中文
相关论文

相关论文: Defense Against Adversarial Attacks with Saak Tran…

200 篇论文

Deep neural networks (DNNs) have achieved great success in solving a variety of machine learning (ML) problems, especially in the domain of image recognition. However, recent research showed that DNNs can be highly vulnerable to…

计算机视觉与模式识别 · 计算机科学 2017-05-09 Nilaksh Das , Madhuri Shanbhogue , Shang-Tse Chen , Fred Hohman , Li Chen , Michael E. Kounavis , Duen Horng Chau

Adversarial training is a defense technique that improves adversarial robustness of a deep neural network (DNN) by including adversarial examples in the training data. In this paper, we identify an overlooked problem of adversarial training…

机器学习 · 计算机科学 2020-09-24 Wonseok Lee , Hanbit Lee , Sang-goo Lee

Deep neural networks are vulnerable to adversarial examples, which are crafted by adding small, human-imperceptible perturbations to the original images, but make the model output inaccurate predictions. Before deep neural networks are…

计算机视觉与模式识别 · 计算机科学 2021-01-13 Bo Yang , Kaiyong Xu , Hengjun Wang , Hengwei Zhang

Autonomous systems are highly vulnerable to a variety of adversarial attacks on Deep Neural Networks (DNNs). Training-free model-agnostic defenses have recently gained popularity due to their speed, ease of deployment, and ability to work…

图像与视频处理 · 电气工程与系统科学 2021-12-30 Kartikeya Bhardwaj , Dibakar Gope , James Ward , Paul Whatmough , Danny Loh

Deep neural networks (DNNs) are vulnerable to adversarial noise. Their adversarial robustness can be improved by exploiting adversarial examples. However, given the continuously evolving attacks, models trained on seen types of adversarial…

计算机视觉与模式识别 · 计算机科学 2021-06-10 Dawei Zhou , Tongliang Liu , Bo Han , Nannan Wang , Chunlei Peng , Xinbo Gao

We propose a test-time defense mechanism against adversarial attacks: imperceptible image perturbations that significantly alter the predictions of a model. Unlike existing methods that rely on feature filtering or smoothing, which can lead…

计算机视觉与模式识别 · 计算机科学 2025-10-06 Dong Lao , Yuxiang Zhang , Haniyeh Ehsani Oskouie , Yangchao Wu , Alex Wong , Stefano Soatto

Automatic modulation classification (AMC) using the Deep Neural Network (DNN) approach outperforms the traditional classification techniques, even in the presence of challenging wireless channel environments. However, the adversarial…

机器学习 · 计算机科学 2022-06-01 Eyad Shtaiwi , Ahmed El Ouadrhiri , Majid Moradikia , Salma Sultana , Ahmed Abdelhadi , Zhu Han

Although the adoption rate of deep neural networks (DNNs) has tremendously increased in recent years, a solution for their vulnerability against adversarial examples has not yet been found. As a result, substantial research efforts are…

计算机视觉与模式识别 · 计算机科学 2021-11-23 Utku Ozbulak , Esla Timothy Anzaku , Wesley De Neve , Arnout Van Messem

This paper investigates strategies that defend against adversarial-example attacks on image-classification systems by transforming the inputs before feeding them to the system. Specifically, we study applying image transformations such as…

计算机视觉与模式识别 · 计算机科学 2018-01-29 Chuan Guo , Mayank Rana , Moustapha Cisse , Laurens van der Maaten

Despite the enormous performance of deepneural networks (DNNs), recent studies have shown theirvulnerability to adversarial examples (AEs), i.e., care-fully perturbed inputs designed to fool the targetedDNN. Currently, the literature is…

计算机视觉与模式识别 · 计算机科学 2021-07-14 Anouar Kherchouche , Sid Ahmed Fezza , Wassim Hamidouche

Adversarial attacks have exposed serious vulnerabilities in Deep Neural Networks (DNNs) through their ability to force misclassifications through human-imperceptible perturbations to DNN inputs. We explore a new direction in the field of…

机器学习 · 计算机科学 2020-09-16 Sarada Krithivasan , Sanchari Sen , Anand Raghunathan

Adversarial attacks hamper the functionality and accuracy of Deep Neural Networks (DNNs) by meddling with subtle perturbations to their inputs.In this work, we propose a new Mask-based Adversarial Defense scheme (MAD) for DNNs to mitigate…

机器学习 · 计算机科学 2022-04-27 Weizhen Xu , Chenyi Zhang , Fangzhen Zhao , Liangda Fang

Spiking neural networks (SNNs) provide an energy-efficient alternative to a variety of artificial neural network (ANN) based AI applications. As the progress in neuromorphic computing with SNNs expands their use in applications, the problem…

神经与进化计算 · 计算机科学 2024-04-15 Ozan Özdenizci , Robert Legenstein

Deep Learning is currently used to perform multiple tasks, such as object recognition, face recognition, and natural language processing. However, Deep Neural Networks (DNNs) are vulnerable to perturbations that alter the network prediction…

计算机视觉与模式识别 · 计算机科学 2024-04-30 Joana C. Costa , Tiago Roxo , Hugo Proença , Pedro R. M. Inácio

Classifiers such as deep neural networks have been shown to be vulnerable against adversarial perturbations on problems with high-dimensional input space. While adversarial training improves the robustness of image classifiers against such…

计算机视觉与模式识别 · 计算机科学 2019-08-14 Chaithanya Kumar Mummadi , Thomas Brox , Jan Hendrik Metzen

Adversarial attacks in visual object tracking have significantly degraded the performance of advanced trackers by introducing imperceptible perturbations into images. However, there is still a lack of research on designing adversarial…

计算机视觉与模式识别 · 计算机科学 2024-08-06 Zhewei Wu , Ruilong Yu , Qihe Liu , Shuying Cheng , Shilin Qiu , Shijie Zhou

In this paper, we study the adversarial attack and defence problem in deep learning from the perspective of Fourier analysis. We first explicitly compute the Fourier transform of deep ReLU neural networks and show that there exist decaying…

机器学习 · 计算机科学 2019-05-31 Yuping Lin , Kasra Ahmadi K. A. , Hui Jiang

Deep Neural Networks (DNNs) have recently led to significant improvements in many fields. However, DNNs are vulnerable to adversarial examples which are samples with imperceptible perturbations while dramatically misleading the DNNs.…

计算机视觉与模式识别 · 计算机科学 2018-11-11 Jiayang Liu , Weiming Zhang , Nenghai Yu

We study the effectiveness of various approaches that defend against adversarial attacks on deep networks via manipulations based on basis function representations of images. Specifically, we experiment with low-pass filtering, PCA, JPEG…

Deep neural networks (DNNs) are vulnerable to adversarial examples, perturbations carefully crafted to fool the targeted DNN, in both the non-targeted and targeted case. In the non-targeted case, the attacker simply aims to induce…

机器学习 · 计算机科学 2018-11-22 Yash Sharma , Tien-Dung Le , Moustafa Alzantot