中文
相关论文

相关论文: Towards Certifiable Adversarial Sample Detection

200 篇论文

Machine-learning architectures, such as Convolutional Neural Networks (CNNs) are vulnerable to adversarial attacks: inputs crafted carefully to force the system output to a wrong label. Since machine-learning is being deployed in…

密码学与安全 · 计算机科学 2022-11-03 Amira Guesmi , Ihsen Alouani , Khaled N. Khasawneh , Mouna Baklouti , Tarek Frikha , Mohamed Abid , Nael Abu-Ghazaleh

Deep neural networks are vulnerable to adversarial examples, i.e., carefully-crafted inputs that mislead classification at test time. Recent defenses have been shown to improve adversarial robustness by detecting anomalous deviations from…

机器学习 · 计算机科学 2020-10-20 Francesco Crecchi , Marco Melis , Angelo Sotgiu , Davide Bacciu , Battista Biggio

Despite their exceptional performance in vision tasks, deep learning models often struggle when faced with domain shifts during testing. Test-Time Training (TTT) methods have recently gained popularity by their ability to enhance the…

It is well established that neural networks are vulnerable to adversarial examples, which are almost imperceptible on human vision and can cause the deep models misbehave. Such phenomenon may lead to severely inestimable consequences in the…

机器学习 · 计算机科学 2020-09-09 Dengpan Ye , Chuanxi Chen , Changrui Liu , Hao Wang , Shunzhi Jiang

Thanks to recent advances in deep neural networks (DNNs), face recognition systems have become highly accurate in classifying a large number of face images. However, recent studies have found that DNNs could be vulnerable to adversarial…

机器学习 · 计算机科学 2020-01-29 Kazuya Kakizaki , Kosuke Yoshida

Face recognition is greatly improved by deep convolutional neural networks (CNNs). Recently, these face recognition models have been used for identity authentication in security sensitive applications. However, deep CNNs are vulnerable to…

计算机视觉与模式识别 · 计算机科学 2021-08-31 Zihao Xiao , Xianfeng Gao , Chilin Fu , Yinpeng Dong , Wei Gao , Xiaolu Zhang , Jun Zhou , Jun Zhu

Black-box adversarial attacks are widely used as tools to test the robustness of deep neural networks against malicious perturbations of input data aimed at a specific change in the output of the model. Such methods, although they remain…

机器学习 · 计算机科学 2026-03-13 Anna Chistyakova , Mikhail Pautov

The Convolutional Neural Networks (CNNs) have emerged as a very powerful data dependent hierarchical feature extraction method. It is widely used in several computer vision problems. The CNNs learn the important visual features from…

计算机视觉与模式识别 · 计算机科学 2021-01-01 Jayendra Kantipudi , Shiv Ram Dubey , Soumendu Chakraborty

Deep neural networks (DNNs) are vulnerable to backdoor attacks, where an attacker manipulates a small portion of the training data to implant hidden backdoors into the model. The compromised model behaves normally on clean samples but…

密码学与安全 · 计算机科学 2026-02-20 Ting Qiao , Yingjia Wang , Xing Liu , Sixing Wu , Jianbin Li , Yiming Li

Convolutional Neural Networks have achieved significant success across multiple computer vision tasks. However, they are vulnerable to carefully crafted, human-imperceptible adversarial noise patterns which constrain their deployment in…

计算机视觉与模式识别 · 计算机科学 2020-01-08 Aamir Mustafa , Salman H. Khan , Munawar Hayat , Jianbing Shen , Ling Shao

The ability to deploy neural networks in real-world, safety-critical systems is severely limited by the presence of adversarial examples: slightly perturbed inputs that are misclassified by the network. In recent years, several techniques…

机器学习 · 计算机科学 2018-02-21 Nicholas Carlini , Guy Katz , Clark Barrett , David L. Dill

We propose $\mathcal{T}$ruth $\mathcal{T}$able net ($\mathcal{TT}$net), a novel Convolutional Neural Network (CNN) architecture that addresses, by design, the open challenges of interpretability, formal verification, and logic gate…

人工智能 · 计算机科学 2023-02-03 Adrien Benamira , Tristan Guérand , Thomas Peyrin , Trevor Yap , Bryan Hooi

Deep learning algorithms have been known to be vulnerable to adversarial perturbations in various tasks such as image classification. This problem was addressed by employing several defense methods for detection and rejection of particular…

计算机视觉与模式识别 · 计算机科学 2017-11-07 Zhun Sun , Mete Ozay , Takayuki Okatani

Adversarial examples are known to mislead deep learning models to incorrectly classify them, even in domains where such models achieve state-of-the-art performance. Until recently, research on both attack and defense methods focused on…

密码学与安全 · 计算机科学 2019-11-22 Ishai Rosenberg , Asaf Shabtai , Yuval Elovici , Lior Rokach

Despite their performance, Artificial Neural Networks are not reliable enough for most of industrial applications. They are sensitive to noises, rotations, blurs and adversarial examples. There is a need to build defenses that protect…

机器学习 · 计算机科学 2020-08-20 Alfred Laugros , Alice Caplier , Matthieu Ospici

Convolutional neural networks have been used to achieve a string of successes during recent years, but their lack of interpretability remains a serious issue. Adversarial examples are designed to deliberately fool neural networks into…

机器学习 · 计算机科学 2020-04-28 Jan Philip Göpfert , André Artelt , Heiko Wersing , Barbara Hammer

Deep neural networks (DNNs) are notorious for their vulnerability to adversarial attacks, which are small perturbations added to their input images to mislead their prediction. Detection of adversarial examples is, therefore, a fundamental…

机器学习 · 计算机科学 2020-03-20 Gilad Cohen , Guillermo Sapiro , Raja Giryes

We propose a method to learn deep ReLU-based classifiers that are provably robust against norm-bounded adversarial perturbations on the training data. For previously unseen examples, the approach is guaranteed to detect all adversarial…

机器学习 · 计算机科学 2018-06-12 Eric Wong , J. Zico Kolter

Neural networks are known to be vulnerable to adversarial examples: inputs that are close to natural inputs but classified incorrectly. In order to better understand the space of adversarial examples, we survey ten recent proposals that are…

机器学习 · 计算机科学 2017-11-02 Nicholas Carlini , David Wagner

The neural network (NN) becomes one of the most heated type of models in various signal processing applications. However, NNs are extremely vulnerable to adversarial examples (AEs). To defend AEs, adversarial training (AT) is believed to be…

机器学习 · 计算机科学 2023-08-31 Mingyuan Fan , Yang Liu , Cen Chen