中文
相关论文

相关论文: Robustness and Transferability of Universal Attack…

200 篇论文

Model compression techniques allow to significantly reduce the computational cost associated with data processing by deep neural networks with only a minor decrease in average accuracy. Simultaneously, reducing the model size may have a…

机器学习 · 计算机科学 2021-09-28 Sebastian Cygert , Andrzej Czyżewski

Deep Learning models hold state-of-the-art performance in many fields, but their vulnerability to adversarial examples poses threat to their ubiquitous deployment in practical settings. Additionally, adversarial inputs generated on one…

机器学习 · 计算机科学 2021-03-31 Deepak Ravikumar , Sangamesh Kodge , Isha Garg , Kaushik Roy

Deep neural networks (DNNs) have achieved remarkable success in diverse fields. However, it has been demonstrated that DNNs are very vulnerable to adversarial examples even in black-box settings. A large number of black-box attack methods…

机器学习 · 计算机科学 2022-03-29 Junjie Fu , Jian Sun , Gang Wang

As deep learning (DL) models are increasingly being integrated into our everyday lives, ensuring their safety by making them robust against adversarial attacks has become increasingly critical. DL models have been found to be susceptible to…

Deep neural networks (DNNs) are increasingly used in critical applications such as identity authentication and autonomous driving, where robustness against adversarial attacks is crucial. These attacks can exploit minor perturbations to…

机器学习 · 计算机科学 2024-08-21 Qiao Li , Cong Wu , Jing Chen , Zijun Zhang , Kun He , Ruiying Du , Xinxin Wang , Qingchuang Zhao , Yang Liu

We investigate the role of transferability of adversarial attacks in the observed vulnerabilities of Deep Neural Networks (DNNs). We demonstrate that introducing randomness to the DNN models is sufficient to defeat adversarial attacks,…

密码学与安全 · 计算机科学 2018-06-19 Yan Zhou , Murat Kantarcioglu , Bowei Xi

Deep neural networks (DNNs) are known to be vulnerable to adversarial examples which contain human-imperceptible perturbations. A series of defending methods, either proactive defence or reactive defence, have been proposed in the recent…

机器学习 · 计算机科学 2020-07-27 Derek Wang , Chaoran Li , Sheng Wen , Surya Nepal , Yang Xiang

Deep neural networks (DNNs) are susceptible to adversarial examples, which introduce imperceptible perturbations to benign samples, deceiving DNN predictions. While some attack methods excel in the white-box setting, they often struggle in…

计算机视觉与模式识别 · 计算机科学 2023-11-21 Jiayang Liu , Siyu Zhu , Siyuan Liang , Jie Zhang , Han Fang , Weiming Zhang , Ee-Chien Chang

Following the recent adoption of deep neural networks (DNN) accross a wide range of applications, adversarial attacks against these models have proven to be an indisputable threat. Adversarial samples are crafted with a deliberate intention…

机器学习 · 计算机科学 2017-08-31 Valentina Zantedeschi , Maria-Irina Nicolae , Ambrish Rawat

In recent years, Deep Neural Networks (DNNs) have had a dramatic impact on a variety of problems that were long considered very difficult, e. g., image classification and automatic language translation to name just a few. The accuracy of…

机器学习 · 计算机科学 2019-09-13 Yannik Potdevin , Dirk Nowotka , Vijay Ganesh

Neural networks are getting deeper and more computation-intensive nowadays. Quantization is a useful technique in deploying neural networks on hardware platforms and saving computation costs with negligible performance loss. However, recent…

机器学习 · 计算机科学 2021-01-26 Chang Song , Elias Fallon , Hai Li

We introduce Universal and Transferable Adversarial Perturbations (UTAP) for pathology foundation models that reveal critical vulnerabilities in their capabilities. Optimized using deep learning, UTAP comprises a fixed and weak noise…

计算机视觉与模式识别 · 计算机科学 2025-10-21 Yuntian Wang , Xilin Yang , Che-Yung Shen , Nir Pillar , Aydogan Ozcan

The deployment of deep neural networks on resource-constrained devices necessitates effective model com- pression strategies that judiciously balance the reduction of model size with the preservation of performance. This study introduces a…

机器学习 · 计算机科学 2025-05-02 Mohammad Zbeeb , Mariam Salman , Mohammad Bazzi , Ammar Mohanna

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model (target model) with…

密码学与安全 · 计算机科学 2024-01-08 Ryota Iijima , Sayaka Shiota , Hitoshi Kiya

Deep Neural Networks (DNNs) in Computer Vision (CV) are well-known to be vulnerable to Adversarial Examples (AEs), namely imperceptible perturbations added maliciously to cause wrong classification results. Such variability has been a…

密码学与安全 · 计算机科学 2020-07-31 Yi Zeng , Han Qiu , Gerard Memmi , Meikang Qiu

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In previous studies, the use of models encrypted with a secret key was demonstrated to be robust against white-box attacks, but not against black-box…

人工智能 · 计算机科学 2024-02-13 Ryota Iijima , Sayaka Shiota , Hitoshi Kiya

Neural networks can be drastically shrunk in size by removing redundant parameters. While crucial for the deployment on resource-constraint hardware, oftentimes, compression comes with a severe drop in accuracy and lack of adversarial…

机器学习 · 计算机科学 2024-12-20 Qi Zhao , Christian Wressnegger

As deep neural networks (DNNs) are growing larger, their requirements for computational resources become huge, which makes outsourcing training more popular. Training in a third-party platform, however, may introduce potential risks that a…

机器学习 · 计算机科学 2021-10-28 Dongxian Wu , Yisen Wang

Adversarial attacks can readily disrupt the image classification system, revealing the vulnerability of DNN-based recognition tasks. While existing adversarial perturbations are primarily applied to uncompressed images or compressed images…

计算机视觉与模式识别 · 计算机科学 2024-11-08 Yang Sui , Zhuohang Li , Ding Ding , Xiang Pan , Xiaozhong Xu , Shan Liu , Zhenzhong Chen

Deep Neural Networks (DNNs) are notoriously vulnerable to adversarial input designs with limited noise budgets. While numerous successful attacks with subtle modifications to original input have been proposed, defense techniques against…

机器学习 · 计算机科学 2025-06-27 Furkan Mumcu , Yasin Yilmaz