中文
相关论文

相关论文: Revisiting Transferable Adversarial Images: System…

200 篇论文

Deep neural networks are known to be extremely vulnerable to adversarial examples under white-box setting. Moreover, the malicious adversaries crafted on the surrogate (source) model often exhibit black-box transferability on other models…

计算机视觉与模式识别 · 计算机科学 2021-08-19 Xiaosen Wang , Xuanran He , Jingdong Wang , Kun He

In the last decade, the use of Machine Learning techniques in anomaly-based intrusion detection systems has seen much success. However, recent studies have shown that Machine learning in general and deep learning specifically are vulnerable…

密码学与安全 · 计算机科学 2023-03-14 Islam Debicha , Thibault Debatty , Jean-Michel Dricot , Wim Mees , Tayeb Kenaza

Vision Large Language Models (VLLMs) are increasingly deployed to offer advanced capabilities on inputs comprising both text and images. While prior research has shown that adversarial attacks can transfer from open-source to proprietary…

计算机视觉与模式识别 · 计算机科学 2025-05-05 Kai Hu , Weichen Yu , Li Zhang , Alexander Robey , Andy Zou , Chengming Xu , Haoqi Hu , Matt Fredrikson

The robustness of deep learning models against adversarial attacks remains a pivotal concern. This study presents, for the first time, an exhaustive review of the transferability aspect of adversarial attacks. It systematically categorizes…

计算机视觉与模式识别 · 计算机科学 2024-02-19 Zhibo Jin , Jiayu Zhang , Zhiyu Zhu , Huaming Chen

We formalize and analyze the trade-off between backdoor-based watermarks and adversarial defenses, framing it as an interactive protocol between a verifier and a prover. While previous works have primarily focused on this trade-off, our…

机器学习 · 计算机科学 2026-01-22 Grzegorz Głuch , Berkant Turan , Sai Ganesh Nagarajan , Sebastian Pokutta

Though deep neural networks perform challenging tasks excellently, they are susceptible to adversarial examples, which mislead classifiers by applying human-imperceptible perturbations on clean inputs. Under the query-free black-box…

机器学习 · 计算机科学 2020-11-05 Zifei Zhang , Kai Qiao , Jian Chen , Ningning Liang

Recent advances in attention-based networks have shown that Vision Transformers can achieve state-of-the-art or near state-of-the-art results on many image classification tasks. This puts transformers in the unique position of being a…

计算机视觉与模式识别 · 计算机科学 2021-06-08 Kaleel Mahmood , Rigel Mahmood , Marten van Dijk

Despite their impressive performance, deep visual models are susceptible to transferable black-box adversarial attacks. Principally, these attacks craft perturbations in a target model-agnostic manner. However, surprisingly, we find that…

机器学习 · 计算机科学 2025-04-15 Mohammad A. A. K. Jalwana , Naveed Akhtar , Ajmal Mian , Nazanin Rahnavard , Mubarak Shah

Transferable adversarial attack is always in the spotlight since deep learning models have been demonstrated to be vulnerable to adversarial samples. However, existing physical attack methods do not pay enough attention on transferability…

计算机视觉与模式识别 · 计算机科学 2022-05-20 Yu Zhang , Zhiqiang Gong , Yichuang Zhang , YongQian Li , Kangcheng Bin , Jiahao Qi , Wei Xue , Ping Zhong

Neural networks have become pervasive across various applications, including security-related products. However, their widespread adoption has heightened concerns regarding vulnerability to adversarial attacks. With emerging regulations and…

密码学与安全 · 计算机科学 2025-11-10 Disesdi Susanna Cox , Niklas Bunzel

Adversarial attacks can readily disrupt the image classification system, revealing the vulnerability of DNN-based recognition tasks. While existing adversarial perturbations are primarily applied to uncompressed images or compressed images…

计算机视觉与模式识别 · 计算机科学 2024-11-08 Yang Sui , Zhuohang Li , Ding Ding , Xiang Pan , Xiaozhong Xu , Shan Liu , Zhenzhong Chen

Adversarial attacks provide a good way to study the robustness of deep learning models. One category of methods in transfer-based black-box attack utilizes several image transformation operations to improve the transferability of…

计算机视觉与模式识别 · 计算机科学 2022-09-29 Zheng Yuan , Jie Zhang , Shiguang Shan

Advanced text-to-image diffusion models raise safety concerns regarding identity privacy violation, copyright infringement, and Not Safe For Work content generation. Towards this, unlearning methods have been developed to erase these…

计算机视觉与模式识别 · 计算机科学 2024-05-01 Xiaoxuan Han , Songlin Yang , Wei Wang , Yang Li , Jing Dong

Although the adoption rate of deep neural networks (DNNs) has tremendously increased in recent years, a solution for their vulnerability against adversarial examples has not yet been found. As a result, substantial research efforts are…

计算机视觉与模式识别 · 计算机科学 2021-11-23 Utku Ozbulak , Esla Timothy Anzaku , Wesley De Neve , Arnout Van Messem

An intriguing property of deep neural networks is the existence of adversarial examples, which can transfer among different architectures. These transferable adversarial examples may severely hinder deep neural network-based applications.…

机器学习 · 计算机科学 2017-02-08 Yanpei Liu , Xinyun Chen , Chang Liu , Dawn Song

Recent research has found that many families of machine learning models are vulnerable to adversarial examples: inputs that are specifically designed to cause the target model to produce erroneous outputs. In this survey, we focus on…

机器学习 · 计算机科学 2019-11-19 Rey Reza Wiyatno , Anqi Xu , Ousmane Dia , Archy de Berker

Many machine learning models are vulnerable to adversarial examples: inputs that are specially crafted to cause a machine learning model to produce an incorrect output. Adversarial examples that affect one model often affect another model,…

密码学与安全 · 计算机科学 2016-05-25 Nicolas Papernot , Patrick McDaniel , Ian Goodfellow

Adversarial attacks have been a looming and unaddressed threat in the industry. However, through a decade-long history of the robustness evaluation literature, we have learned that mounting a strong or optimal attack is challenging. It…

机器学习 · 计算机科学 2024-03-19 Chawin Sitawarin , Jaewon Chang , David Huang , Wesson Altoyan , David Wagner

Deep neural networks have been widely used in various downstream tasks, especially those safety-critical scenario such as autonomous driving, but deep networks are often threatened by adversarial samples. Such adversarial attacks can be…

计算机视觉与模式识别 · 计算机科学 2023-08-16 Yutong Zhang , Yao Li , Yin Li , Zhichang Guo

Deep neural networks are vulnerable to adversarial attacks. White-box adversarial attacks can fool neural networks with small adversarial perturbations, especially for large size images. However, keeping successful adversarial perturbations…

计算机视觉与模式识别 · 计算机科学 2020-11-11 Yongwei Wang , Mingquan Feng , Rabab Ward , Z. Jane Wang , Lanjun Wang