The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 401–500 of 1,082
An Adversarial Approach for Explainable AI in Intrusion Detection Systems
Marino, D., Wickramasinghe, C. S., & Manic, M. (2018) · Annual Conference of the IEEE Industrial Electronics Society (IECON) · doi:10.1109/iecon.2018.8591457 · Cited by 187
A polarization fusion network with geometric feature embedding for SAR ship classification
Zhang, T., & Zhang, X. (2021) · Pattern Recognition · doi:10.1016/j.patcog.2021.108365 · Cited by 183
DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Models
Sha, Z., Li, Z., Yu, N., & Zhang, Y. (2023) · Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3576915.3616588 · Cited by 175
Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification
Cao, X., & Gong, N. Z. (2017) · Annual Computer Security Applications Conference · doi:10.1145/3134600.3134606 · Cited by 190
Model-Reuse Attacks on Deep Learning Systems
Ji, Y., Zhang, X., Ji, S., Luo, X., & Wang, T. (2018) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3243734.3243757 · Cited by 173
AnonymousNet: Natural Face De-Identification With Measurable Privacy
Li, T., & Lin, L. (2019) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2019.00013 · Cited by 175
Improving Adversarial Transferability via Neuron Attribution-based Attacks
Zhang, J., Wu, W., Huang, J.-T., Huang, Y., Wang, W., Su, Y., & Lyu, M. R.-T. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01457 · Cited by 191
3D Semi-Supervised Learning with Uncertainty-Aware Multi-View Co-Training
Xia, Y., Liu, F., Yang, D., Cai, J., Yu, L., Zhu, Z., Xu, D., Yuille, A., & Roth, H. (2020) · 2020 IEEE Winter Conference on Applications of Computer Vision (WACV) · doi:10.1109/wacv45572.2020.9093608 · Cited by 170
ResNet or DenseNet? Introducing Dense Shortcuts to ResNet
Zhang, C., Benz, P., Argaw, D. M., Lee, S., Kim, J., Rameau, F., Bazin, J.-C., & Kweon, I. S. (2021) · 2021 IEEE Winter Conference on Applications of Computer Vision (WACV) · doi:10.1109/wacv48630.2021.00359 · Cited by 174
Rethinking Feature Distribution for Loss Functions in Image Classification
Wan, W., Zhong, Y., Li, T., & Chen, J. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00950 · Cited by 181
Speech Technology for Healthcare: Opportunities, Challenges, and State of the Art
Latif, S., Qadir, J., Qayyum, A., Usama, M., & Younis, M. S. (2020) · IEEE Reviews in Biomedical Engineering · doi:10.1109/rbme.2020.3006860 · Cited by 189
Adversarial Machine Learning-Industry Perspectives
Kumar, R. S. S., Nystrom, M., Lambert, J., Marshall, A. D., Goertzel, M., Comissoneru, A., Swann, M., & Xia, S. (2020) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw50608.2020.00028 · Cited by 223
Spherical Fractal Convolutional Neural Networks for Point Cloud Recognition
Rao, Y., Lu, J., & Zhou, J. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00054 · Cited by 175
Boosting the Transferability of Adversarial Samples via Attention
Wu, W., Su, Y., Chen, X., Zhao, S., King, I., Lyu, M. R.-T., & Tai, Y. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00124 · Cited by 179
Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection
Li, D., & Li, Q. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3003571 · Cited by 178
Survey of Deep Representation Learning for Speech Emotion Recognition
Latif, S., Rana, R. K., Khalifa, S., Jurdak, R., Qadir, J., & Schuller, B. W. (2021) · IEEE Transactions on Affective Computing · doi:10.1109/taffc.2021.3114365 · Cited by 193
Intrusion detection based on Machine Learning techniques in computer networks
Dina, A. S., & Manivannan, D. (2021) · Internet of Things · doi:10.1016/j.iot.2021.100462 · Cited by 201
DeepCT: Tomographic Combinatorial Testing for Deep Learning Systems
Ma, L., Juefei-Xu, F., Xue, M., Li, B., Li, L., Liu, Y., & Zhao, J. (2019) · IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) · doi:10.1109/saner.2019.8668044 · Cited by 172
Shakedrop Regularization for Deep Residual Learning
Yamada, Y., Iwamura, M., Akiba, T., & Kise, K. (2019) · IEEE Access · doi:10.1109/access.2019.2960566 · Cited by 196
Towards Robust Neural Machine Translation
Cheng, Y., Tu, Z., Meng, F.-D., Zhai, J.-J., & Liu, Y. (2018) · Annual Meeting of the Association for Computational Linguistics · doi:10.18653/v1/p18-1163 · Cited by 167
A Survey of Algorithmic Recourse: Contrastive Explanations and Consequential Recommendations
Karimi, A.-H., Barthe, G., Schölkopf, B., & Valera, I. (2023) · ACM Computing Surveys · doi:10.1145/3527848 · Cited by 301
Rasool, R. U., Ahmad, H. F., Rafique, W., Qayyum, A., & Qadir, J. (2022) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2022.103332 · Cited by 177
Interpretable Adversarial Perturbation in Input Embedding Space for Text
Sato, M., Suzuki, J., Shindo, H., & Matsumoto, Y. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/601 · Cited by 184
DUP-Net: Denoiser and Upsampler Network for 3D Adversarial Point Clouds Defense
Zhou, H., Chen, K., Zhang, W., Fang, H., Zhou, W., & Yu, N. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00205 · Cited by 174
QEBA: Query-Efficient Boundary-Based Blackbox Attack
Li, H., Xu, X., Zhang, X., Yang, S., & Li, B. H. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00130 · Cited by 174
Leike, J., Martic, M., Krakovna, V., Ortega, P. A., Everitt, T., Lefrancq, A., Orseau, L., & Legg, S. (2017) · arXiv · doi:10.48550/arxiv.1711.09883 · Cited by 240
Unravelling Robustness of Deep Learning Based Face Recognition Against Adversarial Attacks
Goswami, G., Ratha, N., Agarwal, A., Singh, R., & Mayank Vatsa, A. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.12341 · Cited by 171
Rudd, E. M., Rozsa, A., Günther, M., & Boult, T. E. (2016) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2016.2636078 · Cited by 167
Deep-Learning for Radar: A Survey
Geng, Z., He, Y. L., Zhang, J., & Zhu, D. (2021) · IEEE Access · doi:10.1109/access.2021.3119561 · Cited by 182
DiffuRec: A Diffusion Model for Sequential Recommendation
Li, Z., Sun, A., & Li, C. (2023) · ACM Transactions on Information Systems · doi:10.1145/3631116 · Cited by 224
The Information Bottleneck Problem and its Applications in Machine Learning
Goldfeld, Z., & Polyanskiy, Y. (2020) · IEEE Journal on Selected Areas in Information Theory · doi:10.1109/jsait.2020.2991561 · Cited by 180
Towards Large Yet Imperceptible Adversarial Image Perturbations With Perceptual Color Distance
Zhao, Z., Liu, Z., & Larson, M. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00112 · Cited by 172
Natural Attack for Pre-trained Models of Code
Yang, Z., Shi, J., He, J., & Lo, D. (2022) · Proceedings of the 44th International Conference on Software Engineering · doi:10.1145/3510003.3510146 · Cited by 166
Zhong, Y., Liu, X., Zhai, D., Jiang, J., & Ji, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01491 · Cited by 180
On the failings of Shapley values for explainability
Huang, X., & Marques-Silva, J. P. (2024) · International Journal of Approximate Reasoning · doi:10.1016/j.ijar.2023.109112 · Cited by 206
Adversarial Dropout for Supervised and Semi-Supervised Learning
Park, S., Park, J.-K., Shin, S., & Moon, I. (2018) · AAAI Publications (The Association for the Advancement of Artificial Intelligence (AAAI)) · doi:10.1609/aaai.v32i1.11634 · Cited by 167
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing
Wang, J., Dong, G., Sun, J., Wang, X., & Zhang, P. (2019) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse.2019.00126 · Cited by 175
When NAS Meets Robustness: In Search of Robust Architectures Against Adversarial Attacks
Guo, M., Yang, Y., Xu, R., Liu, Z., & Lin, D. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00071 · Cited by 169
Liang, W., Hu, Y., Zhou, X., Pan, Y. F., & Wang, K. I. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3116085 · Cited by 169
LAS-AT: Adversarial Training with Learnable Attack Strategy
Jia, X., Zhang, Y., Wu, B., Ma, K., Wang, J., & Cao, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01304 · Cited by 168
SpaText: Spatio-Textual Representation for Controllable Image Generation
Avrahami, O., Hayes, T., Gafni, O., Gupta, S., Taigman, Y., Parikh, D., Lischinski, D., Fried, O., & Yin, X. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01762 · Cited by 202
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data
Correia-Silva, J. R., Berriel, R. F., Badue, C. S., Souza, A. F. D., & Oliveira-Santos, T. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489592 · Cited by 168
Wang, Y., Sun, T. S., Li, S., Yuan, X., Ni, W., Hossain, E., & Poor, H. V. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3319492 · Cited by 230
Adversarial Manipulation of Deep RepresentationsPreprint
Sabour, S., Cao, Y., Faghri, F., & Fleet, D. J. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1511.05122 · Cited by 220
Physical Adversarial Attacks Against End-to-End Autoencoder Communication Systems
Sadeghi, M., & Larsson, E. G. (2019) · IEEE Communications Letters · doi:10.1109/lcomm.2019.2901469 · Cited by 170
Artificial Intelligence Crime: An Overview of Malicious Use and Abuse of AI
Blauth, T. F., Gstrein, O. J., & Zwitter, A. (2022) · IEEE Access · doi:10.1109/access.2022.3191790 · Cited by 228
Can AI-Generated Text be Reliably Detected?
Sadasivan, V. S., Kumar, A., Balasubramanian, S., Wang, W., & Feizi, S. (2023) · arXiv · doi:10.48550/arxiv.2303.11156 · Cited by 810
“These approaches that rely on a neural network for their detection, can be vulnerable to adversarial and poisoning attacks [18, 19, 20, 21].”
BackgroundConvNets and ImageNet Beyond Accuracy: Understanding Mistakes and Uncovering Biases
Stock, P., & Cissé, M. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-01231-1_31 · Cited by 185
Adversarial machine learning :
Vassilev, A., Oprea, A., Fordyce, A. J., & Anderson, H. S. (2024) · doi:10.6028/nist.ai.100-2e2023 · Cited by 230
Learning Universal Adversarial Perturbations with Generative Models
Hayes, J., & Danezis, G. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00015 · Cited by 186
APE-GAN: Adversarial Perturbation Elimination with GAN
Jin, G., Shen, S., Zhang, D., Dai, F., & Zhang, Y. (2019) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp.2019.8683044 · Cited by 165
AdvFaces: Adversarial Face Synthesis
Deb, D., Zhang, J., & Jain, A. K. (2020) · IEEE International Joint Conference on Biometrics (IJCB) · doi:10.1109/ijcb48548.2020.9304898 · Cited by 167
Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger
Qi, F., Li, M., Chen, Y., Zhang, Z., Liu, Z., Wang, Y., & Sun, M. (2021) · doi:10.18653/v1/2021.acl-long.37 · Cited by 255
Explainable artificial intelligence for cybersecurity: a literature survey
Charmet, F., Tanuwidjaja, H. C., Ayoubi, S., Gimenez, P.-F., Han, Y., Jmila, H., Blanc, G., Takahashi, T., & Zhang, Z. (2022) · Annals of Telecommunications · doi:10.1007/s12243-022-00926-7 · Cited by 167
Artificial Intelligence in Nephrology: Core Concepts, Clinical Applications, and Perspectives
Niel, O., & Bastard, P. (2019) · American Journal of Kidney Diseases · doi:10.1053/j.ajkd.2019.05.020 · Cited by 165
Survey of machine learning methods for detecting false data injection attacks in power systems
Sayghe, A., Hu, Y., Zografopoulos, I., Liu, X., Dutta, R. G., Jin, Y., & Konstantinou, C. (2020) · IET Smart Grid · doi:10.1049/iet-stg.2020.0015 · Cited by 165
Universal adversarial attacks on deep neural networks for medical image classification
Hirano, H., Minagi, A., & Takemoto, K. (2021) · BMC Medical Imaging · doi:10.1186/s12880-020-00530-y · Cited by 162
WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification
Li, Q., Shen, L., Guo, S., & Lai, Z. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3101395 · Cited by 167
Dai, E., Zhao, T., Zhu, H., Xu, J., Guo, Z., Liu, H., Tang, J., & Wang, S. (2024) · Machine Intelligence Research · doi:10.1007/s11633-024-1510-8 · Cited by 257
Adversarial Perturbations Fool Deepfake Detectors
Gandhi, A., & Jain, S. (2020) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn48605.2020.9207034 · Cited by 158
Towards Robust Pattern Recognition: A Review
Zhang, X.-Y., Liu, C., & Suen, C. Y. (2020) · Proceedings of the IEEE · doi:10.1109/jproc.2020.2989782 · Cited by 172
Jin, J., Yu, Y., Wang, R., Zeng, X., Pang, C., Jiang, Y., Li, Z., Dai, Y., Su, R., Zou, Q., et al. (2022) · Genome biology · doi:10.1186/s13059-022-02780-1 · Cited by 154
Enabling AI in Future Wireless Networks: A Data Life Cycle Perspective
Nguyen, D. C., Cheng, P., Ding, M., Lopez-Perez, D., Pathirana, P. N., Li, J., Seneviratne, A., Li, Y., & Poor, H. V. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3024783 · Cited by 160
A review of generative adversarial networks and its application in cybersecurity
Yinka-Banjo, C., & Ugot, O.-A. (2019) · Artificial Intelligence Review · doi:10.1007/s10462-019-09717-4 · Cited by 164
Barrage of Random Transforms for Adversarially Robust Defense
Raff, E., Sylvester, J., Forsyth, S., & McLean, M. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00669 · Cited by 157
Towards Adversarially Robust Object Detection
Zhang, H., & Wang, J. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00051 · Cited by 157
Quantum noise protects quantum classifiers against adversaries
Du, Y., Hsieh, M.-H., Liu, T., Tao, D., & Liu, N. (2021) · Physical Review Research · doi:10.1103/physrevresearch.3.023153 · Cited by 173
MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation
Kariyappa, S., Prakash, A., & Qureshi, M. K. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01360 · Cited by 157
Ferrag, M. A., Friha, O., Kantarcı, B., Tihanyi, N., Cordeiro, L. C., Debbah, M. A., Hamouda, D., Al-Hawawreh, M. S., & Choo, K. R. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3317242 · Cited by 185
Vulnerability of Machine Learning Approaches Applied in IoT-Based Smart Grid: A Review
Zhang, Z., Liu, M., Sun, M., Deng, R., Cheng, P., Niyato, D. T., Chow, M., & Chen, J. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3349381 · Cited by 170
Towards Crafting Text Adversarial SamplesPreprint
Samanta, S., & Mehta, S. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1707.02812 · Cited by 227
Attention-Driven Loss for Anomaly Detection in Video Surveillance
Zhou, J. T., Zhang, L., Fang, Z., Du, J., Peng, X., & Xiao, Y. (2019) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2019.2962229 · Cited by 157
Robust Image Forgery Detection Against Transmission Over Online Social Networks
Wu, H., Zhou, J., Tian, J., Liu, J., & Qiao, Y. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3144878 · Cited by 158
Open-world Machine Learning: Applications, Challenges, and Opportunities
Parmar, J., Chouhan, S. S., Raychoudhury, V., & Rathore, S. S. (2022) · ACM Computing Surveys · doi:10.1145/3561381 · Cited by 163
Karimi, D., Nir, G., Fazli, L., Black, P. C., Goldenberg, L., & Salcudean, S. E. (2019) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2019.2944643 · Cited by 160
Xu, Y., Du, B., & Zhang, L. (2020) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2020.2999962 · Cited by 157
Multi-Level Logit Distillation
Jin, Y., Wang, J., & Lin, D. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.02325 · Cited by 156
Zhou, H., Li, W., Kong, Z., Guo, J., Zhang, Y., Yu, B., Zhang, L., & Liu, C. (2020) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3377811.3380422 · Cited by 157
Concepts and applications of digital twins in healthcare and medicine
Zhang, K., Zhou, H.-Y., Baptista‐Hon, D. T., Gao, Y., Liu, X., Oermann, E. K., Xu, S. H., Jin, S., Zhang, J., Sun, Z., et al. (2024) · Patterns · doi:10.1016/j.patter.2024.101028 · Cited by 185
DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model
Ling, X., Ji, S., Zou, J., Wang, J., Wu, C., Li, B., & Wang, T. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00023 · Cited by 152
Adversarial Attacks on Deep Neural Networks for Time Series Classification
Fawaz, H. I., Forestier, G., Weber, J., Idoumghar, L., & Müller, P.-A. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8851936 · Cited by 170
Robust Multilingual Part-of-Speech Tagging via Adversarial Training
Yasunaga, M., Kasai, J., & Radev, D. (2018) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/n18-1089 · Cited by 167
Deep learning: A philosophical introduction
Buckner, C. J. (2019) · Philosophy Compass · doi:10.1111/phc3.12625 · Cited by 169
Universal Adversarial Training
Shafahi, A., Najibi, M., Xu, Z., Dickerson, J. P., Davis, L. S., & Goldstein, T. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6017 · Cited by 39
PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving
Kong, Z., Guo, J., Li, A., & Liu, C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01426 · Cited by 160
Classification of Explainable Artificial Intelligence Methods through Their Output Formats
Vilone, G., & Longo, L. (2021) · Machine Learning and Knowledge Extraction · doi:10.3390/make3030032 · Cited by 182
Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity
Luo, C., Lin, Q., Xie, W., Wu, B., Xie, J., & Shen, L. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01488 · Cited by 162
Li, X. (2022) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2022.3224577 · Cited by 157
Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer
Hu, S., Liu, X., Zhang, Y., Li, M., Zhang, L. Y., Jin, H., & Wu, L. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01459 · Cited by 152
Sparse Adversarial Perturbations for Videos
Wei, X., Zhu, J., Yuan, S., & Su, H. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33018973 · Cited by 151
AI and the Future of Skills, Volume 1
OECD (2021) · Educational research and innovation · doi:10.1787/5ee71f34-en · Cited by 233
How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses
Costa, J. C., Roxo, T., Proença, H. P. M. C., & Inácio, P. R. M. (2024) · IEEE Access · doi:10.1109/access.2024.3395118 · Cited by 196
Adversarial Image Perturbation for Privacy Protection A Game Theory Perspective
Oh, S. J., Fritz, M., & Schiele, B. (2017) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2017.165 · Cited by 150
NAG: Network for Adversary Generation
Mopuri, K. R., Ojha, U., Garg, U., & Babu, R. V. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00084 · Cited by 148
Tri-net for Semi-Supervised Deep Learning
Chen, D., Wang, W., Gao, W. D., & Zhou, Z. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/278 · Cited by 150
A pan-tissue DNA-methylation epigenetic clock based on deep learning
Camillo, L. P. D. L., Lapierre, L. R., & Singh, R. (2022) · npj Aging · doi:10.1038/s41514-022-00085-y · Cited by 157
Visual Adversarial Examples Jailbreak Aligned Large Language Models
Qi, X., Huang, K., Panda, A., Henderson, P., Wang, M., & Mittal, P. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i19.30150 · Cited by 150
Wasserstein Adversarial Examples via Projected Sinkhorn Iterations
Wong, E., Schmidt, F. R., & Kolter, J. Z. (2019) · arXiv · doi:10.48550/arxiv.1902.07906 · Cited by 145
“Much of the work in adversarial examples has focused on the original (cid:96) ∞ threat model presented by Goodfellow et al. (2015), some of which also extends naturally to (cid:96) p perturbations.”
BackgroundInfluentialAdversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink
Duan, R., Mao, X., Qin, A. K., Chen, Y., Ye, S., He, Y., & Yang, Y. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01580 · Cited by 173
Decision-Focused Learning: Foundations, State of the Art, Benchmark and Future Opportunities
Mandi, J., Kotary, J., Berden, S., Mulamba, M., Víctor Bucarey, L., Guns, T., & Fioretto, F. (2024) · Journal of Artificial Intelligence Research · doi:10.1613/jair.1.15320 · Cited by 174
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
