The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 301–400 of 1,082
M2m: Imbalanced Classification via Major-to-Minor Translation
Kim, J., Jeong, J., & Shin, J. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01391 · Cited by 225
Capra, M., Bussolino, B., Marchisio, A., Masera, G., Martina, M., & Shafique, M. (2020) · IEEE Access · doi:10.1109/access.2020.3039858 · Cited by 244
Generalizable Data-Free Objective for Crafting Universal Adversarial Perturbations
Mopuri, K. R., Ganeshan, A., & Babu, R. V. (2018) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2018.2861800 · Cited by 228
Disentangling Adversarial Robustness and Generalization
Stutz, D., Hein, M., & Schiele, B. (2019) · 2019 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2019.00714 · Cited by 223
SparseFool: A Few Pixels Make a Big Difference
Modas, A., Moosavi-Dezfooli, S.-M., & Frossard, P. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00930 · Cited by 224
Deep Convolutional Neural Networks for Predominant Instrument Recognition in Polyphonic Music
Han, Y., Kim, J., & Lee, K. (2016) · IEEE/ACM Transactions on Audio Speech and Language Processing · doi:10.1109/taslp.2016.2632307 · Cited by 231
Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World
Wang, J., Liu, A., Yin, Z., Liu, S., Tang, S., & Liu, X. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00846 · Cited by 238
Yan, P., Abdulkadir, A., Luley, P.-P., Rosenthal, M., Schatte, G. A., Grewe, B. F., & Stadelmann, T. (2024) · IEEE Access · doi:10.1109/access.2023.3349132 · Cited by 256
Transferable Adversarial Attacks for Image and Video Object Detection
Wei, X., Liang, S., Chen, N., & Cao, X. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/134 · Cited by 274
Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples
Cheng, M., Yi, J., Chen, P., Zhang, H., & Hsieh, C. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.5767 · Cited by 218
An Overview of Hardware Security and Trust: Threats, Countermeasures, and Design Tools
Hu, W., Chang, C.-H., Sengupta, A., Bhunia, S., Kastner, R., & Li, H. H. (2020) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2020.3047976 · Cited by 236
On the Robustness of Vision Transformers to Adversarial Examples
Mahmood, K., Mahmood, R., & van Dijk, M. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00774 · Cited by 218
Image Super-Resolution as a Defense Against Adversarial Attacks
Mustafa, A., Khan, S. H., Hayat, M., Shen, J., & Shao, L. (2019) · IEEE Transactions on Image Processing · doi:10.1109/tip.2019.2940533 · Cited by 224
Defense Against Universal Adversarial Perturbations
Akhtar, N., Liu, J., & Mian, A. S. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00357 · Cited by 224
Adversarial Machine Learning Applied to Intrusion and Malware Scenarios: A Systematic Review
Martins, N., Cruz, J. M., Cruz, T., & Abreu, P. H. (2020) · IEEE Access · doi:10.1109/access.2020.2974752 · Cited by 223
Data Lifecycle Challenges in Production Machine Learning: A Survey
Polyzotis, N., Roy, S., Whang, S. E., & Zinkevich, M. (2018) · ACM SIGMOD Record · doi:10.1145/3299887.3299891 · Cited by 214
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems
Chen, G., Chen, S., Fan, L., Du, X., Zhao, Z., Song, F., & Liu, Y. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00004 · Cited by 229
Data Augmentation for Deep Graph Learning
Ding, K., Xu, Z., Tong, H., & Liu, H. (2022) · ACM SIGKDD Explorations Newsletter · doi:10.1145/3575637.3575646 · Cited by 271
Tuncali, C. E., Fainekos, G., Ito, H., & Kapinski, J. P. (2018) · IEEE Intelligent Vehicles Symposium · doi:10.1109/ivs.2018.8500421 · Cited by 207
Distortion Agnostic Deep Watermarking
Luo, X., Zhan, R., Chang, H., Yang, F., & Milanfar, P. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01356 · Cited by 216
A Survey on Cyber–Physical Systems Security
Yu, Z., Gao, H., Cong, X., Wu, N., & Song, H. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3289625 · Cited by 235
Learning to Compose Domain-Specific Transformations for Data AugmentationPreprint
Ratner, A., Ehrenberg, H. R., Hussain, Z., Dunnmon, J., & Ré, C. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1709.01643 · Cited by 212
NEUZZ: Efficient Fuzzing with Neural Program Smoothing
She, D., Pei, K., Epstein, D., Yang, J., Ray, B., & Jana, S. (2019) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2019.00052 · Cited by 254
When Machine Learning Meets Privacy in 6G: A Survey
Sun, Y., Liu, J., Wang, J., Cao, Y., & Kato, N. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3011561 · Cited by 211
Neural Network Inversion in Adversarial Setting via Background Knowledge Alignment
Yang, Z., Zhang, J., Chang, E., & Liang, Z. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3354261 · Cited by 274
Bayesian Graph Convolutional Neural Networks for Semi-Supervised Classification
Zhang, Y., Pal, S., Coates, M., & Üstebay, D. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33015829 · Cited by 212
Robust Deep Reinforcement Learning with Adversarial Attacks
Pattanaik, A., Tang, Z., Liu, S., Bommannan, G., & Chowdhary, G. V. (2018) · Adaptive Agents and Multi-Agents Systems · doi:10.65109/rnct3583 · Cited by 297
Perturbation-based methods for explaining deep neural networks: A survey
Ivanovs, M., Kadiķis, R., & Ozols, K. (2021) · Pattern Recognition Letters · doi:10.1016/j.patrec.2021.06.030 · Cited by 235
Large language models (LLM) and ChatGPT: what will the impact on nuclear medicine be?
Alberts, I. L., Mercolli, L., Pyka, T., Prenosil, G., Shi, K., Rominger, A., & Afshar-Oromieh, A. (2023) · European Journal of Nuclear Medicine and Molecular Imaging · doi:10.1007/s00259-023-06172-w · Cited by 207
Label-Only Membership Inference AttacksPreprint
Choquette-Choo, C. A., Tramèr, F., Carlini, N., & Papernot, N. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.14321 · Cited by 229
On testing machine learning programs
Braiek, H. B., & Khomh, F. (2020) · Journal of Systems and Software · doi:10.1016/j.jss.2020.110542 · Cited by 226
Analyzing Overfitting Under Class Imbalance in Neural Networks for Image Segmentation
Li, Z., Kamnitsas, K., & Glocker, B. (2020) · IEEE Transactions on Medical Imaging · doi:10.1109/tmi.2020.3046692 · Cited by 212
Adversarial Deep Learning for Robust Detection of Binary Encoded Malware
Al-Dujaili, A., Huang, A., Hemberg, E., & O’Reilly, U.-M. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00020 · Cited by 206
Salvato, E., Fenu, G., Medvet, E., & Pellegrino, F. A. (2021) · IEEE Access · doi:10.1109/access.2021.3126658 · Cited by 200
“The agent uses a curriculum learning approach [91], in which ξ (cid:48) , υ (cid:48) ( k ) , and ζ (cid:48) ( k ) alternately assume the form of isometrically scaled versions of Fast Gradient Sign Method (FGSM) [92].”
MethodThe Robustness of Deep Networks: A Geometrical Perspective
Fawzi, A., Moosavi-Dezfooli, S.-M., & Frossard, P. (2017) · IEEE Signal Processing Magazine · doi:10.1109/msp.2017.2740965 · Cited by 200
TBT: Targeted Neural Network Attack With Bit Trojan
Rakin, A. S., He, Z., & Fan, D. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01321 · Cited by 213
Adversarial Training Towards Robust Multimedia Recommender System
Tang, J., Du, X., He, X., Yuan, F., Tian, Q., & Chua, T. (2019) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2019.2893638 · Cited by 197
Intelligent financial fraud detection practices in post-pandemic era
Zhu, X., Ao, X., Qin, Z., Chang, Y., Liu, Y., He, Q., & Li, J. (2021) · The Innovation · doi:10.1016/j.xinn.2021.100176 · Cited by 238
Fault injection attack on deep neural network
Liu, Y., Wei, L., Luo, B., & Xu, Q. (2017) · doi:10.1109/iccad.2017.8203770 · Cited by 199
Verifying Properties of Binarized Deep Neural Networks
Narodytska, N., Kasiviswanathan, S. P., Ryzhyk, L., Sagiv, M., & Walsh, T. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.12206 · Cited by 67
Zhang, C., Costa‐Pérez, X., & Patras, P. (2022) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2021.3137084 · Cited by 219
Trustworthy ai: A computational perspective
Liu, H., Wang, Y., Fan, W., Liu, X., Li, Y., Jain, S., Liu, Y., Jain, A., & Tang, J. (2023) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3546872 · Cited by 261
Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples
Hussain, S., Neekhara, P., Jere, M., Koushanfar, F., & McAuley, J. (2021) · 2021 IEEE Winter Conference on Applications of Computer Vision (WACV) · doi:10.1109/wacv48630.2021.00339 · Cited by 204
Human Uncertainty Makes Classification More Robust
Peterson, J., Battleday, R., Griffiths, T., & Russakovsky, O. (2019) · 2019 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00971 · Cited by 196
Sparse and Imperceivable Adversarial Attacks
Croce, F., & Hein, M. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00482 · Cited by 206
Multiobjective Evolutionary Design of Deep Convolutional Neural Networks for Image Classification
Lu, Z., Whalen, I., Dhebar, Y., Deb, K., Goodman, E. D., Banzhaf, W., & Boddeti, V. N. (2020) · IEEE Transactions on Evolutionary Computation · doi:10.1109/tevc.2020.3024708 · Cited by 221
Han, D., Wang, Z., Zhong, Y. C., Chen, W., Yang, J., Lu, S., Shi, X., & Xia, Y. Y. (2021) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2021.3087242 · Cited by 211
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural NetworksPreprint
Fazlyab, M., Robey, A., Hassani, H., Morari, M., & Pappas, G. J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.04893 · Cited by 207
The security of machine learning in an adversarial setting: A survey
Wang, X., Li, J., Kuang, X., Tan, Y., & Li, J. (2019) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2019.03.003 · Cited by 206
Machine Learning Security: Threats, Countermeasures, and Evaluations
Xue, M., Yuan, C., Wu, H., Zhang, Y., & Liu, W. (2020) · IEEE Access · doi:10.1109/access.2020.2987435 · Cited by 215
Local Gradients Smoothing: Defense Against Localized Adversarial Attacks
Naseer, M., Khan, S., & Porikli, F. (2019) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv.2019.00143 · Cited by 193
Towards Transferable Adversarial Attack Against Deep Face Recognition
Zhong, Y., & Deng, W. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3036801 · Cited by 196
Countering Malicious DeepFakes: Survey, Battleground, and Horizon
Juefei-Xu, F., Wang, R., Huang, Y., Guo, Q., Ma, L., & Liu, Y. (2022) · International Journal of Computer Vision · doi:10.1007/s11263-022-01606-8 · Cited by 191
“Goodfellow et al. (2014a) propose the generative adversarial network (GAN) and the trained generator is able to produce meaningful examples, e.g ., handwritten numbers and human faces.”
BackgroundMethodAdversarial training for multi-context joint entity and relation extraction
Bekoulis, I., Deleu, J., Demeester, T., & Develder, C. (2018) · Ghent University Academic Bibliography (Ghent University) · Cited by 192
An Automatic Cost Learning Framework for Image Steganography Using Deep Reinforcement Learning
Tang, W., Li, B., Barni, M., Li, J., & Huang, J. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3025438 · Cited by 197
Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses
Deng, Y., Zhang, T., Lou, G., Zheng, X., Jin, J., & Han, Q. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3071405 · Cited by 203
Adversarial Attacks and Defenses for Deep-Learning-Based Unmanned Aerial Vehicles
Tian, J., Wang, B., Guo, R., Wang, Z., Cao, K., & Wang, X. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3111024 · Cited by 203
The Nooscope manifested: AI as instrument of knowledge extractivism
Pasquinelli, M., & Joler, V. (2020) · AI & Society · doi:10.1007/s00146-020-01097-6 · Cited by 190
Fast Yet Effective Machine Unlearning
Tarun, A. K., Chundawat, V. S., Mandal, M., & Kankanhalli, M. (2023) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2023.3266233 · Cited by 203
Gaurav, A., Gupta, B. B., & Panigrahi, P. K. (2022) · Enterprise Information Systems · doi:10.1080/17517575.2021.2023764 · Cited by 190
Fast Yet Effective Machine Unlearning
Tarun, A. K., Chundawat, V. S., Mandal, M., & Kankanhalli, M. (2021) · arXiv · doi:10.48550/arxiv.2111.08947 · Cited by 190
Deep learning for small and big data in psychiatry
Koppe, G., Meyer-Lindenberg, A., & Durstewitz, D. (2021) · Neuropsychopharmacology · doi:10.1038/s41386-020-0767-z · Cited by 189
Security and Privacy Issues in Intelligent Transportation Systems: Classification and Challenges
Hahn, D., Munir, A., & Behzadan, V. (2021) · IEEE Intelligent Transportation Systems Magazine · doi:10.1109/mits.2019.2898973 · Cited by 183
Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications
Flowers, B., Buehrer, R. M., & Headley, W. C. (2019) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2019.2934069 · Cited by 184
Improving the Reliability of Deep Neural Networks in NLP: A Review
Alshemali, B., & Kalita, J. K. (2019) · Knowledge-Based Systems · doi:10.1016/j.knosys.2019.105210 · Cited by 203
An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models
Deng, Y., Zheng, X., Zhang, T., Chen, C., Lou, G., & Kim, M. (2020) · IEEE International Conference on Pervasive Computing and Communications · doi:10.1109/percom45495.2020.9127389 · Cited by 197
Better Aggregation in Test-Time Augmentation
Shanmugam, D., Blalock, D. W., Balakrishnan, G., & Guttag, J. V. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00125 · Cited by 259
Stronger Data Poisoning Attacks Break Data Sanitization Defenses
Koh, P. W., Steinhardt, J., & Liang, P. (2018) · arXiv · doi:10.48550/arxiv.1811.00741 · Cited by 189
Targeted Adversarial Examples for Black Box Audio Systems
Taori, R., Kamsetty, A., Chu, B., & Vemuri, N. (2019) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2019.00016 · Cited by 190
Privacy Risks of General-Purpose Language Models
Pan, X., Zhang, M., Ji, S., & Yang, M. (2020) · 2020 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp40000.2020.00095 · Cited by 188
Contextualized Perturbation for Textual Adversarial Attack
Li, D., Zhang, Y., Peng, H., Chen, L., Brockett, C., Sun, M., & Dolan, B. (2021) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/2021.naacl-main.400 · Cited by 228
Stronger data poisoning attacks break data sanitization defenses
Koh, P. W., Steinhardt, J., & Liang, P. (2021) · Machine Learning · doi:10.1007/s10994-021-06119-y · Cited by 257
Anomalous Example Detection in Deep Learning: A Survey
Bulusu, S., Kailkhura, B., Li, B., Varshney, P. K., & Song, D. X. (2020) · IEEE Access · doi:10.1109/access.2020.3010274 · Cited by 220
Are Labels Required for Improving Adversarial Robustness?Preprint
Uesato, J., Alayrac, J.-B., Huang, P.-S., Stanforth, R., Fawzi, A., & Kohli, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.13725 · Cited by 207
Osadchy, M., Hernandez-Castro, J. C., Gibson, S. J., Dunkelman, O., & Pérez‐Cabo, D. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2718479 · Cited by 191
Liu, S., Chen, P., Kailkhura, B., Zhang, G., Hero, A. O., & Varshney, P. K. (2020) · IEEE Signal Processing Magazine · doi:10.1109/msp.2020.3003837 · Cited by 235
A Unified Gradient Regularization Family for Adversarial Examples
Lyu, C., Huang, K., & Liang, H. (2015) · Proceedings · doi:10.1109/icdm.2015.84 · Cited by 192
Transferring Robustness for Graph Neural Network Against Poisoning Attacks
Tang, X., Li, Y., Sun, Y., Yao, H., Mitra, P., & Wang, S. (2020) · ACM International Conference on Web Search and Data Mining (WSDM) · doi:10.1145/3336191.3371851 · Cited by 197
Adversarial example detection for DNN models: a review and experimental comparison
Aldahdooh, A., Hamidouche, W., Fezza, S. A., & Olivier Déforges, A. (2022) · Artificial Intelligence Review · doi:10.1007/s10462-021-10125-w · Cited by 206
Are Adversarial Examples Inevitable?Preprint
Shafahi, A., Huang, W., Studer, C., Feizi, S., & Goldstein, T. (2018) · arXiv (Cornell University) · doi:10.3929/ethz-b-000460350 · Cited by 255
Naturalistic Physical Adversarial Patch for Object Detectors
Hu, Y.-C.-T., Chen, J.-C., Kung, B.-H., Hua, K., & Tan, D. S. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00775 · Cited by 206
Robust Audio Adversarial Example for a Physical Attack
Yakura, H., & Sakuma, J. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/741 · Cited by 222
Defending network intrusion detection systems against adversarial evasion attacks
Pawlicki, M., Choraś, M., & Kozik, R. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2020.04.013 · Cited by 192
Learning to Protect Communications with Adversarial Neural Cryptography
Abadi, M., & Andersen, D. G. (2016) · arXiv · doi:10.48550/arxiv.1610.06918 · Cited by 182
Detecting the Unexpected via Image Resynthesis
Lis, K., Nakka, K. K., Fua, P., & Salzmann, M. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00224 · Cited by 192
Feature Space Perturbations Yield More Transferable Adversarial Examples
Inkawhich, N., Wen, W., Li, H. H., & Chen, Y. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00723 · Cited by 196
Retzlaff, C. O., Das, S., Wayllace, C., Mousavi, P., Afshari, M. P., Yang, T., Saranti, A., Angerschmid, A., Taylor, M. E., & Holzinger, A. (2024) · Journal of Artificial Intelligence Research · doi:10.1613/jair.1.15348 · Cited by 224
Adversarial Machine Learning in Wireless Communications Using RF Data: A Review
Adesina, D. S., Hsieh, C.-C. G., Sagduyu, Y. E., & Qian, L. (2022) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2022.3205184 · Cited by 205
A Boundary Tilting Persepective on the Phenomenon of Adversarial ExamplesPreprint
Tanay, T., & Griffin, L. D. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1608.07690 · Cited by 180
Adversary Resistant Deep Neural Networks with an Application to Malware Detection
Wang, Q., Guo, W., Zhang, K., Ororbia, A. G., Xing, X., Liu, X., & Giles, C. L. (2017) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3097983.3098158 · Cited by 177
DroidEvolver: Self-Evolving Android Malware Detection System
Xu, K., Li, Y., Deng, R. H., Chen, K., & Xu, J. (2019) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp.2019.00014 · Cited by 179
DaST: Data-Free Substitute Training for Adversarial Attacks
Zhou, M., Wu, J., Liu, Y., Liu, S., & Zhu, C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00031 · Cited by 180
Explanation in AI and law: Past, present and future
Atkinson, K. M., Bench-Capon, T. J. M., & Bollegala, D. (2020) · Artificial Intelligence · doi:10.1016/j.artint.2020.103387 · Cited by 214
Revisiting Batch Normalization for Training Low-Latency Deep Spiking Neural Networks From Scratch
Kim, Y., & Panda, P. (2021) · Frontiers in Neuroscience · doi:10.3389/fnins.2021.773954 · Cited by 189
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers
Liu, D., Yu, R., & Su, H. (2019) · Proceedings - International Conference on Image Processing · doi:10.1109/icip.2019.8803770 · Cited by 185
A survey of Deep Neural Network watermarking techniques
Li, Y., Wang, H., & Barni, M. (2021) · Neurocomputing · doi:10.1016/j.neucom.2021.07.051 · Cited by 177
An Empirical Survey of Data Augmentation for Limited Data Learning in NLP
Chen, J., Tam, D., Raffel, C., Bansal, M., & Yang, D. (2023) · Transactions of the Association for Computational Linguistics · doi:10.1162/tacl_a_00542 · Cited by 240
Ten years of generative adversarial nets (GANs): a survey of the state-of-the-art
Chakraborty, T., S, U. R. K., Naik, S. M., Panja, M., & Manvitha, B. (2024) · Machine Learning Science and Technology · doi:10.1088/2632-2153/ad1f77 · Cited by 229
Exploring the space of adversarial images
Tabacof, P., & Junior, E. A. D. V. (2016) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2016.7727230 · Cited by 188
Lightweight Probabilistic Deep Networks
Gast, J., & Roth, S. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00355 · Cited by 178
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
