Towards Evaluating the Robustness of Neural Networks
Cited by (1,019)
Items 401–500 of 1,019
- Universal Perturbation Attack Against Image RetrievalJie Li, Rongrong Ji, Hong Liu, Xiaopeng Hong, Yue Gao, Qi Chuan Tian · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Generating Adversarial Examples for Holding Robustness of Source Code Processing ModelsHuangzhao Zhang, Zhuo Li, Ge Li, Lei Ma, Yang Liu, Zhi Gang Jin · 2020 · Proceedings of the AAAI Conference on Artificial Intelligence
- Untrained Neural Network Priors for Inverse Imaging Problems: A SurveyAdnan Qayyum, Inaam Ilahi, Fahad Shamshad, Farid Boussaïd, Mohammed Bennamoun, Junaid Qadir · 2022 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- Adversarial attacks against Windows PE malware detection: A survey of the state-of-the-artXiang Ling, Lingfei Wu, Jiangyu Zhang, Zhenqing Qu, Wei Deng, Xiang Chen, Yaguan Qian, Chunming Wu, Shouling Ji, Tianyue Luo et al. · 2023 · Computers & Security
- Data Security Issues in Deep Learning: Attacks, Countermeasures, and OpportunitiesGuowen Xu, Hongwei Li, Hao Ren, Kan Yang, Robert Huijie Deng · 2019 · IEEE Communications Magazine
- GeoDA: A Geometric Framework for Black-Box Adversarial AttacksAli Rahmati, Seyed-Mohsen Moosavi-Dezfooli, Pascal Frossard, Huaiyu Dai · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Sparse-RS: A Versatile Framework for Query-Efficient Sparse Black-Box Adversarial AttacksFrancesco Croce, Maksym Andriushchenko, Naman Deep Singh, Nicolas Flammarion, Matthias Hein · 2022 · Proceedings of the AAAI Conference on Artificial Intelligence
- Scaling provable adversarial defensesEric Wong, Frank R. Schmidt, Jan Hendrik Metzen, J. Zico Kolter · 2018 · arXiv (Cornell University)
- EC2: Ensemble Clustering and Classification for Predicting Android Malware FamiliesTanmoy Chakraborty, Fabio Pierazzi, V. S. Subrahmanian · 2017 · IEEE Transactions on Dependable and Secure Computing
- Adversarial Vertex Mixup: Toward Better Adversarially Robust GeneralizationSaehyung Lee, Hyungyu Lee, Sungroh Yoon · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free CasesRen Wang, Gaoyuan Zhang, Sijia Liu, Pin‐Yu Chen, Jinjun Xiong, Meng Wang · 2020 · Lecture notes in computer science
- Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial AttacksJianyu Wang, Haichao Zhang · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Leak Detection and Topology Identification in Pipelines Using Fluid Transients and Artificial Neural NetworksJessica Bohórquez, Bradley Alexander, Angus Ross Simpson, Martin Francis Lambert · 2020 · Journal of Water Resources Planning and Management
- Stateful Detection of Black-Box Adversarial AttacksSteven Chen, Nicholas Carlini, David Wagner · 2020 · Proceedings of the 1st ACM Workshop on Security and Privacy on Artificial Intelligence
- Perturbation-Seeking Generative Adversarial Networks: A Defense Framework for Remote Sensing Image Scene ClassificationGong Cheng, Xuxiang Sun, Ke Li, Lei Guo, Junwei Han · 2021 · IEEE Transactions on Geoscience and Remote Sensing
- Rethinking Bayesian Learning for Data Analysis: The art of prior and inference in sparsity-aware modelingLei Cheng, Feng Yin, Sergios Theodoridis, Sotirios Chatzis, Tsung‐Hui Chang · 2022 · IEEE Signal Processing Magazine
- Adversarial camera stickers: A physical camera-based attack on deep learning systemsJuncheng Li, Frank R. Schmidt, J. Zico Kolter · 2019 · arXiv (Cornell University)
- Sign-OPT: A Query-Efficient Hard-label Adversarial AttackMinhao Cheng, Simranjit Singh, Patrick M. Chen, Pin‐Yu Chen, Sijia Liu, Cho‐Jui Hsieh · 2019 · arXiv (Cornell University)
- Torchattacks: A PyTorch Repository for Adversarial AttacksHoki Kim · 2020 · arXiv (Cornell University)
- Towards Proving the Adversarial Robustness of Deep Neural NetworksKatz, Guy, Barrett, Clark, Dill, David L., Julian, Kyle, Kochenderfer, Mykel J. · 2017 · Electronic Proceedings in Theoretical Computer Science
- AdvPulse: Universal, Synchronization-free, and Targeted Audio Adversarial Attacks via Subsecond PerturbationsZhuohang Li, Yi Wu, Jian Liu, Yingying Jennifer Chen, Bo Yuan · 2020 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Training Robust Deep Neural Networks via Adversarial Noise PropagationAishan Liu, Xianglong Liu, Hang Yu, Chongzhi Zhang, Qiang Liu, Dacheng Tao · 2021 · IEEE Transactions on Image Processing
- AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine LearningJia, Jinyuan, Neil Zhenqiang Gong · 2018 · arXiv (Cornell University)
- On the Effectiveness of Low Frequency PerturbationsYash Sharma, Gavin Weiguang Ding, Marcus A. Brubaker · 2019 · International Joint Conference on Artificial Intelligence
- Backdoor Attacks Against Transfer Learning With Pre-Trained Deep Learning ModelsShuo Wang, Surya Nepal, Carsten Rudolph, Marthie M. Grobler, Shangyu Chen, Tianle Chen · 2020 · IEEE Transactions on Services Computing
- Physical Adversarial Attack Meets Computer Vision: A Decade SurveyHui Wei, Hao Tang, Xuemei Jia, Zhixiang Wang, Hanxun Yu, Zhubo Li, Shin’ichi Satoh, Luc Van Gool, Zheng Wang · 2024 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- Unrestricted Adversarial Examples via Semantic ManipulationAnand Bhattad, Min Jin Chong, Kaizhao Liang, Bo Li, David Alexander Forsyth · 2019 · arXiv (Cornell University)
- Adversarial Defense via Learning to Generate Diverse AttacksYunseok Jang, Tianchen Zhao, Seunghoon Hong, Honglak Lee · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Gradient-based Adversarial Attacks against Text TransformersChuan Guo, Alexandre Sablayrolles, Hervé Jeǵou, Douwe Kiela · 2021 · Conference on Empirical Methods in Natural Language Processing (EMNLP)
- The Challenges and Opportunities of Human-Centered AI for Trustworthy Robots and Autonomous SystemsHongmei He, John O. Gray, Angelo Cangelosi, Qinggang Meng, T.M. McGinnity, Jörn Mehnen · 2021 · IEEE Transactions on Cognitive and Developmental Systems
- Adversarial Attack and Defense: A SurveyHongshuo Liang, Erlu He, Yangyang Zhao, Zhe Jia, Hao Li · 2022 · Electronics
- Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial AttacksThomas Brunner, Frederik Diehl, Michael Truong Le, Alois Knoll · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Model-Agnostic Boundary-Adversarial Sampling for Test-Time Generalization in Few-Shot LearningJaekyeom Kim, Hyoungseok Kim, Gunhee Kim · 2020 · Lecture notes in computer science
- Benchmarking Neural Network Robustness to Common Corruptions and Surface VariationsDan Hendrycks, Thomas G. Dietterich · 2018 · arXiv (Cornell University)
- Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural NetworkXuanqing Liu, Li, Yao, Chongruo Wu, Cho‐Jui Hsieh · 2018 · arXiv (Cornell University)
- Adversarial Threats to DeepFake Detection: A Practical PerspectiveNeekhara, Paarth, Dolhansky, Brian, Bitton, Joanna, Ferrer, Cristian Canton · 2021 · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)
- Needle in a HaystackKe Tian, Steve T. K. Jan, Hang Hu, Danfeng Daphne Yao, Gang Wang · 2018 · ACM Internet Measurement Conference (IMC)
- Maximizing information from chemical engineering data sets: Applications to machine learningAlexander Thebelt, Johannes Wiebe, Jan Kronqvist, Calvin Tsay, Ruth Misener · 2022 · Chemical Engineering Science
- The Robust Manifold Defense: Adversarial Training using Generative ModelsAjil Jalal, Andrew Ilyas, Constantinos Daskalakis, Alexandros G. Dimakis · 2017 · arXiv (Cornell University)
- Training for Faster Adversarial Robustness Verification via Inducing ReLU StabilityKai Xiao, Vincent Tjeng, Nur Muhammad Mahi Shafiullah, Aleksander Mądry · 2018 · arXiv (Cornell University)
- Improving Robustness using Generated DataSven Gowal, Sylvestre-Alvise Rebuffi, Olivia Wiles, Florian Stimberg, Dan A. Calian, Timothy Mann · 2021 · arXiv (Cornell University)
- Gradient Shielding: Towards Understanding Vulnerability of Deep Neural NetworksZhaoquan Gu, Weixiong Hu, Chuanjing Zhang, Hui Dong Lu, Lihua Yin, Le Wang · 2020 · IEEE Transactions on Network Science and Engineering
- Realistic Adversarial Data Augmentation for MR Image SegmentationChen Chen, Chen Qin, Huaqi Qiu, Cheng Ouyang, Shuo Wang, Liang Chen, Giacomo Tarroni, Wenjia Bai, Daniel Rueckert · 2020 · Lecture notes in computer science
- SurFree: a fast surrogate-free black-box attackThibault Maho, Teddy Furon, Erwan Le Merrer · 2021 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Test Selection for Deep Learning SystemsWei Ma, Mike Papadakis, Anestis Tsakmalis, Maxime Cordy, Yves Le Traon · 2021 · ACM Transactions on Software Engineering and Methodology
- Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural NetworksThilo Strauss, Markus Hanselmann, Andrej Junginger, Holger Ulmer · 2017 · arXiv (Cornell University)
- Functional Adversarial AttacksCassidy Laidlaw, Soheil Feizi · 2019 · arXiv (Cornell University)
- Fixing Data Augmentation to Improve Adversarial RobustnessSylvestre-Alvise Rebuffi, Sven Gowal, Dan A. Calian, Florian Stimberg, Olivia Wiles, Timothy Mann · 2021 · arXiv (Cornell University)
- Pixel-Based Image Encryption Without Key Management for Privacy-Preserving Deep Neural NetworksSirichotedumrong, Warit, Kinoshita, Yuma, Kiya, Hitoshi · 2019 · IEEE Access
- A game-based approximate verification of deep neural networks with provable guaranteesMin Wu, Matthew Wicker, Wenjie Ruan, Xiaowei Huang, Marta Kwiatkowska · 2019 · Theoretical Computer Science
- On the Vulnerability of CNN Classifiers in EEG-Based BCIsXiao Zhang, Dongrui Wu · 2019 · IEEE Transactions on Neural Systems and Rehabilitation Engineering
- Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNetSizhe Chen, Zhengbao He, Chengjin Sun, Jie Yang, Xiaolin Huang · 2020 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- Security of target recognition for UAV forestry remote sensing based on multi-source data fusion transformer frameworkHailin Feng, Qing Li, Wei William Wang, Ali Kashif Bashir, Amit Kumar Singh, Jinshan Xu, Kai Fang · 2024 · Information Fusion
- Toward Trustworthy Artificial Intelligence (TAI) in the Context of Explainability and Robustnesschander, Bhanu, John, Chinju, Warrier, Lekha, Gopalakrishnan, Kumaravelan · 2025 · ACM Computing Surveys
- Objective Metrics and Gradient Descent Algorithms for Adversarial Examples in Machine LearningUyeong Jang, Xi Wu, Somesh Jha · 2017 · Annual Computer Security Applications Conference
- Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student BetterBojia Zi, Shihao Zhao, Xingjun Ma, Yu–Gang Jiang · 2021 · IEEE/CVF International Conference on Computer Vision (ICCV)
- MANDA: On Adversarial Example Detection for Network Intrusion Detection SystemNing Wang, Yimin Chen, Yang Xiao, Yang Hu, Wenjing Lou, Y. Thomas Hou · 2022 · IEEE Transactions on Dependable and Secure Computing
- Rethinking Softmax Cross-Entropy Loss for Adversarial RobustnessTianyu Pang, Kun Xu, Yinpeng Dong, Du, Chao, Ning Chen, Jun Zhu · 2019 · arXiv (Cornell University)
- Gradient Descent Maximizes the Margin of Homogeneous Neural NetworksKaifeng Lyu, Jian Li · 2019 · arXiv (Cornell University)
- Structural Test Coverage Criteria for Deep Neural NetworksYoucheng Sun, Xiaowei Huang, Daniel Kroening, James J. Sharp, Matthew Hill, Rob Ashmore · 2019 · ACM Transactions on Embedded Computing Systems
- DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit FlipsFan Yao, Adnan Siraj Rakin, Deliang Fan · 2020 · arXiv (Cornell University)
- One-Class Classification: A SurveyPramuditha Perera, Poojan Oza, Vishal M. Patel · 2021 · arXiv (Cornell University)
- Interpreting and Improving Adversarial Robustness of Deep Neural Networks With Neuron SensitivityChongzhi Zhang, Aishan Liu, Xianglong Liu, Yitao Xu, Hang Yu, Yuqing Ma, Tianlin Li · 2020 · IEEE Transactions on Image Processing
- LG-GAN: Label Guided Adversarial Network for Flexible Targeted Attack of Point Cloud Based Deep NetworksHang Zhou, Dongdong Chen, Jing Liao, Kejiang Chen, Xiaoyi Dong, Kunlin Liu, Weiming Zhang, Gang Hua, Nenghai Yu · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Repairing deep neural networksMd Johirul Islam, Rangeet Pan, Giang Nguyen, Hridesh Rajan · 2020 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
- TDGIA: Effective Injection Attacks on Graph Neural NetworksXu Zou, Qinkai Zheng, Yuxiao Dong, Xinyu Guan, Evgeny Kharlamov, Jialiang Lu, Jie Tang · 2021 · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD)
- Deceiving End-to-End Deep Learning Malware Detectors using Adversarial ExamplesFelix Kreuk, Assi Barak, Shir Aviv-Reuven, Moran Baruch, Benny Pinkas B, Joseph Keshet · 2018 · arXiv (Cornell University)
- Interpretable Deep Learning under FireXinyang Zhang, Ningfei Wang, Hua Shen, Shouling Ji, Xiapu Luo, Ting Wang · 2018 · arXiv (Cornell University)
- Interpretable and Trustworthy Deepfake Detection via Dynamic PrototypesTrinh, Loc, Tsang, Michael, Rambhatla, Sirisha, Liu, Yan · 2021 · 2021 IEEE Winter Conference on Applications of Computer Vision (WACV)
- With Great Training Comes Great Vulnerability: Practical Attacks against Transfer LearningBolun Wang, Yuanshun Yao, Bimal Viswanath, Hai-Tao Zheng, Ben Y. Zhao · 2018 · USENIX Security Symposium
- Stealthy and Efficient Adversarial Attacks against Deep Reinforcement LearningJianwen Sun, Tianwei Zhang, Xiaofei Xie, Lei Ma, Yan Zheng, Kangjie Chen, Yang Liu · 2020 · Proceedings of the AAAI Conference on Artificial Intelligence
- Detecting botnet by using particle swarm optimization algorithm based on voting systemMehdi Asadi, Mohammad Ali Jabraeil Jamali, Saeed Alipour Parsa, Vahid Majidnezhad · 2020 · Future Generation Computer Systems
- Daedalus: Breaking Nonmaximum Suppression in Object Detection via Adversarial ExamplesDerui Wang, Chaoran Li, Sheng Wen, Qing‐Long Han, Surya Nepal, Xiangyu Zhang, Yang Xiang · 2021 · IEEE Transactions on Cybernetics
- Apollon: A robust defense system against Adversarial Machine Learning attacks in Intrusion Detection SystemsAntonio Paya, Sergio Arroni, Vicente García‐Díaz, Alberto Gómez Gómez · 2023 · Computers & Security
- Rethinking the Trigger of Backdoor AttackYiming Li, Tongqing Zhai, Baoyuan Wu, Yong Jiang, Zhifeng Li, Shu‐Tao Xia · 2020 · arXiv (Cornell University)
- Compositional Falsification of Cyber-Physical Systems with Machine Learning ComponentsTommaso Dreossi, Alexandre Donzé, Sanjit Arunkumar Seshia · 2017 · Lecture notes in computer science
- Phantom of the ADAS: Securing Advanced Driver-Assistance Systems from Split-Second Phantom AttacksBen Nassi, Yisroel Mirsky, Dudi Nassi, Raz Ben-Netanel, Oleg Drokin, Yuval Elovici · 2020 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Trojaning Language Models for Fun and ProfitXinyang Zhang, Zheng Zhang, Shouling Ji, Ting Wang · 2021 · IEEE European Symposium on Security and Privacy
- SecFedNIDS: Robust defense for poisoning attack against federated learning-based network intrusion detection systemZhao Zhang, Yong Zhang, Da Guo, Lei Yue Yao, Li Zhao · 2022 · Future Generation Computer Systems
- Benchmarking Adversarial Patch Against Aerial DetectionJiawei Lian, Shaohui Mei, Shun Zhang, Mingyang Ma · 2022 · IEEE Transactions on Geoscience and Remote Sensing
- A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and RethinkingChang Liu, Yinpeng Dong, Wenzhao Xiang, Xiao Hui Yang, Hang Su, Jun Zhu, Yuefeng Chen, Yuan He, Hui Xue, Shibao Zheng · 2024 · International Journal of Computer Vision
- Boosting Adversarial Transferability by Block Shuffle and RotationKunyu Wang, Xuanran He, Wenxuan Wang, Xiaosen Wang · 2024 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- DeepCorrect: Correcting DNN Models Against Image DistortionsTejas S. Borkar, Lina J. Karam · 2019 · IEEE Transactions on Image Processing
- MLCapsule: Guarded Offline Deployment of Machine Learning as a ServiceLucjan Hanzlik, Yang Zhang, Kathrin Grosse, Ahmed Salem, Maximilian Augustin, Michael Backes A, Mario Fritz · 2021 · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)
- ColorFool: Semantic Adversarial ColorizationAli Shahin Shamsabadi, Ricardo Sánchez-Matilla, Andrea Cavallaro · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Quantum adversarial machine learningLu, S., Duan, L., Deng, D. · 2020 · MPG.PuRe (Max Planck Society)
- Towards Security Threats of Deep Learning Systems: A SurveyYingzhe He, Guozhu Meng, Kai Chen, Xingbo Hu, Jinwen He · 2020 · IEEE Transactions on Software Engineering
- Training verified learners with learned verifiersKrishnamurthy Dvijotham, Sven Gowal, Robert Stanforth, Relja Arandjelović, Brendan O’Donoghue, Jonathan Uesato, Pushmeet Kohli · 2018 · arXiv (Cornell University)
- Branch and Bound for Piecewise Linear Neural Network VerificationRudy Bunel, Jingyue Lu, Ilker Turkaslan, Philip H. S. Torr, Pushmeet Kohli, Manish Kumar · 2019 · arXiv (Cornell University)
- DeepSafe: A Data-Driven Approach for Assessing Robustness of Neural NetworksD. Gopinath, Guy Katz, C. Păsăreanu, Clark W. Barrett · 2018 · Automated Technology for Verification and Analysis
- Boosting Robustness Certification of Neural Networks.Gagandeep Singh, Timon Gehr, Markus Püschel, Martin Vechev · 2019
- HIT4Mal: Hybrid image transformation for malware classificationDuc‐Ly Vu, Trong‐Kha Nguyen, Tam Nguyen, Tu N. Nguyen, Fabio Massacci, Phu H. Phung · 2019 · Transactions on Emerging Telecommunications Technologies
- A Review of Adversarial Attack and Defense for Classification MethodsYao Li, Minhao Cheng, Cho‐Jui Hsieh, Thomas C. M. Lee · 2021 · The American Statistician
- MetaPoison: Practical General-purpose Clean-label Data PoisoningWei‐Chin Huang, Jonas Geiping, Liam Fowl, Gavin Taylor, Tom Goldstein · 2020 · arXiv (Cornell University)
- Google's Cloud Vision API is Not Robust to NoiseHossein Hosseini, Baicen Xiao, Radha Poovendran · 2017 · International Conference on Machine Learning and Applications
- Adversarial Attacks on Face Detectors Using Neural Net Based Constrained OptimizationAvishek Joey Bose, Parham Aarabi · 2018 · IEEE International Workshop on Multimedia Signal Processing (MMSP)
- Robust Adversarial Attacks Detection Based on Explainable Deep Reinforcement Learning for UAV Guidance and PlanningThomas Hickling, Nabil Aouf, Phillippa Spencer · 2023 · IEEE Transactions on Intelligent Vehicles
- Adversarial Reprogramming of Neural NetworksGamaleldin F. Elsayed, Ian Goodfellow, Jascha Sohl‐Dickstein · 2018 · arXiv (Cornell University)
- TSViz: Demystification of Deep Learning Models for Time-Series AnalysisSiddiqui, Shoaib Ahmed, Mercier, Dominique, Munir, Mohsin, Dengel, Andreas, Ahmed, Sheraz · 2019 · IEEE Access
- Formal Specification for Deep Neural NetworksSanjit Arunkumar Seshia, Ankush Desai, Tommaso Dreossi, Daniel J. Fremont, Shromona Ghosh, Edward Kim, Sumukh Shivakumar, Marcell Vazquez-Chanlatte, Xiangyu Yue · 2018 · Lecture notes in computer science