

Computer Vision and Pattern Recognition · Computer Science 2021-05-03 Hao Qiu , Leonardo Lucio Custode , Giovanni Iacca

Vulnerability of Deep Neural Networks (DNNs) to adversarial attacks has been attracting a lot of attention in recent studies. It has been shown that for many state of the art DNNs performing image classification there exist universal…

Computer Vision and Pattern Recognition · Computer Science 2017-11-21 Valentin Khrulkov , Ivan Oseledets

Powerful adversarial attack methods are vital for understanding how to construct robust deep neural networks (DNNs) and for thoroughly testing defense techniques. In this paper, we propose a black-box adversarial attack algorithm that can…

Machine Learning · Computer Science 2019-12-11 Yandong Li , Lijun Li , Liqiang Wang , Tong Zhang , Boqing Gong