English
Related papers

Related papers: GSE: Group-wise Sparse and Explainable Adversarial…

200 papers

Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of…

Computer Vision and Pattern Recognition · Computer Science 2019-05-28 Apostolos Modas , Seyed-Mohsen Moosavi-Dezfooli , Pascal Frossard

Adversarial attacks hamper the decision-making ability of neural networks by perturbing the input signal. The addition of calculated small distortion to images, for instance, can deceive a well-trained image classification network. In this…

Computer Vision and Pattern Recognition · Computer Science 2025-09-16 Tooba Imtiaz , Morgan Kohler , Jared Miller , Zifeng Wang , Masih Eskandar , Mario Sznaier , Octavia Camps , Jennifer Dy

Spiking neural networks (SNNs) have shown their competence in handling spatial-temporal event-based data with low energy consumption. Similar to conventional artificial neural networks (ANNs), SNNs are also vulnerable to gradient-based…

Computer Vision and Pattern Recognition · Computer Science 2025-03-07 Li Lun , Kunyu Feng , Qinglong Ni , Ling Liang , Yuan Wang , Ying Li , Dunshan Yu , Xiaoxin Cui

Evaluating the adversarial robustness of deep networks to gradient-based attacks is challenging. While most attacks consider $\ell_2$- and $\ell_\infty$-norm constraints to craft input perturbations, only a few investigate sparse $\ell_1$-…

Machine Learning · Computer Science 2025-03-07 Antonio Emanuele Cinà , Francesco Villani , Maura Pintor , Lea Schönherr , Battista Biggio , Marcello Pelillo

Despite their impressive performance, deep convolutional neural networks (CNNs) have been shown to be sensitive to small adversarial perturbations. These nuisances, which one can barely notice, are powerful enough to fool sophisticated and…

Machine Learning · Statistics 2019-08-07 Yaniv Romano , Aviad Aberdam , Jeremias Sulam , Michael Elad

When generating adversarial examples to attack deep neural networks (DNNs), Lp norm of the added perturbation is usually used to measure the similarity between original image and adversarial example. However, such adversarial attacks…

Machine Learning · Computer Science 2019-02-21 Kaidi Xu , Sijia Liu , Pu Zhao , Pin-Yu Chen , Huan Zhang , Quanfu Fan , Deniz Erdogmus , Yanzhi Wang , Xue Lin

Deep neural networks (DNNs) play an important role in machine learning due to its outstanding performance compared to other alternatives. However, DNNs are not suitable for safety-critical applications since DNNs can be easily fooled by…

Machine Learning · Computer Science 2021-03-26 Zhixin Pan , Prabhat Mishra

Despite the efficacy on a variety of computer vision tasks, deep neural networks (DNNs) are vulnerable to adversarial attacks, limiting their applications in security-critical systems. Recent works have shown the possibility of generating…

Computer Vision and Pattern Recognition · Computer Science 2018-12-21 Ziang Yan , Yiwen Guo , Changshui Zhang

Deep neural networks (DNNs) have been found to be vulnerable to adversarial examples. Adversarial examples are malicious images with visually imperceptible perturbations. While these carefully crafted perturbations restricted with tight…

Computer Vision and Pattern Recognition · Computer Science 2021-07-06 Yajie Wang , Shangbo Wu , Wenyi Jiang , Shengang Hao , Yu-an Tan , Quanxin Zhang

Deep neural networks (DNNs) have been proven to be vulnerable to adversarial examples. A special branch of adversarial examples, namely sparse adversarial examples, can fool the target DNNs by perturbing only a few pixels. However, many…

Computer Vision and Pattern Recognition · Computer Science 2022-03-21 Jinqiao Li , Xiaotao Liu , Jian Zhao , Furao Shen

Deep neural networks (DNNs) have achieved extraordinary success in numerous areas. However, to attain this success, DNNs often carry a large number of weight parameters, leading to heavy costs of memory and computation resources.…

Computer Vision and Pattern Recognition · Computer Science 2019-01-07 Rongrong Ma , Jianyu Miao , Lingfeng Niu , Peng Zhang

Adversarial attacks involve adding, small, often imperceptible, perturbations to inputs with the goal of getting a machine learning model to misclassifying them. While many different adversarial attack strategies have been proposed on image…

Computer Vision and Pattern Recognition · Computer Science 2018-06-01 Avishek Joey Bose , Parham Aarabi

We propose to execute deep neural networks (DNNs) with dynamic and sparse graph (DSG) structure for compressive memory and accelerative execution during both training and inference. The great success of DNNs motivates the pursuing of…

Machine Learning · Computer Science 2019-05-08 Liu Liu , Lei Deng , Xing Hu , Maohua Zhu , Guoqi Li , Yufei Ding , Yuan Xie

Deep neural network image classifiers are reported to be susceptible to adversarial evasion attacks, which use carefully crafted images created to mislead a classifier. Recently, various kinds of adversarial attack methods have been…

Machine Learning · Computer Science 2019-10-04 He Zhao , Trung Le , Paul Montague , Olivier De Vel , Tamas Abraham , Dinh Phung

Numerous recent studies have demonstrated how Deep Neural Network (DNN) classifiers can be fooled by adversarial examples, in which an attacker adds perturbations to an original sample, causing the classifier to misclassify the sample.…

Machine Learning · Computer Science 2021-02-09 Yigit Alparslan , Ken Alparslan , Jeremy Keim-Shenk , Shweta Khade , Rachel Greenstadt

While end-to-end training of Deep Neural Networks (DNNs) yields state of the art performance in an increasing array of applications, it does not provide insight into, or control over, the features being extracted. We report here on a…

Neural and Evolutionary Computing · Computer Science 2022-07-11 Metehan Cekic , Can Bakiskan , Upamanyu Madhow

We propose a new approach to Generative Adversarial Networks (GANs) to achieve an improved performance with additional robustness to its so-called and well recognized mode collapse. We first proceed by mapping the desired data onto a…

Computer Vision and Pattern Recognition · Computer Science 2019-08-26 Shahin Mahdizadehaghdam , Ashkan Panahi , Hamid Krim

Deep Neural Networks are known to be vulnerable to small, adversarially crafted, perturbations. The current most effective defense methods against these adversarial attacks are variants of adversarial training. In this paper, we introduce a…

Machine Learning · Computer Science 2021-04-13 Can Bakiskan , Metehan Cekic , Ahmet Dundar Sezer , Upamanyu Madhow

Recent research has revealed that the output of Deep Neural Networks (DNN) can be easily altered by adding relatively small perturbations to the input vector. In this paper, we analyze an attack in an extremely limited scenario where only…

Machine Learning · Computer Science 2019-10-18 Jiawei Su , Danilo Vasconcellos Vargas , Sakurai Kouichi

Adversarial attacks have been shown to be highly effective at degrading the performance of deep neural networks (DNNs). The most prominent defense is adversarial training, a method for learning a robust model. Nevertheless, adversarial…

Computer Vision and Pattern Recognition · Computer Science 2021-09-07 Uriya Pesso , Koby Bibas , Meir Feder