English
Related papers

Related papers: Boosting Adversarial Transferability Against Defen…

200 papers

Deep Neural Networks (DNNs) are vulnerable to adversarial attacks, which pose security challenges to hyperspectral image (HSI) classification based on DNNs. Numerous adversarial attack methods have been designed in the domain of natural…

Computer Vision and Pattern Recognition · Computer Science 2025-08-20 Chun Liu , Bingqian Zhu , Tao Xu , Zheng Zheng , Zheng Li , Wei Yang , Zhigang Han , Jiayao Wang

While deep neural networks have achieved remarkable success in various computer vision tasks, they often fail to generalize to new domains and subtle variations of input images. Several defenses have been proposed to improve the robustness…

Computer Vision and Pattern Recognition · Computer Science 2021-09-08 Omid Poursaeed , Tianxing Jiang , Harry Yang , Serge Belongie , SerNam Lim

Recent breakthroughs in defenses against adversarial examples, like adversarial training, make the neural networks robust against various classes of attackers (e.g., first-order gradient-based attacks). However, it is an open question…

Machine Learning · Computer Science 2019-06-07 Shiqi Wang , Yizheng Chen , Ahmed Abdou , Suman Jana

Deep neural networks (DNNs) are known to be susceptible to adversarial examples, leading to significant performance degradation. In black-box attack scenarios, a considerable attack performance gap between the surrogate model and the target…

Computer Vision and Pattern Recognition · Computer Science 2025-11-13 Haijing Guo , Jiafeng Wang , Zhaoyu Chen , Kaixun Jiang , Lingyi Hong , Pinxue Guo , Jinglun Li , Wenqiang Zhang

Deep neural networks are vulnerable to adversarial examples that mislead the models with imperceptible perturbations. Though adversarial attacks have achieved incredible success rates in the white-box setting, most existing adversaries…

Artificial Intelligence · Computer Science 2021-08-16 Xiaosen Wang , Kun He

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial examples. Moreover, the transferability of the adversarial examples has received broad attention in recent years, which means that adversarial examples crafted by a…

Machine Learning · Computer Science 2023-04-17 Dingcheng Yang , Wenjian Yu , Zihao Xiao , Jiaqi Luo

In recent years, research on adversarial attacks has become a hot spot. Although current literature on the transfer-based adversarial attack has achieved promising results for improving the transferability to unseen black-box models, it…

Computer Vision and Pattern Recognition · Computer Science 2021-08-11 Zheng Yuan , Jie Zhang , Yunpei Jia , Chuanqi Tan , Tao Xue , Shiguang Shan

State-of-the-art deep neural networks are known to be vulnerable to adversarial examples, formed by applying small but malicious perturbations to the original inputs. Moreover, the perturbations can \textit{transfer across models}:…

Machine Learning · Statistics 2018-02-28 Lei Wu , Zhanxing Zhu , Cheng Tai , Weinan E

Recent development of adversarial attacks has proven that ensemble-based methods outperform traditional, non-ensemble ones in black-box attack. However, as it is computationally prohibitive to acquire a family of diverse models, these…

Computer Vision and Pattern Recognition · Computer Science 2019-11-26 Yingwei Li , Song Bai , Yuyin Zhou , Cihang Xie , Zhishuai Zhang , Alan Yuille

Deep neural networks are vulnerable to adversarial examples that exhibit transferability across various models. Numerous approaches are proposed to enhance the transferability of adversarial examples, including advanced optimization, data…

Computer Vision and Pattern Recognition · Computer Science 2025-10-27 Zhaoyu Chen , Haijing Guo , Kaixun Jiang , Jiyuan Fu , Xinyu Zhou , Dingkang Yang , Hao Tang , Bo Li , Wenqiang Zhang

Vision-language pre-training (VLP) models have shown vulnerability to adversarial examples in multimodal tasks. Furthermore, malicious adversaries can be deliberately transferred to attack other black-box models. However, existing work has…

Computer Vision and Pattern Recognition · Computer Science 2023-07-27 Dong Lu , Zhiqiang Wang , Teng Wang , Weili Guan , Hongchang Gao , Feng Zheng

Deep neural networks are known to be extremely vulnerable to adversarial examples under white-box setting. Moreover, the malicious adversaries crafted on the surrogate (source) model often exhibit black-box transferability on other models…

Computer Vision and Pattern Recognition · Computer Science 2021-08-19 Xiaosen Wang , Xuanran He , Jingdong Wang , Kun He

Adversarial attacks against Deep Neural Networks have been widely studied. One significant feature that makes such attacks particularly powerful is transferability, where the adversarial examples generated from one model can be effective…

Cryptography and Security · Computer Science 2020-09-29 Renzhi Wang , Tianwei Zhang , Xiaofei Xie , Lei Ma , Cong Tian , Felix Juefei-Xu , Yang Liu

Convolutional neural networks (CNNs) models play a vital role in achieving state-of-the-art performances in various technological fields. CNNs are not limited to Natural Language Processing (NLP) or Computer Vision (CV) but also have…

Cryptography and Security · Computer Science 2023-11-08 Ehsan Nowroozi , Samaneh Ghelichkhani , Imran Haider , Ali Dehghantanha

Strong adversarial examples are crucial for evaluating and enhancing the robustness of deep neural networks. However, the performance of popular attacks is usually sensitive, for instance, to minor image transformations, stemming from…

Machine Learning · Computer Science 2024-04-01 Zhengwei Fang , Rui Wang , Tao Huang , Liping Jing

Adversarial attacks introduce small, deliberately crafted perturbations that mislead neural networks, and their transferability from white-box to black-box target models remains a critical research focus. Input transformation-based attacks…

Machine Learning · Computer Science 2025-11-25 Quan Liu , Feng Ye , Chenhao Lu , Shuming Zhen , Guanliang Huang , Lunzhe Chen , Xudong Ke

Graph neural networks (GNNs) have achieved high performance in analyzing graph-structured data and have been widely deployed in safety-critical areas, such as finance and autonomous driving. However, only a few works have explored GNNs'…

Machine Learning · Computer Science 2020-09-23 Boyuan Feng , Yuke Wang , Xu Li , Yufei Ding

Segmentation models exhibit significant vulnerability to adversarial examples in white-box settings, but existing adversarial attack methods often show poor transferability across different segmentation models. While some researchers have…

Computer Vision and Pattern Recognition · Computer Science 2025-10-13 Yufei Song , Ziqi Zhou , Qi Lu , Hangtao Zhang , Yifan Hu , Lulu Xue , Shengshan Hu , Minghui Li , Leo Yu Zhang

In the transfer-based adversarial attacks, adversarial examples are only generated by the surrogate models and achieve effective perturbation in the victim models. Although considerable efforts have been developed on improving the…

Computer Vision and Pattern Recognition · Computer Science 2023-08-14 Xiangyuan Yang , Jie Lin , Hanlin Zhang , Xinyu Yang , Peng Zhao

Deep neural networks have been shown to be vulnerable to adversarial examples deliberately constructed to misclassify victim models. As most adversarial examples have restricted their perturbations to $L_{p}$-norm, existing defense methods…

Computer Vision and Pattern Recognition · Computer Science 2021-03-16 Hanieh Naderi , Leili Goli , Shohreh Kasaei