中文
相关论文

相关论文: Enhancing Transferability of Adversarial Examples …

200 篇论文

Adversarial training is the most empirically successful approach in improving the robustness of deep neural networks for image classification.For text classification, however, existing synonym substitution based adversarial attacks are…

计算与语言 · 计算机科学 2020-12-17 Xiaosen Wang , Yichen Yang , Yihe Deng , Kun He

In the transfer-based adversarial attacks, adversarial examples are only generated by the surrogate models and achieve effective perturbation in the victim models. Although considerable efforts have been developed on improving the…

计算机视觉与模式识别 · 计算机科学 2023-08-14 Xiangyuan Yang , Jie Lin , Hanlin Zhang , Xinyu Yang , Peng Zhao

Segmentation models exhibit significant vulnerability to adversarial examples in white-box settings, but existing adversarial attack methods often show poor transferability across different segmentation models. While some researchers have…

计算机视觉与模式识别 · 计算机科学 2025-10-13 Yufei Song , Ziqi Zhou , Qi Lu , Hangtao Zhang , Yifan Hu , Lulu Xue , Shengshan Hu , Minghui Li , Leo Yu Zhang

Action recognition models using deep learning are vulnerable to adversarial examples, which are transferable across other models trained on the same data modality. Existing transferable attack methods face two major challenges: 1) they…

计算机视觉与模式识别 · 计算机科学 2025-05-26 Ping Li , Jianan Ni , Bo Pang

Deep learning achieves state-of-the-art performance in many tasks but exposes to the underlying vulnerability against adversarial examples. Across existing defense techniques, adversarial training with the projected gradient decent attack…

密码学与安全 · 计算机科学 2022-10-04 Tianjin Huang , Vlado Menkovski , Yulong Pei , Mykola Pechenizkiy

Transferable adversarial attacks against Deep neural networks (DNNs) have received broad attention in recent years. An adversarial example can be crafted by a surrogate model and then attack the unknown target model successfully, which…

计算机视觉与模式识别 · 计算机科学 2022-10-11 Yao Zhu , Yuefeng Chen , Xiaodan Li , Kejiang Chen , Yuan He , Xiang Tian , Bolun Zheng , Yaowu Chen , Qingming Huang

Adversarial examples have been demonstrated to threaten many computer vision tasks including object detection. However, the existing attacking methods for object detection have two limitations: poor transferability, which denotes that the…

计算机视觉与模式识别 · 计算机科学 2019-05-14 Xingxing Wei , Siyuan Liang , Ning Chen , Xiaochun Cao

Transfer-based targeted adversarial attacks against black-box deep neural networks (DNNs) have been proven to be significantly more challenging than untargeted ones. The impressive transferability of current SOTA, the generative methods,…

计算机视觉与模式识别 · 计算机科学 2024-07-23 Bowen Peng , Li Liu , Tianpeng Liu , Zhen Liu , Yongxiang Liu

Deep neural networks (DNNs) are highly susceptible to adversarial examples--subtle perturbations applied to inputs that are often imperceptible to humans yet lead to incorrect model predictions. In black-box scenarios, however, existing…

计算机视觉与模式识别 · 计算机科学 2025-03-04 Qing Wan , Shilong Deng , Xun Wang

Adversarial examples pose significant threats to deep neural networks (DNNs), and their property of transferability in the black-box setting has led to the emergence of transfer-based attacks, making it feasible to target real-world…

计算机视觉与模式识别 · 计算机科学 2025-07-23 Yuyang Luo , Xiaosen Wang , Zhijin Ge , Yingzhe He

Convolutional neural networks have outperformed humans in image recognition tasks, but they remain vulnerable to attacks from adversarial examples. Since these data are crafted by adding imperceptible noise to normal images, their existence…

计算机视觉与模式识别 · 计算机科学 2021-06-10 Heng Yin , Hengwei Zhang , Jindong Wang , Ruiyu Dou

Learning adversarial examples can be formulated as an optimization problem of maximizing the loss function with some box-constraints. However, for solving this induced optimization problem, the state-of-the-art gradient-based methods such…

机器学习 · 计算机科学 2023-02-03 Wei Tao , Lei Bao , Sheng Long , Gaowei Wu , Qing Tao

Temporal human action detection aims to identify and localize action segments within untrimmed videos, serving as a pivotal task in video understanding. Despite the progress achieved by prior architectures like CNN and Transformer models,…

计算机视觉与模式识别 · 计算机科学 2026-04-13 Yicheng Qiu , Keiji Yanai

Deep neural networks can be vulnerable to adversarially crafted examples, presenting significant risks to practical applications. A prevalent approach for adversarial attacks relies on the transferability of adversarial examples, which are…

信息检索 · 计算机科学 2024-11-12 Shanjun Xu , Linghui Li , Kaiguo Yuan , Bingyu Li

Deep Neural Networks (DNNs) are vulnerable to adversarial attacks, posing significant security threats to their deployment in remote sensing applications. Research on adversarial attacks not only reveals model vulnerabilities but also…

计算机视觉与模式识别 · 计算机科学 2025-09-10 Chun Liu , Hailong Wang , Bingqian Zhu , Panpan Ding , Zheng Zheng , Tao Xu , Zhigang Han , Jiayao Wang

Adversarial examples have attracted widespread attention in security-critical applications because of their transferability across different models. Although many methods have been proposed to boost adversarial transferability, a gap still…

计算机视觉与模式识别 · 计算机科学 2023-09-12 Xingxing Wei , Shiji Zhao

It is significant to evaluate the security of existing digital image tampering localization algorithms in real-world applications. In this paper, we propose an adversarial attack scheme to reveal the reliability of such tampering…

计算机视觉与模式识别 · 计算机科学 2023-09-20 Yuqi Wang , Gang Cao , Zijie Lou , Haochen Zhu

Keyless entry systems in cars are adopting neural networks for localizing its operators. Using test-time adversarial defences equip such systems with the ability to defend against adversarial attacks without prior training on adversarial…

机器学习 · 计算机科学 2022-11-14 Abhiram Kolli , Muhammad Jehanzeb Mirza , Horst Possegger , Horst Bischof

The vulnerability of Deep Neural Networks (DNNs) to adversarial examples has been confirmed. Existing adversarial defenses primarily aim at preventing adversarial examples from attacking DNNs successfully, rather than preventing their…

计算机视觉与模式识别 · 计算机科学 2023-03-09 Jinwei Wang , Hao Wu , Haihua Wang , Jiawei Zhang , Xiangyang Luo , Bin Ma

The black-box adversarial attack has attracted impressive attention for its practical use in the field of deep learning security. Meanwhile, it is very challenging as there is no access to the network architecture or internal weights of the…

机器学习 · 计算机科学 2022-04-26 Yifeng Xiong , Jiadong Lin , Min Zhang , John E. Hopcroft , Kun He