中文
相关论文

相关论文: Downstream Transfer Attack: Adversarial Attacks on…

200 篇论文

Deep neural networks are vulnerable to adversarial examples, which can mislead classifiers by adding imperceptible perturbations. An intriguing property of adversarial examples is their good transferability, making black-box attacks…

计算机视觉与模式识别 · 计算机科学 2019-04-08 Yinpeng Dong , Tianyu Pang , Hang Su , Jun Zhu

Extensive studies have demonstrated that deep neural networks (DNNs) are vulnerable to adversarial attacks, which brings a huge security risk to the further application of DNNs, especially for the AI models developed in the real world.…

计算机视觉与模式识别 · 计算机科学 2023-12-13 Renyang Liu , Wei Zhou , Sixin Wu , Jun Zhao , Kwok-Yan Lam

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial examples, which can produce erroneous predictions by injecting imperceptible perturbations. In this work, we study the transferability of adversarial examples,…

计算机视觉与模式识别 · 计算机科学 2022-10-13 Zeyu Qin , Yanbo Fan , Yi Liu , Li Shen , Yong Zhang , Jue Wang , Baoyuan Wu

Though deep neural networks perform challenging tasks excellently, they are susceptible to adversarial examples, which mislead classifiers by applying human-imperceptible perturbations on clean inputs. Under the query-free black-box…

机器学习 · 计算机科学 2020-11-05 Zifei Zhang , Kai Qiao , Jian Chen , Ningning Liang

By injecting adversarial examples into training data, adversarial training is promising for improving the robustness of deep learning models. However, most existing adversarial training approaches are based on a specific type of adversarial…

机器学习 · 计算机科学 2019-03-18 Chuanbiao Song , Kun He , Liwei Wang , John E. Hopcroft

Vision transformers (ViTs) have demonstrated impressive performance in various computer vision tasks. However, the adversarial examples generated by ViTs are challenging to transfer to other networks with different structures. Recent attack…

计算机视觉与模式识别 · 计算机科学 2022-04-28 Huipeng Zhou , Yu-an Tan , Yajie Wang , Haoran Lyu , Shangbo Wu , Yuanzhang Li

Vision Transformers (ViTs) are becoming a very popular paradigm for vision tasks as they achieve state-of-the-art performance on image classification. However, although early works implied that this network structure had increased…

计算机视觉与模式识别 · 计算机科学 2023-02-01 Hugo Lemarchant , Liangzi Li , Yiming Qian , Yuta Nakashima , Hajime Nagahara

Deep neural networks (DNNs) are highly susceptible to adversarial examples--subtle perturbations applied to inputs that are often imperceptible to humans yet lead to incorrect model predictions. In black-box scenarios, however, existing…

计算机视觉与模式识别 · 计算机科学 2025-03-04 Qing Wan , Shilong Deng , Xun Wang

In recent years, there has been a significant trend in deep neural networks (DNNs), particularly transformer-based models, of developing ever-larger and more capable models. While they demonstrate state-of-the-art performance, their growing…

计算机视觉与模式识别 · 计算机科学 2024-12-02 Amit Baras , Alon Zolfi , Yuval Elovici , Asaf Shabtai

Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model (target model) with…

密码学与安全 · 计算机科学 2024-01-08 Ryota Iijima , Sayaka Shiota , Hitoshi Kiya

Unsupervised domain adaptation (UDA) aims to transfer knowledge from a labeled source domain to an unlabeled target domain. The most recent UDA methods always resort to adversarial training to yield state-of-the-art results and a dominant…

计算机视觉与模式识别 · 计算机科学 2024-04-25 Yahan Li , Yuan Wu

The adversarial vulnerability of deep neural networks (DNNs) has drawn great attention due to the security risk of applying these models in real-world applications. Based on transferability of adversarial examples, an increasing number of…

机器学习 · 计算机科学 2023-11-03 Qizhang Li , Yiwen Guo , Wangmeng Zuo , Hao Chen

Deep neural networks (DNNs) can be easily fooled by adding human imperceptible perturbations to the images. These perturbed images are known as `adversarial examples' and pose a serious threat to security and safety critical systems. A…

计算机视觉与模式识别 · 计算机科学 2019-03-27 Muzammal Naseer , Salman H. Khan , Shafin Rahman , Fatih Porikli

Recent studies have revealed that vision transformers (ViTs) face similar security risks from adversarial attacks as deep convolutional neural networks (CNNs). However, directly applying attack methodology on CNNs to ViTs has been…

计算机视觉与模式识别 · 计算机科学 2024-07-02 Chao Zhou , Xiaowen Shi , Yuan-Gen Wang

Deep Neural Networks (DNNs) are highly vulnerable to adversarial examples, which pose significant challenges in security-sensitive applications. Among various adversarial attack strategies, input transformation-based attacks have…

计算机视觉与模式识别 · 计算机科学 2025-04-01 Hangyu Liu , Bo Peng , Can Cui , Pengxiang Ding , Donglin Wang

Transformer models have excelled in natural language tasks, prompting the vision community to explore their implementation in computer vision problems. However, these models are still influenced by adversarial examples. In this paper, we…

计算机视觉与模式识别 · 计算机科学 2025-01-14 Jialin Wu , Kaikai Pan , Yanjiao Chen , Jiangyi Deng , Shengyuan Pang , Wenyuan Xu

Large vision-language models (LVLMs) have demonstrated their incredible capability in image understanding and response generation. However, this rich visual interaction also makes LVLMs vulnerable to adversarial examples. In this paper, we…

计算机视觉与模式识别 · 计算机科学 2024-06-27 Xunguang Wang , Zhenlan Ji , Pingchuan Ma , Zongjie Li , Shuai Wang

Adversarial examples can cause catastrophic mistakes in Deep Neural Network (DNNs) based vision systems e.g., for classification, segmentation and object detection. The vulnerability of DNNs against such attacks can prove a major roadblock…

计算机视觉与模式识别 · 计算机科学 2020-06-11 Muzammal Naseer , Salman Khan , Munawar Hayat , Fahad Shahbaz Khan , Fatih Porikli

Adversarial examples have revealed the vulnerability of deep learning models and raised serious concerns about information security. The transfer-based attack is a hot topic in black-box attacks that are practical to real-world scenarios…

计算机视觉与模式识别 · 计算机科学 2025-05-07 Jian-Wei Li , Wen-Ze Shao

Strong adversarial examples are crucial for evaluating and enhancing the robustness of deep neural networks. However, the performance of popular attacks is usually sensitive, for instance, to minor image transformations, stemming from…

机器学习 · 计算机科学 2024-04-01 Zhengwei Fang , Rui Wang , Tao Huang , Liping Jing