Towards Evaluating the Robustness of Neural Networks
Carlini, Nicholas, Wagner, David·2017·2017 IEEE Symposium on Security and Privacy (SP)
Cited by (1,019)
Items 601–700 of 1,019
- Sparse Adversarial Attack via Perturbation FactorizationYanbo Fan, Baoyuan Wu, Tuanhui Li, Yong Zhang, Mingyang Li, Zhifeng Li, Yujiu Yang · 2020 · Lecture notes in computer science
- Anti-DreamBooth: Protecting users from personalized text-to-image synthesisThanh Van Le, Hao Phung, Thuan Hoang Nguyen, Quan Thanh Dao, Ngoc Tran, Anh Nguyen Tran · 2023 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Towards Demystifying Membership Inference AttacksStacey Truex, Ling Liu, Mehmet Emre Gürsoy, Lei Yu, Wenqi Wei · 2018 · arXiv (Cornell University)
- Black-Box Adversarial Attack with Transferable Model-based EmbeddingZhichao Huang, Tong Zhang · 2019 · arXiv (Cornell University)
- Importance-driven deep learning system testingSimos Gerasimou, Hasan Ferit Enişer, Alper Şen, Alper Çakan · 2020 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
- A survey of machine learning techniques in adversarial image forensicsEhsan Nowroozi, Ali Dehghantanha, Reza M. Parizi, Kim‐Kwang Raymond Choo · 2020 · Computers & Security
- Adversarial Attacks Against Face Recognition: A Comprehensive StudyFatemeh Vakhshiteh, Ahmad Nickabadi, Raghavendra Ramachandra · 2021 · IEEE Access
- Explainable deep learning in healthcare: A methodological survey from an attribution viewDi Jin, Elena Sergeeva, Wei‐Hung Weng, Geeticka Chauhan, Peter Szolovits · 2022 · WIREs Mechanisms of Disease
- A survey on adversarial attacks in computer vision: Taxonomy, visualization and future directionsTeng Long, Qi Gao, Lili Xu, Zhangbing Zhou · 2022 · Computers & Security
- Untargeted white-box adversarial attack with heuristic defence methods in real-time deep learning based network intrusion detection systemKhushnaseeb Roshan, Aasim Zafar, Shiekh Burhan Ul Haque · 2023 · Computer Communications
- Fooling Vision and Language Models Despite Localization and Attention MechanismXiaojun Xu, Xinyun Chen, Chang Liu, Anna Rohrbach, Trevor Darrell, Dawn Xiaodong Song · 2018 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Hardware Trojan Design on Neural NetworksJoseph Clements, Yingjie Lao · 2019 · IEEE International Symposium on Circuits and Systems proceedings
- Adversarial Example Defenses: Ensembles of Weak Defenses are not StrongWarren He, James Wei, Xinyun Chen, Nicholas Carlini, Dawn Xiaodong Song · 2017 · arXiv (Cornell University)
- Functionality-Preserving Adversarial Machine Learning for Robust Classification in Cybersecurity and Intrusion Detection Domains: A SurveyAndrew McCarthy, Essam Ghadafi, Panagiotis Andriotis, Phil Legg · 2022 · Journal of Cybersecurity and Privacy
- “Real Attackers Don't Compute Gradients”: Bridging the Gap Between Adversarial ML Research and PracticeGiovanni Apruzzese, Hyrum S. Anderson, Savino Dambra, David Mandell Freeman, Fabio Pierazzi, Kevin Roundy · 2023 · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)
- Robust detection of unknown DoS/DDoS attacks in IoT networks using a hybrid learning modelXuan-Ha Nguyen, Kim-Hung Le · 2023 · Internet of Things
- Blocking Transferability of Adversarial Examples in Black-Box Learning SystemsHossein Hosseini, Yize Chen, Sreeram Kannan, Baosen Zhang, Radha Poovendran · 2017 · arXiv (Cornell University)
- Subpopulation Data Poisoning AttacksJagielski, Matthew, Severi, Giorgio, Pousette Harger, Niklas, Oprea, Alina · 2021 · Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
- Reinforcement Learning for Autonomous Defence in Software-Defined NetworkingYi Han, Benjamin I. P. Rubinstein, Tamas Abraham, Tansu Alpcan, Olivier Y. de Vel, Sarah Erfani, David Hubczenko, Christopher A. Leckie, Paul Montague · 2018 · Lecture notes in computer science
- Hear "No Evil", See "Kenansville": Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification SystemsHadi Abdullah, Muhammad Sajidur Rahman, Washington García, Kevin Warren, Anurag Swarnim Yadav, Tom Shrimpton, Patrick Traynor · 2021 · IEEE Symposium on Security and Privacy (S&P)
- Physical Adversarial Textures That Fool Visual Object TrackingRey Reza Wiyatno, Anqi Xu · 2019 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Towards Evaluation of NIDSs in Adversarial SettingMohammad Hashemi, Greg Cusack, Eric R. Keller · 2019
- A novel method for malware detection on ML-based visualization techniqueXinbo Liu, Yaping Lin, He Li, Jiliang Zhang · 2019 · Computers & Security
- A System-Driven Taxonomy of Attacks and Defenses in Adversarial Machine LearningKoosha Sadeghi, Ayan Banerjee, Sandeep K. S. Gupta · 2020 · IEEE Transactions on Emerging Topics in Computational Intelligence
- Robust feature learning for adversarial defense via hierarchical feature alignmentXiaoqin Zhang, Jinxin Wang, Tao Wang, Runhua Jiang, Jiawei Xu, Li Zhao · 2020 · Information Sciences
- Adversarial Attack on Large Scale GraphJintang Li, Tao Xie, Liang Chen, Fenfang Xie, Xiangnan He, Zibin Zheng · 2021 · IEEE Transactions on Knowledge and Data Engineering
- A Survey on Adversarial Attack in the Age of Artificial IntelligenceZixiao Kong, Jingfeng Xue, Yong Wang, Lu Huang, Zequn Niu, Feng Li · 2021 · Wireless Communications and Mobile Computing
- Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal InformationBaolin Zheng, Peipei Jiang, Qian Wang, Qi Lecky Li, Chao Qun Shen, Cong Wang, Yunjie Ge, Qingyang Teng, Shenyi Zhang · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Gradient Leakage Attack Resilient Deep LearningWenqi Wei, Ling Liu · 2021 · IEEE Transactions on Information Forensics and Security
- Defending Against Physically Realizable Attacks on Image ClassificationTong Wu, Liang Tong, Yevgeniy Vorobeychik · 2019 · arXiv (Cornell University)
- Robust Superpixel-Guided Attentional Adversarial AttackXiaoyi Dong, Jiangfan Han, Dongdong Chen, Jiayang Liu, Huanyu Bian, Zehua Ma, Hongsheng Li, Xiaogang Wang, Weiming Zhang, Nenghai Yu · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Black-box Adversarial Attacks in Autonomous Vehicle TechnologyK. Naveen Kumar, C. Vishnu, Reshmi Mitra, Chalavadi Krishna Mohan · 2020 · IEEE Applied Imagery Pattern Recognition Workshop
- EvadeDroid: A practical evasion attack on machine learning for black-box Android malware detectionHamid Bostani, Veelasha Moonsamy · 2023 · Computers & Security
- Attacking Deep Reinforcement Learning With Decoupled Adversarial PolicyKanghua Mo, Weixuan Tang, Jin Li, Xu Yuan · 2022 · IEEE Transactions on Dependable and Secure Computing
- Model Stealing Attacks Against Inductive Graph Neural NetworksYun Cheng Shen, Xinlei He, Yufei Han, Yang Zhang · 2022 · IEEE Symposium on Security and Privacy (S&P)
- Deep learning adversarial attacks and defenses in autonomous vehicles: a systematic literature review from a safety perspectiveAhmed Dawod Mohammed Ibrahum, Manzoor Hussain, Jang‐Eui Hong · 2024 · Artificial Intelligence Review
- DeepRobust: A PyTorch Library for Adversarial Attacks and DefensesYaxin Li, Wei Jin, Han Xu, Jiliang Tang · 2020 · arXiv (Cornell University)
- Fast Geometrically-Perturbed Adversarial FacesAli Dabouei, Sobhan Soleymani, Jeremy Michael Dawson, Nasser M. Nasrabadi · 2019 · IEEE Winter Conference on Applications of Computer Vision
- On Isometry Robustness of Deep 3D Point Cloud Models Under Adversarial AttacksYue Zhao, Yuwei Wu, Caihua Chen, Andrew E. B. Lim · 2020 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Can We Use Arbitrary Objects to Attack LiDAR Perception in Autonomous Driving?Yi Zhu, Chenglin Miao, Tianhang Zheng, Foad Hajiaghajani, Lü Su, Chunming Qiao · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Imperceptible Transfer Attack and Defense on 3D Point Cloud ClassificationDaizong Liu, Wei Hu · 2022 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- Toward Understanding and Boosting Adversarial Transferability From a Distribution PerspectiveYao Tai Zhu, Yuefeng Chen, Xiaodan Li, Kejiang Chen, Yuan He, Xiang Tian, Bolun Zheng, Yaowu Chen, Qingming Huang · 2022 · IEEE Transactions on Image Processing
- APE-GAN: Adversarial Perturbation Elimination with GANShiwei Shen, Guoqing Jin, Ke Gao, Yongdong Zhang · 2017 · arXiv (Cornell University)
- Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep LearningPayap Sirinam, Mohsen Imani, Marc Juarez, Matthew Wright · 2018 · arXiv (Cornell University)
- Adversarially Robust Generalization Just Requires More Unlabeled DataRuntian Zhai, Tianle Cai, Di He, Chen Dan, Kun He, J. Hopcroft, Liwei Wang · 2019 · arXiv.org
- Robust Learning with Jacobian RegularizationJudy Hoffman, Daniel A. Roberts, Sho Yaida · 2019 · arXiv (Cornell University)
- Opportunities and Challenges in Deep Learning Adversarial Robustness: A SurveySamuel Henrique Silva, Peyman Najafirad · 2020 · arXiv (Cornell University)
- Anonymizing k Facial Attributes via Adversarial PerturbationsSaheb Chhabra, Richa Singh, Mayank Vatsa A, Gaurav Gupta · 2018 · International Joint Conference on Artificial Intelligence
- Adversarial Samples on Android Malware Detection Systems for IoT SystemsXiaolei Liu, Xiaojiang Du, Xiaosong Zhang, Qingxin Zhu, Hao Henry Wang, Mohsen Guizani · 2019 · Sensors
- Data Poisoning Attack against Knowledge Graph EmbeddingHengtong Zhang, Tianhang Zheng, Jing Gao, Chenglin Miao, Lu Su, Yaliang Li, Kui Ren · 2019 · International Joint Conference on Artificial Intelligence
- Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSsRana Abou Khamis, Ashraf Matrawy · 2020 · International Symposium on Networks, Computers and Communications (ISNCC)
- Attacks on state-of-the-art face recognition using attentional adversarial attack generative networkLu Yang, Qing Song, Yingqi Wu · 2020 · Multimedia Tools and Applications
- Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region FittingJunhua Zou, Zhisong Pan, Junyang Qiu, Xin Liu, Ting Rui, Wei Li · 2020 · Lecture notes in computer science
- Responsible and Regulatory Conform Machine Learning for Medicine: A Survey of Challenges and SolutionsEike Petersen, Yannik Potdevin, Esfandiar Mohammadi, Stephan Zidowitz, Sabrina Breyer, Dirk Nowotka, Sandra Henn, Ludwig Pechmann, Martin Leucker, Philipp Rostalski et al. · 2022 · IEEE Access
- TAD: Transfer learning-based multi-adversarial detection of evasion attacks against network intrusion detection systemsIslam Debicha, Richard Bauwens, Thibault Debatty, Jean‐Michel Dricot, Tayeb Kenaza, Wim Mees · 2022 · Future Generation Computer Systems
- Analyzing Deep Neural Networks with Symbolic Propagation: Towards Higher Precision and Faster VerificationJianlin Li, Jiangchao Liu, Pengfei Yang, Liqian Chen, Xiaowei Huang, Lijun Zhang · 2019 · Lecture notes in computer science
- Extending Defensive DistillationNicolas Papernot, Patrick Drew McDaniel · 2017 · arXiv (Cornell University)
- Adversarial Distributional Training for Robust Deep LearningYinpeng Dong, Zhijie Deng, Tianyu Pang, Hang Su, Jun Zhu · 2020 · arXiv (Cornell University)
- Hardening Random Forest Cyber Detectors Against Adversarial AttacksGiovanni Apruzzese, Mauro Andreolini, Michele Colajanni, Mirco Marchetti · 2020 · IEEE Transactions on Emerging Topics in Computational Intelligence
- AFA: Adversarial fingerprinting authentication for deep neural networksJingjing Zhao, Qingyue Hu, Gaoyang Liu, Xiaoqiang Ma, Fei Chen, Mohammad Mehedi Hassan · 2019 · Computer Communications
- Machine Learning Approaches in Cyber Security AnalyticsTony Thomas, Athira P. Vijayaraghavan, Sabu Emmanuel · 2019 · Springer eBooks
- Strong Mixed-Integer Programming Formulations for Trained Neural NetworksRoss Anderson, Joey Huchette, Christian Tjandraatmadja, Juan Pablo Vielma · 2019 · Lecture notes in computer science
- A Brute-Force Black-Box Method to Attack Machine Learning-Based Systems in CybersecuritySicong Zhang, Xiaoyao Xie, Yang Xu · 2020 · IEEE Access
- A Holistic Review of Machine Learning Adversarial Attacks in IoT NetworksHassan Khazane, Mohammed Ridouani, Fatima Salahdine, Naima Kaabouch · 2024 · Future Internet
- Attacking the Madry Defense Model with $L_1$-based Adversarial ExamplesYash Sharma, Pin‐Yu Chen · 2017 · arXiv (Cornell University)
- Accurate, reliable and fast robustness evaluationWieland Brendel, Jonas Rauber, Matthias Kümmerer, Ivan Ustyuzhaninov, Matthias Bethge · 2019 · arXiv (Cornell University)
- Perceptual Adversarial Robustness: Defense Against Unseen Threat ModelsCassidy Laidlaw, Sahil Singla, Soheil Feizi · 2020 · arXiv (Cornell University)
- Connecting the Digital and Physical World: Improving the Robustness of Adversarial AttacksSteve T. K. Jan, Joseph C. E. Messou, Yen-Chen Lin, Jia‐Bin Huang, Gang Wang · 2019 · Proceedings of the AAAI Conference on Artificial Intelligence
- A Robust Approach for Securing Audio Classification Against Adversarial AttacksMohammad Esmaeilpour, Patrick Cardinal, Alessandro L. Koerich · 2019 · IEEE Transactions on Information Forensics and Security
- DiffChaser: Detecting Disagreements for Deep Neural NetworksXiaofei Xie, Lei Ma, Haijun Wang, Yuekang Li, Yang Liu, Xiaohong Li · 2019 · International Joint Conference on Artificial Intelligence
- CAT: Customized Adversarial Training for Improved RobustnessMinhao Cheng, Qi Lei, Pin‐Yu Chen, Inderjit S. Dhillon, Cho‐Jui Hsieh · 2022 · International Joint Conference on Artificial Intelligence
- Towards characterizing adversarial defects of deep learning software from the lens of uncertaintyXiyue Zhang, Xiaofei Xie, Lei Ma, Xiaoning Du, Qiang Hu, Yang Liu, Jianjun Zhao, Meng Sun · 2020 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
- Adv-Bot: Realistic adversarial botnet attacks against network intrusion detection systemsIslam Debicha, Benjamin Cochez, Tayeb Kenaza, Thibault Debatty, Jean‐Michel Dricot, Wim Mees · 2023 · Computers & Security
- PLA-LiDAR: Physical Laser Attacks against LiDAR-based 3D Object Detection in Autonomous VehicleZizhi Jin, Xiaoyu Ji, Yushi Cheng, Bo Yang, Chen Yan, Wenyuan Xu · 2023 · IEEE Symposium on Security and Privacy (S&P)
- Evading DeepFake Detectors via Adversarial Statistical ConsistencyHou, Yang, Guo, Qing, Huang, Yihao, Xie, Xiaofei, Ma, Lei, Zhao, Jianjun · 2023 · 2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
- A simple framework to enhance the adversarial robustness of deep learning-based intrusion detection systemXinwei Yuan, Han Shu, Wei Huang, Hongliang Ye, Xianglong Kong, Fan Zhang · 2023 · Computers & Security
- Adversarial Attacks and Defenses in 6G Network-Assisted IoT SystemsBui Duc Son, Tiến Hoa Nguyễn, Trinh Van Chien, Waqas Khalid, Mohamed Amine Ferrag, Wan Choi, Merouane Abdelkader Debbah · 2024 · IEEE Internet of Things Journal
- A survey of algorithmic recourse: definitions, formulations, solutions, and prospectsAmir-Hossein Karimi, Gilles Barthe, Bernhard Schölkopf, Isabel Valera · 2020 · arXiv (Cornell University)
- Analyzing the Robustness of Open-World Machine LearningVikash Sehwag, Arjun Nitin Bhagoji, Liwei Song, Chawin Sitawarin, Daniel Cullina, Mung Chiang, Prateek Mittal · 2019 · ACM Workshop on Artificial Intelligence and Security (AISec)
- Scalable attack on graph data by injecting vicious nodesJihong Wang, Minnan Luo, Fnu Suya, Jundong Li, Zijiang Yang, Qinghua Zheng · 2020 · Data Mining and Knowledge Discovery
- A Gradient-Guided Evolutionary Approach to Training Deep Neural NetworksShangshang Yang, Ye Tian, Cheng He, Xingyi Zhang, Kay Chen Tan, Yaochu Jin · 2021 · IEEE Transactions on Neural Networks and Learning Systems
- Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable BytesKeane Lucas, Mahmood Sharif, Lujo Bauer, Michael K. Reiter, Saurabh Shintre · 2021 · ACM Asia Conference on Computer and Communications Security (ASIA CCS)
- Optical Adversarial AttackAbhiram Gnanasambandam, Alex M. Sherman, Stanley H. Chan · 2021 · IEEE International Conference on Computer Vision Workshops
- The Role of Explainability in Assuring Safety of Machine Learning in HealthcareYan Jia, John A. McDermid, Tom Lawton, Ibrahim Habli · 2022 · IEEE Transactions on Emerging Topics in Computing
- Adversarial Machine Learning: A Multilayer Review of the State-of-the-Art and Challenges for Wireless and Mobile SystemsJinxin Liu, Michele Nogueira, Johan Fernandes, Burak Kantarcı · 2021 · IEEE Communications Surveys & Tutorials
- A survey on neural networks for (cyber-) security and (cyber-) security of neural networksMarek Pawlicki, Rafał Kozik, Michał Choraś · 2022 · Neurocomputing
- Fake Node Attacks on Graph Convolutional NetworksXiaoyun Wang, Minhao Cheng, Joe Eaton, Cho‐Jui Hsieh, S. Felix Wu · 2022 · Journal of Computational and Cognitive Engineering
- Backdooring and Poisoning Neural Networks with Image-Scaling AttacksErwin Quiring, Konrad Rieck · 2020 · IEEE Security and Privacy Workshops (SPW)
- Sensitivity Analysis of Deep Neural NetworksHai Shu, Hongtu Zhu B · 2019 · Proceedings of the AAAI Conference on Artificial Intelligence
- A Comprehensive Study on the Robustness of Deep Learning-Based Image Classification and Object Detection in Remote Sensing: Surveying and BenchmarkingShaohui Mei, Jiawei Lian, Xiaofei Wang, Yuru Su, Mingyang Ma, Lap‐Pui Chau · 2024 · Journal of Remote Sensing
- Assessing Optimizer Impact on DNN Model Sensitivity to Adversarial ExamplesYixiang Wang, Jiqiang Liu, Jelena Mišić, Vojislav B. Mišić, Shaohua Lv, Xiaolin Chang · 2019 · IEEE Access
- Deep Neural Network Ensembles Against Deception: Ensemble Diversity, Accuracy and RobustnessLing Liu, Wenqi Wei, Ka-Ho Chow, Margaret L. Loper, Emre Gürsoy, Stacey Truex, Yanzhao Wu · 2019 · IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS)
- TrojDRL: Evaluation of Backdoor Attacks on Deep Reinforcement LearningPanagiota Kiourti, Kacper Wardega, Susmit Jha, Wenchao Li · 2020 · ACM/IEEE Design Automation Conference (DAC)
- Defeating DNN-Based Traffic Analysis Systems in Real-Time With Blind Adversarial Perturbations.Milad Nasr, Alireza Bahramali, Amir Houmansadr · 2021 · USENIX Security Symposium
- Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and DefenseBowen Peng, Bo Peng, Jie Zhou, Jianyue Xie, Li Liu · 2022 · IEEE Transactions on Geoscience and Remote Sensing
- Infrared Invisible Clothing: Hiding from Infrared Detectors at Multiple Angles in Real WorldXiaopei Zhu, Zhanhao Hu, Siyuan Huang, Jianmin Li, Xiaolin Hu · 2022 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Open Sesame! Universal Black-Box Jailbreaking of Large Language ModelsRaz Lapid, Ron Langberg, Moshe Sipper · 2024 · Applied Sciences
- Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and ChallengesJunhao Dong, Junxi Chen, Xiaohua Xie, Jianhuang Lai, Hao Chen · 2024 · ACM Computing Surveys
- Hardware Trojan Attacks on Neural NetworksJoseph Clements, Yingjie Lao · 2018 · arXiv (Cornell University)
- On Robustness of Neural Ordinary Differential EquationsHanshu Yan, Jiawei Du, Vincent Y. F. Tan, Jiashi Feng · 2019 · arXiv (Cornell University)