English
Related papers

Related papers: Generating Adversarial Examples with Better Transf…

200 papers

Deep neural networks (DNNs) exhibit vulnerability to adversarial examples that can transfer across different DNN models. A particularly challenging problem is developing transferable targeted attacks that can mislead DNN models into…

Computer Vision and Pattern Recognition · Computer Science 2025-03-26 Kaisheng Liang , Xuelong Dai , Yanjie Li , Dong Wang , Bin Xiao

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, namely, AEs generated for a source model fool other (target) models. In this paper, we investigate…

Computer Vision and Pattern Recognition · Computer Science 2022-09-08 Miki Tanaka , Isao Echizen , Hitoshi Kiya

Adversarial attacks can mislead deep neural networks (DNNs) by adding imperceptible perturbations to benign examples. The attack transferability enables adversarial examples to attack black-box DNNs with unknown architectures or parameters,…

Computer Vision and Pattern Recognition · Computer Science 2023-04-25 Kaisheng Liang , Bin Xiao

Deep neural networks were significantly vulnerable to adversarial examples manipulated by malicious tiny perturbations. Although most conventional adversarial attacks ensured the visual imperceptibility between adversarial examples and…

Computer Vision and Pattern Recognition · Computer Science 2024-02-06 Shuai Li , Xiaoyu Jiang , Xiaoguang Ma

Adversarial examples are small and often imperceptible perturbations crafted to fool machine learning models. These attacks seriously threaten the reliability of deep neural networks, especially in security-sensitive domains. Evasion…

Cryptography and Security · Computer Science 2025-06-24 Francesco Marchiori , Marco Alecci , Luca Pajola , Mauro Conti

Deep neural networks (DNNs) are known to be susceptible to adversarial examples, leading to significant performance degradation. In black-box attack scenarios, a considerable attack performance gap between the surrogate model and the target…

Computer Vision and Pattern Recognition · Computer Science 2025-11-13 Haijing Guo , Jiafeng Wang , Zhaoyu Chen , Kaixun Jiang , Lingyi Hong , Pinxue Guo , Jinglun Li , Wenqiang Zhang

Deep neural networks are vulnerable to adversarial attacks, where a small perturbation to an input alters the model prediction. In many cases, malicious inputs intentionally crafted for one model can fool another model. In this paper, we…

Machine Learning · Computer Science 2021-09-23 Liping Yuan , Xiaoqing Zheng , Yi Zhou , Cho-Jui Hsieh , Kai-wei Chang

Deep neural networks are vulnerable to adversarial examples, which can fool deep models by adding subtle perturbations. Although existing attacks have achieved promising results, it still leaves a long way to go for generating transferable…

Computer Vision and Pattern Recognition · Computer Science 2022-01-04 Yexin Duan , Junhua Zou , Xingyu Zhou , Wu Zhang , Jin Zhang , Zhisong Pan

One intriguing property of adversarial attacks is their "transferability" -- an adversarial example crafted with respect to one deep neural network (DNN) model is often found effective against other DNNs as well. Intensive research has been…

Computer Vision and Pattern Recognition · Computer Science 2022-04-11 Yuhao Mao , Chong Fu , Saizhuo Wang , Shouling Ji , Xuhong Zhang , Zhenguang Liu , Jun Zhou , Alex X. Liu , Raheem Beyah , Ting Wang

Adversarial attacks have verified the existence of the vulnerability of neural networks. By adding small perturbations to a benign example, adversarial attacks successfully generate adversarial examples that lead misclassification of deep…

Machine Learning · Computer Science 2022-06-22 Hoki Kim , Jinseong Park , Jaewook Lee

Transfer-based attacks generate adversarial examples on the surrogate model, which can mislead other black-box models without access, making it promising to attack real-world applications. Recently, several works have been proposed to boost…

Computer Vision and Pattern Recognition · Computer Science 2023-11-22 Xiaosen Wang , Kangheng Tong , Kun He

The ability to transfer adversarial attacks from one model (the surrogate) to another model (the victim) has been an issue of concern within the machine learning (ML) community. The ability to successfully evade unseen models represents an…

Machine Learning · Computer Science 2021-09-28 Luke E. Richards , André Nguyen , Ryan Capps , Steven Forsythe , Cynthia Matuszek , Edward Raff

Adversarial examples reveal the blind spots of deep neural networks (DNNs) and represent a major concern for security-critical applications. The transferability of adversarial examples makes real-world attacks possible in black-box…

Computer Vision and Pattern Recognition · Computer Science 2019-10-16 Muzammal Naseer , Salman H. Khan , Harris Khan , Fahad Shahbaz Khan , Fatih Porikli

Deep neural networks are vulnerable to adversarial examples that exhibit transferability across various models. Numerous approaches are proposed to enhance the transferability of adversarial examples, including advanced optimization, data…

Computer Vision and Pattern Recognition · Computer Science 2025-10-27 Zhaoyu Chen , Haijing Guo , Kaixun Jiang , Jiyuan Fu , Xinyu Zhou , Dingkang Yang , Hao Tang , Bo Li , Wenqiang Zhang

Deep neural networks (DNNs) are known to be vulnerable to adversarial examples. It is thus imperative to devise effective attack algorithms to identify the deficiencies of DNNs beforehand in security-sensitive applications. To efficiently…

Machine Learning · Computer Science 2022-04-04 Jianping Zhang , Weibin Wu , Jen-tse Huang , Yizhan Huang , Wenxuan Wang , Yuxin Su , Michael R. Lyu

Malicious attackers can generate targeted adversarial examples by imposing tiny noises, forcing neural networks to produce specific incorrect outputs. With cross-model transferability, network models remain vulnerable even in black-box…

Computer Vision and Pattern Recognition · Computer Science 2022-11-28 Hung-Jui Wang , Yu-Yu Wu , Shang-Tse Chen

Deep neural networks have achieved unprecedented success on diverse vision tasks. However, they are vulnerable to adversarial noise that is imperceptible to humans. This phenomenon negatively affects their deployment in real-world…

Computer Vision and Pattern Recognition · Computer Science 2023-03-29 Jianping Zhang , Jen-tse Huang , Wenxuan Wang , Yichen Li , Weibin Wu , Xiaosen Wang , Yuxin Su , Michael R. Lyu

Face Recognition (FR) models are vulnerable to adversarial examples that subtly manipulate benign face images, underscoring the urgent need to improve the transferability of adversarial attacks in order to expose the blind spots of these…

Computer Vision and Pattern Recognition · Computer Science 2025-04-01 Fengfan Zhou , Bangjie Yin , Hefei Ling , Qianyu Zhou , Wenxuan Wang

Deep neural networks (DNNs) are vulnerable to adversarial examples (AEs) that mislead the model while appearing benign to human observers. A critical concern is the transferability of AEs, which enables black-box attacks without direct…

Cryptography and Security · Computer Science 2025-10-21 Jiahao Chen , Zhou Feng , Rui Zeng , Yuwen Pu , Chunyi Zhou , Yi Jiang , Yuyou Gan , Jinbao Li , Shouling Ji

Deep neural networks tend to be vulnerable to adversarial perturbations, which by adding to a natural image can fool a respective model with high confidence. Recently, the existence of image-agnostic perturbations, also known as universal…

Computer Vision and Pattern Recognition · Computer Science 2020-10-30 Atiye Sadat Hashemi , Andreas Bär , Saeed Mozaffari , Tim Fingscheidt