中文
相关论文

相关论文: Improving transferability of 3D adversarial attack…

200 篇论文

Adversarial examples are of wide concern due to their impact on the reliability of contemporary machine learning systems. Effective adversarial examples are mostly found via white-box attacks. However, in some cases they can be transferred…

机器学习 · 计算机科学 2019-07-16 Deyan Petrov , Timothy M. Hospedales

Existing black-box attacks on deep neural networks (DNNs) so far have largely focused on transferability, where an adversarial instance generated for a locally trained model can "transfer" to attack other learning models. In this paper, we…

机器学习 · 计算机科学 2017-12-29 Arjun Nitin Bhagoji , Warren He , Bo Li , Dawn Song

Adversarial attacks have become a significant challenge in the security of machine learning models, particularly in the context of black-box defense strategies. Existing methods for enhancing adversarial transferability primarily focus on…

计算机视觉与模式识别 · 计算机科学 2025-05-28 Yayin Zheng , Chen Wan , Zihong Guo , Hailing Kuang , Xiaohai Lu

Adversarial transferability enables black-box attacks on unknown victim deep neural networks (DNNs), rendering attacks viable in real-world scenarios. Current transferable attacks create adversarial perturbation over the entire image,…

计算机视觉与模式识别 · 计算机科学 2023-12-27 Shangbo Wu , Yu-an Tan , Yajie Wang , Ruinan Ma , Wencong Ma , Yuanzhang Li

Deep neural networks are vulnerable to adversarial examples that are crafted by imposing imperceptible changes to the inputs. However, these adversarial examples are most successful in white-box settings where the model and its parameters…

机器学习 · 计算机科学 2021-12-20 Tianjin Huang , Vlado Menkovski , Yulong Pei , YuHao Wang , Mykola Pechenizkiy

Recently, 3D backdoor attacks have posed a substantial threat to 3D Deep Neural Networks (3D DNNs) designed for 3D point clouds, which are extensively deployed in various security-critical applications. Although the existing 3D backdoor…

计算机视觉与模式识别 · 计算机科学 2024-12-17 Xiaoyang Ning , Qing Xie , Jinyu Xu , Wenbo Jiang , Jiachen Li , Yanchun Ma

Adversarial examples exhibit cross-model transferability, enabling threatening black-box attacks on commercial models. Model ensembling, which attacks multiple surrogate models, is a known strategy to improve this transferability. However,…

机器学习 · 计算机科学 2025-12-19 Chuan Liu , Huanran Chen , Yichi Zhang , Jun Zhu , Yinpeng Dong

In recent years, research on adversarial attacks has become a hot spot. Although current literature on the transfer-based adversarial attack has achieved promising results for improving the transferability to unseen black-box models, it…

计算机视觉与模式识别 · 计算机科学 2021-08-11 Zheng Yuan , Jie Zhang , Yunpei Jia , Chuanqi Tan , Tao Xue , Shiguang Shan

Adversarial examples mislead deep neural networks with imperceptible perturbations and have brought significant threats to deep learning. An important aspect is their transferability, which refers to their ability to deceive other models,…

计算机视觉与模式识别 · 计算机科学 2024-03-26 Kunyu Wang , Xuanran He , Wenxuan Wang , Xiaosen Wang

In recent years, Deep Learning(DL) techniques have been extensively deployed for computer vision tasks, particularly visual classification problems, where new algorithms reported to achieve or even surpass the human performance. While many…

计算机视觉与模式识别 · 计算机科学 2020-01-22 Dou Goodman

Adversarial examples for neural network image classifiers are known to be transferable: examples optimized to be misclassified by a source classifier are often misclassified as well by classifiers with different architectures. However,…

机器学习 · 计算机科学 2021-10-27 Jacob M. Springer , Melanie Mitchell , Garrett T. Kenyon

Recognizing 3D point cloud plays a pivotal role in many real-world applications. However, deploying 3D point cloud deep learning model is vulnerable to adversarial attacks. Despite many efforts into developing robust model by adversarial…

计算机视觉与模式识别 · 计算机科学 2024-09-24 Jinpeng Lin , Xulei Yang , Tianrui Li , Xun Xu

Neural networks are vulnerable to adversarial examples, malicious inputs crafted to fool trained models. Adversarial examples often exhibit black-box transfer, meaning that adversarial examples for one model can fool another model. However,…

机器学习 · 计算机科学 2018-11-22 Qian Huang , Zeqi Gu , Isay Katsman , Horace He , Pian Pawakapan , Zhiqiu Lin , Serge Belongie , Ser-Nam Lim

Adversarial attacks can mislead deep neural networks (DNNs) by adding imperceptible perturbations to benign examples. The attack transferability enables adversarial examples to attack black-box DNNs with unknown architectures or parameters,…

计算机视觉与模式识别 · 计算机科学 2023-04-25 Kaisheng Liang , Bin Xiao

It is significant to evaluate the security of existing digital image tampering localization algorithms in real-world applications. In this paper, we propose an adversarial attack scheme to reveal the reliability of such tampering…

计算机视觉与模式识别 · 计算机科学 2023-09-20 Yuqi Wang , Gang Cao , Zijie Lou , Haochen Zhu

Adversarial transferability in black-box scenarios presents a unique challenge: while attackers can employ surrogate models to craft adversarial examples, they lack assurance on whether these examples will successfully compromise the target…

机器学习 · 计算机科学 2024-04-19 Mosh Levy , Guy Amit , Yuval Elovici , Yisroel Mirsky

Adversary and invisibility are two fundamental but conflict characters of adversarial perturbations. Previous adversarial attacks on 3D point cloud recognition have often been criticized for their noticeable point outliers, since they just…

计算机视觉与模式识别 · 计算机科学 2022-03-23 Qidong Huang , Xiaoyi Dong , Dongdong Chen , Hang Zhou , Weiming Zhang , Nenghai Yu

Adversarial attacks have become a well-explored domain, frequently serving as evaluation baselines for model robustness. Among these, black-box attacks based on transferability have received significant attention due to their practical…

机器学习 · 计算机科学 2025-05-26 Chun Tong Lei , Zhongliang Guo , Hon Chung Lee , Minh Quoc Duong , Chun Pong Lau

Black-box adversarial attacks have demonstrated strong potential to compromise machine learning models by iteratively querying the target model or leveraging transferability from a local surrogate model. Recently, such attacks can be…

机器学习 · 计算机科学 2024-09-09 Hanbin Hong , Xinyu Zhang , Binghui Wang , Zhongjie Ba , Yuan Hong

Adversarial attacks against Deep Neural Networks have been widely studied. One significant feature that makes such attacks particularly powerful is transferability, where the adversarial examples generated from one model can be effective…

密码学与安全 · 计算机科学 2020-09-29 Renzhi Wang , Tianwei Zhang , Xiaofei Xie , Lei Ma , Cong Tian , Felix Juefei-Xu , Yang Liu