中文
相关论文

相关论文: Towards Lightweight Black-Box Attacks against Deep…

200 篇论文

Many machine learning models are vulnerable to adversarial examples: inputs that are specially crafted to cause a machine learning model to produce an incorrect output. Adversarial examples that affect one model often affect another model,…

密码学与安全 · 计算机科学 2016-05-25 Nicolas Papernot , Patrick McDaniel , Ian Goodfellow

Adversarial examples pose significant threats to deep neural networks (DNNs), and their property of transferability in the black-box setting has led to the emergence of transfer-based attacks, making it feasible to target real-world…

计算机视觉与模式识别 · 计算机科学 2025-07-23 Yuyang Luo , Xiaosen Wang , Zhijin Ge , Yingzhe He

In generating adversarial examples, the conventional black-box attack methods rely on sufficient feedback from the to-be-attacked models by repeatedly querying until the attack is successful, which usually results in thousands of trials…

计算机视觉与模式识别 · 计算机科学 2023-12-13 Renyang Liu , Wei Zhou , Xin Jin , Song Gao , Yuanyu Wang , Ruxin Wang

The evaluation of robustness against adversarial manipulation of neural networks-based classifiers is mainly tested with empirical attacks as methods for the exact computation, even when available, do not scale to large networks. We propose…

机器学习 · 计算机科学 2020-07-21 Francesco Croce , Matthias Hein

Deep neural networks are becoming popular and important assets of many AI companies. However, recent studies indicate that they are also vulnerable to adversarial attacks. Adversarial attacks can be either white-box or black-box. The…

密码学与安全 · 计算机科学 2019-07-25 Yun Xiang , Zhuangzhi Chen , Zuohui Chen , Zebin Fang , Haiyang Hao , Jinyin Chen , Yi Liu , Zhefu Wu , Qi Xuan , Xiaoniu Yang

Deep neural networks can be exploited using natural adversarial samples, which do not impact human perception. Current approaches often rely on deep neural networks' white-box nature to generate these adversarial samples or synthetically…

计算机视觉与模式识别 · 计算机科学 2024-05-24 Shashank Kotyan , Po-Yuan Mao , Pin-Yu Chen , Danilo Vasconcellos Vargas

Since Biggio et al. (2013) and Szegedy et al. (2013) first drew attention to adversarial examples, there has been a flood of research into defending and attacking machine learning models. However, almost all proposed attacks assume…

密码学与安全 · 计算机科学 2018-11-19 Jamie Hayes

Famous for its superior performance, deep learning (DL) has been popularly used within many applications, which also at the same time attracts various threats to the models. One primary threat is from adversarial attacks. Researchers have…

密码学与安全 · 计算机科学 2022-09-29 Zizhuang Deng , Kai Chen , Guozhu Meng , Xiaodong Zhang , Ke Xu , Yao Cheng

Binary analyses based on deep neural networks (DNNs), or neural binary analyses (NBAs), have become a hotly researched topic in recent years. DNNs have been wildly successful at pushing the performance and accuracy envelopes in the natural…

密码学与安全 · 计算机科学 2023-08-02 Joshua Bundt , Michael Davinroy , Ioannis Agadakos , Alina Oprea , William Robertson

Deep neural networks (DNNs) are susceptible to adversarial examples, which introduce imperceptible perturbations to benign samples, deceiving DNN predictions. While some attack methods excel in the white-box setting, they often struggle in…

计算机视觉与模式识别 · 计算机科学 2023-11-21 Jiayang Liu , Siyu Zhu , Siyuan Liang , Jie Zhang , Han Fang , Weiming Zhang , Ee-Chien Chang

Machine Learning systems are vulnerable to adversarial attacks and will highly likely produce incorrect outputs under these attacks. There are white-box and black-box attacks regarding to adversary's access level to the victim learning…

机器学习 · 计算机科学 2019-10-23 Saeid Samizade , Zheng-Hua Tan , Chao Shen , Xiaohong Guan

This paper focuses on an important type of black-box attacks, i.e., transfer-based adversarial attacks, where the adversary generates adversarial examples by a substitute (source) model and utilize them to attack an unseen target model,…

机器学习 · 计算机科学 2023-07-04 Ruijie Yang , Yuanfang Guo , Junfu Wang , Jiantao Zhou , Yunhong Wang

Deep Neural Networks (DNNs) have shown great promise in various domains. However, vulnerabilities associated with DNN training, such as backdoor attacks, are a significant concern. These attacks involve the subtle insertion of triggers…

密码学与安全 · 计算机科学 2025-09-18 Bart Pleiter , Behrad Tajalli , Stefanos Koffas , Gorka Abad , Jing Xu , Martha Larson , Stjepan Picek

Deep Learning has become popular due to its vast applications in almost all domains. However, models trained using deep learning are prone to failure for adversarial samples and carry a considerable risk in sensitive applications. Most of…

计算机视觉与模式识别 · 计算机科学 2024-05-13 Satyadwyoom Kumar , Saurabh Gupta , Arun Balaji Buduru

Although deep neural networks (DNNs) have shown impressive performance on many perceptual tasks, they are vulnerable to adversarial examples that are generated by adding slight but maliciously crafted perturbations to benign images.…

机器学习 · 计算机科学 2022-10-18 Hui Liu , Bo Zhao , Kehuan Zhang , Peng Liu

Neural networks play an increasingly important role in the field of machine learning and are included in many applications in society. Unfortunately, neural networks suffer from adversarial samples generated to attack them. However, most of…

机器学习 · 计算机科学 2024-03-13 Xiaolei Liu , Yuheng Luo , Xiaosong Zhang , Qingxin Zhu

Many deployed learned models are black boxes: given input, returns output. Internal information about the model, such as the architecture, optimisation procedure, or training data, is not disclosed explicitly as it might contain proprietary…

机器学习 · 统计学 2018-02-15 Seong Joon Oh , Max Augustin , Bernt Schiele , Mario Fritz

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In previous studies, the use of models encrypted with a secret key was demonstrated to be robust against white-box attacks, but not against black-box…

人工智能 · 计算机科学 2024-02-13 Ryota Iijima , Sayaka Shiota , Hitoshi Kiya

Adversarial attacks against Deep Neural Networks have been widely studied. One significant feature that makes such attacks particularly powerful is transferability, where the adversarial examples generated from one model can be effective…

密码学与安全 · 计算机科学 2020-09-29 Renzhi Wang , Tianwei Zhang , Xiaofei Xie , Lei Ma , Cong Tian , Felix Juefei-Xu , Yang Liu

Deep neural networks have been shown to be vulnerable to small perturbations of their inputs, known as adversarial attacks. In this paper, we investigate the vulnerability of Neural Machine Translation (NMT) models to adversarial attacks…

计算与语言 · 计算机科学 2023-06-19 Sahar Sadrizadeh , Ljiljana Dolamic , Pascal Frossard