The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 601–700 of 1,082
Detection Based Defense Against Adversarial Examples From the Steganalysis Point of View
Liu, J., Zhang, W., Zhang, Y., Hou, D., Liu, Y., Zha, H., & Yu, N. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00496 · Cited by 122
Afifi, M., & Brown, M. S. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00033 · Cited by 126
Adversarial machine learning for network intrusion detection: A comparative study
Jmila, H., & Khedher, M. I. (2022) · Computer Networks · doi:10.1016/j.comnet.2022.109073 · Cited by 132
Algorithms on regulatory lockdown in medicine
Babic, B., Gerke, S., Evgeniou, T., & Cohen, I. G. (2019) · Science · doi:10.1126/science.aay9547 · Cited by 123
On Visible Adversarial Perturbations & Digital Watermarking
Hayes, J. (2018) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2018.00210 · Cited by 128
Rahman, M. S., Imani, M., Mathews, N., & Wright, M. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3039691 · Cited by 130
Chen, H., Zhang, H., Chen, P., Yi, J., & Hsieh, C. (2018) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p18-1241 · Cited by 155
Towards Transferable Adversarial Attacks on Vision Transformers
Wei, Z., Chen, J., Goldblum, M., Wu, Z., Goldstein, T., & Jiang, Y. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i3.20169 · Cited by 136
Structural Coverage Criteria for Neural Networks Could Be Misleading
Li, Z., Ma, X., Xu, C., & Cao, C. (2019) · IEEE/ACM International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER) · doi:10.1109/icse-nier.2019.00031 · Cited by 128
Distributionally Adversarial Attack
Zheng, T., Chen, C., & Ren, K. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33012253 · Cited by 130
FDA: Feature Disruptive Attack
Ganeshan, A., Vivek, B. S., & Radhakrishnan, V. B. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00816 · Cited by 129
Towards Face Encryption by Generating Adversarial Identity Masks
Yang, X. H., Dong, Y., Pang, T., Su, H., Zhu, J., Chen, Y., & Xue, H. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00387 · Cited by 128
EXplainable Artificial Intelligence (XAI)—From Theory to Methods and Applications
Ortigossa, E. S., Gonçalves, T., & Nonato, L. G. (2024) · IEEE Access · doi:10.1109/access.2024.3409843 · Cited by 124
Revisiting LSTM Networks for Semi-Supervised Text Classification via Mixed Objective Function
Sachan, D. S., Zaheer, M., & Salakhutdinov, R. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33016940 · Cited by 125
Detecting and Mitigating Adversarial Perturbations for Robust Face Recognition
Goswami, G., Agarwal, A., Ratha, N., Singh, R., & Mayank Vatsa, A. (2019) · International Journal of Computer Vision · doi:10.1007/s11263-019-01160-w · Cited by 119
Adversarial attacks on deep-learning-based SAR image target recognition
Huang, T., Zhang, Q., Liu, J., Hou, R., Wang, X., & Li, Y. (2020) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2020.102632 · Cited by 123
CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes
Huang, H., Wang, Y., Chen, Z., Zhang, Y., Li, Y., Tang, Z., Chu, W., Chen, J., Lin, W., & Ma, K. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i1.19982 · Cited by 131
Divergence-Agnostic Unsupervised Domain Adaptation by Adversarial Attacks
Li, J., Du, Z., Zhu, L., Ding, Z., Lü, K., & Shen, H. T. (2021) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2021.3109287 · Cited by 123
FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis
Feng, Y., Ma, B., Zhang, J., Zhao, S., Xia, Y., & Tao, D. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.02021 · Cited by 125
Machine Learning in Adversarial Settings
McDaniel, P., Papernot, N., & Celik, Z. B. (2016) · IEEE Security & Privacy · doi:10.1109/msp.2016.51 · Cited by 120
Geometric Robustness of Deep Networks: Analysis and Improvement
Kanbak, C., Moosavi-Dezfooli, S.-M., & Frossard, P. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00467 · Cited by 132
MeshAdv: Adversarial Meshes for Visual Recognition
Xiao, C., Yang, D., Li, B., Deng, J., & Liu, M. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00706 · Cited by 134
Universal Perturbation Attack Against Image Retrieval
Li, J., Ji, R., Liu, H., Hong, X., Gao, Y., & Tian, Q. C. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00500 · Cited by 120
Generating Adversarial Examples for Holding Robustness of Source Code Processing Models
Zhang, H., Li, Z., Li, G., Ma, L., Liu, Y., & Jin, Z. G. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i01.5469 · Cited by 127
Logical Natural Language Generation from Open-Domain Tables
Chen, W., Chen, J., Su, Y., Chen, Z., & Wang, W. Y. (2020) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2020.acl-main.708 · Cited by 142
Adversarial Examples for Hamming Space Search
Yang, E., Liu, T., Deng, C. D., & Tao, D. (2018) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2018.2882908 · Cited by 121
Advanced atherosclerosis imaging by CT: Radiomics, machine learning and deep learning
Kolossváry, M., Cecco, C. N. D., Feuchtner, G. M., & Maurovich‐Horvat, P. (2019) · Journal of cardiovascular computed tomography · doi:10.1016/j.jcct.2019.04.007 · Cited by 121
Joint Adversarial Example and False Data Injection Attacks for State Estimation in Power Systems
Tian, J., Wang, B., Wang, Z., Cao, K., Li, J., & Ozay, M. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2021.3125345 · Cited by 120
Auto-Debias: Debiasing Masked Language Models with Automated Biased Prompts
Guo, Y., Yang, Y., & Abbasi, A. (2022) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2022.acl-long.72 · Cited by 131
Adversarial attacks against Windows PE malware detection: A survey of the state-of-the-art
Ling, X., Wu, L., Zhang, J., Qu, Z., Deng, W., Chen, X., Qian, Y., Wu, C., Ji, S., Luo, T., et al. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103134 · Cited by 146
GFNet: Global Filter Networks for Visual Recognition
Rao, Y., Zhao, W., Zhu, Z. D., Zhou, J., & Lu, J. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3263824 · Cited by 571
Everitt, T., Lea, G., & Hütter, M. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/768 · Cited by 169
SeqVAT: Virtual Adversarial Training for Semi-Supervised Sequence Labeling
Chen, L., Ruan, W., Liu, X., & Lu, J. (2020) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2020.acl-main.777 · Cited by 118
GeoDA: A Geometric Framework for Black-Box Adversarial Attacks
Rahmati, A., Moosavi-Dezfooli, S.-M., Frossard, P., & Dai, H. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00847 · Cited by 122
Learning to Demodulate From Few Pilots via Offline and Online Meta-Learning
Park, S., Jang, H., Simeone, O., & Kang, J. (2020) · IEEE Transactions on Signal Processing · doi:10.1109/tsp.2020.3043879 · Cited by 116
Wang, S., Wang, Q., & Zhao, J. (2020) · Transportation Research Part C Emerging Technologies · doi:10.1016/j.trc.2020.102701 · Cited by 127
Springer, A., & Whittaker, S. (2019) · Proceedings of the 24th International Conference on Intelligent User Interfaces · doi:10.1145/3301275.3302322 · Cited by 115
“For example, seemingly random noise that is unnoticeable to humans can cause deep neural network image classifiers to fail catastrophically [28].”
BackgroundWang, J., & Zhang, H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00673 · Cited by 118
Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation
Huang, P.-S., Stanforth, R., Welbl, J., Dyer, C., Yogatama, D., Gowal, S., Dvijotham, K., & Kohli, P. (2019) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d19-1419 · Cited by 129
Defending Against Model Stealing Attacks With Adaptive Misinformation
Kariyappa, S., & Qureshi, M. K. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00085 · Cited by 117
Ensemble Meta-Learning for Few-Shot Soot Density Recognition
Gu, K., Zhang, Y., & Qiao, J. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.2991208 · Cited by 116
Cheng, G., Sun, X., Li, K., Guo, L., & Han, J. (2021) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2021.3081421 · Cited by 122
Cheng, L., Yin, F., Theodoridis, S., Chatzis, S., & Chang, T. (2022) · IEEE Signal Processing Magazine · doi:10.1109/msp.2022.3198201 · Cited by 120
Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification
Zhou, Y., Jiang, J., Chang, K.-W., & Wang, W. W. (2019) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/d19-1496 · Cited by 127
Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems
Newaz, A. I., Haque, N. I., Sikder, A. K., Rahman, M. A., & Uluagac, A. S. (2020) · Globecom · doi:10.1109/globecom42002.2020.9322472 · Cited by 117
A survey on artificial intelligence assurance
Batarseh, F. A., Freeman, L., & Huang, C. (2021) · Journal Of Big Data · doi:10.1186/s40537-021-00445-7 · Cited by 132
Training Robust Deep Neural Networks via Adversarial Noise Propagation
Liu, A., Liu, X., Yu, H., Zhang, C., Liu, Q., & Tao, D. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3082317 · Cited by 119
RAB: Provable Robustness Against Backdoor Attacks
Weber, M., Xu, X., Karlaš, B., Zhang, C., & Li, B. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179451 · Cited by 151
Sponge Examples: Energy-Latency Attacks on Neural Networks
Shumailov, I., Zhao, Y., Bates, D., Papernot, N., Mullins, R., & Anderson, R. (2021) · 2021 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp51992.2021.00024 · Cited by 125
Tang, M., Gao, H., Zhang, Y., Liu, Y., Zhang, P., & Wang, P. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2018.2821096 · Cited by 113
Adversarial Examples Against Deep Neural Network based Steganalysis
Zhang, Y., Zhang, W., Chen, K., Liu, J., Liu, Y., & Yu, N. (2018) · ACM Workshop on Information Hiding and Multimedia Security (IH&MMSec) · doi:10.1145/3206004.3206012 · Cited by 114
The Translucent Patch: A Physical and Universal Attack on Object Detectors
Zolfi, A., Kravchik, M., Elovici, Y., & Shabtai, A. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01498 · Cited by 125
Yang, J., Chen, X., Chen, S., Jiang, X., & Tan, X. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3083422 · Cited by 114
Chen, B., Zhu, L., Li, G., Lu, F., Fan, H., & Wang, S. (2021) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2021.3088505 · Cited by 124
StyleMix: Separating Content and Style for Enhanced Data Augmentation
Hong, M., Choi, J., & Kim, G. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01462 · Cited by 121
Malware classification and composition analysis: A survey of recent developments
Abusitta, A. H., Li, M. Q., & Fung, B. C. M. (2021) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2021.102828 · Cited by 121
Explaining in Style: Training a GAN to explain a classifier in StyleSpace
Lang, O., Gandelsman, Y., Yarom, M., Wald, Y., Elidan, G., Hassidim, A., Freeman, W. T., Isola, P., Globerson, A., Irani, M., et al. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00073 · Cited by 113
Zhao, Z., Li, T., An, B., Wang, S., Ding, B., Yan, R., & Chen, X. (2022) · ISA Transactions · doi:10.1016/j.isatra.2022.02.027 · Cited by 117
Chen, Y., Yan, J., Jiang, M., Zhang, T., Zhao, Z., Zhao, W., Zheng, J., Yao, D., Zhang, R., Kendrick, K. M., et al. (2022) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2022.3154755 · Cited by 113
Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks
Brunner, T., Diehl, F., Le, M. T., & Knoll, A. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00506 · Cited by 122
Federated Learning and Meta Learning: Approaches, Applications, and Directions
Liu, X., Deng, Y., Nallanathan, A., & Bennis, M. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3330910 · Cited by 116
Diffusion Models for Imperceptible and Transferable Adversarial Attack
Chen, J., Chen, H., Chen, K., Zhang, Y., Zou, Z., & Shi, Z. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3480519 · Cited by 154
Adversarial Threats to DeepFake Detection: A Practical Perspective
Neekhara, P., Dolhansky, B., Bitton, J., & Ferrer, C. C. (2021) · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw53098.2021.00103 · Cited by 117
Overfitting of Neural Nets Under Class Imbalance: Analysis and Improvements for Segmentation
Li, Z., Kamnitsas, K., & Glocker, B. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-32248-9_45 · Cited by 111
Shen, J., & Robertson, N. M. (2020) · Information Sciences · doi:10.1016/j.ins.2020.11.026 · Cited by 114
Re-labeling ImageNet: from Single to Multi-Labels, from Global to Localized Labels
Yun, S., Oh, S. J., Heo, B., Han, D., Choe, J., & Chun, S. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00237 · Cited by 122
Improving the Transferability of Adversarial Samples with Adversarial Transformations
Wu, W., Su, Y., Lyu, M. R.-T., & King, I. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00891 · Cited by 116
Two Dimensions of Opacity and the Deep Learning Predicament
Boge, F. J. (2021) · Minds and Machines · doi:10.1007/s11023-021-09569-4 · Cited by 143
Wang, Z., Zhai, J., & Ma, S. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01465 · Cited by 124
Adversarial-Example Attacks Toward Android Malware Detection System
Li, H., Zhou, S., Yuan, W., Li, J., & Leung, H. (2019) · IEEE Systems Journal · doi:10.1109/jsyst.2019.2906120 · Cited by 110
A Deeper Look at 3D Shape Classifiers
Su, J.-C., Gadelha, M., Wang, R., & Maji, S. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-11015-4_49 · Cited by 112
Gradient Shielding: Towards Understanding Vulnerability of Deep Neural Networks
Gu, Z., Hu, W., Zhang, C., Lu, H. D., Yin, L., & Wang, L. (2020) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2020.2996738 · Cited by 111
Towards Trustable Explainable AI
Ignatiev, A. (2020) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2020/726 · Cited by 124
Self-Adversarial Training Incorporating Forgery Attention for Image Forgery Localization
Zhuo, L., Tan, S., Li, B., & Huang, J. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3152362 · Cited by 118
Johnson, M., Albizri, A., Harfouche, A., & Wamba, S. F. (2022) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2022.102479 · Cited by 128
Semantic Communication: A Survey on Research Landscape, Challenges, and Future Directions
Getu, T. M., Kaddoum, G., & Bennis, M. (2024) · Proceedings of the IEEE · doi:10.1109/jproc.2024.3520707 · Cited by 110
Reasoning about Pragmatics with Neural Listeners and Speakers
Andreas, J., & Klein, D. (2016) · Proceedings of the 2016 Conference on Empirical Methods in Natural Language Processing · doi:10.18653/v1/d16-1125 · Cited by 115
Bradshaw, J., Matthews, A. G. D. G., & Ghahramani, Z. (2017) · arXiv · doi:10.48550/arxiv.1707.02476 · Cited by 109
A game-based approximate verification of deep neural networks with provable guarantees
Wu, M., Wicker, M., Ruan, W., Huang, X., & Kwiatkowska, M. (2019) · Theoretical Computer Science · doi:10.1016/j.tcs.2019.05.046 · Cited by 111
On the Vulnerability of CNN Classifiers in EEG-Based BCIs
Zhang, X., & Wu, D. (2019) · IEEE Transactions on Neural Systems and Rehabilitation Engineering · doi:10.1109/tnsre.2019.2908955 · Cited by 112
Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet
Chen, S., He, Z., Sun, C., Yang, J., & Huang, X. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3033291 · Cited by 114
Multimodal research in vision and language: A review of current and emerging trends
Uppal, S., Bhagat, S., Hazarika, D., Majumder, N., Poria, S., Zimmermann, R., & Zadeh, A. (2021) · Information Fusion · doi:10.1016/j.inffus.2021.07.009 · Cited by 118
On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models
Michel, P., Li, X., Neubig, G., & Pino, J. (2019) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/n19-1314 · Cited by 108
Dual Adversarial Neural Transfer for Low-Resource Named Entity Recognition
Zhou, J. T., Zhang, H., Jin, D., Zhu, H., Fang, M., Goh, R. S. M., & Kwok, K. (2019) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p19-1336 · Cited by 106
Art of Singular Vectors and Universal Adversarial Perturbations
Oseledets, I. V., & Khrulkov, V. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00893 · Cited by 126
Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better
Zi, B., Zhao, S., Ma, X., & Jiang, Y. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01613 · Cited by 128
MANDA: On Adversarial Example Detection for Network Intrusion Detection System
Wang, N., Chen, Y., Xiao, Y., Hu, Y., Lou, W., & Hou, Y. T. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3148990 · Cited by 110
Ishikawa, F., & Yoshioka, N. (2019) · doi:10.1109/cesser-ip.2019.00009 · Cited by 107
Addressing Model Vulnerability to Distributional Shifts Over Image Transformation Sets
Volpi, R., & Murino, V. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00807 · Cited by 110
LESSON: Multi-Label Adversarial False Data Injection Attack for Deep Learning Locational Detection
Tian, J., Shen, C. Q., Wang, B., Xia, X., Zhang, M., Lin, C., & Li, Q. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3353302 · Cited by 110
Stealthy Adversarial Perturbations Against Real-Time Video Classification Systems
Li, S., Neupane, A., Paul, S., Song, C., Krishnamurthy, S. V., Chowdhury, A. K. R., & Swami, A. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23202 · Cited by 108
Verification of Neural Network Behaviour: Formal Guarantees for Power System Applications
Venzke, A., & Chatzivasileiadis, S. (2020) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2020.3009401 · Cited by 112
Interpreting and Improving Adversarial Robustness of Deep Neural Networks With Neuron Sensitivity
Zhang, C., Liu, A., Liu, X., Xu, Y., Yu, H., Ma, Y., & Li, T. (2020) · IEEE Transactions on Image Processing · doi:10.1109/tip.2020.3042083 · Cited by 120
Zhou, H., Chen, D., Liao, J., Chen, K., Dong, X., Liu, K., Zhang, W., Hua, G., & Yu, N. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01037 · Cited by 106
Controversial stimuli: Pitting neural networks against each other as models of human cognition
Golan, T., Raju, P. C., & Kriegeskorte, N. (2020) · Proceedings of the National Academy of Sciences · doi:10.1073/pnas.1912334117 · Cited by 121
Wang, X., Chen, H., Xiang, H., Lin, H., Lin, X., & Heng, P. (2021) · Medical Image Analysis · doi:10.1016/j.media.2021.102010 · Cited by 107
Interpretable and Trustworthy Deepfake Detection via Dynamic Prototypes
Trinh, L., Tsang, M., Rambhatla, S., & Liu, Y. (2021) · 2021 IEEE Winter Conference on Applications of Computer Vision (WACV) · doi:10.1109/wacv48630.2021.00202 · Cited by 115
Universal Adversarial Attacks on Text Classifiers
Behjati, M., Moosavi-Dezfooli, S.-M., Baghshah, M. S., & Frossard, P. (2019) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp.2019.8682430 · Cited by 105
Adversarial attacks on an oblivious recommender
Christakopoulou, K., & Banerjee, A. (2019) · Proceedings of the 13th ACM Conference on Recommender Systems · doi:10.1145/3298689.3347031 · Cited by 105
Stealthy and Efficient Adversarial Attacks against Deep Reinforcement Learning
Sun, J., Zhang, T., Xie, X., Ma, L., Zheng, Y., Chen, K., & Liu, Y. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6047 · Cited by 126
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
