中文
相关论文

相关论文: Reducing Adversarial Example Transferability Using…

200 篇论文

It has been suggested that adversarial examples cause deep learning models to make incorrect predictions with high confidence. In this work, we take the opposite stance: an overly confident model is more likely to be vulnerable to…

机器学习 · 计算机科学 2018-02-14 Angus Galloway , Graham W. Taylor , Medhat Moussa

Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial…

计算机视觉与模式识别 · 计算机科学 2017-02-14 Alexey Kurakin , Ian Goodfellow , Samy Bengio

Deep neural networks are widely known to be vulnerable to adversarial examples. However, vanilla adversarial examples generated under the white-box setting often exhibit low transferability across different models. Since adversarial…

计算机视觉与模式识别 · 计算机科学 2024-07-23 Zeliang Zhang , Wei Yao , Xiaosen Wang

Deep neural networks are vulnerable to adversarial examples that are crafted by imposing imperceptible changes to the inputs. However, these adversarial examples are most successful in white-box settings where the model and its parameters…

机器学习 · 计算机科学 2021-12-20 Tianjin Huang , Vlado Menkovski , Yulong Pei , YuHao Wang , Mykola Pechenizkiy

Deep neural networks are vulnerable to adversarial examples, which are crafted by adding human-imperceptible perturbations to original images. Most existing adversarial attack methods achieve nearly 100% attack success rates under the…

计算机视觉与模式识别 · 计算机科学 2022-04-15 Guoqiu Wang , Huanqian Yan , Ying Guo , Xingxing Wei

Adversarial examples for neural network image classifiers are known to be transferable: examples optimized to be misclassified by a source classifier are often misclassified as well by classifiers with different architectures. However,…

机器学习 · 计算机科学 2021-10-27 Jacob M. Springer , Melanie Mitchell , Garrett T. Kenyon

Deep neural networks are at the forefront of machine learning research. However, despite achieving impressive performance on complex tasks, they can be very sensitive: Small perturbations of inputs can be sufficient to induce incorrect…

计算机视觉与模式识别 · 计算机科学 2020-09-04 Alex Serban , Erik Poll , Joost Visser

Deep Learning models hold state-of-the-art performance in many fields, but their vulnerability to adversarial examples poses threat to their ubiquitous deployment in practical settings. Additionally, adversarial inputs generated on one…

机器学习 · 计算机科学 2021-03-31 Deepak Ravikumar , Sangamesh Kodge , Isha Garg , Kaushik Roy

Deep learning-based image denoising models demonstrate remarkable performance, but their lack of robustness analysis remains a significant concern. A major issue is that these models are susceptible to adversarial attacks, where small,…

计算机视觉与模式识别 · 计算机科学 2025-08-29 Jie Ning , Jiebao Sun , Shengzhu Shi , Zhichang Guo , Yao Li , Hongwei Li , Boying Wu

Deep neural networks (DNNs) are highly susceptible to adversarial examples--subtle perturbations applied to inputs that are often imperceptible to humans yet lead to incorrect model predictions. In black-box scenarios, however, existing…

计算机视觉与模式识别 · 计算机科学 2025-03-04 Qing Wan , Shilong Deng , Xun Wang

Transfer-based adversarial example is one of the most important classes of black-box attacks. However, there is a trade-off between transferability and imperceptibility of the adversarial perturbation. Prior work in this direction often…

计算机视觉与模式识别 · 计算机科学 2022-12-29 Fangcheng Liu , Chao Zhang , Hongyang Zhang

Deep neural networks are vulnerable to adversarial examples, which can fool deep models by adding subtle perturbations. Although existing attacks have achieved promising results, it still leaves a long way to go for generating transferable…

计算机视觉与模式识别 · 计算机科学 2022-01-04 Yexin Duan , Junhua Zou , Xingyu Zhou , Wu Zhang , Jin Zhang , Zhisong Pan

Despite remarkable achievements in deep learning across various domains, its inherent vulnerability to adversarial examples still remains a critical concern for practical deployment. Adversarial training has emerged as one of the most…

机器学习 · 计算机科学 2024-11-06 Junhao Dong , Xinghua Qu , Z. Jane Wang , Yew-Soon Ong

Deep neural networks are known to be extremely vulnerable to adversarial examples under white-box setting. Moreover, the malicious adversaries crafted on the surrogate (source) model often exhibit black-box transferability on other models…

计算机视觉与模式识别 · 计算机科学 2021-08-19 Xiaosen Wang , Xuanran He , Jingdong Wang , Kun He

Adversarial examples are a pervasive phenomenon of machine learning models where seemingly imperceptible perturbations to the input lead to misclassifications for otherwise statistically accurate models. In this paper we study how the…

机器学习 · 计算机科学 2020-02-11 Marc Khoury

Neural networks are susceptible to adversarial perturbations that are transferable across different models. In this paper, we introduce a novel model alignment technique aimed at improving a given source model's ability in generating…

机器学习 · 计算机科学 2024-07-18 Avery Ma , Amir-massoud Farahmand , Yangchen Pan , Philip Torr , Jindong Gu

Knowledge transferability, or transfer learning, has been widely adopted to allow a pre-trained model in the source domain to be effectively adapted to downstream tasks in the target domain. It is thus important to explore and understand…

机器学习 · 计算机科学 2021-07-12 Kaizhao Liang , Jacky Y. Zhang , Boxin Wang , Zhuolin Yang , Oluwasanmi Koyejo , Bo Li

Adversarial examples are of wide concern due to their impact on the reliability of contemporary machine learning systems. Effective adversarial examples are mostly found via white-box attacks. However, in some cases they can be transferred…

机器学习 · 计算机科学 2019-07-16 Deyan Petrov , Timothy M. Hospedales

An intriguing property of deep neural networks is the existence of adversarial examples, which can transfer among different architectures. These transferable adversarial examples may severely hinder deep neural network-based applications.…

机器学习 · 计算机科学 2017-02-08 Yanpei Liu , Xinyun Chen , Chang Liu , Dawn Song

Deep neural networks (DNNs) can be easily fooled by adding human imperceptible perturbations to the images. These perturbed images are known as `adversarial examples' and pose a serious threat to security and safety critical systems. A…

计算机视觉与模式识别 · 计算机科学 2019-03-27 Muzammal Naseer , Salman H. Khan , Shafin Rahman , Fatih Porikli