中文
相关论文

相关论文: On the Transferability of Adversarial Examples bet…

200 篇论文

Deep neural network-based image classification can be misled by adversarial examples with small and quasi-imperceptible perturbations. Furthermore, the adversarial examples created on one classification model can also fool another different…

计算机视觉与模式识别 · 计算机科学 2021-11-23 Jindong Gu , Hengshuang Zhao , Volker Tresp , Philip Torr

Though deep neural networks perform challenging tasks excellently, they are susceptible to adversarial examples, which mislead classifiers by applying human-imperceptible perturbations on clean inputs. Under the query-free black-box…

机器学习 · 计算机科学 2020-11-05 Zifei Zhang , Kai Qiao , Jian Chen , Ningning Liang

It has been suggested that adversarial examples cause deep learning models to make incorrect predictions with high confidence. In this work, we take the opposite stance: an overly confident model is more likely to be vulnerable to…

机器学习 · 计算机科学 2018-02-14 Angus Galloway , Graham W. Taylor , Medhat Moussa

Despite the efficiency and scalability of machine learning systems, recent studies have demonstrated that many classification methods, especially deep neural networks (DNNs), are vulnerable to adversarial examples; i.e., examples that are…

密码学与安全 · 计算机科学 2021-11-22 Yao Li , Minhao Cheng , Cho-Jui Hsieh , Thomas C. M. Lee

Adversarial attacks can mislead deep neural networks (DNNs) by adding imperceptible perturbations to benign examples. The attack transferability enables adversarial examples to attack black-box DNNs with unknown architectures or parameters,…

计算机视觉与模式识别 · 计算机科学 2023-04-25 Kaisheng Liang , Bin Xiao

Deep Neural Networks (DNNs) have shown remarkable performance in a diverse range of machine learning applications. However, it is widely known that DNNs are vulnerable to simple adversarial perturbations, which causes the model to…

机器学习 · 计算机科学 2021-07-23 Gihyuk Ko , Gyumin Lim

Deep neural networks (DNNs) are shown to be vulnerable to adversarial examples. A well-trained model can be easily attacked by adding small perturbations to the original data. One of the hypotheses of the existence of the adversarial…

机器学习 · 计算机科学 2022-10-04 Jiancong Xiao , Liusha Yang , Yanbo Fan , Jue Wang , Zhi-Quan Luo

Deep neural networks (DNNs) have become popular for medical image analysis tasks like cancer diagnosis and lesion detection. However, a recent study demonstrates that medical deep learning systems can be compromised by carefully-engineered…

计算机视觉与模式识别 · 计算机科学 2021-07-05 Xingjun Ma , Yuhao Niu , Lin Gu , Yisen Wang , Yitian Zhao , James Bailey , Feng Lu

In recent years, Deep Neural Networks (DNNs) have had a dramatic impact on a variety of problems that were long considered very difficult, e. g., image classification and automatic language translation to name just a few. The accuracy of…

机器学习 · 计算机科学 2019-09-13 Yannik Potdevin , Dirk Nowotka , Vijay Ganesh

In the last decade, the use of Machine Learning techniques in anomaly-based intrusion detection systems has seen much success. However, recent studies have shown that Machine learning in general and deep learning specifically are vulnerable…

密码学与安全 · 计算机科学 2023-03-14 Islam Debicha , Thibault Debatty , Jean-Michel Dricot , Wim Mees , Tayeb Kenaza

Although deep neural networks (DNNs) have shown impressive performance on many perceptual tasks, they are vulnerable to adversarial examples that are generated by adding slight but maliciously crafted perturbations to benign images.…

机器学习 · 计算机科学 2022-10-18 Hui Liu , Bo Zhao , Kehuan Zhang , Peng Liu

The vulnerability of deep neural networks (DNNs) to adversarial examples has attracted great attention in the machine learning community. The problem is related to non-flatness and non-smoothness of normally obtained loss landscapes.…

机器学习 · 计算机科学 2023-02-13 Qizhang Li , Yiwen Guo , Wangmeng Zuo , Hao Chen

Adversarial examples (AEs) for DNNs have been shown to be transferable: AEs that successfully fool white-box surrogate models can also deceive other black-box models with different architectures. Although a bunch of empirical studies have…

机器学习 · 计算机科学 2025-12-17 Yechao Zhang , Shengshan Hu , Leo Yu Zhang , Junyu Shi , Minghui Li , Xiaogeng Liu , Wei Wan , Hai Jin

Deep Neural Networks (DNNs) have been successful in solving real-world tasks in domains such as connected and automated vehicles, disease, and job hiring. However, their implications are far-reaching in critical application areas. Hence,…

机器学习 · 计算机科学 2024-11-05 Yueyang Liu , Yan Huang , Zhipeng Cai

Deep neural networks are vulnerable to adversarial examples, which are crafted by adding small, human-imperceptible perturbations to the original images, but make the model output inaccurate predictions. Before deep neural networks are…

计算机视觉与模式识别 · 计算机科学 2021-01-13 Bo Yang , Kaiyong Xu , Hengjun Wang , Hengwei Zhang

As neural networks become the tool of choice to solve an increasing variety of problems in our society, adversarial attacks become critical. The possibility of generating data instances deliberately designed to fool a network's analysis can…

机器学习 · 计算机科学 2021-03-19 Gabriel D. Cantareira , Rodrigo F. Mello , Fernando V. Paulovich

Deep neural networks are vulnerable to adversarial examples, which becomes one of the most important research problems in the development of deep learning. While a lot of efforts have been made in recent years, it is of great significance…

计算机视觉与模式识别 · 计算机科学 2019-12-30 Yinpeng Dong , Qi-An Fu , Xiao Yang , Tianyu Pang , Hang Su , Zihao Xiao , Jun Zhu

Deep Neural Networks (DNNs) are commonly used for various traffic analysis problems, such as website fingerprinting and flow correlation, as they outperform traditional (e.g., statistical) techniques by large margins. However, deep neural…

密码学与安全 · 计算机科学 2020-02-18 Milad Nasr , Alireza Bahramali , Amir Houmansadr

Transferable adversarial examples cause practical security risks since they can mislead a target model without knowing its internal knowledge. A conventional recipe for maximizing transferability is to keep only the optimal adversarial…

计算机视觉与模式识别 · 计算机科学 2025-04-03 Bo Yang , Hengwei Zhang , Jindong Wang , Yulong Yang , Chenhao Lin , Chao Shen , Zhengyu Zhao

Deep Neural Networks are vulnerable to adversarial attacks even in settings where the attacker has no direct access to the model being attacked. Such attacks usually rely on the principle of transferability, whereby an attack crafted on a…

机器学习 · 统计学 2019-01-30 Sanjay Kariyappa , Moinuddin K. Qureshi