English
Related papers

Related papers: CARE: Ensemble Adversarial Robustness Evaluation A…

200 papers

State-of-the-art deep neural networks (DNNs) have been proved to have excellent performance on unsupervised domain adaption (UDA). However, recent work shows that DNNs perform poorly when being attacked by adversarial samples, where these…

Computer Vision and Pattern Recognition · Computer Science 2021-08-05 Liyuan Zhang , Yuhang Zhou , Lei Zhang

Adversarial examples are perturbed inputs designed to fool machine learning models. Adversarial training injects such examples into training data to increase robustness. To scale this technique to large datasets, perturbations are crafted…

Machine Learning · Statistics 2020-04-28 Florian Tramèr , Alexey Kurakin , Nicolas Papernot , Ian Goodfellow , Dan Boneh , Patrick McDaniel

Adversarial Training is proved to be an efficient method to defend against adversarial examples, being one of the few defenses that withstand strong attacks. However, traditional defense mechanisms assume a uniform attack over the examples…

Machine Learning · Computer Science 2020-10-27 Huimin Zeng , Chen Zhu , Tom Goldstein , Furong Huang

The existence of adversarial data examples has drawn significant attention in the deep-learning community; such data are seemingly minimally perturbed relative to the original data, but lead to very different outputs from a deep-learning…

Machine Learning · Computer Science 2019-11-12 Bai Li , Changyou Chen , Wenlin Wang , Lawrence Carin

Adversarial training is one of the most effective approaches defending against adversarial examples for deep learning models. Unlike other defense strategies, adversarial training aims to promote the robustness of models intrinsically.…

Machine Learning · Computer Science 2021-04-22 Tao Bai , Jinqi Luo , Jun Zhao , Bihan Wen , Qian Wang

Adversarial perturbations pose a significant threat to deep learning models. Adversarial Training (AT), the predominant defense method, faces challenges of high computational costs and a degradation in standard performance. While data…

Computer Vision and Pattern Recognition · Computer Science 2025-11-13 Wang Yu-Hang , Shiwei Li , Jianxiang Liao , Li Bohan , Jian Liu , Wenfei Yin

Advanced Persistent Threats (APTs) have created new security challenges for critical infrastructures due to their stealthy, dynamic, and adaptive natures. In this work, we aim to lay a game-theoretic foundation by establishing a multi-stage…

Computer Science and Game Theory · Computer Science 2018-09-10 Linan Huang , Quanyan Zhu

Since the discovery of adversarial attacks against machine learning models nearly a decade ago, research on adversarial machine learning has rapidly evolved into an eternal war between defenders, who seek to increase the robustness of ML…

Machine Learning · Computer Science 2022-10-25 Farhan Ahmed , Pratik Vaishnavi , Kevin Eykholt , Amir Rahmati

The robustness of modern machine learning (ML) models has become an increasing concern within the community. The ability to subvert a model into making errant predictions using seemingly inconsequential changes to input is startling, as is…

Machine Learning · Computer Science 2023-06-19 Edward Raff , Michel Benaroch , Andrew L. Farris

In the face of an increasingly broad cyberattack surface, cyberattack-resilient load forecasting for electric utilities is both more necessary and more challenging than ever. In this paper, we propose an adversarial machine learning (AML)…

Systems and Control · Electrical Eng. & Systems 2020-01-09 Zefan Tang , Jieying Jiao , Peng Zhang , Meng Yue , Chen Chen , Jun Yan

Deep learning (DL) has significantly transformed cybersecurity, enabling advancements in malware detection, botnet identification, intrusion detection, user authentication, and encrypted traffic analysis. However, the rise of adversarial…

Cryptography and Security · Computer Science 2024-12-18 Li Li

The increasing prevalence of adversarial attacks on Artificial Intelligence (AI) systems has created a need for innovative security measures. However, the current methods of defending against these attacks often come with a high computing…

Cryptography and Security · Computer Science 2024-08-09 Duo Zhong , Bojing Li , Xiang Chen , Chenchen Liu

Over the past decade, numerous theories have been proposed to explain the widespread vulnerability of deep neural networks to adversarial evasion attacks. Among these, the theory of non-robust features proposed by Ilyas et al. has been…

Machine Learning · Computer Science 2026-01-05 Jennifer Crawford , Amol Khanna , Fred Lu , Amy R. Wagoner , Stella Biderman , Andre T. Nguyen , Edward Raff

This work conducts the first analysis on the robustness against adversarial attacks on self-supervised Vision Transformers trained using DINO. First, we evaluate whether features learned through self-supervision are more robust to…

Computer Vision and Pattern Recognition · Computer Science 2022-09-09 Javier Rando , Nasib Naimi , Thomas Baumann , Max Mathys

Vulnerability to adversarial attacks is a well-known deficiency of deep neural networks. Larger networks are generally more robust, and ensembling is one method to increase adversarial robustness: each model's weaknesses are compensated by…

Computer Vision and Pattern Recognition · Computer Science 2024-12-17 Svetlana Pavlitska , Enrico Eisen , J. Marius Zöllner

A key challenge in computer vision and deep learning is the definition of robust strategies for the detection of adversarial examples. Here, we propose the adoption of ensemble approaches to leverage the effectiveness of multiple detectors…

Computer Vision and Pattern Recognition · Computer Science 2022-02-16 Francesco Craighero , Fabrizio Angaroni , Fabio Stella , Chiara Damiani , Marco Antoniotti , Alex Graudenzi

The rise of the Internet of Things and Cyber-Physical Systems has introduced new challenges on ensuring secure and robust communication. The growing number of connected devices increases network complexity, leading to higher latency and…

Cryptography and Security · Computer Science 2025-09-03 Marco Stadler , Michael Vierhauser , Michael Riegler , Daniel Waghubinger , Johannes Sametinger

We study adversarially robust multitask adaptive linear quadratic control; a setting where multiple systems collaboratively learn control policies under model uncertainty and adversarial corruption. We propose a clustered multitask approach…

Machine Learning · Computer Science 2025-11-10 Kasra Fallah , Leonardo F. Toso , James Anderson

There is great potential for damage from adversarial learning (AL) attacks on machine-learning based systems. In this paper, we provide a contemporary survey of AL, focused particularly on defenses against attacks on statistical…

Machine Learning · Computer Science 2020-03-11 David J. Miller , Zhen Xiang , George Kesidis

Learning-enabled controllers used in cyber-physical systems (CPS) are known to be susceptible to adversarial attacks. Such attacks manifest as perturbations to the states generated by the controller's environment in response to its actions.…

Machine Learning · Computer Science 2020-06-15 Zikang Xiong , Joe Eappen , He Zhu , Suresh Jagannathan