中文
相关论文

相关论文: Defending against substitute model black box adver…

200 篇论文

Several companies often safeguard their trained deep models (i.e., details of architecture, learnt weights, training details etc.) from third-party users by exposing them only as black boxes through APIs. Moreover, they may not even provide…

机器学习 · 计算机科学 2024-03-29 Gaurav Kumar Nayak , Inder Khatri , Ruchit Rawal , Anirban Chakraborty

Applications of machine learning (ML) models and convolutional neural networks (CNNs) have been rapidly increased. Although state-of-the-art CNNs provide high accuracy in many applications, recent investigations show that such networks are…

机器学习 · 计算机科学 2021-10-18 Hadi Zanddizari , Behnam Zeinali , J. Morris Chang

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model (target model) with…

密码学与安全 · 计算机科学 2023-07-27 Ryota Iijima , Miki Tanaka , Sayaka Shiota , Hitoshi Kiya

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In previous studies, the use of models encrypted with a secret key was demonstrated to be robust against white-box attacks, but not against black-box…

人工智能 · 计算机科学 2024-02-13 Ryota Iijima , Sayaka Shiota , Hitoshi Kiya

Despite the huge success of Deep Neural Networks (DNNs) in a wide spectrum of machine learning and data mining tasks, recent research shows that this powerful tool is susceptible to maliciously crafted adversarial examples. Up until now,…

密码学与安全 · 计算机科学 2020-02-07 Zhuanghua Liu , Ivor W. Tsang

Nowadays, autonomous driving has attracted much attention from both industry and academia. Convolutional neural network (CNN) is a key component in autonomous driving, which is also increasingly adopted in pervasive computing such as…

信号处理 · 电气工程与系统科学 2020-02-07 Yao Deng , Xi Zheng , Tianyi Zhang , Chen Chen , Guannan Lou , Miryung Kim

Due to limited computational cost and energy consumption, most neural network models deployed in mobile devices are tiny. However, tiny neural networks are commonly very vulnerable to attacks. Current research has proved that larger model…

机器学习 · 计算机科学 2022-01-11 Guoyang Xie , Jinbao Wang , Guo Yu , Feng Zheng , Yaochu Jin

Deep neural networks are widely used in various fields because of their powerful performance. However, recent studies have shown that deep learning models are vulnerable to adversarial attacks, i.e., adding a slight perturbation to the…

机器学习 · 计算机科学 2022-05-17 Youhuan Yang , Lei Sun , Leyu Dai , Song Guo , Xiuqing Mao , Xiaoqin Wang , Bayi Xu

Due to the numerous advantages of machine learning (ML) algorithms, many applications now incorporate them. However, many studies in the field of image classification have shown that MLs can be fooled by a variety of adversarial attacks.…

密码学与安全 · 计算机科学 2023-03-14 Islam Debicha , Benjamin Cochez , Tayeb Kenaza , Thibault Debatty , Jean-Michel Dricot , Wim Mees

In this paper we provide an approach for deep learning that protects against adversarial examples in image classification-type networks. The approach relies on two mechanisms:1) a mechanism that increases robustness at the expense of…

机器学习 · 计算机科学 2021-01-07 Yuting Liang , Reza Samavi

Deep neural networks are vulnerable to adversarial examples. Prior defenses attempted to make deep networks more robust by either changing the network architecture or augmenting the training set with adversarial examples, but both have…

密码学与安全 · 计算机科学 2018-12-11 Yongshuai Liu , Jiyu Chen , Hao Chen

Humans rely heavily on shape information to recognize objects. Conversely, convolutional neural networks (CNNs) are biased more towards texture. This is perhaps the main reason why CNNs are vulnerable to adversarial examples. Here, we…

计算机视觉与模式识别 · 计算机科学 2021-12-08 Ali Borji

Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-model transferability, which mostly assume the substitute model…

计算机视觉与模式识别 · 计算机科学 2022-03-15 Qilong Zhang , Xiaodan Li , Yuefeng Chen , Jingkuan Song , Lianli Gao , Yuan He , Hui Xue

Adversarial attacks present a significant security risk to image recognition tasks. Defending against these attacks in a real-life setting can be compared to the way antivirus software works, with a key consideration being how well the…

计算机视觉与模式识别 · 计算机科学 2024-03-14 Haibo Zhang , Zhihua Yao , Kouichi Sakurai

In recent years Deep Neural Networks (DNNs) have achieved remarkable results and even showed super-human capabilities in a broad range of domains. This led people to trust in DNNs' classifications and resulting actions even in…

密码学与安全 · 计算机科学 2020-12-14 Philip Sperl , Ching-Yu Kao , Peng Chen , Konstantin Böttinger

Despite being popularly used in many applications, neural network models have been found to be vulnerable to adversarial examples, i.e., carefully crafted examples aiming to mislead machine learning models. Adversarial examples can pose…

机器学习 · 计算机科学 2019-07-30 Siwakorn Srisakaokul , Yuhao Zhang , Zexuan Zhong , Wei Yang , Tao Xie , Bo Li

Convolutional neural networks (CNNs) are known for their good performance and generalization in vision-related tasks and have become state-of-the-art in both application and research-based domains. However, just like other neural network…

机器学习 · 计算机科学 2020-12-03 Mohammed Amer , Tomás Maul

Adversarial attacks against deep learning models have gained significant attention and recent works have proposed explanations for the existence of adversarial examples and techniques to defend the models against these attacks. Attention in…

计算机视觉与模式识别 · 计算机科学 2021-09-03 Prachi Agrawal , Narinder Singh Punn , Sanjay Kumar Sonbhadra , Sonali Agarwal

Robustness of convolutional neural networks (CNNs) has gained in importance on account of adversarial examples, i.e., inputs added as well-designed perturbations that are imperceptible to humans but can cause the model to predict…

计算机视觉与模式识别 · 计算机科学 2025-07-22 Tiange Luo , Tianle Cai , Mengxiao Zhang , Siyu Chen , Di He , Liwei Wang

Graph Neural Networks (GNNs) have achieved state-of-the-art performance in various graph structure related tasks such as node classification and graph classification. However, GNNs are vulnerable to adversarial attacks. Existing works…

机器学习 · 计算机科学 2021-09-28 Jiaming Mu , Binghui Wang , Qi Li , Kun Sun , Mingwei Xu , Zhuotao Liu