中文
相关论文

相关论文: Towards Cross-Domain Multi-Targeted Adversarial At…

200 篇论文

A single universal adversarial perturbation (UAP) can be added to all natural images to change most of their predicted class labels. It is of high practical relevance for an attacker to have flexible control over the targeted classes to be…

计算机视觉与模式识别 · 计算机科学 2020-10-09 Chaoning Zhang , Philipp Benz , Tooba Imtiaz , In So Kweon

Most state-of-the-art machine learning (ML) classification systems are vulnerable to adversarial perturbations. As a consequence, adversarial robustness poses a significant challenge for the deployment of ML-based systems in safety- and…

Multimodal pre-trained models (e.g., ImageBind), which align distinct data modalities into a shared embedding space, have shown remarkable success across downstream tasks. However, their increasing adoption raises serious security concerns,…

计算机视觉与模式识别 · 计算机科学 2025-09-30 Zhifang Zhang , Jiahan Zhang , Shengjie Zhou , Qi Wei , Shuo He , Feng Liu , Lei Feng

In many practical visual recognition scenarios, feature distribution in the source domain is generally different from that of the target domain, which results in the emergence of general cross-domain visual recognition problems. To address…

计算机视觉与模式识别 · 计算机科学 2019-12-25 Shanshan Wang , Lei Zhang , JingRu Fu

Recent work has highlighted the vulnerability of many deep machine learning models to adversarial examples. It attracts increasing attention to adversarial attacks, which can be used to evaluate the security and robustness of models before…

机器学习 · 计算机科学 2020-06-22 Xuli Sun , Shiliang Sun

Deep learning models have demonstrated exceptional performance across a wide range of computer vision tasks. However, their performance often degrades significantly when faced with distribution shifts, such as domain or dataset changes.…

计算机视觉与模式识别 · 计算机科学 2025-07-09 Samuel Barbeau , Pedram Fekri , David Osowiechi , Ali Bahri , Moslem Yazdanpanah , Masih Aminbeidokhti , Christian Desrosiers

Action recognition models using deep learning are vulnerable to adversarial examples, which are transferable across other models trained on the same data modality. Existing transferable attack methods face two major challenges: 1) they…

计算机视觉与模式识别 · 计算机科学 2025-05-26 Ping Li , Jianan Ni , Bo Pang

Camera-based perception is critical to autonomous driving yet remains vulnerable to task-specific adversarial manipulations in object detection and monocular depth estimation. Most existing 2D/3D attacks are developed in task silos, lack…

计算机视觉与模式识别 · 计算机科学 2025-09-25 Yixun Zhang , Feng Zhou , Jianqin Yin

Deep neural networks (DNNs) can be easily fooled by adding human imperceptible perturbations to the images. These perturbed images are known as `adversarial examples' and pose a serious threat to security and safety critical systems. A…

计算机视觉与模式识别 · 计算机科学 2019-03-27 Muzammal Naseer , Salman H. Khan , Shafin Rahman , Fatih Porikli

Adversarial attack is a technique for deceiving Machine Learning (ML) models, which provides a way to evaluate the adversarial robustness. In practice, attack algorithms are artificially selected and tuned by human experts to break a ML…

密码学与安全 · 计算机科学 2020-12-11 Xiaofeng Mao , Yuefeng Chen , Shuhui Wang , Hang Su , Yuan He , Hui Xue

The rapid progress of Multi-Modal Large Language Models (MLLMs) has significantly advanced downstream applications. However, this progress also exposes serious transferable adversarial vulnerabilities. In general, existing adversarial…

计算机视觉与模式识别 · 计算机科学 2026-03-24 Yuanbo Li , Tianyang Xu , Cong Hu , Tao Zhou , Xiao-Jun Wu , Josef Kittler

Adversarial examples reveal the blind spots of deep neural networks (DNNs) and represent a major concern for security-critical applications. The transferability of adversarial examples makes real-world attacks possible in black-box…

计算机视觉与模式识别 · 计算机科学 2019-10-16 Muzammal Naseer , Salman H. Khan , Harris Khan , Fahad Shahbaz Khan , Fatih Porikli

The growing misuse of Vision-Language Models (VLMs) has led providers to deploy multiple safeguards, including alignment tuning, system prompts, and content moderation. However, the real-world robustness of these defenses against…

密码学与安全 · 计算机科学 2025-11-21 Yijun Yang , Lichao Wang , Jianping Zhang , Chi Harold Liu , Lanqing Hong , Qiang Xu

Deep neural networks are susceptible to adversarial attacks, which pose a significant threat to their security and reliability in real-world applications. The most notable adversarial attacks are transfer-based attacks, where an adversary…

计算机视觉与模式识别 · 计算机科学 2023-11-02 Kunyu Wang , Juluan Shi , Wenxuan Wang

Deep neural networks have been widely used in various downstream tasks, especially those safety-critical scenario such as autonomous driving, but deep networks are often threatened by adversarial samples. Such adversarial attacks can be…

计算机视觉与模式识别 · 计算机科学 2023-08-16 Yutong Zhang , Yao Li , Yin Li , Zhichang Guo

Recent advances in Large Visual Language Models (LVLMs) have demonstrated impressive performance across various vision-language tasks by leveraging large-scale image-text pretraining and instruction tuning. However, the security…

计算机视觉与模式识别 · 计算机科学 2025-11-14 Zihan Wang , Guansong Pang , Wenjun Miao , Jin Zheng , Xiao Bai

Adversarial attacks are an important security concern for computer vision (CV). As CV models are becoming increasingly valuable assets in applied practice, disrupting them is emerging as a form of economic sabotage. This paper opens up the…

计算机视觉与模式识别 · 计算机科学 2024-06-12 Jan Zahálka

Deep neural networks (DNNs) are vulnerable to adversarial attack despite their tremendous success in many AI fields. Adversarial attack is a method that causes the intended misclassfication by adding imperceptible perturbations to…

计算机视觉与模式识别 · 计算机科学 2019-12-18 Huy Phan , Yi Xie , Siyu Liao , Jie Chen , Bo Yuan

Recent research has shown that Machine Learning/Deep Learning (ML/DL) models are particularly vulnerable to adversarial perturbations, which are small changes made to the input data in order to fool a machine learning classifier. The…

密码学与安全 · 计算机科学 2024-01-22 Wilson Patterson , Ivan Fernandez , Subash Neupane , Milan Parmar , Sudip Mittal , Shahram Rahimi

Recently, pre-trained encoders have gained widespread use due to their strong capability in representation extraction. However, they are vulnerable to downstream-agnostic attacks (DAAs). Existing DAA methods operate under a permissive…

计算机视觉与模式识别 · 计算机科学 2026-05-20 Zhuxin Lei , Ziyuan Yang , Yi Zhang