The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 201–300 of 1,082
Robust Multi-Agent Reinforcement Learning via Minimax Deep Deterministic Policy Gradient
Li, S., Wu, Y., Cui, X., Dong, H., Fang, F., & Russell, S. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33014213 · Cited by 308
Intriguing Properties of Vision Transformers
Naseer, M., Ranasinghe, K., Khan, S., Hayat, M., Khan, F. S., & Yang, M.-H. (2021) · arXiv · doi:10.48550/arxiv.2105.10497 · Cited by 431
A survey of regularization strategies for deep models
Moradi, R., Berangi, R., & Bidgoli, B. M. (2019) · Artificial Intelligence Review · doi:10.1007/s10462-019-09784-7 · Cited by 333
Adversarial Attack and Defense on Graph Data: A Survey
Sun, L., Dou, Y., Yang, C., Zhang, K., Wang, J., Yu, P. S., He, L., & Li, B. (2022) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2022.3201243 · Cited by 373
Tactics of Adversarial Attack on Deep Reinforcement Learning Agents
Lin, Y.-C., Hong, Z.-W., Liao, Y.-H., Shih, M.-L., Liu, M.-Y., & Sun, M. (2017) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2017/525 · Cited by 452
A Backdoor Attack Against LSTM-Based Text Classification Systems
Dai, J., Chen, C., & Li, Y. (2019) · IEEE Access · doi:10.1109/access.2019.2941376 · Cited by 318
Admix: Enhancing the Transferability of Adversarial Attacks
Wang, X., He, X., Wang, J., & He, K. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01585 · Cited by 322
DeepFake Detection for Human Face Images and Videos: A Survey
Malik, A., Kuribayashi, M., Abdullahi, S. M., & Khan, A. N. (2022) · IEEE Access · doi:10.1109/access.2022.3151186 · Cited by 297
Advhat: Real-world adversarial attack on arcface face id system
Komkov, S., & Petiushko, A. (2021) · 2020 25th International Conference on Pattern Recognition (ICPR) · doi:10.1109/icpr48806.2021.9412236 · Cited by 294
A Survey of End-to-End Driving: Architectures and Training Methods
Tampuu, A., Matiisen, T., Semikin, M., Fishman, D., & Muhammad, N. (2020) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2020.3043505 · Cited by 325
Machine learning in geo- and environmental sciences: From small to large scale
Tahmasebi, P., Kamrava, S., Bai, T., & Sahimi, M. (2020) · Advances in Water Resources · doi:10.1016/j.advwatres.2020.103619 · Cited by 305
Universal Adversarial Perturbations Against Semantic Image Segmentation
Metzen, J. H., Kumar, M. C., Brox, T., & Fischer, V. (2017) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2017.300 · Cited by 299
Towards Reverse-Engineering Black-Box Neural Networks
Oh, S. J., Schiele, B., & Fritz, M. (2019) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-28954-6_7 · Cited by 291
Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain
Rosenberg, I., Shabtai, A., Elovici, Y., & Rokach, L. (2022) · ACM Computing Surveys · doi:10.1145/3453158 · Cited by 295
Adversarial Attacks in Modulation Recognition With Convolutional Neural Networks
Lin, Y., Zhao, H., Ma, X., Tu, Y., & Wang, M. (2020) · IEEE Transactions on Reliability · doi:10.1109/tr.2020.3032744 · Cited by 297
Going Deep in Medical Image Analysis: Concepts, Methods, Challenges, and Future Directions
Altaf, F., Islam, S. M. S., Akhtar, N., & Janjua, N. K. (2019) · IEEE Access · doi:10.1109/access.2019.2929365 · Cited by 301
Analysis of classifiers’ robustness to adversarial perturbations
Fawzi, A., Fawzi, O., & Frossard, P. (2017) · Machine Learning · doi:10.1007/s10994-017-5663-3 · Cited by 340
Dual Student: Breaking the Limits of the Teacher in Semi-Supervised Learning
Ke, Z., Wang, D., Yan, Q., Ren, J., & Lau, R. W. H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00683 · Cited by 288
Robust Semantic Communications With Masked VQ-VAE Enabled Codebook
Hu, Q., Zhang, G., Qin, Z., Cai, Y., Yu, G., & Li, G. Y. (2023) · IEEE Transactions on Wireless Communications · doi:10.1109/twc.2023.3265201 · Cited by 316
Privacy and Security Issues in Deep Learning: A Survey
Liu, X., Xie, L., Wang, Y., Zou, J., Xiong, J., Ying, Z., & Vasilakos, A. V. (2020) · IEEE Access · doi:10.1109/access.2020.3045078 · Cited by 311
Delving Deep Into Label Smoothing
Zhang, C., Jiang, P.-T., Hou, Q., Wei, Y., Han, Q., Li, Z., & Cheng, M.-M. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3089942 · Cited by 294
Analyzing Adversarial Attacks against Deep Learning for Intrusion Detection in IoT Networks
Ibitoye, O., Shafiq, O., & Matrawy, A. (2019) · 2019 IEEE Global Communications Conference (GLOBECOM) · doi:10.1109/globecom38437.2019.9014337 · Cited by 281
Combating Adversarial Misspellings with Robust Word Recognition
Pruthi, D., Dhingra, B., & Lipton, Z. C. (2019) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p19-1561 · Cited by 302
He, Z., Rakin, A. S., & Fan, D. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00068 · Cited by 302
Hybrid 3D/2D Convolutional Neural Network for Hemorrhage Evaluation on Head CT
Chang, P. D., Kuoy, E., Grinband, J., Weinberg, B. D., Thompson, M., Homo, R. L., Chen, J. W., Abcede, H. G., Shafie, M., Sugrue, L. P., et al. (2018) · American Journal of Neuroradiology · doi:10.3174/ajnr.a5742 · Cited by 286
Perceptual-Sensitive GAN for Generating Adversarial Patches
Liu, A., Liu, X., Fan, J., Ma, Y., Zhang, A., Xie, H., & Tao, D. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33011028 · Cited by 296
Enhancing Stock Movement Prediction with Adversarial Training
Feng, F., Chen, H., He, X., Ding, J., Sun, M., & Chua, T. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/810 · Cited by 334
Direct Feedback Alignment Provides Learning in Deep Neural NetworksPreprint
Nøkland, A. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1609.01596 · Cited by 279
Xia, Y., Yang, D., Yu, Z., Liu, F., Cai, J., Yu, L., Zhu, Z., Xu, D., Yuille, A., & Roth, H. R. (2020) · Medical Image Analysis · doi:10.1016/j.media.2020.101766 · Cited by 290
Machine Learning in Genomic Medicine: A Review of Computational Problems and Data Sets
Leung, M. K. K., Delong, A., Alipanahi, B., & Frey, B. J. (2015) · Proceedings of the IEEE · doi:10.1109/jproc.2015.2494198 · Cited by 284
Bit-Flip Attack: Crushing Neural Network With Progressive Bit Search
Rakin, A. S., He, Z., & Fan, D. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00130 · Cited by 293
Wavelet Integrated CNNs for Noise-Robust Image Classification
Li, Q., Shen, L., Guo, S., & Lai, Z. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00727 · Cited by 295
Self-Supervised Learning for Time Series Analysis: Taxonomy, Progress, and Prospects
Zhang, K., Wen, Q., Zhang, C., Cai, R., Jin, M., Liu, Y., Zhang, J. Y., Liang, Y., Pang, G., Song, D., et al. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3387317 · Cited by 295
“…various recent and typical adversarial attack and defense methods for fault classifiers in data-driven fault detection and classificationsystems,includingwhite-boxattack(FGSM[209], IGSM[210],C & W attack [211], DeepFool [212]) and gray-box and black-box attack (UAP [213], SPSA [214], Random noise).”
BackgroundDetecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction
Liang, B., Li, H., Su, M., Li, X., Shi, W., & Wang, X. (2018) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2018.2874243 · Cited by 290
Deep Learning-Based Intrusion Detection With Adversaries
Wang, Z. (2018) · IEEE Access · doi:10.1109/access.2018.2854599 · Cited by 282
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding
Schönherr, L., Kohls, K. S., Zeiler, S., Holz, T., & Kolossa, D. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23288 · Cited by 270
A Survey on Safety-Critical Driving Scenario Generation—A Methodological Perspective
Ding, W., Xu, C., Arief, M., Lin, H., Li, B., & Zhao, D. X. (2023) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2023.3259322 · Cited by 320
Waytowich, N., Lawhern, V. J., Garcia, J. O., Cummings, J., Faller, J., Sajda, P., & Vettel, J. M. (2018) · Journal of Neural Engineering · doi:10.1088/1741-2552/aae5d8 · Cited by 262
SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems
Chou, E., Tramer, F., & Pellegrino, G. (2020) · 2020 IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw50608.2020.00025 · Cited by 281
Adversarial Diversity and Hard Positive Generation
Rozsa, A., Rudd, E. M., & Boult, T. E. (2016) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2016.58 · Cited by 268
Gradient-Based Attribution Methods
Ancona, M., Ceolini, E., Öztireli, C., & Groß, M. H. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-28954-6_9 · Cited by 284
Strike (With) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects
Alcorn, M. A., Li, Q., Gong, Z., Wang, C., Mai, L., Ku, W., & Nguyen, A. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00498 · Cited by 265
MixUp as Locally Linear Out-of-Manifold Regularization
Guo, H., Mao, Y., & Zhang, R. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33013714 · Cited by 272
FakeSpotter: A Simple yet Robust Baseline for Spotting AI-Synthesized Fake Faces
Wang, R., Juefei-Xu, F., Ma, L., Xie, X., Huang, Y., Wang, J., & Liu, Y. (2020) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2020/476 · Cited by 313
Azam, Z., Islam, M. M., & Huda, M. N. (2023) · IEEE Access · doi:10.1109/access.2023.3296444 · Cited by 265
X-ModalNet: A semi-supervised deep cross-modal network for classification of remote sensing data
Hong, D., Yokoya, N., Xia, G.-S., Chanussot, J., & Zhu, X. X. (2020) · ISPRS Journal of Photogrammetry and Remote Sensing · doi:10.1016/j.isprsjprs.2020.06.014 · Cited by 259
Multiplicative Normalizing Flows for Variational Bayesian Neural NetworksPreprint
Louizos, C., & Welling, M. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1703.01961 · Cited by 316
Transferable Adversarial Perturbations
Zhou, W., Hou, X., Chen, Y., Tang, M., Huang, X., Gan, X., & Yang, Y. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-01264-9_28 · Cited by 267
Adversarial machine learning in Network Intrusion Detection Systems
Alhajjar, E., Maxwell, P., & Bastian, N. D. (2021) · Expert Systems with Applications · doi:10.1016/j.eswa.2021.115782 · Cited by 255
Benchmarking Adversarial Robustness on Image Classification
Dong, Y., Fu, Q.-A., Yang, X. F., Pang, T., Su, H., Xiao, Z., & Zhu, J. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00040 · Cited by 292
Applications of Multi-Agent Reinforcement Learning in Future Internet: A Comprehensive Survey
Li, T., Zhu, K., Luong, N. C., Niyato, D. T., Wu, Q., Zhang, Y., & Chen, B. (2022) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2022.3160697 · Cited by 281
The neuroconnectionist research programme
Doerig, A., Sommers, R. P., Seeliger, K., Richards, B., Ismael, J., Lindsay, G. W., Kording, K. P., Konkle, T., van Gerven, M. A. J., Kriegeskorte, N., et al. (2023) · Nature Reviews Neuroscience · doi:10.1038/s41583-023-00705-w · Cited by 233
Enhancing Adversarial Example Transferability With an Intermediate Level Attack
Huang, Q., Katsman, I., Gu, Z., He, H., Belongie, S., & Lim, S.-N. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00483 · Cited by 274
Applications of artificial intelligence in dentistry: A comprehensive review
Carrillo‐Pérez, F., Pecho, Ó. E., Morales, J. C., Paravina, R. D., Bona, Á. D., Ghinea, R. I., Pulgar, R., Gómez, M. D. M. P., & Herrera, L. J. (2021) · Journal of Esthetic and Restorative Dentistry · doi:10.1111/jerd.12844 · Cited by 277
Understanding Distributed Poisoning Attack in Federated Learning
Cao, D., Chang, S., Lin, Z., Liu, G., & Sun, D. (2019) · 2019 IEEE 25th International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads47876.2019.00042 · Cited by 285
The Fallacy of AI Functionality
Raji, I. D., Kumar, I. E., Horowitz, A., & Selbst, A. (2022) · 2022 ACM Conference on Fairness Accountability and Transparency · doi:10.1145/3531146.3533158 · Cited by 251
Reachability Analysis of Deep Neural Networks with Provable Guarantees
Ruan, W., Huang, X., & Kwiatkowska, M. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/368 · Cited by 250
Pathologies of Neural Models Make Interpretations Difficult
Feng, S., Wallace, E., Grissom, A., Iyyer, M., Rodríguez, P., & Boyd-Graber, J. L. (2018) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d18-1407 · Cited by 296
Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems
Doan, B. G., Abbasnejad, E., & Ranasinghe, D. C. (2020) · Annual Computer Security Applications Conference · doi:10.1145/3427228.3427264 · Cited by 263
The challenge of crafting intelligible intelligence
Weld, D. S., & Bansal, G. (2019) · Communications of the ACM · doi:10.1145/3282486 · Cited by 253
“visual features from a network pre-trained on ImageNet [6], our model also includes a Þne-grained recognition pipeline to produce strong image features [3]. Like many contemporary description models [7,8,9,10,11], our model learns to generate a sequence of words using an LSTM [12]. However, we design a novel loss func…”
MethodVulnerability of Deep Reinforcement Learning to Policy Induction Attacks
Behzadan, V., & Munir, A. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-62416-7_19 · Cited by 247
Adversarial Examples for Generative Models
Kos, J., Fischer, I., & Song, D. X. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00014 · Cited by 275
Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses
Rony, J., Hafemann, L. G., Oliveira, L. S., Ayed, I. B., Sabourin, R., & Granger, É. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00445 · Cited by 263
Var-CNN: A Data-Efficient Website Fingerprinting Attack Based on Deep Learning
Bhat, S., Lu, D., Kwon, A., & Devadas, S. (2019) · Proceedings on Privacy Enhancing Technologies · doi:10.2478/popets-2019-0070 · Cited by 280
Physically Realizable Adversarial Examples for LiDAR Object Detection
Tu, J., Ren, M., Manivasagam, S., Liang, M., Yang, B., Du, R., Cheng, F., & Urtasun, R. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01373 · Cited by 263
Clean-Label Backdoor Attacks on Video Recognition Models
Zhao, S., Ma, X., Zheng, X., Bailey, J., Chen, J., & Jiang, Y. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01445 · Cited by 247
Assuring the Machine Learning Lifecycle: Desiderata, Methods, and Challenges
Ashmore, R., Calinescu, R., & Paterson, C. (2022) · ACM Computing Surveys · doi:10.1145/3453444 · Cited by 256
Morota, G., Ventura, R. V., Silva, F. F. E., Koyama, M., & Fernando, S. C. (2018) · Journal of Animal Science · doi:10.1093/jas/sky014 · Cited by 245
Robustness via Curvature Regularization, and Vice Versa
Moosavi-Dezfooli, S.-M., Fawzi, A., Uesato, J., & Frossard, P. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00929 · Cited by 245
Rouhani, B. D., Chen, H., & Koushanfar, F. (2019) · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) · doi:10.1145/3297858.3304051 · Cited by 261
NIC: Detecting Adversarial Samples with Neural Network Invariant Checking
Ma, S., Liu, Y., Tao, G., Lee, W., & Zhang, X. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23415 · Cited by 252
Chen, H., Li, C., Wang, G., Li, X., Rahaman, M. M., Sun, H., Hu, W., Li, Y., Liu, W., Sun, C., et al. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.108827 · Cited by 262
Integrating Machine Learning with Human Knowledge
Deng, C., Ji, X., Rainey, C., Zhang, J., & Lu, W. (2020) · iScience · doi:10.1016/j.isci.2020.101656 · Cited by 243
Li, C. (2019) · Chapman & Hall/CRC eBooks · doi:10.1201/9781351006620-6 · Cited by 257
Cao, Y., Wang, N., Xiao, C., Yang, D., Jin, F., Yang, R., Chen, Q. A., Liu, M., & Li, B. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00076 · Cited by 273
Liu, Y., Xie, Y., & Srivastava, A. (2017) · 2017 IEEE International Conference on Computer Design (ICCD) · doi:10.1109/iccd.2017.16 · Cited by 241
Adversarial Camouflage: Hiding Physical-World Attacks With Natural Styles
Duan, R., Ma, X., Wang, Y., Bailey, J., Qin, A. K., & Yang, Y. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00108 · Cited by 258
Chen, S., Xue, M., Fan, L., Hao, S., Xu, L., Zhu, H., & Li, B. (2017) · Computers & Security · doi:10.1016/j.cose.2017.11.007 · Cited by 240
Domain generalization for rotating machinery fault diagnosis: A survey
Xiao, Y., Shao, H., Yan, S., Wang, J., Peng, Y., & Liu, B. (2024) · Advanced Engineering Informatics · doi:10.1016/j.aei.2024.103063 · Cited by 249
Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG CompressionPreprint
Das, N., Shanbhogue, M., Chen, S.-T., Hohman, F., Chen, L., Kounavis, M. E., & Chau, D. H. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1705.02900 · Cited by 351
Adversarial Dropout RegularizationPreprint
Saito, K., Ushiku, Y., Harada, T., & Saenko, K. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1711.01575 · Cited by 263
Adversarial Examples: Opportunities and Challenges
Zhang, J., & Li, C. (2019) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2019.2933524 · Cited by 251
FewRel 2.0: Towards More Challenging Few-Shot Relation Classification
Gao, T., Han, X., Zhu, H., Liu, Z., Li, P., Sun, M., & Zhou, J. (2019) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d19-1649 · Cited by 246
The Stable Signature: Rooting Watermarks in Latent Diffusion Models
Fernandez, P., Couairon, G., Jégou, H., Douze, M., & Furon, T. (2023) · 2023 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.02053 · Cited by 251
Practical Black-Box Attacks on Deep Neural Networks Using Efficient Query Mechanisms
Bhagoji, A. N., He, W., Li, B., & Song, D. X. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-01258-8_10 · Cited by 235
Miller, D. J., Xiang, Z. J., & Kesidis, G. (2020) · Proceedings of the IEEE · doi:10.1109/jproc.2020.2970615 · Cited by 246
Security and Privacy Approaches in Mixed Reality
Guzman, J. A. D., Thilakarathna, K., & Seneviratne, A. P. (2019) · ACM Computing Surveys · doi:10.1145/3359626 · Cited by 259
Learning to Attack: Adversarial Transformation Networks
Baluja, S., & Fischer, I. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.11672 · Cited by 242
Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure
Feng, F., He, X., Tang, J., & Chua, T. (2019) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2019.2957786 · Cited by 248
Semi-Supervised and Unsupervised Deep Visual Learning: A Survey
Chen, Y., Mancini, M., Zhu, X., & Akata, Z. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3201576 · Cited by 257
Adversarial and Clean Data Are Not Twins
Gong, Z., & Wang, W. (2023) · International Workshop on Exploiting Artificial Intelligence Techniques for Data Management (aiDM) · doi:10.1145/3593078.3593935 · Cited by 299
Adversarial Training for Relation Extraction
Wu, Y., Bamman, D., & Russell, S. (2017) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d17-1187 · Cited by 229
Deep co-training for semi-supervised image segmentation
Peng, J., Estrada, G., Pedersoli, M., & Desrosiers, C. (2020) · Pattern Recognition · doi:10.1016/j.patcog.2020.107269 · Cited by 235
Enhancing robustness of machine learning systems via data transformations
Bhagoji, A. N., Cullina, D., Sitawarin, C., & Mittal, P. (2018) · Conference on Information Sciences and Systems · doi:10.1109/ciss.2018.8362326 · Cited by 307
Fazlyab, M., Morari, M., & Pappas, G. J. (2020) · IEEE Transactions on Automatic Control · doi:10.1109/tac.2020.3046193 · Cited by 250
Robust Neural Machine Translation with Doubly Adversarial Inputs
Cheng, Y., Jiang, L., & Macherey, W. (2019) · Annual Meeting of the Association for Computational Linguistics · doi:10.18653/v1/p19-1425 · Cited by 280
Jailbreaking Black Box Large Language Models in Twenty Queries
Chao, P., Robey, A., Dobriban, E., Hassani, H., Pappas, G. J., & Wong, E. (2025) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml64287.2025.00010 · Cited by 1,298
Unveiling the potential of Graph Neural Networks for network modeling and optimization in SDN
Rusek, K., Suárez‐Varela, J., Mestres, A., Barlet‐Ros, P., & Cabellos‐Aparicio, A. (2019) · Symposium on SDN Research · doi:10.1145/3314148.3314357 · Cited by 241
Certified Robustness to Adversarial Word Substitutions
Jia, R., Raghunathan, A., Göksel, K., & Liang, P. (2019) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d19-1423 · Cited by 225
Towards Robust Vision Transformer
Mao, X., Qi, G., Chen, Y., Li, X., Duan, R., Ye, S., He, Y., & Xue, H. (2022) · 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr52688.2022.01173 · Cited by 224
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
