中文
相关论文

相关论文: Efficient Defense Against Model Stealing Attacks o…

200 篇论文

Self-supervised representation learning techniques have been developing rapidly to make full use of unlabeled images. They encode images into rich features that are oblivious to downstream tasks. Behind their revolutionary representation…

密码学与安全 · 计算机科学 2023-03-28 Zeyang Sha , Xinlei He , Ning Yu , Michael Backes , Yang Zhang

Model extraction emerges as a critical security threat with attack vectors exploiting both algorithmic and implementation-based approaches. The main goal of an attacker is to steal as much information as possible about a protected victim…

密码学与安全 · 计算机科学 2024-11-18 Kevin Hector , Pierre-Alain Moellic , Mathieu Dumont , Jean-Max Dutertre

Deep neural networks (DNNs) have proven to be quite effective in a vast array of machine learning tasks, with recent examples in cyber security and autonomous vehicles. Despite the superior performance of DNNs in these applications, it has…

机器学习 · 计算机科学 2017-08-22 Qinglong Wang , Wenbo Guo , Kaixuan Zhang , Alexander G. Ororbia , Xinyu Xing , Xue Liu , C. Lee Giles

As the deployment of deep learning models continues to expand across industries, the threat of malicious incursions aimed at gaining access to these deployed models is on the rise. Should an attacker gain access to a deployed model, whether…

机器学习 · 计算机科学 2024-03-12 Wenxin Ding , Arjun Nitin Bhagoji , Ben Y. Zhao , Haitao Zheng

Deep learning has made tremendous advances in computer vision tasks such as image classification. However, recent studies have shown that deep learning models are vulnerable to specifically crafted adversarial inputs that are…

计算机视觉与模式识别 · 计算机科学 2019-12-11 Kirthi Shankar Sivamani

Deep Neural Networks (DNNs) are notoriously vulnerable to adversarial input designs with limited noise budgets. While numerous successful attacks with subtle modifications to original input have been proposed, defense techniques against…

机器学习 · 计算机科学 2025-06-27 Furkan Mumcu , Yasin Yilmaz

Compared to traditional neural networks with a single output channel, a multi-exit network has multiple exits that allow for early outputs from the model's intermediate layers, thus significantly improving computational efficiency while…

密码学与安全 · 计算机科学 2025-03-18 Li Pan , Lv Peizhuo , Chen Kai , Zhang Shengzhi , Cai Yuling , Xiang Fan

Deep learning algorithms have been known to be vulnerable to adversarial perturbations in various tasks such as image classification. This problem was addressed by employing several defense methods for detection and rejection of particular…

计算机视觉与模式识别 · 计算机科学 2017-11-07 Zhun Sun , Mete Ozay , Takayuki Okatani

In this paper, we propose a model protection method for convolutional neural networks (CNNs) with a secret key so that authorized users get a high classification accuracy, and unauthorized users get a low classification accuracy. The…

计算机视觉与模式识别 · 计算机科学 2021-09-02 MaungMaung AprilPyone , Hitoshi Kiya

Currently, deep neural networks (DNNs) are widely adopted in different applications. Despite its commercial values, training a well-performing DNN is resource-consuming. Accordingly, the well-trained model is valuable intellectual property…

密码学与安全 · 计算机科学 2025-03-04 Yiming Li , Linghui Zhu , Xiaojun Jia , Yang Bai , Yong Jiang , Shu-Tao Xia , Xiaochun Cao , Kui Ren

Model extraction increasingly attracts research attentions as keeping commercial AI models private can retain a competitive advantage. In some scenarios, AI models are trained proprietarily, where neither pre-trained models nor sufficient…

机器学习 · 计算机科学 2021-04-14 Xinyi Zhang , Chengfang Fang , Jie Shi

Convolutional neural networks have been successful lately enabling companies to develop neural-based products, which demand an expensive process, involving data acquisition and annotation; and model generation, usually requiring experts.…

Deep Neural Networks (DNNs) in Computer Vision (CV) are well-known to be vulnerable to Adversarial Examples (AEs), namely imperceptible perturbations added maliciously to cause wrong classification results. Such variability has been a…

密码学与安全 · 计算机科学 2020-07-31 Yi Zeng , Han Qiu , Gerard Memmi , Meikang Qiu

Deep Neural Networks are robust to minor perturbations of the learned network parameters and their minor modifications do not change the overall network response significantly. This allows space for model stealing, where a malevolent…

机器学习 · 计算机科学 2019-07-04 Kálmán Szentannai , Jalal Al-Afandi , András Horváth

Robustness of convolutional neural networks (CNNs) has gained in importance on account of adversarial examples, i.e., inputs added as well-designed perturbations that are imperceptible to humans but can cause the model to predict…

计算机视觉与模式识别 · 计算机科学 2025-07-22 Tiange Luo , Tianle Cai , Mengxiao Zhang , Siyu Chen , Di He , Liwei Wang

Deep neural networks (DNNs) have been enormously successful across a variety of prediction tasks. However, recent research shows that DNNs are particularly vulnerable to adversarial attacks, which poses a serious threat to their…

计算机视觉与模式识别 · 计算机科学 2019-08-02 Xiang Li , Shihao Ji

In recent years, Deep Neural Networks (DNNs) have had a dramatic impact on a variety of problems that were long considered very difficult, e. g., image classification and automatic language translation to name just a few. The accuracy of…

机器学习 · 计算机科学 2019-09-13 Yannik Potdevin , Dirk Nowotka , Vijay Ganesh

Deep convolutional neural networks are susceptible to adversarial attacks. They can be easily deceived to give an incorrect output by adding a tiny perturbation to the input. This presents a great challenge in making CNNs robust against…

机器学习 · 计算机科学 2021-04-21 Yunrui Yu , Xitong Gao , Cheng-Zhong Xu

Deep neural networks (DNNs) have been demonstrated to be vulnerable to adversarial examples. Specifically, adding imperceptible perturbations to clean images can fool the well trained deep neural networks. In this paper, we propose an…

计算机视觉与模式识别 · 计算机科学 2019-07-02 Xiaojun Jia , Xingxing Wei , Xiaochun Cao , Hassan Foroosh

Susceptibility of neural networks to adversarial attack prompts serious safety concerns for lane detection efforts, a domain where such models have been widely applied. Recent work on adversarial road patches have successfully induced…

计算机视觉与模式识别 · 计算机科学 2021-03-02 Henry Xu , An Ju , David Wagner