The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 501–600 of 1,082
Comprehension-Guided Referring Expressions
Luo, R., & Shakhnarovich, G. (2017) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2017.333 · Cited by 152
Curriculum Adversarial Training
Cai, Q.-Z., Liu, C., & Song, D. X. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/520 · Cited by 185
Adversarial Texture for Fooling Person Detectors in the Physical World
Hu, Z., Huang, S., Zhu, X., Sun, F., Zhang, B., & Hu, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01295 · Cited by 161
A Survey of Adversarial Defenses and Robustness in NLP
Goyal, S., Doddapaneni, S., Khapra, M. M., & Ravindran, B. (2023) · ACM Computing Surveys · doi:10.1145/3593042 · Cited by 200
Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Driving
Dong, Y., Kang, C., Zhang, J., Zhu, Z., Wang, Y., Yang, X. P., Su, H., Wei, X., & Zhu, J. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.00105 · Cited by 181
Trustworthy Graph Neural Networks: Aspects, Methods, and Trends
Zhang, H., Wu, B. Y., Yuan, X., Pan, S., Tong, H., & Pei, J. (2024) · Proceedings of the IEEE · doi:10.1109/jproc.2024.3369017 · Cited by 205
Interpretable and Fine-Grained Visual Explanations for Convolutional Neural Networks
Wagner, J., Köhler, J. M., Gindele, T., Hetzel, L., Wiedemer, J. T., & Behnke, S. (2019) · 2019 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2019.00931 · Cited by 144
The Fishyscapes Benchmark: Measuring Blind Spots in Semantic Segmentation
Blum, H., Sarlin, P.-E., Nieto, J. I., Siegwart, R., & Cadena, C. (2021) · International Journal of Computer Vision · doi:10.1007/s11263-021-01511-6 · Cited by 163
PrivacyNet: Semi-Adversarial Networks for Multi-Attribute Face Privacy
Mirjalili, V., Raschka, S., & Ross, A. A. (2020) · IEEE Transactions on Image Processing · doi:10.1109/tip.2020.3024026 · Cited by 147
Xu, Y., Du, B., & Zhang, L. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3118977 · Cited by 150
Adversarial Robustness vs. Model Compression, or Both?
Ye, S., Xu, K., Liu, S., Cheng, H., Lambrechts, J.-H., Zhang, H., Zhou, A., Ma, K., Wang, Y., & Lin, X. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00020 · Cited by 149
Understanding Adversarial Examples From the Mutual Influence of Images and Perturbations
Zhang, C., Benz, P., Imtiaz, T., & Kweon, I. S. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01453 · Cited by 144
A Survey of On-Device Machine Learning
Dhar, S., Guo, J., Liu, J., Tripathi, S., Kurup, U., & Shah, M. (2021) · ACM Transactions on Internet of Things · doi:10.1145/3450494 · Cited by 214
AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds
Hamdi, A., Rojas, S., Thabet, A., & Ghanem, B. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58610-2_15 · Cited by 149
Scalable Verified Training for Provably Robust Image Classification
Gowal, S., Dvijotham, K., Stanforth, R., Bunel, R., Qin, C., Uesato, J., Arandjelović, R., Mann, T., & Kohli, P. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00494 · Cited by 161
FETCH: A deep-learning based classifier for fast transient classification
Agarwal, D., Aggarwal, K., Burke-Spolaor, S., Lorimer, D. R., & Garver-Daniels, N. (2020) · Monthly Notices of the Royal Astronomical Society · doi:10.1093/mnras/staa1856 · Cited by 148
Attacking Graph-based Classification via Manipulating the Graph Structure
Wang, B., & Gong, N. Z. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3354206 · Cited by 140
Su, D., Kong, H., Qiao, Y., & Sukkarieh, S. (2021) · Computers and Electronics in Agriculture · doi:10.1016/j.compag.2021.106418 · Cited by 149
Macas, M., Wu, C., & Fuertes, W. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.122223 · Cited by 175
Character Level based Detection of DGA Domain Names
Yu, B., Pan, J., Hu, J., Nascimento, A. C. A., & Cock, M. D. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489147 · Cited by 141
Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems
Abdullah, H., García, W., Peeters, C., Traynor, P., Butler, K. R. B., & Wilson, J. N. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23362 · Cited by 170
Ensemble Kalman inversion: a derivative-free technique for machine learning tasks
Kovachki, N., & Stuart, A. M. (2019) · Inverse Problems · doi:10.1088/1361-6420/ab1c3a · Cited by 152
Adversarial Attacks Beyond the Image Space
Zeng, X., Liu, C., Wang, Y.-S., Qiu, W., Xie, L., Tai, Y., Tang, C., & Yuille, A. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00443 · Cited by 140
MetaLoc: Learning to Learn Wireless Localization
Gao, J., Wu, D., Yin, F., Kong, Q., Xu, L., & Cui, S. R. (2023) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2023.3322766 · Cited by 142
Knowledge Distillation with Adversarial Samples Supporting Decision Boundary
Heo, B., Lee, M., Yun, S., & Choi, J. Y. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33013771 · Cited by 149
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks
Mustafa, A., Khan, S. H., Hayat, M., Goecke, R., Shen, J., & Shao, L. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00348 · Cited by 158
Adversarial XAI Methods in Cybersecurity
Kuppa, A., & Le‐Khac, N. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3117075 · Cited by 151
Distributionally Robust Optimization: A review on theory and applications
Lin, F., Fang, X., & Gao, Z. (2021) · Numerical Algebra Control and Optimization · doi:10.3934/naco.2021057 · Cited by 141
Wang, Z., Wang, P., Huang, L., Sun, X., & Wang, H. (2022) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2022.acl-long.491 · Cited by 143
Robust Histopathology Image Analysis: To Label or to Synthesize?
Hou, L., Agarwal, A., Samaras, D., Kurç, T., Gupta, R., & Saltz, J. H. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00873 · Cited by 144
GAN augmentation to deal with imbalance in imaging-based intrusion detection
Andresini, G., Appice, A., Rose, L., & Malerba, D. (2021) · Future Generation Computer Systems · doi:10.1016/j.future.2021.04.017 · Cited by 147
Jain, A. K., Deb, D., & Engelsma, J. J. (2021) · IEEE Transactions on Biometrics Behavior and Identity Science · doi:10.1109/tbiom.2021.3115465 · Cited by 158
Adversarially Adaptive Normalization for Single Domain Generalization
Fan, X., Wang, Q., Ke, J., Yang, F., Gong, B., & Zhou, M. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00811 · Cited by 142
Demetrio, L., Coull, S. E., Biggio, B., Lagorio, G., Armando, A., & Roli, F. (2021) · ACM Transactions on Privacy and Security · doi:10.1145/3473039 · Cited by 158
Semantics-Empowered Communications: A Tutorial-Cum-Survey
Lu, Z., Li, R., Lu, K., Chen, X., Hossain, E., Zhao, Z., & Zhang, H. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3333342 · Cited by 178
Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors
Cohen, G., Sapiro, G., & Giryes, R. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01446 · Cited by 139
AdvDrop: Adversarial Attack to DNNs by Dropping Information
Duan, R., Chen, Y., Niu, D., Yang, Y., Qin, A. K., & He, Y. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00741 · Cited by 141
How Machine Learning Changes the Nature of Cyberattacks on IoT Networks: A Survey
Bout, É., Loscrì, V., & Gallais, A. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3127267 · Cited by 150
Tran, M., Liu, M., Tran, Q., & Nguyen, T.-K. (2021) · IEEE Transactions on Instrumentation and Measurement · doi:10.1109/tim.2021.3139706 · Cited by 145
Defensive Quantization: When Efficiency Meets RobustnessPreprint
Lin, J., Gan, C., & Han, S. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1904.08444 · Cited by 190
Some Investigations on Robustness of Deep Learning in Limited Angle Tomography
Huang, Y., Würfl, T., Breininger, K., Liu, L., Lauritsch, G., & Maier, A. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-00928-1_17 · Cited by 140
Training Robust Neural Networks Using Lipschitz Bounds
Pauli, P., Koch, A., Berberich, J., Köhler, P., & Allgöwer, F. (2021) · IEEE Control Systems Letters · doi:10.1109/lcsys.2021.3050444 · Cited by 162
Cross-Domain Few-Shot Classification via Adversarial Task Augmentation
Wang, H., & Deng, Z. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/149 · Cited by 138
PyTorchFI: A Runtime Perturbation Tool for DNNs
Mahmoud, A., Aggarwal, N., Nobbe, A., Vicarte, J. R. S., Adve, S. V., Fletcher, C. W., Frosio, I., & Hari, S. K. S. (2020) · 2020 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W) · doi:10.1109/dsn-w50199.2020.00014 · Cited by 140
Fast Feature Fool: A data independent approach to universal adversarial perturbations
Mopuri, K. R., Garg, U., & Babu, R. V. (2017) · NOT FOUND REPOSITORY (Indian Institute of Science Bangalore) · doi:10.48550/arxiv.1707.05572 · Cited by 137
Adversarial Examples Against the Deep Learning Based Network Intrusion Detection Systems
Yang, K., Liu, J., Zhang, C., & Fang, Y. M. (2018) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2018.8599759 · Cited by 137
CloudLeak: Large-Scale Deep Learning Models Stealing Through Adversarial Examples
Yu, H., Yang, K., Zhang, T., Tsai, Y.-Y., Ho, T.-Y., & Jin, Y. (2020) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2020.24178 · Cited by 144
Making the Case for Safety of Machine Learning in Highly Automated Driving
Burton, S., Gauerhof, L., & Heinzemann, C. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-66284-8_1 · Cited by 137
Adversarial attacks and defenses on AI in medical imaging informatics: A survey
Kaviani, S., Han, K. J., & Sohn, I. (2022) · Expert Systems with Applications · doi:10.1016/j.eswa.2022.116815 · Cited by 148
Differential Privacy Preservation in Deep Learning: Challenges, Opportunities and Solutions
Zhao, J., Chen, Y., & Zhang, W. (2019) · IEEE Access · doi:10.1109/access.2019.2909559 · Cited by 142
Data-Free Network Quantization With Adversarial Knowledge Distillation
Choi, Y., Choi, J., El-Khamy, M., & Lee, J. (2020) · 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00363 · Cited by 135
Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification
Cheng, S., Liu, Y., Ma, S., & Zhang, X. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i2.16201 · Cited by 150
Data Hiding With Deep Learning: A Survey Unifying Digital Watermarking and Steganography
Wang, Z., Byrnes, O., Wang, H., Sun, R., Ma, C., Chen, H., Wu, Q., & Xue, M. (2023) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2023.3268950 · Cited by 183
KoDF: A Large-scale Korean DeepFake Detection Dataset
Kwon, P., You, J., Nam, G., Park, S., & Chae, G. (2021) · 2021 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01057 · Cited by 145
Towards Transferable Targeted Attack
Li, M., Deng, C. D., Li, T., Yan, J., Gao, X., & Huang, H. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00072 · Cited by 134
Threats of Adversarial Attacks in DNN-Based Modulation Recognition
Lin, Y., Zhao, H., Tu, Y., Mao, S., & Dou, Z. (2020) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom41043.2020.9155389 · Cited by 136
Threat of Adversarial Attacks on DL-Based IoT Device Identification
Bao, Z., Lin, Y., Zhang, S., Li, Z., & Mao, S. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3120197 · Cited by 138
Shaukat, K., Luo, S., & Varadharajan, V. (2022) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2022.105461 · Cited by 142
CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks
Boopathy, A., Weng, T.-W., Chen, P., Liu, S., & Daniel, L. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33013240 · Cited by 17
SoK: Certified Robustness for Deep Neural Networks
Li, L., Xie, T., & Li, B. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179303 · Cited by 180
Cooper, A. F., Moss, E., Laufer, B., & Nissenbaum, H. F. (2022) · ACM Conference on Fairness, Accountability, and Transparency (FAccT) · doi:10.1145/3531146.3533150 · Cited by 188
Deep Learning and Music Adversaries
Kereliuk, C., Sturm, B. L. T., & Larsen, J. O. (2015) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2015.2478068 · Cited by 131
Huang, D.-A., Ramanathan, V., Mahajan, D. K., Torresani, L., Paluri, M., Fei-Fei, L., & Niebles, J. C. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00769 · Cited by 133
Improving transferability of adversarial patches on face recognition with generative models
Xiao, Z., Gao, X., Fu, C., Dong, Y., Gao, W., Zhang, X., Zhou, J., & Zhu, J. (2021) · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr46437.2021.01167 · Cited by 132
Learnable Boundary Guided Adversarial Training
Cui, J., Liu, S., Wang, L., & Jia, J. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01543 · Cited by 141
Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer
Qi, F., Chen, Y., Zhang, X., Li, M., Liu, Z., & Sun, M. (2021) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/2021.emnlp-main.374 · Cited by 183
Dropout Inference in Bayesian Neural Networks with Alpha-divergences
Li, Y., & Gal, Y. (2017) · Oxford University Research Archive (ORA) (University of Oxford) · doi:10.48550/arxiv.1703.02914 · Cited by 145
Guo, Q., Chen, S., Xie, X., Ma, L., Hu, Q., Liu, H., Liu, Y., Zhao, J., & Li, X. (2019) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase.2019.00080 · Cited by 140
When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures
Fidel, G., Bitton, R., & Shabtai, A. (2020) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn48605.2020.9207637 · Cited by 151
DeepSonar: Towards Effective and Robust Detection of AI-Synthesized Fake Voices
Wang, R., Juefei-Xu, F., Huang, Y., Guo, Q., Xie, X., Ma, L., & Liu, Y. (2020) · Proceedings of the 28th ACM International Conference on Multimedia · doi:10.1145/3394171.3413716 · Cited by 131
A comprehensive survey on deep active learning in medical image analysis
Wang, H., Jin, Q., Li, S., Liu, S., Wang, M., & Song, Z. (2024) · Medical Image Analysis · doi:10.1016/j.media.2024.103201 · Cited by 157
Learning Transferable Adversarial Examples via Ghost Networks
Li, Y., Bai, S., Zhou, Y., Xie, C., Zhang, Z., & Yuille, A. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6810 · Cited by 139
Robust Machine Learning Systems: Challenges,Current Trends, Perspectives, and the Road Ahead
Shafique, M., Naseer, M., Theocharides, T., Kyrkou, C., Mutlu, O., Orosa, L., & Choi, J. (2020) · IEEE Design and Test · doi:10.1109/mdat.2020.2971217 · Cited by 132
Counterfactual Vision and Language Learning
Abbasnejad, E., Teney, D., Parvaneh, A., Shi, Q., & van den Hengel, A. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01006 · Cited by 136
Rob-GAN: Generator, Discriminator, and Adversarial Attacker
Liu, X., & Hsieh, C. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.01149 · Cited by 139
Robust Adversarial Objects against Deep Learning Models
Tsai, T., Yang, K., Ho, T.-Y., & Jin, Y. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i01.5443 · Cited by 129
URLTran: Improving Phishing URL Detection Using Transformers
Maneriker, P., Stokes, J. W., Lazo, E. G., Carutasu, D., Tajaddodianfar, F., & Gururajan, A. (2021) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom52596.2021.9653028 · Cited by 154
Chen, G., Peng, P., Ma, L., Li, J., Du, L., & Tian, Y. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00051 · Cited by 135
A Holistic Approach to Undesired Content Detection in the Real World
Markov, T., Zhang, C., Agarwal, S., Nekoul, F. E., Lee, T. T. H., Adler, S., Jiang, A., & Weng, L. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i12.26752 · Cited by 264
Partial success in closing the gap between human and machine vision
Geirhos, R., Narayanappa, K., Mitzkus, B., Thieringer, T., Bethge, M., Wichmann, F. A., & Brendel, W. (2021) · arXiv · doi:10.48550/arxiv.2106.07411 · Cited by 129
MHTN: Modal-Adversarial Hybrid Transfer Network for Cross-Modal Retrieval
Huang, X., Peng, Y., & Yuan, M. (2018) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2018.2879846 · Cited by 128
ActiveThief: Model Extraction Using Active Learning and Unannotated Public Data
Pal, S., Gupta, Y., Shukla, A., Kanade, A., Shevade, S., & Ganapathy, V. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i01.5432 · Cited by 138
Robot Learning From Randomized Simulations: A Review
Muratore, F., Ramos, F., Turk, G., Yu, W., Gienger, M., & Peters, J. (2022) · Frontiers in Robotics and AI · doi:10.3389/frobt.2022.799893 · Cited by 128
Adversarial Sticker: A Stealthy Attack Method in the Physical World
Wei, X., Guo, Y., & Yu, J. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3176760 · Cited by 155
Semi-Supervised Specific Emitter Identification Method Using Metric-Adversarial Training
Fu, X. G., Peng, Y., Liu, Y., Lin, Y., Gui, G., Gacanin, H., & Adachi, F. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3240242 · Cited by 132
Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks
Luo, B., Liu, Y., Wei, L., & Xu, Q. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.11499 · Cited by 134
Sadeghzadeh, A. M., Shiravi, S., & Jalili, R. (2021) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2021.3052888 · Cited by 134
Adversarial attack vulnerability of medical image analysis systems: Unexplored factors
Bortsova, G., González-Gonzalo, C., Wetstein, S. C., Dubost, F., Katramados, I., Hogeweg, L., Liefers, B. J., van Ginneken, B., Pluim, J. P. W., Veta, M., et al. (2021) · Medical Image Analysis · doi:10.1016/j.media.2021.102141 · Cited by 139
Review on Image Processing Based Adversarial Example Defenses in Computer Vision
Qiu, M., & Qiu, H. (2020) · IEEE International Conference on Big Data Security on Cloud, IEEE International Conference on High Performance and Smart Computing, and IEEE International Conference on Intelligent Data and Security (BigDataSecurity/HPSC/IDS) · doi:10.1109/bigdatasecurity-hpsc-ids49724.2020.00027 · Cited by 129
Data-centric AI: Perspectives and Challenges
Zha, D., Bhat, Z. P., Lai, K.-H., Yang, F., & Hu, X. (2023) · Society for Industrial and Applied Mathematics eBooks · doi:10.1137/1.9781611977653.ch106 · Cited by 153
Adversarially Robust Policy Learning: Active construction of physically-plausible perturbations
Mandlekar, A., Zhu, Y., Garg, A., Fei-Fei, L., & Savarese, S. (2017) · 2017 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS) · doi:10.1109/iros.2017.8206245 · Cited by 116
Multimodal GANs: Toward Crossmodal Hyperspectral–Multispectral Image Segmentation
Hong, D., Yao, J. T., Meng, D., Xu, Z., & Chanussot, J. (2020) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2020.3020823 · Cited by 126
Girdhar, M., Hong, J., & Moore, J. (2023) · IEEE Open Journal of Vehicular Technology · doi:10.1109/ojvt.2023.3265363 · Cited by 145
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorchPreprint
Ding, G. W., Wang, L., & Jin, X. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.07623 · Cited by 199
Geometry-Aware Generation of Adversarial Point Clouds
Wen, Y., Lin, J., Chen, K., Chen, C. L. P., & Jia, K. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3044712 · Cited by 143
Efficient Adversarial Training With Transferable Adversarial Examples
Zheng, H., Zhang, Z., Gu, J., Lee, H., & Prakash, A. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00126 · Cited by 129
Nonconvex Min-Max Optimization: Applications, Challenges, and Recent Theoretical Advances
Razaviyayn, M., Huang, T., Lu, S., Nouiehed, M., Sanjabi, M., & Hong, M. (2020) · IEEE Signal Processing Magazine · doi:10.1109/msp.2020.3003851 · Cited by 131
Communication-Efficient Stochastic Gradient Descent Ascent with Momentum Algorithms
Zhang, Y., Meikang Qiu, A., & Gao, H. (2023) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2023/512 · Cited by 125
Fooling Neural Network Interpretations via Adversarial Model ManipulationPreprint
Heo, J., Joo, S., & Moon, T. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.02041 · Cited by 137
On the Suitability of Lp-Norms for Creating and Preventing Adversarial Examples
Sharif, M., Bauer, L., & Reiter, M. K. (2018) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2018.00211 · Cited by 128
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
