中文
相关论文

相关论文: Improving Query Efficiency of Black-box Adversaria…

200 篇论文

Due to data dependency and model leakage properties, Deep Neural Networks (DNNs) exhibit several security vulnerabilities. Several security attacks exploited them but most of them require the output probability vector. These attacks can be…

密码学与安全 · 计算机科学 2019-02-01 Faiq Khalid , Hassan Ali , Muhammad Abdullah Hanif , Semeen Rehman , Rehan Ahmed , Muhammad Shafique

Current neural network-based classifiers are susceptible to adversarial examples even in the black-box setting, where the attacker only has query access to the model. In practice, the threat model for real-world systems is often more…

计算机视觉与模式识别 · 计算机科学 2018-07-12 Andrew Ilyas , Logan Engstrom , Anish Athalye , Jessy Lin

Graph Neural Networks (GNNs) have achieved state-of-the-art performance in various graph structure related tasks such as node classification and graph classification. However, GNNs are vulnerable to adversarial attacks. Existing works…

机器学习 · 计算机科学 2021-09-28 Jiaming Mu , Binghui Wang , Qi Li , Kun Sun , Mingwei Xu , Zhuotao Liu

In this paper, we present a generic, query-efficient black-box attack against API call-based machine learning malware classifiers. We generate adversarial examples by modifying the malware's API call sequences and non-sequential features…

密码学与安全 · 计算机科学 2020-10-06 Ishai Rosenberg , Asaf Shabtai , Yuval Elovici , Lior Rokach

With the fast development of machine learning technologies, deep learning models have been deployed in almost every aspect of everyday life. However, the privacy and security of these models are threatened by adversarial attacks. Among…

密码学与安全 · 计算机科学 2022-01-14 Rui Wang

Depending on how much information an adversary can access to, adversarial attacks can be classified as white-box attack and black-box attack. For white-box attack, optimization-based attack algorithms such as projected gradient descent…

机器学习 · 计算机科学 2019-09-17 Jinghui Chen , Dongruo Zhou , Jinfeng Yi , Quanquan Gu

By adding human-imperceptible noise to clean images, the resultant adversarial examples can fool other unknown models. Features of a pixel extracted by deep neural networks (DNNs) are influenced by its surrounding regions, and different…

计算机视觉与模式识别 · 计算机科学 2020-12-03 Lianli Gao , Qilong Zhang , Jingkuan Song , Xianglong Liu , Heng Tao Shen

Deep learning (DL) architectures have been successfully used in many applications including wireless systems. However, they have been shown to be susceptible to adversarial attacks. We analyze DL-based models for a regression problem in the…

信息论 · 计算机科学 2021-10-12 Pablo Millán Santos , B. R. Manoj , Meysam Sadeghi , Erik G. Larsson

Deep learning (DL) is becoming popular as a new tool for many applications in wireless communication systems. However, for many classification tasks (e.g., modulation classification) it has been shown that DL-based wireless systems are…

信息论 · 计算机科学 2021-01-29 B. R. Manoj , Meysam Sadeghi , Erik G. Larsson

Deep learning has made significant breakthroughs in many fields, including electroencephalogram (EEG) based brain-computer interfaces (BCIs). However, deep learning models are vulnerable to adversarial attacks, in which deliberately…

机器学习 · 计算机科学 2019-11-12 Xue Jiang , Xiao Zhang , Dongrui Wu

Deep learning models are used in safety-critical tasks such as automated driving and face recognition. However, small perturbations in the model input can significantly change the predictions. Adversarial attacks are used to identify small…

密码学与安全 · 计算机科学 2025-12-03 Issa Oe , Keiichiro Yamamura , Hiroki Ishikura , Ryo Hamahira , Katsuki Fujisawa

Though CNNs have achieved the state-of-the-art performance on various vision tasks, they are vulnerable to adversarial examples --- crafted by adding human-imperceptible perturbations to clean images. However, most of the existing…

计算机视觉与模式识别 · 计算机科学 2019-06-04 Cihang Xie , Zhishuai Zhang , Yuyin Zhou , Song Bai , Jianyu Wang , Zhou Ren , Alan Yuille

The transferability of adversarial examples across deep neural network (DNN) models is the crux of a spectrum of black-box attacks. In this paper, we propose a novel method to enhance the black-box transferability of baseline adversarial…

计算机视觉与模式识别 · 计算机科学 2020-08-21 Qizhang Li , Yiwen Guo , Hao Chen

This paper proposes an adversarial attack method to deep neural networks (DNNs) for monocular depth estimation, i.e., estimating the depth from a single image. Single image depth estimation has improved drastically in recent years due to…

计算机视觉与模式识别 · 计算机科学 2024-07-09 Renya Daimo , Satoshi Ono , Takahiro Suzuki

Deep neural networks are vulnerable to adversarial examples, even in the black-box setting, where the attacker is restricted solely to query access. Existing black-box approaches to generating adversarial examples typically require a…

机器学习 · 计算机科学 2019-07-02 Moustafa Alzantot , Yash Sharma , Supriyo Chakraborty , Huan Zhang , Cho-Jui Hsieh , Mani Srivastava

Deep neural networks are vulnerable to adversarial examples -- minor perturbations added to a model's input which cause the model to output an incorrect prediction. We introduce a new method for improving the efficacy of adversarial attacks…

计算机视觉与模式识别 · 计算机科学 2020-12-01 Chris Miller , Soroush Vosoughi

Deep neural networks (DNNs) are highly susceptible to adversarial examples--subtle perturbations applied to inputs that are often imperceptible to humans yet lead to incorrect model predictions. In black-box scenarios, however, existing…

计算机视觉与模式识别 · 计算机科学 2025-03-04 Qing Wan , Shilong Deng , Xun Wang

The adversarial vulnerability of Deep Neural Networks (DNNs) has been well-known and widely concerned, often under the context of learning top-$1$ attacks (e.g., fooling a DNN to classify a cat image as dog). This paper shows that the…

密码学与安全 · 计算机科学 2023-12-20 Thomas Paniagua , Ryan Grainger , Tianfu Wu

Deep neural networks (DNNs) are increasingly used in critical applications such as identity authentication and autonomous driving, where robustness against adversarial attacks is crucial. These attacks can exploit minor perturbations to…

机器学习 · 计算机科学 2024-08-21 Qiao Li , Cong Wu , Jing Chen , Zijun Zhang , Kun He , Ruiying Du , Xinxin Wang , Qingchuang Zhao , Yang Liu

Deep Neural Networks (DNNs) in Computer Vision (CV) are well-known to be vulnerable to Adversarial Examples (AEs), namely imperceptible perturbations added maliciously to cause wrong classification results. Such variability has been a…

密码学与安全 · 计算机科学 2020-07-31 Yi Zeng , Han Qiu , Gerard Memmi , Meikang Qiu