中文
相关论文

相关论文: Towards Model Resistant to Transferable Adversaria…

200 篇论文

We study the model robustness against adversarial examples, referred to as small perturbed input data that may however fool many state-of-the-art deep learning models. Unlike previous research, we establish a novel theory addressing the…

机器学习 · 计算机科学 2020-06-11 Shufei Zhang , Kaizhu Huang , Zenglin Xu

Despite remarkable achievements in deep learning across various domains, its inherent vulnerability to adversarial examples still remains a critical concern for practical deployment. Adversarial training has emerged as one of the most…

机器学习 · 计算机科学 2024-11-06 Junhao Dong , Xinghua Qu , Z. Jane Wang , Yew-Soon Ong

Recently, pre-trained encoders have gained widespread use due to their strong capability in representation extraction. However, they are vulnerable to downstream-agnostic attacks (DAAs). Existing DAA methods operate under a permissive…

计算机视觉与模式识别 · 计算机科学 2026-05-20 Zhuxin Lei , Ziyuan Yang , Yi Zhang

Modern applications of artificial neural networks have yielded remarkable performance gains in a wide range of tasks. However, recent studies have discovered that such modelling strategy is vulnerable to Adversarial Examples, i.e. examples…

计算机视觉与模式识别 · 计算机科学 2019-04-24 João Monteiro , Isabela Albuquerque , Zahid Akhtar , Tiago H. Falk

Evasion Attacks (EA) are used to test the robustness of trained neural networks by distorting input data to misguide the model into incorrect classifications. Creating these attacks is a challenging task, especially with the ever-increasing…

机器学习 · 计算机科学 2023-10-06 Ofir Bar Tal , Adi Haviv , Amit H. Bermano

Transfer-based attacks pose a significant threat to real-world applications by directly targeting victim models with adversarial examples generated on surrogate models. While numerous approaches have been proposed to enhance adversarial…

计算机视觉与模式识别 · 计算机科学 2026-03-18 Bohan Liu , Xiaosen Wang

The vulnerabilities of deep neural networks against adversarial examples have become a significant concern for deploying these models in sensitive domains. Devising a definitive defense against such attacks is proven to be challenging, and…

机器学习 · 计算机科学 2022-10-04 Xuwang Yin , Soheil Kolouri , Gustavo K. Rohde

Recent development of adversarial attacks has proven that ensemble-based methods outperform traditional, non-ensemble ones in black-box attack. However, as it is computationally prohibitive to acquire a family of diverse models, these…

计算机视觉与模式识别 · 计算机科学 2019-11-26 Yingwei Li , Song Bai , Yuyin Zhou , Cihang Xie , Zhishuai Zhang , Alan Yuille

Machine learning models are vulnerable to tiny adversarial input perturbations optimized to cause a very large output error. To measure this vulnerability, we need reliable methods that can find such adversarial perturbations. For image…

计算机视觉与模式识别 · 计算机科学 2024-07-15 Levente Halmosi , Bálint Mohos , Márk Jelasity

Adversarial examples are carefully crafted attack points that are supposed to fool machine learning classifiers. In the last years, the field of adversarial machine learning, especially the study of perturbation-based adversarial examples,…

机器学习 · 计算机科学 2023-09-19 Roland Rauter , Martin Nocker , Florian Merkle , Pascal Schöttle

Recent developments in text-to-image models, particularly Stable Diffusion, have marked significant achievements in various applications. With these advancements, there are growing safety concerns about the vulnerability of the model that…

计算机视觉与模式识别 · 计算机科学 2024-01-18 Chenyu Zhang , Lanjun Wang , Anan Liu

Understanding adversarial examples is crucial for improving model robustness, as they introduce imperceptible perturbations to deceive models. Effective adversarial examples, therefore, offer the potential to train more robust models by…

机器学习 · 计算机科学 2025-04-15 Xinheng Xie , Yue Wu , Cuiyu He

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial examples. Moreover, the transferability of the adversarial examples has received broad attention in recent years, which means that adversarial examples crafted by a…

机器学习 · 计算机科学 2023-04-17 Dingcheng Yang , Wenjian Yu , Zihao Xiao , Jiaqi Luo

Adversarial examples (AEs) for DNNs have been shown to be transferable: AEs that successfully fool white-box surrogate models can also deceive other black-box models with different architectures. Although a bunch of empirical studies have…

机器学习 · 计算机科学 2025-12-17 Yechao Zhang , Shengshan Hu , Leo Yu Zhang , Junyu Shi , Minghui Li , Xiaogeng Liu , Wei Wan , Hai Jin

Transfer learning is a widely-used paradigm in deep learning, where models pre-trained on standard datasets can be efficiently adapted to downstream tasks. Typically, better pre-trained models yield better transfer results, suggesting that…

计算机视觉与模式识别 · 计算机科学 2020-12-09 Hadi Salman , Andrew Ilyas , Logan Engstrom , Ashish Kapoor , Aleksander Madry

Adversarial transferability, namely the ability of adversarial perturbations to simultaneously fool multiple learning models, has long been the "big bad wolf" of adversarial machine learning. Successful transferability-based attacks…

机器学习 · 计算机科学 2022-10-07 Ziv Katzir , Yuval Elovici

Neural networks are vulnerable to adversarial examples, which are malicious inputs crafted to fool pre-trained models. Adversarial examples often exhibit black-box attacking transferability, which allows that adversarial examples crafted…

计算机视觉与模式识别 · 计算机科学 2020-03-04 ZhaoXin Huan , Yulong Wang , Xiaolu Zhang , Lin Shang , Chilin Fu , Jun Zhou

Advances in machine learning have led to broad deployment of systems with impressive performance on important problems. Nonetheless, these systems can be induced to make errors on data that are surprisingly similar to examples the learned…

机器学习 · 计算机科学 2018-07-23 Justin Gilmer , Ryan P. Adams , Ian Goodfellow , David Andersen , George E. Dahl

Deep neural networks (DNNs) are vulnerable to adversarial examples, perturbations carefully crafted to fool the targeted DNN, in both the non-targeted and targeted case. In the non-targeted case, the attacker simply aims to induce…

机器学习 · 计算机科学 2018-11-22 Yash Sharma , Tien-Dung Le , Moustafa Alzantot

As deep neural networks (DNNs) are widely applied in the physical world, many researches are focusing on physical-world adversarial examples (PAEs), which introduce perturbations to inputs and cause the model's incorrect outputs. However,…

计算机视觉与模式识别 · 计算机科学 2024-12-24 Yichen Wang , Yuxuan Chou , Ziqi Zhou , Hangtao Zhang , Wei Wan , Shengshan Hu , Minghui Li