中文
相关论文

相关论文: Hermes Attack: Steal DNN Models with Lossless Infe…

200 篇论文

In this paper, we propose a novel and practical mechanism which enables the service provider to verify whether a suspect model is stolen from the victim model via model extraction attacks. Our key insight is that the profile of a DNN…

密码学与安全 · 计算机科学 2022-05-10 Zirui Peng , Shaofeng Li , Guoxing Chen , Cheng Zhang , Haojin Zhu , Minhui Xue

Safety is a critical concern for the next generation of autonomy that is likely to rely heavily on deep neural networks for perception and control. Formally verifying the safety and robustness of well-trained DNNs and learning-enabled…

机器学习 · 计算机科学 2021-08-10 Xiaodong Yang , Tom Yamaguchi , Hoang-Dung Tran , Bardh Hoxha , Taylor T Johnson , Danil Prokhorov

Neural networks are valuable intellectual property due to the significant computational cost, expert labor, and proprietary data involved in their development. Consequently, protecting their parameters is critical not only for maintaining a…

密码学与安全 · 计算机科学 2025-09-23 Ashley Kurian , Aydin Aysu

Deep neural networks (DNNs) can easily be cheated by some imperceptible but purposeful noise added to images, and erroneously classify them. Previous defensive work mostly focused on retraining the models or detecting the noise, but has…

人工智能 · 计算机科学 2024-05-31 Jing Wen

Model Inversion (MI) attacks aim at leveraging the output information of target models to reconstruct privacy-sensitive training data, raising critical concerns regarding the privacy vulnerabilities of Deep Neural Networks (DNNs).…

计算机视觉与模式识别 · 计算机科学 2025-03-11 Yixiang Qiu , Hongyao Yu , Hao Fang , Tianqu Zhuang , Wenbo Yu , Bin Chen , Xuan Wang , Shu-Tao Xia , Ke Xu

Recent attacks on Machine Learning (ML) models such as evasion attacks with adversarial examples and models stealing through extraction attacks pose several security and privacy threats. Prior work proposes to use adversarial training to…

机器学习 · 计算机科学 2022-08-23 Kacem Khaled , Gabriela Nicolescu , Felipe Gohring de Magalhães

Deep neural networks (DNNs) have been shown to be vulnerable against adversarial examples (AEs) which are maliciously designed to fool target models. The normal examples (NEs) added with imperceptible adversarial perturbation, can be a…

计算机视觉与模式识别 · 计算机科学 2022-08-31 Mingyu Dong , Jiahao Chen , Diqun Yan , Jingxing Gao , Li Dong , Rangding Wang

Models leak information about their training data. This enables attackers to infer sensitive information about their training sets, notably determine if a data sample was part of the model's training set. The existing works empirically show…

机器学习 · 统计学 2021-02-18 Sasi Kumar Murakonda , Reza Shokri , George Theodorakopoulos

Distributed Denial of Service (DDoS) attacks pose an increasingly substantial cybersecurity threat to organizations across the globe. In this paper, we introduce a new deep learning-based technique for detecting DDoS attacks, a paramount…

密码学与安全 · 计算机科学 2024-09-16 Fernando Martinez , Mariyam Mapkar , Ali Alfatemi , Mohamed Rahouti , Yufeng Xin , Kaiqi Xiong , Nasir Ghani

The last few years have seen an increasing wave of attacks with serious economic and privacy damages, which evinces the need for accurate Network Intrusion Detection Systems (NIDS). Recent works propose the use of Machine Learning (ML)…

密码学与安全 · 计算机科学 2021-08-02 David Pujol-Perich , José Suárez-Varela , Albert Cabellos-Aparicio , Pere Barlet-Ros

Edge nodes are crucial for detection against multitudes of cyber attacks on Internet-of-Things endpoints and is set to become part of a multi-billion industry. The resource constraints in this novel network infrastructure tier constricts…

密码学与安全 · 计算机科学 2022-07-07 Praneet Singh , Jishnu Jaykumar , Akhil Pankaj , Reshmi Mitra

Deep neural networks are normally executed in the forward direction. However, in this work, we identify a vulnerability that enables models to be trained in both directions and on different tasks. Adversaries can exploit this capability to…

机器学习 · 计算机科学 2024-05-20 Guy Amit , Mosh Levy , Yisroel Mirsky

Security of machine learning is increasingly becoming a major concern due to the ubiquitous deployment of deep learning in many security-sensitive domains. Many prior studies have shown external attacks such as adversarial examples that…

密码学与安全 · 计算机科学 2020-04-01 Fan Yao , Adnan Siraj Rakin , Deliang Fan

Deep neural networks (DNNs) have shown unprecedented success in object detection tasks. However, it was also discovered that DNNs are vulnerable to multiple kinds of attacks, including Backdoor Attacks. Through the attack, the attacker…

计算机视觉与模式识别 · 计算机科学 2023-09-19 Yize Cheng , Wenbin Hu , Minhao Cheng

Deep neural networks (DNNs) are known to be vulnerable to both backdoor attacks as well as adversarial attacks. In the literature, these two types of attacks are commonly treated as distinct problems and solved separately, since they belong…

计算机视觉与模式识别 · 计算机科学 2022-12-29 Bingxu Mu , Zhenxing Niu , Le Wang , Xue Wang , Rong Jin , Gang Hua

With deep learning deployed in many security-sensitive areas, machine learning security is becoming progressively important. Recent studies demonstrate attackers can exploit system-level techniques exploiting the RowHammer vulnerability of…

密码学与安全 · 计算机科学 2024-09-11 Ranyang Zhou , Sabbir Ahmed , Adnan Siraj Rakin , Shaahin Angizi

Data poisoning attacks compromise the integrity of machine-learning models by introducing malicious training samples to influence the results during test time. In this work, we investigate backdoor data poisoning attack on deep neural…

机器学习 · 计算机科学 2019-12-04 Mahesh Subedar , Nilesh Ahuja , Ranganath Krishnan , Ibrahima J. Ndiour , Omesh Tickoo

Deep learning has achieved overwhelming success, spanning from discriminative models to generative models. In particular, deep generative models have facilitated a new level of performance in a myriad of areas, ranging from media…

机器学习 · 计算机科学 2020-11-24 Dingfan Chen , Ning Yu , Yang Zhang , Mario Fritz

Recent studies have highlighted that deep neural networks (DNNs) are vulnerable to adversarial attacks, even in a black-box scenario. However, most of the existing black-box attack algorithms need to make a huge amount of queries to perform…

机器学习 · 统计学 2018-09-11 Yali Du , Meng Fang , Jinfeng Yi , Jun Cheng , Dacheng Tao

Following the recent adoption of deep neural networks (DNN) accross a wide range of applications, adversarial attacks against these models have proven to be an indisputable threat. Adversarial samples are crafted with a deliberate intention…

机器学习 · 计算机科学 2017-08-31 Valentina Zantedeschi , Maria-Irina Nicolae , Ambrish Rawat