Universal Adversarial Perturbations

Moosavi-Dezfooli, Seyed-Mohsen, Fawzi, Alhussein, Fawzi, Omar, Frossard, Pascal·2017·2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)
DOI 10.1109/cvpr.2017.17

Cited by (1,005)

Items 401–500 of 1,005

  1. Wireless Avionics Intracommunications: A Survey of Benefits, Challenges, and Solutions
    Pangun Park, Piergiuseppe Di Marco, Junghyo Nah, Carlo Fischione · 2020 · IEEE Internet of Things Journal
  2. Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series
    Pradeep Rathore, Arghya Basak, Sri Harsha Nistala, Venkataramana Runkana · 2020 · International Joint Conference on Neural Networks (IJCNN)
  3. A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks
    Prithviraj Dasgupta, Joseph B. Collins · 2019 · AI Magazine
  4. Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models
    Xiao Zang, Yi Xie, Jie Chen, Bo Yuan · 2021 · International Joint Conference on Artificial Intelligence
  5. Robust Tracking Against Adversarial Attacks
    Shuai Jia, Chao Ma, Yibing Song, Xiaokang Yang · 2020 · Lecture notes in computer science
  6. Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression
    Nilaksh Das, Madhuri Shanbhogue, Shang-Tse Chen, Fred Hohman, Siwei Li, Li Chen, Michael E. Kounavis, Duen Horng Chau · 2018 · arXiv (Cornell University)
  7. Universal Adversarial Attack Via Enhanced Projected Gradient Descent
    Yingpeng Deng, Lina J. Karam · 2020 · Proceedings - International Conference on Image Processing
  8. Generalizable Black-Box Adversarial Attack With Meta Learning
    Fei Yin, Yong Zhang, Baoyuan Wu, Yan Feng, Jingyi Zhang, Yanbo Fan, Yujiu Yang · 2023 · IEEE Transactions on Pattern Analysis and Machine Intelligence
  9. A Survey on Learning to Reject
    Xu-Yao Zhang, Guo-Sen Xie, Xiuli Li, Tao Mei, Cheng‐Lin Liu · 2023 · Proceedings of the IEEE
  10. Trustworthy artificial intelligence in Alzheimer’s disease: state of the art, opportunities, and challenges
    Shaker El–Sappagh, José M. Alonso, Tamer Abuhmed, Farman Ali, Alberto Bugarín · 2023 · Artificial Intelligence Review
  11. Detecting adversarial examples via prediction difference for deep neural networks
    Feng Guo, Qingjie Zhao, Xuan Li, Xiaohui Kuang, Jianwei Zhang, Yahong Han, Yu‐an Tan · 2019 · Information Sciences
  12. Principal Component Adversarial Example
    Yonggang Zhang, Xinmei Tian, Ya Li, Xinchao Wang, Dacheng Tao · 2020 · IEEE Transactions on Image Processing
  13. Toward Robust Sensing for Autonomous Vehicles: An Adversarial Perspective
    Apostolos Modas, Ricardo Sánchez-Matilla, Pascal Frossard B, Andrea Cavallaro · 2020 · IEEE Signal Processing Magazine
  14. AdvRush: Searching for Adversarially Robust Neural Architectures
    Jisoo Mok, Byunggook Na, Hyeokjun Choe, Sungroh Yoon · 2021 · IEEE/CVF International Conference on Computer Vision (ICCV)
  15. Visual privacy attacks and defenses in deep learning: a survey
    Guangsheng Zhang, Bo Liu, Tianqing Zhu, Andi Zhou, Wanlei Zhou · 2022 · Artificial Intelligence Review
  16. Attacking Spectrum Sensing With Adversarial Deep Learning in Cognitive Radio-Enabled Internet of Things
    Mingqian Liu, Hongyi Zhang, Zilong Liu, Nan Zhao · 2022 · IEEE Transactions on Reliability
  17. Push & Pull: Transferable Adversarial Examples With Attentive Attack
    Lianli Gao, Zijie Huang, Jingkuan Song, Yang Yang, Heng Tao Shen · 2021 · IEEE Transactions on Multimedia
  18. Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving
    James Tu, Huichen Li, Xinchen Yan, Mengye Ren, Yun Chen, Ming Liang, Eilyan Y. Bitar, Ersin Yumer, Raquel Urtasun · 2021 · arXiv (Cornell University)
  19. T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification
    Ahmadreza Azizi, Ibrahim Asadullah Tahmid, Asim Waheed, Neal Mangaokar, Jiameng Pu, Mobin Javed, Chandan K. A. Reddy, Bimal Viswanath · 2021 · arXiv (Cornell University)
  20. From Deep Learning to Rational Machines
    Cameron J. Buckner · 2023
  21. Detection of Backdoors in Trained Classifiers Without Access to the Training Set
    Zhen Xiang, David J. Miller, George Kesidis · 2020 · IEEE Transactions on Neural Networks and Learning Systems
  22. Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety
    Sebastian Houben, Stephanie Abrecht, Maram Akila, Andreas Bär, Felix Brockherde, Patrick Feifel, Tim Fingscheidt, Sujan Sai Gannamaneni, Seyed Eghbal Ghobadi, Ahmed Hammam et al. · 2022 · Springer eBooks
  23. Theoretical evidence for adversarial robustness through randomization
    Rafaël Pinot, Meunier, Laurent, Alexandre Araujo, Hisashi Kashima, Florian Yger, Cédric Gouy‐Pailler, Jamal Atif C · 2019 · arXiv (Cornell University)
  24. Walking on the Edge: Fast, Low-Distortion Adversarial Examples
    Hanwei Zhang, Yannis Avrithis, Teddy Furon, Laurent Amsaleg · 2019 · HAL
  25. Walking on the Edge: Fast, Low-Distortion Adversarial Examples
    Hanwei Zhang, Yannis Avrithis, Teddy Furon, Laurent Amsaleg · 2020 · IEEE Transactions on Information Forensics and Security
  26. Defending against GAN-based DeepFake Attacks via Transformation-aware Adversarial Faces
    Chaofei Yang, Lei Ding, Yiran Chen, Hai Helen Li · 2021 · International Joint Conference on Neural Networks (IJCNN)
  27. SoK: Realistic adversarial attacks and defenses for intelligent network intrusion detection
    João Vitorino, Isabel Praça, Eva Maia · 2023 · Computers & Security
  28. Evading Face Recognition via Partial Tampering of Faces
    Puspita Majumdar, Akshay Agarwal, Richa Singh, Mayank Vatsa A · 2019 · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)
  29. Adversarial Learning With Margin-Based Triplet Embedding Regularization
    Yaoyao Zhong, Weihong Deng · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
  30. Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting
    Federico Nesti, Alessandro Biondi, Giorgio Buttazzo · 2021 · IEEE Transactions on Neural Networks and Learning Systems
  31. AVN: An Adversarial Variation Network Model for Handwritten Signature Verification
    Huan Li, Ping Wei, Ping Hu · 2021 · IEEE Transactions on Multimedia
  32. Adversarial Collaborative Auto-encoder for Top-N Recommendation
    Yuan Feng, Lina Yao, Boualem Benatallah · 2019 · International Joint Conference on Neural Networks (IJCNN)
  33. Adversarial Shape Perturbations on 3D Point Clouds
    Daniel Liu, Ronald Yu, Hao Su · 2020 · Lecture notes in computer science
  34. A Study of the Attention Abnormality in Trojaned BERTs
    Weimin Lyu, Songzhu Zheng, Tengfei Ma, Chao Chen · 2022 · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT)
  35. Enhancing the Self-Universality for Transferable Targeted Attacks
    Zhipeng Wei, Jingjing Chen, Zuxuan Wu, Yu–Gang Jiang · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  36. Physically Realizable Adversarial Creating Attack Against Vision-Based BEV Space 3D Object Detection
    Jian Wang, Fan Li, Song Lv, Lijun He, Chao Qun Shen · 2025 · IEEE Transactions on Image Processing
  37. Deep Validation: Toward Detecting Real-World Corner Cases for Deep Neural Networks
    Weibin Wu, Hui Fang Xu, Sanqiang Zhong, Michael Rung-Tsong Lyu, Irwin King · 2019 · International Conference on Dependable Systems & Networks/Proceedings
  38. Adversarial Privacy-preserving Filter
    Jiaming Zhang, Jitao Sang, Xian Zhao, Xiaowen Huang, Yanfeng Sun, Yongli Hu · 2020 · ACM International Conference on Multimedia (ACM MM)
  39. Double Targeted Universal Adversarial Perturbations
    Philipp Benz, Chaoning Zhang, Tooba Imtiaz, In So Kweon · 2021 · Lecture notes in computer science
  40. Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses
    Yingwei Li, Song Bai, Cihang Xie, Zhenyu Liao, Xiaohui Shen, Alan Yuille · 2020 · Lecture notes in computer science
  41. Improving Query Efficiency of Black-Box Adversarial Attack
    Yang Bai, Yuyuan Zeng, Yong Jiang, Yisen Wang, Shu‐Tao Xia, Weiwei Guo · 2020 · Lecture notes in computer science
  42. Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples
    Kamil Nar, Orhan Öçal, Shankar Sastry, Kannan Ramchandran · 2019 · arXiv (Cornell University)
  43. On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them
    Chen Liu, Mathieu Salzmann, Tao Lin, Ryota Tomioka, Sabine E. Susstrunk · 2020 · arXiv (Cornell University)
  44. GreedyFool: Distortion-Aware Sparse Adversarial Attack
    Xiaoyi Dong, Dongdong Chen, Jianmin Bao, Chuan Qin, Lu Yuan, Weiming Zhang, Nenghai Yu, Chen Dong · 2020 · arXiv (Cornell University)
  45. Adversarial Learning for Invertible Steganography
    Ching‐Chun Chang · 2020 · IEEE Access
  46. Adversarial examples for network intrusion detection systems
    Ryan Sheatsley, Nicolas Papernot, Michael J. Weisman, Gunjan Verma, Patrick Drew McDaniel · 2022 · Journal of Computer Security
  47. Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security
    Guanhong Tao, Yingqi Liu, Guangyu Shen, Qiuling Xu, Shengwei An, Zhuo Zhang, Xiangyu Zhang · 2022 · IEEE Symposium on Security and Privacy (S&P)
  48. Securing the Deep Fraud Detector in Large-Scale E-Commerce Platform via Adversarial Machine Learning Approach
    Qingyu Guo, Zhao Li, Bo An, Pengrui Hui, Jiaming Huang, Long Zhang, Mengchen Zhao · 2019 · International World Wide Web Conference (WWW)
  49. Adversarial Framing for Image and Video Classification
    Michał Zając, Konrad Żołna, Negar Rostamzadeh, Pedro O. Pinheiro · 2019 · Proceedings of the AAAI Conference on Artificial Intelligence
  50. Improved Noise and Attack Robustness for Semantic Segmentation by Using Multi-Task Training with Self-Supervised Depth Estimation
    Marvin Klingner, Andreas Bär, Tim Fingscheidt · 2020 · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)
  51. A study on generic object detection with emphasis on future research directions
    Enoch Arulprakash, Martin Aruldoss · 2021 · Journal of King Saud University - Computer and Information Sciences
  52. Adversarially Robust Neural Architectures
    Minjing Dong, Yanxi Li, Yunhe Wang, Chang Xu · 2025 · IEEE Transactions on Pattern Analysis and Machine Intelligence
  53. Unnoticeable synthetic face replacement for image privacy protection
    Zhenzhong Kuang, Zhiqiang Guo, Jinglong Fang, Jun Yu, Noboru Babaguchi, Jianping Fan B · 2021 · Neurocomputing
  54. Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs
    Philipp Benz, Soomin Ham, Chaoning Zhang, Adil Karjauv, In So Kweon · 2021 · British Machine Vision Conference (BMVC)
  55. A Survey on Adversarial Attacks for Malware Analysis
    Kshitiz Aryal, Maanak Gupta, Mahmoud Abdelsalam, Pradip Kunwar, Bhavani Thuraisingham · 2024 · IEEE Access
  56. Efficient Universal Shuffle Attack for Visual Object Tracking
    Siao Liu, Zhaoyu Chen, Wei Li, Jiwei Zhu, Jiafeng Wang, Wenqiang Zhang, Zhongxue Gan · 2022 · IEEE International Conference on Acoustics Speech and Signal Processing
  57. The Different Faces of AI Ethics Across the World: A Principle-to-Practice Gap Analysis
    Lionel Nganyewou Tidjon, Foutse Khomh · 2022 · IEEE Transactions on Artificial Intelligence
  58. 3D adversarial attacks beyond point cloud
    Jinlai Zhang, Lyujie Chen, Binbin Liu, Bo Ouyang, Qizhi Xie, Jihong Zhu, Weiming Li, Yanmei Meng · 2023 · Information Sciences
  59. Adversarial Driving: Attacking End-to-End Autonomous Driving
    Han Wu, Syed Usama Yunas, Sareh Rowlands, Wenjie Ruan, Johan Wahlström · 2023 · IEEE Intelligent Vehicles Symposium
  60. Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing
    Daizong Liu, Wei Hu, Xin Li · 2023 · IEEE Transactions on Pattern Analysis and Machine Intelligence
  61. Probabilistic Verification and Reachability Analysis of Neural Networks via Semidefinite Programming
    Mahyar Fazlyab, Manfred Morari, George J. Pappas · 2019 · IEEE Conference on Decision and Control (CDC)
  62. Optimism in the Face of Adversity: Understanding and Improving Deep Learning Through Adversarial Robustness
    Guillermo Ortiz-Jiménez, Apostolos Modas, Seyed-Mohsen Moosavi-Dezfooli, Pascal Frossard B · 2021 · Proceedings of the IEEE
  63. Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation
    He Yang, Shadi Rahimian, Bernt Schiele, Mario Fritz · 2020 · Lecture notes in computer science
  64. A comprehensive review on deep learning algorithms: Security and privacy issues
    Muhammad Abdullah Tayyab, Mohsen Marjani, Noor Zaman Jhanjhi, Mohamed Hashem, Raja Sher Afgun Usmani, Faizan Qamar · 2023 · Computers & Security
  65. Revisiting the Modifiable Areal Unit Problem in Deep Traffic Prediction with Visual Analytics
    Wei Zeng, Chengqiao Lin, Juncong Lin, Jincheng Jiang, Jia-Zhi Xia, C. Turkay, Wei Chen · 2020 · IEEE Transactions on Visualization and Computer Graphics
  66. Adversarial Attacks on Camera-LiDAR Models for 3D Car Detection
    Mazen Abdelfattah, Kaiwen Yuan, Zilong Wang, Rabab Kreidieh Ward · 2021 · IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS)
  67. Deep Speaker Recognition: Process, Progress, and Challenges
    Abu Quwsar Ohi, M. F. Mridha, Md. Abdul Hamid, Muhammad Mostafa Monowar · 2021 · IEEE Access
  68. Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits
    Jiawang Bai, Baoyuan Wu, Yong Zhang, Yiming Li, Zhifeng Li, Shu‐Tao Xia · 2021 · arXiv (Cornell University)
  69. Universal adversarial perturbations for CNN classifiers in EEG-based BCIs
    Zihan Liu, Lubin Meng, Xiao Li Zhang, Weili Fang, Dongrui Wu · 2021 · Journal of Neural Engineering
  70. TextGuise: Adaptive adversarial example attacks on text classification model
    Guoqin Chang, Haichang Gao, Zhou Yao, Haoquan Xiong · 2023 · Neurocomputing
  71. The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training
    Junhao Dong, Seyed-Mohsen Moosavi-Dezfooli, Jianhuang Lai, Xiaohua Xie · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  72. Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learning
    Maxwell Standen, Junae Kim, Claudia Szabo · 2024 · ACM Computing Surveys
  73. A Survey of Attacks on Large Vision–Language Models: Resources, Advances, and Future Trends
    Daizong Liu, Mingyu Yang, Xiaoye Qu, Pan Zhou, Yu Cheng, Wei Hu · 2025 · IEEE Transactions on Neural Networks and Learning Systems
  74. AdvIT: Adversarial Frames Identifier Based on Temporal Consistency in Videos
    Chaowei Xiao, Ruizhi Deng, Bo Li, Taesung Lee, Benjamin Edwards, Jinfeng Yi, Dawn Xiaodong Song, Mingyan Liu, Ian Molloy · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
  75. Security and Privacy Issues in Deep Learning: A Brief Review
    Trung Ha, Tran Khanh Dang, Trung Hieu Le, Tuan Anh Truong · 2020 · SN Computer Science
  76. Detection Tolerant Black-Box Adversarial Attack Against Automatic Modulation Classification With Deep Learning
    Peihan Qi, Tao Jiang, Lizhan Wang, Xu Yuan, Zan Li · 2022 · IEEE Transactions on Reliability
  77. A Survey on Physical Adversarial Attack in Computer Vision
    Donghua Wang, Wen Yao, Tingsong Jiang, Guijian Tang, Xiaoqian Chen · 2023 · Research Square
  78. Bugs in our pockets: the risks of client-side scanning
    Harold Abelson, Ross Anderson, Steven M. Bellovin, Josh Benaloh, Matt Blaze, Jon Callas⋆, Whitfield Diffie, Susan M. Landau, Peter G. Neumann, Ronald L. Rivest et al. · 2024 · Journal of Cybersecurity
  79. Deceiving AI-based malware detection through polymorphic attacks
    Christian Catalano, Andrea Chezzi, Mario Angelelli, Franco Tommasi · 2022 · Computers in Industry
  80. DLA: Dense-Layer-Analysis for Adversarial Example Detection
    Philip Sperl, Ching-Yu Kao, Peng Chen, Xiao Lei, Konstantin Böttinger · 2020 · IEEE European Symposium on Security and Privacy
  81. Defending Against Universal Attacks Through Selective Feature Regeneration
    Tejas Borkar, Felix Heide, Lina J. Karam · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  82. On Lipschitz Bounds of General Convolutional Neural Networks
    Dongmian Zou, Radu Victor Balan, Maneesh Singh · 2019 · IEEE Transactions on Information Theory
  83. On the (Im)Practicality of Adversarial Perturbation for Image Privacy
    Arezoo Rajabi, Rakesh B. Bobba, Mike Rosulek, Charles V. Wright, Wu‐chi Feng · 2020 · Proceedings on Privacy Enhancing Technologies
  84. Adversarial perturbation in remote sensing image recognition
    Shan Ai, Arthur Sandor Voundi Koe, Teng Huang · 2021 · Applied Soft Computing
  85. ROSA: Robust Salient Object Detection Against Adversarial Attacks
    Haofeng Li, Guanbin Li, Yizhou Yu · 2019 · IEEE Transactions on Cybernetics
  86. Projection & Probability-Driven Black-Box Attack
    Jie Li, Rongrong Ji, Hong Liu, Jianzhuang Liu, Bineng Zhong, Cheng Dan Deng, Qi Chuan Tian · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  87. A black-box adversarial attack for poisoning clustering
    Antonio Emanuele Ciná, Alessandro Torcinovich, Marcello Pelillo · 2021 · Pattern Recognition
  88. The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing
    Andreas Bär, Jonas Löhdefink, Nikhil Kapoor, Serin Varghese, Fabian Hüger, Peter Schlicht, Tim Fingscheidt · 2020 · IEEE Signal Processing Magazine
  89. A black-box adversarial attack strategy with adjustable sparsity and generalizability for deep image classifiers
    Arka Ghosh, Sankha Subhra Mullick, Shounak Datta, Swagatam Das, Asit Kumar Das, Rammohan Mallipeddi · 2021 · Pattern Recognition
  90. Universal Adversarial Patch Attack for Automatic Checkout Using Perceptual and Attentional Bias
    Jiakai Wang, Aishan Liu, Xiao Bai, Xianglong Liu · 2021 · IEEE Transactions on Image Processing
  91. Attack and Defense: Adversarial Security of Data-Driven FDC Systems
    Yue Zhuo, Zhenqin Yin, Zhiqiang Ge · 2022 · IEEE Transactions on Industrial Informatics
  92. Adversarial Examples - A Complete Characterisation of the Phenomenon
    Alexandru Constantin Serban, Erik Poll, Visser, Joost · 2018 · arXiv (Cornell University)
  93. Adversarial Machine Learning in Text Processing: A Literature Survey
    Izzat Mahmoud Alsmadi, Nura Aljaafari, Mahmoud Nazzal, Shadan Alhamed, Ahmad Sawalmeh, Conrado P. Vizcarra, Abdallah A. Khreishah, Muhammad Anan, Abdulelah Abdallah Algosaibi, Mohammed Al-Naeem et al. · 2022 · IEEE Access
  94. A Review of Artificial Intelligence in Security and Privacy: Research Advances, Applications, Opportunities, and Challenges
    Yazan Alaya AL-Khassawneh · 2022 · Indonesian Journal of Science and Technology
  95. Making AI meaningful again
    Jobst Landgrebe, Barry Smith · 2019 · Synthese
  96. Verifying Robustness of Gradient Boosted Models
    Gil Einziger, Maayan Goldstein, Yaniv Saʼar, Itai Segall · 2019 · Proceedings of the AAAI Conference on Artificial Intelligence
  97. Towards Global Explanations of Convolutional Neural Networks With Concept Attribution
    Weibin Wu, Yuxin Su, Xixian Chen, Shenglin Zhao, Irwin King, Michael Rung-Tsong Lyu, Yu‐Wing Tai · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  98. Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards a Fourier Perspective
    Chaoning Zhang, Philipp Benz, Adil Karjauv, In So Kweon · 2021 · Proceedings of the AAAI Conference on Artificial Intelligence
  99. ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies
    Bao Wang, Binjie Yuan, Zuoqiang Shi, Stanley Osher · 2018 · arXiv (Cornell University)
  100. Minipatch: Undermining DNN-Based Website Fingerprinting With Adversarial Patches
    Ding Li, Yuefei Zhu, Minghao Chen, Jue Wang · 2022 · IEEE Transactions on Information Forensics and Security