English
Related papers

Related papers: Boosting Adversarial Transferability by Block Shuf…

200 papers

The transferability of adversarial examples allows the deception on black-box models, and transfer-based targeted attacks have attracted a lot of interest due to their practical applicability. To maximize the transfer success rate,…

Computer Vision and Pattern Recognition · Computer Science 2022-03-18 Junyoung Byun , Seungju Cho , Myung-Joon Kwon , Hee-Seon Kim , Changick Kim

Adversarial attacks have become a well-explored domain, frequently serving as evaluation baselines for model robustness. Among these, black-box attacks based on transferability have received significant attention due to their practical…

Machine Learning · Computer Science 2025-05-26 Chun Tong Lei , Zhongliang Guo , Hon Chung Lee , Minh Quoc Duong , Chun Pong Lau

Existing works have identified the limitation of top-$1$ attack success rate (ASR) as a metric to evaluate the attack strength but exclusively investigated it in the white-box setting, while our work extends it to a more practical black-box…

Machine Learning · Computer Science 2022-04-04 Chaoning Zhang , Philipp Benz , Adil Karjauv , Jae Won Cho , Kang Zhang , In So Kweon

In the last decade, the use of Machine Learning techniques in anomaly-based intrusion detection systems has seen much success. However, recent studies have shown that Machine learning in general and deep learning specifically are vulnerable…

Cryptography and Security · Computer Science 2023-03-14 Islam Debicha , Thibault Debatty , Jean-Michel Dricot , Wim Mees , Tayeb Kenaza

Adversarial attacks and backdoor attacks are two common security threats that hang over deep learning. Both of them harness task-irrelevant features of data in their implementation. Text style is a feature that is naturally irrelevant to…

Computation and Language · Computer Science 2021-10-15 Fanchao Qi , Yangyi Chen , Xurui Zhang , Mukai Li , Zhiyuan Liu , Maosong Sun

Transferable adversarial attacks pose significant threats to deep neural networks, particularly in black-box scenarios where internal model information is inaccessible. Studying adversarial attack methods helps advance the performance of…

Artificial Intelligence · Computer Science 2024-09-23 Zhibo Jin , Jiayu Zhang , Zhiyu Zhu , Chenyu Zhang , Jiahao Huang , Jianlong Zhou , Fang Chen

Adversarial training is the industry standard for producing models that are robust to small adversarial perturbations. However, machine learning practitioners need models that are robust to other kinds of changes that occur naturally, such…

Computer Vision and Pattern Recognition · Computer Science 2021-11-02 Manli Shu , Zuxuan Wu , Micah Goldblum , Tom Goldstein

Adversarial face examples possess two critical properties: Visual Quality and Transferability. However, existing approaches rarely address these properties simultaneously, leading to subpar results. To address this issue, we propose a novel…

Computer Vision and Pattern Recognition · Computer Science 2024-03-20 Fengfan Zhou , Hefei Ling , Yuxuan Shi , Jiazhong Chen , Ping Li

The transferability of adversarial perturbations between image models has been extensively studied. In this case, an attack is generated from a known surrogate \eg, the ImageNet trained model, and transferred to change the decision of an…

Computer Vision and Pattern Recognition · Computer Science 2023-04-06 Muzammal Naseer , Ahmad Mahmood , Salman Khan , Fahad Khan

Existing deep neural networks, say for image classification, have been shown to be vulnerable to adversarial images that can cause a DNN misclassification, without any perceptible change to an image. In this work, we propose shock absorbing…

Machine Learning · Computer Science 2019-09-19 Kevin Eykholt , Swati Gupta , Atul Prakash , Amir Rahmati , Pratik Vaishnavi , Haizhong Zheng

Adversarial examples are perturbed inputs designed to fool machine learning models. Adversarial training injects such examples into training data to increase robustness. To scale this technique to large datasets, perturbations are crafted…

Machine Learning · Statistics 2020-04-28 Florian Tramèr , Alexey Kurakin , Nicolas Papernot , Ian Goodfellow , Dan Boneh , Patrick McDaniel

Deep neural network image classifiers are known to be susceptible not only to adversarial examples created for them but even those created for others. This phenomenon poses a potential security risk in various black-box systems relying on…

Computer Vision and Pattern Recognition · Computer Science 2021-09-14 Kevin Richard G. Operiano , Wanchalerm Pora , Hitoshi Iba , Hiroshi Kera

By adding human-imperceptible noise to clean images, the resultant adversarial examples can fool other unknown models. Features of a pixel extracted by deep neural networks (DNNs) are influenced by its surrounding regions, and different…

Computer Vision and Pattern Recognition · Computer Science 2020-12-03 Lianli Gao , Qilong Zhang , Jingkuan Song , Xianglong Liu , Heng Tao Shen

Deep neural networks (DNNs) have achieved remarkable success in diverse fields. However, it has been demonstrated that DNNs are very vulnerable to adversarial examples even in black-box settings. A large number of black-box attack methods…

Machine Learning · Computer Science 2022-03-29 Junjie Fu , Jian Sun , Gang Wang

Deep learning-based image denoising models demonstrate remarkable performance, but their lack of robustness analysis remains a significant concern. A major issue is that these models are susceptible to adversarial attacks, where small,…

Computer Vision and Pattern Recognition · Computer Science 2025-08-29 Jie Ning , Jiebao Sun , Shengzhu Shi , Zhichang Guo , Yao Li , Hongwei Li , Boying Wu

Adversarial examples have been demonstrated to threaten many computer vision tasks including object detection. However, the existing attacking methods for object detection have two limitations: poor transferability, which denotes that the…

Computer Vision and Pattern Recognition · Computer Science 2019-05-14 Xingxing Wei , Siyuan Liang , Ning Chen , Xiaochun Cao

Deep neural networks (DNNs) have been widely used in many fields such as images processing, speech recognition; however, they are vulnerable to adversarial examples, and this is a security issue worthy of attention. Because the training…

Cryptography and Security · Computer Science 2019-08-08 Wenjian Luo , Chenwang Wu , Nan Zhou , Li Ni

Deep Neural Networks (DNNs) are vulnerable to adversarial examples, which are crafted by adding human-imperceptible perturbations to the benign inputs. Simultaneously, adversarial examples exhibit transferability across models, enabling…

Computer Vision and Pattern Recognition · Computer Science 2024-07-17 Jiafeng Wang , Zhaoyu Chen , Kaixun Jiang , Dingkang Yang , Lingyi Hong , Pinxue Guo , Haijing Guo , Wenqiang Zhang

Adversarial machine learning is an emerging area showing the vulnerability of deep learning models. Exploring attack methods to challenge state of the art artificial intelligence (A.I.) models is an area of critical concern. The reliability…

Computer Vision and Pattern Recognition · Computer Science 2022-08-31 Samet Bayram , Kenneth Barner

Given the extensive research and real-world applications of automatic speech recognition (ASR), ensuring the robustness of ASR models against minor input perturbations becomes a crucial consideration for maintaining their effectiveness in…

Audio and Speech Processing · Electrical Eng. & Systems 2024-11-15 Xiaoxue Gao , Zexin Li , Yiming Chen , Cong Liu , Haizhou Li