English
Related papers

Related papers: Improving the Transferability of Adversarial Attac…

200 papers

Deep neural networks are vulnerable to adversarial examples, posing a threat to the models' applications and raising security concerns. An intriguing property of adversarial examples is their strong transferability. Several methods have…

Computer Vision and Pattern Recognition · Computer Science 2024-02-13 Shuo Zhang , Ziruo Wang , Zikai Zhou , Huanran Chen

With the widespread application of automatic speech recognition (ASR) systems, their vulnerability to adversarial attacks has been extensively studied. However, most existing adversarial examples are generated on specific individual models,…

Sound · Computer Science 2025-03-26 Weifei Jin , Junjie Su , Hejia Wang , Yulin Ye , Jie Hao

Generative adversarial networks (GANs) have made remarkable achievements in synthesizing images in recent years. Typically, training GANs requires massive data, and the performance of GANs deteriorates significantly when training data is…

Computer Vision and Pattern Recognition · Computer Science 2025-02-04 Mengping Yang , Zhe Wang , Ziqiu Chi , Dongdong Li , Wenli Du

High-Content Screening routinely generates massive volumes of cell painting images for phenotypic profiling. However, technical variations across experimental executions inevitably induce biological batch (bio-batch) effects. These cause…

Computer Vision and Pattern Recognition · Computer Science 2026-04-02 Lei Tong , Xujing Yao , Adam Corrigan , Long Chen , Navin Rathna Kumar , Kerry Hallbrook , Jonathan Orme , Yinhai Wang , Huiyu Zhou

For black-box attacks, the gap between the substitute model and the victim model is usually large, which manifests as a weak attack performance. Motivated by the observation that the transferability of adversarial examples can be improved…

Computer Vision and Pattern Recognition · Computer Science 2022-07-13 Yuyang Long , Qilong Zhang , Boheng Zeng , Lianli Gao , Xianglong Liu , Jian Zhang , Jingkuan Song

Generalizing to unseen image domains is a challenging problem primarily due to the lack of diverse training data, inaccessible target data, and the large domain shift that may exist in many real-world settings. As such data augmentation is…

Computer Vision and Pattern Recognition · Computer Science 2023-10-04 Sheng Cheng , Tejas Gokhale , Yezhou Yang

The ability to transfer adversarial attacks from one model (the surrogate) to another model (the victim) has been an issue of concern within the machine learning (ML) community. The ability to successfully evade unseen models represents an…

Machine Learning · Computer Science 2021-09-28 Luke E. Richards , André Nguyen , Ryan Capps , Steven Forsythe , Cynthia Matuszek , Edward Raff

Surveillance systems play a critical role in security and reconnaissance, but their performance is often compromised by low-quality images and videos, leading to reduced accuracy in face recognition. Additionally, existing AI-based facial…

Computer Vision and Pattern Recognition · Computer Science 2025-06-10 Anees Nashath Shaik , Barbara Villarini , Vasileios Argyriou

In the transfer-based adversarial attacks, adversarial examples are only generated by the surrogate models and achieve effective perturbation in the victim models. Although considerable efforts have been developed on improving the…

Computer Vision and Pattern Recognition · Computer Science 2023-08-14 Xiangyuan Yang , Jie Lin , Hanlin Zhang , Xinyu Yang , Peng Zhao

Transferable adversarial attacks pose significant threats to deep neural networks, particularly in black-box scenarios where internal model information is inaccessible. Studying adversarial attack methods helps advance the performance of…

Artificial Intelligence · Computer Science 2024-09-23 Zhibo Jin , Jiayu Zhang , Zhiyu Zhu , Chenyu Zhang , Jiahao Huang , Jianlong Zhou , Fang Chen

Language-conditioned robotic learning has significantly enhanced robot adaptability by enabling a single model to execute diverse tasks in response to verbal commands. Despite these advancements, security vulnerabilities within this domain…

Machine Learning · Computer Science 2024-11-26 Ke Zhao , Huayang Huang , Miao Li , Yu Wu

Deep neural networks (DNNs) can be easily fooled by adversarial attacks during inference phase when attackers add imperceptible perturbations to original examples, i.e., adversarial examples. Many works focus on adversarial detection and…

Machine Learning · Computer Science 2023-03-01 Zhongyi Guo , Keji Han , Yao Ge , Wei Ji , Yun Li

Though Deep Neural Networks (DNN) show excellent performance across various computer vision tasks, several works show their vulnerability to adversarial samples, i.e., image samples with imperceptible noise engineered to manipulate the…

Computer Vision and Pattern Recognition · Computer Science 2019-09-11 Aditya Ganeshan , B. S. Vivek , R. Venkatesh Babu

With the development of adversarial attacks, adversairal examples have been widely used to enhance the robustness of the training models on deep neural networks. Although considerable efforts of adversarial attacks on improving the…

Machine Learning · Computer Science 2023-03-20 Xiangyuan Yang , Jie Lin , Hanlin Zhang , Xinyu Yang , Peng Zhao

Breakthroughs in unsupervised domain adaptation (uDA) can help in adapting models from a label-rich source domain to unlabeled target domains. Despite these advancements, there is a lack of research on how uDA algorithms, particularly those…

Machine Learning · Computer Science 2021-12-28 Shaoduo Gan , Akhil Mathur , Anton Isopoussu , Fahim Kawsar , Nadia Berthouze , Nicholas Lane

The transferability of adversarial examples poses a significant security challenge for deep neural networks, which can be attacked without knowing anything about them. In this paper, we propose a new Segmented Gaussian Pyramid (SGP) attack…

Computer Vision and Pattern Recognition · Computer Science 2025-07-03 Zihong Guo , Chen Wan , Yayin Zheng , Hailing Kuang , Xiaohai Lu

Deep learning models are known to be vulnerable to adversarial examples crafted by adding human-imperceptible perturbations on benign images. Many existing adversarial attack methods have achieved great white-box attack performance, but…

Computer Vision and Pattern Recognition · Computer Science 2021-03-22 Xiaosen Wang , Jiadong Lin , Han Hu , Jingdong Wang , Kun He

Despite the strong performance of deep neural networks in modern Web and language applications, they remain vulnerable to adversarial attacks, especially transferable attacks that generate adversarial examples using surrogate models without…

Computation and Language · Computer Science 2026-05-26 Han Liu , Zhi Xu , Xiaotong Zhang , Feng Zhang , Xiaoming Xu , Wei Wang , Fenglong Ma , Hong Yu

Adversarial images are designed to mislead deep neural networks (DNNs), attracting great attention in recent years. Although several defense strategies achieved encouraging robustness against adversarial samples, most of them fail to…

Machine Learning · Computer Science 2020-02-25 Hang Yu , Aishan Liu , Xianglong Liu , Gengchao Li , Ping Luo , Ran Cheng , Jichen Yang , Chongzhi Zhang

Adversarial examples can cause catastrophic mistakes in Deep Neural Network (DNNs) based vision systems e.g., for classification, segmentation and object detection. The vulnerability of DNNs against such attacks can prove a major roadblock…

Computer Vision and Pattern Recognition · Computer Science 2020-06-11 Muzammal Naseer , Salman Khan , Munawar Hayat , Fahad Shahbaz Khan , Fatih Porikli