中文
相关论文

相关论文: Boosting Adversarial Transferability using Dynamic…

200 篇论文

We introduce a new attack paradigm that embeds hidden adversarial capabilities directly into diffusion models via fine-tuning, without altering their observable behavior or requiring modifications during inference. Unlike prior approaches…

机器学习 · 计算机科学 2025-04-15 Lucas Beerens , Desmond J. Higham

In recent years, the trackers based on Siamese networks have emerged as highly effective and efficient for visual object tracking (VOT). While these methods were shown to be vulnerable to adversarial attacks, as most deep networks for…

计算机视觉与模式识别 · 计算机科学 2021-01-01 Krishna Kanth Nakka , Mathieu Salzmann

Language-conditioned robotic learning has significantly enhanced robot adaptability by enabling a single model to execute diverse tasks in response to verbal commands. Despite these advancements, security vulnerabilities within this domain…

机器学习 · 计算机科学 2024-11-26 Ke Zhao , Huayang Huang , Miao Li , Yu Wu

Adversarial examples are one critical security threat to various visual applications, where injected human-imperceptible perturbations can confuse the output.Generating transferable adversarial examples in the black-box setting is crucial…

计算机视觉与模式识别 · 计算机科学 2024-01-25 Junlin Liu , Xinchen Lyu

Adversarial attacks pose a significant threat to deep learning models, particularly in safety-critical applications like healthcare and autonomous driving. Recently, patch based attacks have demonstrated effectiveness in real-time inference…

计算机视觉与模式识别 · 计算机科学 2025-02-25 Prashant Shekhar , Bidur Devkota , Dumindu Samaraweera , Laxima Niure Kandel , Manoj Babu

Adversarial attacks exploiting unrestricted natural perturbations present severe security risks to deep learning systems, yet their transferability across models remains limited due to distribution mismatches between generated adversarial…

计算机视觉与模式识别 · 计算机科学 2025-05-23 Yuhao Xue , Zhifei Zhang , Xinyang Jiang , Yifei Shen , Junyao Gao , Wentao Gu , Jiale Zhao , Miaojing Shi , Cairong Zhao

Vision-language models (VLMs) seamlessly integrate visual and textual data to perform tasks such as image classification, caption generation, and visual question answering. However, adversarial images often struggle to deceive all prompts…

多媒体 · 计算机科学 2024-06-21 Xikang Yang , Xuehai Tang , Fuqing Zhu , Jizhong Han , Songlin Hu

One intriguing property of adversarial attacks is their "transferability" -- an adversarial example crafted with respect to one deep neural network (DNN) model is often found effective against other DNNs as well. Intensive research has been…

计算机视觉与模式识别 · 计算机科学 2022-04-11 Yuhao Mao , Chong Fu , Saizhuo Wang , Shouling Ji , Xuhong Zhang , Zhenguang Liu , Jun Zhou , Alex X. Liu , Raheem Beyah , Ting Wang

Video-based multimodal large language models (V-MLLMs) have shown vulnerability to adversarial examples in video-text multimodal tasks. However, the transferability of adversarial videos to unseen models - a common and practical real-world…

计算机视觉与模式识别 · 计算机科学 2026-01-12 Linhao Huang , Xue Jiang , Zhiqiang Wang , Wentao Mo , Xi Xiao , Yong-Jie Yin , Bo Han , Feng Zheng

Vision-language pre-training (VLP) models demonstrate impressive abilities in processing both images and text. However, they are vulnerable to multi-modal adversarial examples (AEs). Investigating the generation of high-transferability…

计算机视觉与模式识别 · 计算机科学 2023-12-08 Dongchen Han , Xiaojun Jia , Yang Bai , Jindong Gu , Yang Liu , Xiaochun Cao

Neural network models are vulnerable to adversarial examples, and adversarial transferability further increases the risk of adversarial attacks. Current methods based on transferability often rely on substitute models, which can be…

计算与语言 · 计算机科学 2023-11-07 Minxuan Lv , Chengwei Dai , Kun Li , Wei Zhou , Songlin Hu

Adversarial perturbations are imperceptible changes to input pixels that can change the prediction of deep learning models. Learned weights of models robust to such perturbations are previously found to be transferable across different…

机器学习 · 计算机科学 2020-10-30 Alvin Chan , Yi Tay , Yew-Soon Ong

Face modification systems using deep learning have become increasingly powerful and accessible. Given images of a person's face, such systems can generate new images of that same person under different expressions and poses. Some systems…

计算机视觉与模式识别 · 计算机科学 2020-04-29 Nataniel Ruiz , Sarah Adel Bargal , Stan Sclaroff

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial examples. Moreover, the transferability of the adversarial examples has received broad attention in recent years, which means that adversarial examples crafted by a…

机器学习 · 计算机科学 2023-04-17 Dingcheng Yang , Wenjian Yu , Zihao Xiao , Jiaqi Luo

Transfer-based adversarial attacks can evaluate model robustness in the black-box setting. Several methods have demonstrated impressive untargeted transferability, however, it is still challenging to efficiently produce targeted…

机器学习 · 计算机科学 2022-07-25 Xiao Yang , Yinpeng Dong , Tianyu Pang , Hang Su , Jun Zhu

In this paper, we propose a novel transfer-based targeted attack method that optimizes the adversarial perturbations without any extra training efforts for auxiliary networks on training data. Our new attack method is proposed based on the…

计算机视觉与模式识别 · 计算机科学 2023-04-14 Zhipeng Wei , Jingjing Chen , Zuxuan Wu , Yu-Gang Jiang

Current Visual-Language Pre-training (VLP) models are vulnerable to adversarial examples. These adversarial examples present substantial security risks to VLP models, as they can leverage inherent weaknesses in the models, resulting in…

计算机视觉与模式识别 · 计算机科学 2023-12-11 Bangyan He , Xiaojun Jia , Siyuan Liang , Tianrui Lou , Yang Liu , Xiaochun Cao

With the rapid advancement and widespread application of vision-language pre-training (VLP) models, their vulnerability to adversarial attacks has become a critical concern. In general, the adversarial examples can typically be designed to…

计算机视觉与模式识别 · 计算机科学 2026-03-24 Yuanbo Li , Tianyang Xu , Cong Hu , Tao Zhou , Xiao-Jun Wu , Josef Kittler

A single perturbation can pose the most natural images to be misclassified by classifiers. In black-box setting, current universal adversarial attack methods utilize substitute models to generate the perturbation, then apply the…

计算机视觉与模式识别 · 计算机科学 2021-01-06 Jing Wu , Mingyi Zhou , Shuaicheng Liu , Yipeng Liu , Ce Zhu

Neural networks are vulnerable to adversarial examples, malicious inputs crafted to fool trained models. Adversarial examples often exhibit black-box transfer, meaning that adversarial examples for one model can fool another model. However,…

机器学习 · 计算机科学 2020-03-02 Qian Huang , Isay Katsman , Horace He , Zeqi Gu , Serge Belongie , Ser-Nam Lim