The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 901–1,000 of 1,082
Toward an End-to-End Sociology of 21st-Century Machine Learning
Roberge, J., & Castelle, M. (2020) · Springer eBooks · doi:10.1007/978-3-030-56286-1_1 · Cited by 81
Tai, Y., Gao, B., Li, Q., Yu, Z., Zhu, C., & Chang, V. I. C. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3055804 · Cited by 82
Examining the effect of explanation on satisfaction and trust in AI diagnostic systems
Alam, L., & Mueller, S. T. (2021) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-021-01542-6 · Cited by 89
Personal Voice Assistant Security and Privacy—A Survey
Cheng, P., & Roedig, U. (2022) · Proceedings of the IEEE · doi:10.1109/jproc.2022.3153167 · Cited by 82
Li, J., Rakin, A. S., Chen, X., He, Z., Fan, D., & Chakrabarti, C. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00995 · Cited by 82
Rethinking Reconstruction Autoencoder-Based Out-of-Distribution Detection
Zhou, Y. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00723 · Cited by 83
Robust detection of unknown DoS/DDoS attacks in IoT networks using a hybrid learning model
Nguyen, X.-H., & Le, K.-H. (2023) · Internet of Things · doi:10.1016/j.iot.2023.100851 · Cited by 96
Universal adversarial perturbationsPreprint
Moosavi-Dezfooli, S.-M., Fawzi, A., Fawzi, O., & Pascal Frossard, B. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1610.08401 · Cited by 82
Model Evasion Attack on Intrusion Detection Systems using Adversarial Machine Learning
Ayub, M. A., Johnson, W. A., Talbert, D. A., & Siraj, A. (2020) · 2020 54th Annual Conference on Information Sciences and Systems (CISS) · doi:10.1109/ciss48834.2020.1570617116 · Cited by 86
Abdullah, H., Rahman, M. S., García, W., Warren, K., Yadav, A. S., Shrimpton, T., & Traynor, P. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00009 · Cited by 99
Physical Adversarial Textures That Fool Visual Object Tracking
Wiyatno, R. R., & Xu, A. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00492 · Cited by 83
A System-Driven Taxonomy of Attacks and Defenses in Adversarial Machine Learning
Sadeghi, K., Banerjee, A., & Gupta, S. K. S. (2020) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2020.2968933 · Cited by 87
Thomsen, J., Sletfjerding, M. B., Stella, S., Paul, B., Jensen, S. B., Malle, M. G., Montoya, G., Petersen, T. C., & Hatzakis, N. S. (2020) · eLife · doi:10.7554/elife.60404 · Cited by 90
Velmovitsky, P. E., Bevilacqua, T., Alencar, P., Cowan, D. D., & Morita, P. P. (2021) · Frontiers in Public Health · doi:10.3389/fpubh.2021.561873 · Cited by 97
Adversarial Attack on Large Scale Graph
Li, J., Xie, T., Chen, L., Xie, F., He, X., & Zheng, Z. (2021) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3078755 · Cited by 81
Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input
Byun, J., Cho, S., Kwon, M.-J., Kim, H.-S., & Kim, C. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01481 · Cited by 85
SoK: How Robust is Image Classification Deep Neural Network Watermarking?
Lukas, N., Jiang, E., Li, X., & Kerschbaum, F. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833693 · Cited by 104
Explainable AI: A review of applications to neuroimaging data
Farahani, F. V., Fiok, K., Lahijanian, B., Karwowski, W., & Douglas, P. K. (2022) · Frontiers in Neuroscience · doi:10.3389/fnins.2022.906290 · Cited by 87
Variational Positive-Incentive Noise: How Noise Benefits Models
Zhang, H., Huang, S., Guo, Y., & Li, X. (2025) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2025.3575295 · Cited by 103
DeMeshNet: Blind Face Inpainting for Deep MeshFace Verification
Zhang, S., He, R., Sun, Z., & Tan, T. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2763119 · Cited by 81
Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models
Boloor, A., He, X., Gill, C. D., Vorobeychik, Y., & Zhang, X. (2019) · International Conference on Embedded Software and Systems · doi:10.1109/icess.2019.8782514 · Cited by 81
Adversarial Noise Layer: Regularize Neural Network by Adding Noise
You, Z., Ye, J., Li, K., Xu, Z., & Wang, P. (2019) · 2019 IEEE International Conference on Image Processing (ICIP) · doi:10.1109/icip.2019.8803055 · Cited by 80
Optimization and abstraction: a synergistic approach for analyzing neural network robustness
Anderson, G., Pailoor, S., Dillig, I., & Chaudhuri, S. (2019) · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI) · doi:10.1145/3314221.3314614 · Cited by 82
Is Deep Learning Safe for Robot Vision? Adversarial Examples Against the iCub Humanoid
Melis, M., Demontis, A., Biggio, B., Gavin Brown, B., Fumera, G., & Roli, F. (2017) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw.2017.94 · Cited by 85
Generating Adversarial Examples By Makeup Attacks on Face Recognition
Zhu, Z.-A., Lu, Y.-Z., & Chiang, C.-K. (2019) · Proceedings - International Conference on Image Processing · doi:10.1109/icip.2019.8803269 · Cited by 80
Robust Superpixel-Guided Attentional Adversarial Attack
Dong, X., Han, J., Chen, D., Liu, J., Bian, H., Ma, Z., Li, H., Wang, X., Zhang, W., & Yu, N. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01291 · Cited by 81
Black-box Adversarial Attacks in Autonomous Vehicle Technology
Kumar, K. N., Vishnu, C., Mitra, R., & Mohan, C. K. (2020) · IEEE Applied Imagery Pattern Recognition Workshop · doi:10.1109/aipr50011.2020.9425267 · Cited by 82
Attacking Deep Reinforcement Learning With Decoupled Adversarial Policy
Mo, K., Tang, W., Li, J., & Yuan, X. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3143566 · Cited by 83
Model Stealing Attacks Against Inductive Graph Neural Networks
Shen, Y. C., He, X., Han, Y., & Zhang, Y. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833607 · Cited by 90
Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability
Aghakhani, H., Meng, D., Wang, Y.-X., Kruegel, C., & Vigna, G. (2021) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp51992.2021.00021 · Cited by 101
On Isometry Robustness of Deep 3D Point Cloud Models Under Adversarial Attacks
Zhao, Y., Wu, Y., Chen, C., & Lim, A. E. B. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00128 · Cited by 84
Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT
Papadopoulos, P., von Essen, O. T., Pitropakis, N., Chrysoulas, C., Mylonas, A., & Buchanan, W. J. (2021) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp1020014 · Cited by 83
Feature-Based Style Randomization for Domain Generalization
Wang, Y., Qi, L., Shi, Y., & Gao, Y. (2022) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2022.3152615 · Cited by 80
Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification
Liu, D., & Hu, W. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3193449 · Cited by 79
Mirzaee, P. H., Shojafar, M., Cruickshank, H. S., & Tafazolli, R. (2022) · IEEE Access · doi:10.1109/access.2022.3174259 · Cited by 83
Toward Understanding and Boosting Adversarial Transferability From a Distribution Perspective
Zhu, Y. T., Chen, Y., Li, X., Chen, K., He, Y., Tian, X., Zheng, B., Chen, Y., & Huang, Q. (2022) · IEEE Transactions on Image Processing · doi:10.1109/tip.2022.3211736 · Cited by 83
Towards quantum enhanced adversarial robustness in machine learning
West, M. T., Tsang, S.-L., Low, J. S., Hill, C. D., Leckie, C., Hollenberg, L. C. L., Erfani, S. M., & Usman, M. (2023) · Nature Machine Intelligence · doi:10.1038/s42256-023-00661-1 · Cited by 79
Scattering Networks for Hybrid Representation Learning
Oyallon, E., Zagoruyko, S., Huang, G., Nikos Komodakis, A., Lacoste-Julien, S., Blaschko, M. B., & Belilovsky, E. (2018) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2018.2855738 · Cited by 80
Data Poisoning Attack against Knowledge Graph Embedding
Zhang, H., Zheng, T., Gao, J., Miao, C., Su, L., Li, Y., & Ren, K. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/674 · Cited by 101
Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSs
Khamis, R. A., & Matrawy, A. (2020) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc49221.2020.9297344 · Cited by 82
Recurrent Neural Network for Rain Estimation Using Commercial Microwave Links
Habi, H. V., & Messer, H. (2020) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2020.3010305 · Cited by 83
Zou, J., Pan, Z., Qiu, J., Liu, X., Rui, T., & Li, W. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58542-6_34 · Cited by 84
Backdoor Pre-trained Models Can Transfer to All
Shen, L., Ji, S., Zhang, X., Li, J., Chen, J., Shi, J., Fang, C., Yin, J., & Wang, T. (2021) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3460120.3485370 · Cited by 113
Exploring generative adversarial networks and adversarial training
Sajeeda, A., & Hossain, B. M. M. (2022) · International Journal of Cognitive Computing in Engineering · doi:10.1016/j.ijcce.2022.03.002 · Cited by 86
Petersen, E., Potdevin, Y., Mohammadi, E., Zidowitz, S., Breyer, S., Nowotka, D., Henn, S., Pechmann, L., Leucker, M., Rostalski, P., et al. (2022) · IEEE Access · doi:10.1109/access.2022.3178382 · Cited by 92
Debicha, I., Bauwens, R., Debatty, T., Dricot, J., Kenaza, T., & Mees, W. (2022) · Future Generation Computer Systems · doi:10.1016/j.future.2022.08.011 · Cited by 87
Testability and Dependability of AI Hardware: Survey, Trends, Challenges, and Perspectives
Su, F., Liu, C., & Stratigopoulos, H. (2023) · IEEE Design and Test · doi:10.1109/mdat.2023.3241116 · Cited by 84
On the Adversarial Robustness of Multi-Modal Foundation Models
Schlarmann, C., & Hein, M. (2023) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw60793.2023.00395 · Cited by 100
Towards Interpretable Face Recognition
Yin, B., Tran, L., Li, H., Shen, X., & Liu, X. (2019) · 2019 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00944 · Cited by 90
Uncertainty Estimation for Deep Neural Object Detectors in Safety-Critical Applications
Le, M. T., Diehl, F., Brunner, T., & Knoll, A. (2018) · IEEE International Conference on Intelligent Transportation Systems (ITSC) · doi:10.1109/itsc.2018.8569637 · Cited by 77
Adversarial Examples for CNN-Based Malware Detectors
Chen, B., Ren, Z., Yu, C., Hussain, I., & Liu, J. (2019) · IEEE Access · doi:10.1109/access.2019.2913439 · Cited by 77
Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analytics
Ma, Y., Xie, T., Li, J., & Maciejewski, R. (2019) · IEEE Transactions on Visualization and Computer Graphics · doi:10.1109/tvcg.2019.2934631 · Cited by 77
AFA: Adversarial fingerprinting authentication for deep neural networks
Zhao, J., Hu, Q., Liu, G., Ma, X., Chen, F., & Hassan, M. M. (2019) · Computer Communications · doi:10.1016/j.comcom.2019.12.016 · Cited by 77
Securing Machine Learning in the Cloud: A Systematic Review of Cloud Machine Learning Security
Qayyum, A., Ijaz, A., Usama, M., Iqbal, W., Qadir, J., Elkhatib, Y., & Al‐Fuqaha, A. (2020) · Frontiers in Big Data · doi:10.3389/fdata.2020.587139 · Cited by 84
Deep Co-Training with Task Decomposition for Semi-Supervised Domain Adaptation
Yang, L., Wang, Y., Gao, M., Shrivastava, A., Weinberger, K. Q., Chao, W., & Lim, S.-N. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00878 · Cited by 86
Evasion Attacks with Adversarial Deep Learning Against Power System State Estimation
Sayghe, A., Zhao, J., & Konstantinou, C. (2020) · IEEE Power Engineering Society General Meeting · doi:10.1109/pesgm41954.2020.9281719 · Cited by 75
Attacking Black-box Recommendations via Copying Cross-domain User Profiles
Fan, W., Derr, T., Zhao, X., Ma, Y., Liu, H., Wang, J., Tang, J., & Li, Q. (2021) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde51399.2021.00140 · Cited by 85
Defense strategies for Adversarial Machine Learning: A survey
Bountakas, P., Zarras, A., Lekidis, A., & Xenakis, C. (2023) · Computer Science Review · doi:10.1016/j.cosrev.2023.100573 · Cited by 85
Stealthy Backdoor Attack for Code Models
Yang, Z., Xu, B., Zhang, J. M., Kang, H. J., Shi, J., He, J., & Lo, D. (2024) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2024.3361661 · Cited by 100
Translational machine learning for psychiatric neuroimaging
Walter, M., Alizadeh, S., Jamalabadi, H., Lueken, U., Dannlowski, U., Walter, H., Olbrich, S., Čolić, L., Kambeitz, J. P., Koutsouleris, N., et al. (2018) · Progress in Neuro-Psychopharmacology and Biological Psychiatry · doi:10.1016/j.pnpbp.2018.09.014 · Cited by 84
Attacking the Madry Defense Model with $L_1$-based Adversarial ExamplesPreprint
Sharma, Y., & Chen, P. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1710.10733 · Cited by 77
Guha Roy, A., Ren, J., Azizi, S., Loh, A., Natarajan, V., Mustafa, B., Pawlowski, N., Freyberg, J., Liu, Y., Beaver, Z., et al. (2022) · Medical Image Analysis · doi:10.1016/j.media.2021.102274 · Cited by 77
Connecting the Digital and Physical World: Improving the Robustness of Adversarial Attacks
Jan, S. T. K., Messou, J. C. E., Lin, Y.-C., Huang, J., & Wang, G. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.3301962 · Cited by 80
A Robust Approach for Securing Audio Classification Against Adversarial Attacks
Esmaeilpour, M., Cardinal, P., & Koerich, A. L. (2019) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2019.2956591 · Cited by 77
DiffChaser: Detecting Disagreements for Deep Neural Networks
Xie, X., Ma, L., Wang, H., Li, Y., Liu, Y., & Li, X. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/800 · Cited by 83
Analyzing the Noise Robustness of Deep Neural Networks
Cao, K., Liu, M., Su, H., Wu, J., Zhu, J., & Liu, S. (2020) · IEEE Transactions on Visualization and Computer Graphics · doi:10.1109/tvcg.2020.2969185 · Cited by 78
CAT: Customized Adversarial Training for Improved Robustness
Cheng, M., Lei, Q., Chen, P., Dhillon, I. S., & Hsieh, C. (2022) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2022/95 · Cited by 101
The Attacker’s Perspective on Automatic Speaker Verification: An Overview
Das, R. K., Tian, X., Kinnunen, T., & Li, H. (2020) · Interspeech (USB) · doi:10.21437/interspeech.2020-1052 · Cited by 73
IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking
Jia, S., Song, Y., Ma, C., & Yang, X. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00664 · Cited by 78
Kundu, S., Pedram, M., & Beerel, P. A. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00516 · Cited by 84
AlignMixup: Improving Representations By Interpolating Aligned Features
Venkataramanan, S., Ewa Kijak, C., Amsaleg, L., & Avrithis, Y. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01858 · Cited by 76
Query efficient black-box adversarial attack on deep neural networks
Bai, Y., Wang, Y., Zeng, Y., Jiang, Y., & Xia, S. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109037 · Cited by 80
Adv-Bot: Realistic adversarial botnet attacks against network intrusion detection systems
Debicha, I., Cochez, B., Kenaza, T., Debatty, T., Dricot, J., & Mees, W. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103176 · Cited by 86
PLA-LiDAR: Physical Laser Attacks against LiDAR-based 3D Object Detection in Autonomous Vehicle
Jin, Z., Ji, X., Cheng, Y., Yang, B., Yan, C., & Xu, W. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179458 · Cited by 78
Evading DeepFake Detectors via Adversarial Statistical Consistency
Hou, Y., Guo, Q., Huang, Y., Xie, X., Ma, L., & Zhao, J. (2023) · 2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr52729.2023.01181 · Cited by 76
Imitation Attacks and Defenses for Black-box Machine Translation Systems
Wallace, E., Stern, M., & Song, D. (2020) · Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/2020.emnlp-main.446 · Cited by 75
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks
He, X., Yang, S., Li, G., Li, H., Chang, H., & Yu, Y. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33018417 · Cited by 77
Input Prioritization for Testing Neural Networks
Byun, T., Sharma, V., Vijayakumar, A., Rayadurgam, S., & Cofer, D. D. (2019) · IEEE International Conference on Artificial Intelligence Testing (AITest) · doi:10.1109/aitest.2019.000-6 · Cited by 75
Adversarial Collaborative Neural Network for Robust Recommendation
Feng, Y., Yao, L., & Benatallah, B. (2019) · International ACM SIGIR Conference on Research and Development in Information Retrieval (SIGIR) · doi:10.1145/3331184.3331321 · Cited by 75
Investigating Adversarial Attacks against Network Intrusion Detection Systems in SDNs
Aiken, J., & Scott-Hayward, S. (2019) · IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN) · doi:10.1109/nfv-sdn47374.2019.9040101 · Cited by 79
Scalable attack on graph data by injecting vicious nodes
Wang, J., Luo, M., Suya, F., Li, J., Yang, Z., & Zheng, Q. (2020) · Data Mining and Knowledge Discovery · doi:10.1007/s10618-020-00696-7 · Cited by 85
VATLD: A Visual Analytics System to Assess, Understand and Improve Traffic Light Detection
Gou, L., Zou, L., Li, N., Hofmann, M., Shekar, A. K., Wendt, A., & Ren, L. (2020) · IEEE Transactions on Visualization and Computer Graphics · doi:10.1109/tvcg.2020.3030350 · Cited by 79
Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes
Lucas, K., Sharif, M., Bauer, L., Reiter, M. K., & Shintre, S. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3453086 · Cited by 80
Zhang, T., & Zhang, X. (2021) · Remote Sensing · doi:10.3390/rs13112091 · Cited by 79
Xue, M., Zhang, Y., Wang, J., & Liu, W. (2021) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2021.3133824 · Cited by 75
A Survey of Neuromorphic Computing-in-Memory: Architectures, Simulators, and Security
Staudigl, F., Merchant, F., & Leupers, R. (2021) · IEEE Design and Test · doi:10.1109/mdat.2021.3102013 · Cited by 75
Gnanasambandam, A., Sherman, A. M., & Chan, S. H. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00016 · Cited by 84
Yamany, W., Moustafa, N., & Turnbull, B. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3130906 · Cited by 87
Recognition-Oriented Image Compressive Sensing With Deep Learning
Zhou, S., Deng, X., Li, C., Liu, Y., & Jiang, H. (2022) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2022.3142952 · Cited by 75
Liu, J., Nogueira, M., Fernandes, J., & Kantarcı, B. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3136132 · Cited by 84
Robust Load Forecasting Towards Adversarial Attacks via Bayesian Learning
Zhou, Y., Ding, Z., Wen, Q., & Wang, Y. (2022) · IEEE Transactions on Power Systems · doi:10.1109/tpwrs.2022.3175252 · Cited by 77
Fake Node Attacks on Graph Convolutional Networks
Wang, X., Cheng, M., Eaton, J., Hsieh, C., & Wu, S. F. (2022) · Journal of Computational and Cognitive Engineering · doi:10.47852/bonviewjcce2202321 · Cited by 76
The Quantum Wasserstein Distance of Order 1Preprint
Palma, G. D., Marvian, M., Trevisan, D., & Lloyd, S. (2021) · DSpace@MIT (Massachusetts Institute of Technology) · Cited by 76
A Survey of Deep Learning Applications to Autonomous Vehicle Control
Kuutti, S., Bowden, R., Jin, Y., Barber, P., & Fallah, S. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2019.2962338 · Cited by 96
“It has been shown that visual classification DNN systems are vulnerable to adversarial examples, which are perturbed images that cause the DNNs to misclassify them with high confidence [216]–[219], including misclassification of traffic signs [220].”
BackgroundAdversarial Attacks on GMM I-Vector Based Speaker Verification Systems
Li, X., Zhong, J., Wu, X., Yu, J., Liu, X., & Meng, H. M. L. (2020) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp40776.2020.9053076 · Cited by 79
Defense against Synonym Substitution-based Adversarial Attacks via Dirichlet Neighborhood Ensemble
Zhou, Y., Zheng, X., Hsieh, C., Chang, K.-W., & Huang, X. (2021) · doi:10.18653/v1/2021.acl-long.426 · Cited by 78
CrossNorm and SelfNorm for Generalization under Distribution Shifts
Tang, Z., Gao, Y., Zhu, Y., Zhang, Z., Li, M., & Metaxas, D. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00012 · Cited by 81
Dual-Encoder VAE-GAN With Spatiotemporal Features for Emotional EEG Data Augmentation
Tian, C., Ma, Y., Cammon, J., Fang, F. Z., Zhang, Y., & Meng, M. (2023) · IEEE Transactions on Neural Systems and Rehabilitation Engineering · doi:10.1109/tnsre.2023.3266810 · Cited by 74
Towards Interpretable Deep Neural Networks by Leveraging Adversarial ExamplesPreprint
Dong, Y., Bao, F., Su, H., & Zhu, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.09035 · Cited by 77
A Counter-Forensic Method for CNN-Based Camera Model Identification
Güera, D., Wang, Y., Bondi, L., Bestagini, P., Tubaro, S., & Delp, E. J. (2017) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2017.230 · Cited by 71
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
