中文
相关论文

相关论文: Towards Evaluating the Robustness of Neural Networ…

200 篇论文

Recently, deep neural networks have been shown to be vulnerable to backdoor attacks. A backdoor is inserted into neural networks via this attack paradigm, thus compromising the integrity of the network. As soon as an attacker presents a…

密码学与安全 · 计算机科学 2024-06-18 Zonghao Ying , Bin Wu

Deep neural networks (DNNs) are vulnerable to adversarial examples where inputs with imperceptible perturbations mislead DNNs to incorrect results. Despite the potential risk they bring, adversarial examples are also valuable for providing…

计算机视觉与模式识别 · 计算机科学 2020-12-15 Chongzhi Zhang , Aishan Liu , Xianglong Liu , Yitao Xu , Hang Yu , Yuqing Ma , Tianlin Li

Deep Neural Networks are being extensively used in communication systems and Automatic Modulation Classification (AMC) in particular. However, they are very susceptible to small adversarial perturbations that are carefully crafted to change…

机器学习 · 计算机科学 2022-11-03 Javier Maroto , Gérôme Bovet , Pascal Frossard

Following the recent adoption of deep neural networks (DNN) accross a wide range of applications, adversarial attacks against these models have proven to be an indisputable threat. Adversarial samples are crafted with a deliberate intention…

机器学习 · 计算机科学 2017-08-31 Valentina Zantedeschi , Maria-Irina Nicolae , Ambrish Rawat

Recent works have empirically shown that there exist adversarial examples that can be hidden from neural network interpretability (namely, making network interpretation maps visually similar), or interpretability is itself susceptible to…

机器学习 · 计算机科学 2020-10-23 Akhilan Boopathy , Sijia Liu , Gaoyuan Zhang , Cynthia Liu , Pin-Yu Chen , Shiyu Chang , Luca Daniel

Adversarial training is a widely adopted strategy to bolster the robustness of neural network models against adversarial attacks. This paper revisits the fundamental assumptions underlying image classification and suggests that representing…

计算机视觉与模式识别 · 计算机科学 2025-11-27 Erh-Chung Chen , Che-Rung Lee

Deep neural networks (DNNs) have proven to be quite effective in a vast array of machine learning tasks, with recent examples in cyber security and autonomous vehicles. Despite the superior performance of DNNs in these applications, it has…

机器学习 · 计算机科学 2017-08-22 Qinglong Wang , Wenbo Guo , Kaixuan Zhang , Alexander G. Ororbia , Xinyu Xing , Xue Liu , C. Lee Giles

While multi-exit neural networks are regarded as a promising solution for making efficient inference via early exits, combating adversarial attacks remains a challenging problem. In multi-exit networks, due to the high dependency among…

机器学习 · 计算机科学 2023-11-02 Seokil Ham , Jungwuk Park , Dong-Jun Han , Jaekyun Moon

Deep neural networks have been shown to be vulnerable to adversarial examples deliberately constructed to misclassify victim models. As most adversarial examples have restricted their perturbations to $L_{p}$-norm, existing defense methods…

计算机视觉与模式识别 · 计算机科学 2021-03-16 Hanieh Naderi , Leili Goli , Shohreh Kasaei

Adversarial examples are perturbed inputs that are designed (from a deep learning network's (DLN) parameter gradients) to mislead the DLN during test time. Intuitively, constraining the dimensionality of inputs or parameters of a network…

机器学习 · 计算机科学 2019-06-04 Priyadarshini Panda , Indranil Chakraborty , Kaushik Roy

Deep neural networks have proven remarkably effective at solving many classification problems, but have been criticized recently for two major weaknesses: the reasons behind their predictions are uninterpretable, and the predictions…

机器学习 · 计算机科学 2017-11-28 Andrew Slavin Ross , Finale Doshi-Velez

The fact that deep neural networks are susceptible to crafted perturbations severely impacts the use of deep learning in certain domains of application. Among many developed defense models against such attacks, adversarial training emerges…

机器学习 · 计算机科学 2020-07-13 Anh Bui , Trung Le , He Zhao , Paul Montague , Olivier deVel , Tamas Abraham , Dinh Phung

Dataset distillation synthesizes compact datasets that enable models to achieve performance comparable to training on the original large-scale datasets. However, existing distillation methods overlook the robustness of the model, resulting…

计算机视觉与模式识别 · 计算机科学 2025-03-18 Wei Lai , Tianyu Ding , ren dongdong , Lei Wang , Jing Huo , Yang Gao , Wenbin Li

Knowledge distillation is normally used to compress a big network, or teacher, onto a smaller one, the student, by training it to match its outputs. Recently, some works have shown that robustness against adversarial attacks can also be…

机器学习 · 计算机科学 2022-03-15 Javier Maroto , Guillermo Ortiz-Jiménez , Pascal Frossard

Neural Networks (NNs) are vulnerable to adversarial examples. Such inputs differ only slightly from their benign counterparts yet provoke misclassifications of the attacked NNs. The required perturbations to craft the examples are often…

密码学与安全 · 计算机科学 2020-09-30 Philip Sperl , Konstantin Böttinger

Model distillation has become essential for creating smaller, deployable language models that retain larger system capabilities. However, widespread deployment raises concerns about resilience to adversarial manipulation. This paper…

机器学习 · 计算机科学 2025-10-17 Harsh Chaudhari , Jamie Hayes , Matthew Jagielski , Ilia Shumailov , Milad Nasr , Alina Oprea

Future wireless networks (5G and beyond) are the vision of forthcoming cellular systems, connecting billions of devices and people together. In the last decades, cellular networks have been dramatically growth with advanced…

密码学与安全 · 计算机科学 2022-08-23 Ferhat Ozgur Catak , Murat Kuzlu , Evren Catak , Umit Cali , Ozgur Guler

Adversarial attacks have been shown to be highly effective at degrading the performance of deep neural networks (DNNs). The most prominent defense is adversarial training, a method for learning a robust model. Nevertheless, adversarial…

计算机视觉与模式识别 · 计算机科学 2021-09-07 Uriya Pesso , Koby Bibas , Meir Feder

Dataset distillation offers a potential means to enhance data efficiency in deep learning. Recent studies have shown its ability to counteract backdoor risks present in original training samples. In this study, we delve into the theoretical…

机器学习 · 计算机科学 2025-06-03 Ming-Yu Chung , Sheng-Yen Chou , Chia-Mu Yu , Pin-Yu Chen , Sy-Yen Kuo , Tsung-Yi Ho

Deep neural network architectures are considered to be robust to random perturbations. Nevertheless, it was shown that they could be severely vulnerable to slight but carefully crafted perturbations of the input, termed as adversarial…

机器学习 · 计算机科学 2021-02-16 Omer Faruk Tuna , Ferhat Ozgur Catak , M. Taner Eskil