中文
相关论文

相关论文: SDM: A Powerful Tool for Evaluating Model Robustne…

200 篇论文

Recent years have seen the wide application of NLP models in crucial areas such as finance, medical treatment, and news media, raising concerns of the model robustness and vulnerabilities. In this paper, we propose a novel prompt-based…

计算与语言 · 计算机科学 2022-03-22 Yuting Yang , Pei Huang , Juan Cao , Jintao Li , Yun Lin , Jin Song Dong , Feifei Ma , Jian Zhang

Transferability, the ability of adversarial examples crafted for one model to deceive other models, is crucial for black-box attacks. Despite advancements in attack methods for semantic segmentation, transferability remains limited,…

计算机视觉与模式识别 · 计算机科学 2025-03-07 Eun-Sol Park , MiSo Park , Seung Park , Yong-Goo Shin

Over the years, most research towards defenses against adversarial attacks on machine learning models has been in the image recognition domain. The ML-based malware detection domain has received less attention despite its importance.…

机器学习 · 计算机科学 2023-04-25 Aqib Rashid , Jose Such

Skip connection is an essential ingredient for modern deep models to be deeper and more powerful. Despite their huge success in normal scenarios (state-of-the-art classification performance on natural examples), we investigate and identify…

机器学习 · 计算机科学 2026-03-17 Yisen Wang , Yichuan Mo , Dongxian Wu , Mingjie Li , Xingjun Ma , Zhouchen Lin

Distribution Matching Distillation (DMD) is a widely used paradigm for accelerating inference in few-step video diffusion models. However, DMD-style video distillation faces two coupled challenges: the fake score must track a continuously…

计算机视觉与模式识别 · 计算机科学 2026-05-29 Zhuguanyu Wu , Ruihao Gong , Yang Yong , Yushi Huang , Xiangyu Fan , Lei Yang , Dahua Lin , Xianglong Liu

Deep neural networks are vulnerable to adversarial examples that mislead the models with imperceptible perturbations. Though adversarial attacks have achieved incredible success rates in the white-box setting, most existing adversaries…

人工智能 · 计算机科学 2021-08-16 Xiaosen Wang , Kun He

Crafting adversarial examples has become an important technique to evaluate the robustness of deep neural networks (DNNs). However, most existing works focus on attacking the image classification problem since its input space is continuous…

机器学习 · 计算机科学 2020-04-22 Minhao Cheng , Jinfeng Yi , Pin-Yu Chen , Huan Zhang , Cho-Jui Hsieh

In this paper, we present new optimization models for Support Vector Machine (SVM), with the aim of separating data points in two or more classes. The classification task is handled by means of nonlinear classifiers induced by kernel…

最优化与控制 · 数学 2025-07-15 Francesca Maggioni , Andrea Spinelli

Current mainstream methods of aligning diffusion models with human preferences typically employ VLM-based reward models. However, these reward models, pre-trained for semantic alignment, struggle to capture the essential perceptual…

计算机视觉与模式识别 · 计算机科学 2026-05-26 Jaxon Zhang , Binxin Yang , Hubery Yin , Chen Li , Jing Lyu

The objective of this research is to enhance performance of Stochastic Gradient Descent (SGD) algorithm in text classification. In our research, we proposed using SGD learning with Grid-Search approach to fine-tuning hyper-parameters in…

信息检索 · 计算机科学 2019-02-26 Shadi Diab

We consider distributed optimization under communication constraints for training deep learning models. We propose a new algorithm, whose parameter updates rely on two forces: a regular gradient step, and a corrective direction dictated by…

机器学习 · 计算机科学 2022-04-29 Yunfei Teng , Wenbo Gao , Francois Chalus , Anna Choromanska , Donald Goldfarb , Adrian Weller

Gradient-based attacks are a primary tool to evaluate robustness of machine-learning models. However, many attacks tend to provide overly-optimistic evaluations as they use fixed loss functions, optimizers, step-size schedulers, and default…

Deep learning models are vulnerable to adversarial examples crafted by applying human-imperceptible perturbations on benign inputs. However, under the black-box setting, most existing adversaries often have a poor transferability to attack…

机器学习 · 计算机科学 2020-02-04 Jiadong Lin , Chuanbiao Song , Kun He , Liwei Wang , John E. Hopcroft

Designing powerful adversarial attacks is of paramount importance for the evaluation of $\ell_p$-bounded adversarial defenses. Projected Gradient Descent (PGD) is one of the most effective and conceptually simple algorithms to generate such…

机器学习 · 计算机科学 2022-12-16 Nikolaos Antoniou , Efthymios Georgiou , Alexandros Potamianos

Unrestricted adversarial attacks present a serious threat to deep learning models and adversarial defense techniques. They pose severe security problems for deep learning applications because they can effectively bypass defense mechanisms.…

机器学习 · 计算机科学 2024-07-16 Xuelong Dai , Kaisheng Liang , Bin Xiao

Stochastic gradient-based descent (SGD), have long been central to training large language models (LLMs). However, their effectiveness is increasingly being questioned, particularly in large-scale applications where empirical evidence…

机器学习 · 计算机科学 2025-07-03 Di Zhang , Yihang Zhang

Precision in identifying nanometer-scale device-killer defects is crucial in both semiconductor research and development as well as in production processes. The effectiveness of existing ML-based approaches in this context is largely…

计算机视觉与模式识别 · 计算机科学 2024-07-16 Bappaditya Dey , Vic De Ridder , Victor Blanco , Sandip Halder , Bartel Van Waeyenberge

In real-world applications, it is important for machine learning algorithms to be robust against data outliers or corruptions. In this paper, we focus on improving the robustness of a large class of learning algorithms that are formulated…

机器学习 · 计算机科学 2021-06-04 Quanming Yao , Hangsi Yang , En-Liang Hu , James Kwok

In this paper, we introduce proximal gradient temporal difference learning, which provides a principled way of designing and analyzing true stochastic gradient temporal difference learning algorithms. We show how gradient TD (GTD)…

机器学习 · 计算机科学 2020-06-09 Bo Liu , Ian Gemp , Mohammad Ghavamzadeh , Ji Liu , Sridhar Mahadevan , Marek Petrik

We introduce a three stage pipeline: resized-diverse-inputs (RDIM), diversity-ensemble (DEM) and region fitting, that work together to generate transferable adversarial examples. We first explore the internal relationship between existing…

计算机视觉与模式识别 · 计算机科学 2021-12-14 Junhua Zou , Zhisong Pan , Junyang Qiu , Xin Liu , Ting Rui , Wei Li