English
Related papers

Related papers: Breaking Free: How to Hack Safety Guardrails in Bl…

200 papers

Convolutional neural networks have outperformed humans in image recognition tasks, but they remain vulnerable to attacks from adversarial examples. Since these data are crafted by adding imperceptible noise to normal images, their existence…

Computer Vision and Pattern Recognition · Computer Science 2021-06-10 Heng Yin , Hengwei Zhang , Jindong Wang , Ruiyu Dou

Despite the success of deep learning across various domains, it remains vulnerable to adversarial attacks. Although many existing adversarial attack methods achieve high success rates, they typically rely on $\ell_{p}$-norm perturbation…

Computer Vision and Pattern Recognition · Computer Science 2025-10-31 Chihan Huang , Hao Tang

Recently, it has been shown that deep neural networks (DNN) are subject to attacks through adversarial samples. Adversarial samples are often crafted through adversarial perturbation, i.e., manipulating the original sample with minor…

Machine Learning · Computer Science 2018-05-18 Jingyi Wang , Jun Sun , Peixin Zhang , Xinyu Wang

Black-box attacks usually face two problems: poor transferability and the inability to evade the adversarial defense. To overcome these shortcomings, we create an original approach to generate adversarial examples by smoothing the linear…

Computer Vision and Pattern Recognition · Computer Science 2022-06-23 Hui Xia , Rui Zhang , Shuliang Jiang , Zi Kang

In this paper, we propose a novel framework for ownership verification of deep neural network (DNN) models for image classification tasks. It allows verification of model identity by both the rightful owner and third party without…

Machine Learning · Computer Science 2025-07-31 Teruki Sano , Minoru Kuribayashi , Masao Sakai , Shuji Isobe , Eisuke Koizumi

We introduce the concept of deceptive diffusion -- training a generative AI model to produce adversarial images. Whereas a traditional adversarial attack algorithm aims to perturb an existing image to induce a misclassificaton, the…

Machine Learning · Computer Science 2024-07-01 Lucas Beerens , Catherine F. Higham , Desmond J. Higham

Deep neural networks are extensively applied to real-world tasks, such as face recognition and medical image classification, where privacy and data protection are critical. Image data, if not protected, can be exploited to infer personal or…

Computer Vision and Pattern Recognition · Computer Science 2024-02-15 Weiheng Chai , Brian Testa , Huantao Ren , Asif Salekin , Senem Velipasalar

Machine learning models, especially neural network (NN) classifiers, have acceptable performance and accuracy that leads to their wide adoption in different aspects of our daily lives. The underlying assumption is that these models are…

Adversarial examples are known as carefully perturbed images fooling image classifiers. We propose a geometric framework to generate adversarial examples in one of the most challenging black-box settings where the adversary can only…

Computer Vision and Pattern Recognition · Computer Science 2020-03-17 Ali Rahmati , Seyed-Mohsen Moosavi-Dezfooli , Pascal Frossard , Huaiyu Dai

Adversarial attacks to image classification systems present challenges to convolutional networks and opportunities for understanding them. This study suggests that adversarial perturbations on images lead to noise in the features…

Computer Vision and Pattern Recognition · Computer Science 2019-03-26 Cihang Xie , Yuxin Wu , Laurens van der Maaten , Alan Yuille , Kaiming He

Deep neural networks have proven to be quite effective in a wide variety of machine learning tasks, ranging from improved speech recognition systems to advancing the development of autonomous vehicles. However, despite their superior…

Machine Learning · Computer Science 2016-12-14 Qinglong Wang , Wenbo Guo , Alexander G. Ororbia , Xinyu Xing , Lin Lin , C. Lee Giles , Xue Liu , Peng Liu , Gang Xiong

Widely used deep learning models are found to have poor robustness. Little noises can fool state-of-the-art models into making incorrect predictions. While there is a great deal of high-performance attack generation methods, most of them…

Machine Learning · Computer Science 2022-08-26 Xinyi Wang , Simon Yusuf Enoch , Dong Seong Kim

Existing black-box attacks have demonstrated promising potential in creating adversarial examples (AE) to deceive deep learning models. Most of these attacks need to handle a vast optimization space and require a large number of queries,…

Computer Vision and Pattern Recognition · Computer Science 2023-10-12 Renyang Liu , Wei Zhou , Tianwei Zhang , Kangjie Chen , Jun Zhao , Kwok-Yan Lam

Deep neural networks have empowered accurate device-free human activity recognition, which has wide applications. Deep models can extract robust features from various sensors and generalize well even in challenging situations such as…

Cryptography and Security · Computer Science 2022-12-05 Jianfei Yang , Han Zou , Lihua Xie

Deep learning systems, critical in domains like autonomous vehicles, are vulnerable to adversarial examples (crafted inputs designed to mislead classifiers). This study investigates black-box adversarial attacks in computer vision. This is…

Cryptography and Security · Computer Science 2025-06-09 Francesco Panebianco , Mario D'Onghia , Stefano Zanero aand Michele Carminati

In this research, we focus on the usage of adversarial sampling to test for the fairness in the prediction of deep neural network model across different classes of image in a given dataset. While several framework had been proposed to…

Machine Learning · Computer Science 2023-03-07 Tosin Ige , William Marfo , Justin Tonkinson , Sikiru Adewale , Bolanle Hafiz Matti

Deep neural networks are vulnerable to adversarial examples, which are crafted by adding human-imperceptible perturbations to original images. Most existing adversarial attack methods achieve nearly 100% attack success rates under the…

Computer Vision and Pattern Recognition · Computer Science 2022-04-15 Guoqiu Wang , Huanqian Yan , Ying Guo , Xingxing Wei

Recently, some research show that deep neural networks are vulnerable to the adversarial attacks, the well-trainned samples or patches could be used to trick the neural network detector or human visual perception. However, these adversarial…

Computer Vision and Pattern Recognition · Computer Science 2023-12-29 Xianyi Chen , Fazhan Liu , Dong Jiang , Kai Yan

Deep neural networks have been shown vulnerable toadversarial patches, where exotic patterns can resultin models wrong prediction. Nevertheless, existing ap-proaches to adversarial patch generation hardly con-sider the contextual…

Computer Vision and Pattern Recognition · Computer Science 2021-04-28 Jinqi Luo , Tao Bai , Jun Zhao

Machine learning models are vulnerable to Adversarial Examples: minor perturbations to input samples intended to deliberately cause misclassification. Current defenses against adversarial examples, especially for Deep Neural Networks (DNN),…

Cryptography and Security · Computer Science 2019-01-04 Kathrin Grosse , David Pfaff , Michael Thomas Smith , Michael Backes