The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 701–800 of 1,082
Detecting botnet by using particle swarm optimization algorithm based on voting system
Asadi, M., Jamali, M. A. J., Parsa, S. A., & Majidnezhad, V. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2020.01.055 · Cited by 108
Poisoning and Evasion Attacks Against Deep Learning Algorithms in Autonomous Vehicles
Jiang, W., Li, H., Liu, S., Luo, X., & Lu, R. (2020) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2020.2977378 · Cited by 114
Recent Advances of Image Steganography With Generative Adversarial Networks
Liu, J., Ke, Y., Zhang, Z., Yu, L., Li, J., Zhang, M., & Yang, X. (2020) · IEEE Access · doi:10.1109/access.2020.2983175 · Cited by 116
Daedalus: Breaking Nonmaximum Suppression in Object Detection via Adversarial Examples
Wang, D., Li, C., Wen, S., Han, Q., Nepal, ., Zhang, X., & Xiang, Y. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2020.3041481 · Cited by 118
Rethinking and Improving the Robustness of Image Style Transfer
Wang, P., Li, Y., & Vasconcelos, N. M. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00019 · Cited by 109
Watermarking Images in Self-Supervised Latent Spaces
Fernandez, P., Sablayrolles, A., Furon, T., Jeǵou, H., & Douze, M. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9746058 · Cited by 120
Robust Optimization as Data Augmentation for Large-scale Graphs
Kong, K., Li, G., Ding, M., Wu, Z., Zhu, C., Ghanem, B., Taylor, G., & Goldstein, T. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00016 · Cited by 160
Are All Layers Created Equal?Preprint
Zhang, C., Samy Bengio, A., & Singer, Y. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.01996 · Cited by 156
Survey: federated learning data security and privacy-preserving in edge-Internet of Things
Li, H., Ge, L., & Tian, L. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10774-7 · Cited by 112
On Generating Plausible Counterfactual and Semi-Factual Explanations for Deep Learning
Kenny, E. M., & Keane, M. T. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i13.17377 · Cited by 108
Wang, C., Zheng, G., Li, X., Xu, Q., Liu, B., & Zhang, J. A. (2021) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2021.3066299 · Cited by 104
Trojaning Language Models for Fun and Profit
Zhang, X., Zhang, Z., Ji, S., & Wang, T. (2021) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp51992.2021.00022 · Cited by 117
Benchmarking Adversarial Patch Against Aerial Detection
Lian, J., Mei, S., Zhang, S., & Ma, M. (2022) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2022.3225306 · Cited by 109
Machine Learning as a Tool for Hypothesis Generation
Ludwig, J., & Mullainathan, S. (2024) · The Quarterly Journal of Economics · doi:10.1093/qje/qjad055 · Cited by 118
Structure Invariant Transformation for better Adversarial Transferability
Wang, X., Zhang, Z., & Zhang, J. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00425 · Cited by 116
A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking
Liu, C., Dong, Y., Xiang, W., Yang, X. H., Su, H., Zhu, J., Chen, Y., He, Y., Xue, H., & Zheng, S. (2024) · International Journal of Computer Vision · doi:10.1007/s11263-024-02196-3 · Cited by 162
Boosting Adversarial Transferability by Block Shuffle and Rotation
Wang, K., He, X., Wang, W., & Wang, X. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02297 · Cited by 125
Gao, Y., Zhai, P., & Mosalam, K. M. (2021) · Computer-Aided Civil and Infrastructure Engineering · doi:10.1111/mice.12741 · Cited by 105
González-Gonzalo, C., Thee, E. F., Klaver, C. C. W., Lee, A. Y., Schlingemann, R. O., Tufail, A., Verbraak, F., & Sánchez, C. I. (2022) · Progress in Retinal and Eye Research · doi:10.1016/j.preteyeres.2021.101034 · Cited by 103
DeepCorrect: Correcting DNN Models Against Image Distortions
Borkar, T. S., & Karam, L. J. (2019) · IEEE Transactions on Image Processing · doi:10.1109/tip.2019.2924172 · Cited by 110
Conditional variance penalties and domain shift robustness
Heinze‐Deml, C., & Meinshausen, N. (2020) · Machine Learning · doi:10.1007/s10994-020-05924-1 · Cited by 132
Curls & Whey: Boosting Black-Box Adversarial Attacks
Shi, Y., Wang, S., & Han, Y. (2019) · 2019 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2019.00668 · Cited by 103
ColorFool: Semantic Adversarial Colorization
Shamsabadi, A. S., Sánchez-Matilla, R., & Cavallaro, A. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00123 · Cited by 104
Fishyscapes: A Benchmark for Safe Semantic Segmentation in Autonomous Driving
Blum, H., Sarlin, P.-E., Nieto, J. I., Siegwart, R., & Cadena, C. (2019) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw.2019.00294 · Cited by 105
Deep learning in electron microscopy
Ede, J. M. (2020) · Machine Learning Science and Technology · doi:10.1088/2632-2153/abd614 · Cited by 118
Quantum adversarial machine learning
Lu, S., Duan, L., & Deng, D. (2020) · MPG.PuRe (Max Planck Society) · Cited by 105
Towards Security Threats of Deep Learning Systems: A Survey
He, Y., Meng, G., Chen, K., Hu, X., & He, J. (2020) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2020.3034721 · Cited by 121
Medical Image Segmentation With Limited Supervision: A Review of Deep Network Models
Peng, J., & Wang, Y. (2021) · IEEE Access · doi:10.1109/access.2021.3062380 · Cited by 115
Improving Unsupervised Image Clustering With Robust Learning
Park, S., Han, S., Kim, S., Kim, D., Park, S., Hong, S., & Cha, M. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01210 · Cited by 113
Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning
Li, L., Song, D., Li, X., Zeng, J., Ma, R., & Qiu, X. (2021) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/2021.emnlp-main.241 · Cited by 145
Kim, Y., Park, H., Moitra, A., Bhattacharjee, A., Venkatesha, Y., & Panda, P. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9747906 · Cited by 113
Google's Cloud Vision API is Not Robust to Noise
Hosseini, H., Xiao, B., & Poovendran, R. (2017) · International Conference on Machine Learning and Applications · doi:10.1109/icmla.2017.0-172 · Cited by 107
It’s Morphin’ Time! Combating Linguistic Discrimination with Inflectional Perturbations
Tan, S., Joty, S., Kan, M., & Socher, R. (2020) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2020.acl-main.263 · Cited by 111
Robust Semantic Communications Against Semantic Noise
Hu, Q., Zhang, G., Qin, Z., Cai, Y., Yu, G., & Li, G. Y. (2022) · IEEE Vehicular Technology Conference · doi:10.1109/vtc2022-fall57202.2022.10012843 · Cited by 115
TSViz: Demystification of Deep Learning Models for Time-Series Analysis
Siddiqui, S. A., Mercier, D., Munir, M., Dengel, A., & Ahmed, S. (2019) · IEEE Access · doi:10.1109/access.2019.2912823 · Cited by 95
Adversarial Training Methods for Network Embedding
Dai, Q., Shen, X. X., Zhang, L., Li, Q., & Wang, D. (2019) · International World Wide Web Conference (WWW) · doi:10.1145/3308558.3313445 · Cited by 97
Deep neural network models of sensory systems: windows onto the role of task constraints
Kell, A. J. E., & McDermott, J. H. (2019) · Current Opinion in Neurobiology · doi:10.1016/j.conb.2019.02.003 · Cited by 104
Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems
Eger, S., Şahin, G. G., Rücklé, A., Lee, J.-U., Schulz, C., Mesgar, M., Swarnkar, K., Simpson, E., & Gurevych, I. (2019) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/n19-1165 · Cited by 148
Cooling-Shrinking Attack: Blinding the Tracker With Imperceptible Noises
Yan, B., Wang, D., Lu, H., & Yang, X. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00107 · Cited by 100
One-Shot Adversarial Attacks on Visual Tracking With Dual Attention
Chen, X., Yan, X., Zheng, F., Jiang, Y., Xia, S., Zhao, Y. J., & Ji, R. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01019 · Cited by 104
Ma, Y., & Tang, J. (2021) · Cambridge University Press eBooks · doi:10.1017/9781108924184 · Cited by 107
Qian, Z., Huang, K., Wang, Q., & Zhang, X.-Y. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.108889 · Cited by 110
Interpreting Adversarial Examples in Deep Learning: A Review
Han, S., Lin, C., Shen, C. Q., Wang, Q., & Guan, X. (2023) · ACM Computing Surveys · doi:10.1145/3594869 · Cited by 109
ML-LOO: Detecting Adversarial Examples with Feature Attribution
Yang, P., Chen, J., Hsieh, C., Wang, J.-L., & Jordan, M. I. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6140 · Cited by 106
Attacking vision-based perception in end-to-end autonomous driving models
Boloor, A., Garimella, K., He, X. J., Gill, C. D., Vorobeychik, Y., & Zhang, X. (2020) · Journal of Systems Architecture · doi:10.1016/j.sysarc.2020.101766 · Cited by 105
LPViT: A Transformer Based Model for PCB Image Classification and Defect Detection
An, K., & Zhang, Y. (2022) · IEEE Access · doi:10.1109/access.2022.3168861 · Cited by 104
Explaining Vulnerabilities of Deep Learning to Adversarial Malware BinariesPreprint
Demetrio, L., Biggio, B., Lagorio, G., Roli, F., & Armando, A. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.03583 · Cited by 99
Interpret Neural Networks by Identifying Critical Data Routing Paths
Wang, Y., Su, H., Zhang, B., & Hu, X. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00928 · Cited by 97
The Knowledge Within: Methods for Data-Free Model Compression
Haroush, M., Hubara, I., Hoffer, E., & Soudry, D. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00852 · Cited by 99
Bidirectional Adversarial Training for Semi-Supervised Domain Adaptation
Pin, J., Wu, A., Han, Y., Shao, Y., Qi, M., & Li, B. (2020) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2020/130 · Cited by 98
On Robustness and Transferability of Convolutional Neural Networks
Djolonga, J., Yung, J., Tschannen, M., Romijnders, R., Beyer, L., Kolesnikov, A., Puigcerver, J., Minderer, M., D'Amour, A., Moldovan, D., et al. (2021) · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr46437.2021.01619 · Cited by 98
Artificial Intelligence Security Threat, Crime, and Forensics: Taxonomy and Open Issues
Jeong, D. (2020) · IEEE Access · doi:10.1109/access.2020.3029280 · Cited by 108
Attacks and defenses in user authentication systems: A survey
Wang, X., Yan, Z., Zhang, R., & Zhang, P. (2021) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2021.103080 · Cited by 105
Meta Gradient Adversarial Attack
Yuan, Z., Zhang, J., Jia, Y., Tan, C., Xue, T., & Shan, S. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00765 · Cited by 101
Towards Adversarial Malware Detection
Maiorca, D., Biggio, B., & Giacinto, G. (2019) · ACM Computing Surveys · doi:10.1145/3332184 · Cited by 111
A Survey of Adversarial Attack and Defense Methods for Malware Classification in Cyber Security
Yan, S., Ren, J., Wang, W., Sun, L., Zhang, W., & Yu, Q. (2022) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2022.3225137 · Cited by 113
StyleAdv: Meta Style Adversarial Training for Cross-Domain Few-Shot Learning
Fu, Y., Xie, Y., Fu, Y., & Jiang, Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.02354 · Cited by 97
Audio-Visual Person-of-Interest DeepFake Detection
Cozzolino, D., Pianese, A., Nießner, M., & Verdoliva, L. (2023) · 2023 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw59228.2023.00101 · Cited by 104
Detecting Adversarial Examples Through Image Transformation
Tian, S., Yang, G., & Cai, Y. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.11828 · Cited by 98
Adversarial Defense by Stratified Convolutional Sparse Coding
Sun, B., Tsai, N.-H., Liu, F., Yu, R., & Su, H. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.01171 · Cited by 99
The Threat of Offensive AI to Organizations
Mirsky, Y., Demontis, A., Kotak, J., Shankar, R., Gelei, D., Yang, L., Zhang, X., Pintor, M., Lee, W., Elovici, Y., et al. (2023) · Computers & Security · doi:10.1016/j.cose.2022.103006 · Cited by 97
Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models
Chen, J., Wang, J., Peng, T., Sun, Y., Cheng, P., Ji, S., Ma, X., Li, B., & Song, D. X. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833747 · Cited by 105
Delivering Trustworthy AI through Formal XAI
Marques-Silva, J. P., & Ignatiev, A. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i11.21499 · Cited by 115
A Robust Deep Learning Enabled Semantic Communication System for Text
Peng, X., Qin, Z., Huang, D., Tao, X., Lü, J., Liu, G., & Pan, C. (2022) · Globecom · doi:10.1109/globecom48099.2022.10000901 · Cited by 98
Evading Anti-Malware Engines With Deep Reinforcement Learning
Fang, Z., Wang, J., Li, B., Wu, S., Zhou, Y., & Huang, H. (2019) · IEEE Access · doi:10.1109/access.2019.2908033 · Cited by 97
On the Robustness of Self-Attentive Models
Hsieh, Y.-L., Cheng, M., Juan, D.-C., Wei, W., Hsu, W.-L., & Hsieh, C.-J. (2019) · Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics · doi:10.18653/v1/p19-1147 · Cited by 96
Unreliable Users Detection in Social Media: Deep Learning Techniques for Automatic Detection
Sansonetti, G., Gasparetti, F., D’Aniello, G., & Micarelli, A. (2020) · IEEE Access · doi:10.1109/access.2020.3040604 · Cited by 105
Knowledge-Enriched Distributional Model Inversion Attacks
Chen, S., Kahla, M., Jia, R., & Qi, G.-J. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01587 · Cited by 108
Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark
Xu, Y., & Ghamisi, P. (2022) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2022.3156392 · Cited by 97
Khamaiseh, S. Y., Bagagem, D., Al-Alaj, A., Mancino, M., & Alomari, H. W. (2022) · IEEE Access · doi:10.1109/access.2022.3208131 · Cited by 107
Shape-invariant 3D Adversarial Point Clouds
Huang, Q., Dong, X., Chen, D., Zhou, H., Zhang, W., & Yu, N. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01490 · Cited by 101
Trusted AI in Multiagent Systems: An Overview of Privacy and Security for Distributed Learning
Ma, C., Li, J., Wei, K., Liu, B., Ding, M., Yuan, L., Han, Z., & Vincent Poor, H. (2023) · Proceedings of the IEEE · doi:10.1109/jproc.2023.3306773 · Cited by 96
Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identification
Dong, N., Zhang, L., Yan, S., Tang, H., & Tang, J. (2023) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2023.3339167 · Cited by 106
Privacy and Synthetic DatasetsPreprint
Bellovin, S. M., Dutta, P. K., & Reitinger, N. (2018) · SSRN Electronic Journal · doi:10.2139/ssrn.3255766 · Cited by 96
Universal Adversarial Perturbation via Prior Driven Uncertainty Approximation
Liu, H., Ji, R., Li, J., Zhang, B., Gao, Y., Wu, Y., & Huang, F. (2019) · 2019 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00303 · Cited by 95
Robust Machine Comprehension Models via Adversarial Training
Wang, Y., & Bansal, M. (2018) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/n18-2091 · Cited by 111
How is Gaze Influenced by Image Transformations? Dataset and Model
Che, Z., Borji, A., Zhai, G., Min, X., Guo, G., & Callet, P. L. (2019) · IEEE Transactions on Image Processing · doi:10.1109/tip.2019.2945857 · Cited by 106
Manne, R. (2020) · International Journal for Modern Trends in Science and Technology · doi:10.46501/ijmtst061118 · Cited by 95
Mohammadian, H., Ghorbani, A. A., & Lashkari, A. H. (2023) · Applied Soft Computing · doi:10.1016/j.asoc.2023.110173 · Cited by 100
Vlassis, N. N., & Sun, W. (2023) · Computer Methods in Applied Mechanics and Engineering · doi:10.1016/j.cma.2023.116126 · Cited by 100
Secure and Trustworthy Artificial Intelligence-extended Reality (AI-XR) for Metaverses
Qayyum, A., Butt, M. A., Ali, H. M., Usman, M., Halabi, O., Al‐Fuqaha, A., Abbasi, Q. H., Imran, M. A., & Qadir, J. (2023) · ACM Computing Surveys · doi:10.1145/3614426 · Cited by 117
Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers
Joshi, A., Mukherjee, A., Sarkar, S., & Hegde, C. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00487 · Cited by 95
How to certify machine learning based safety-critical systems? A systematic literature review
Tambon, F., Laberge, G., An, L., Nikanjam, A., Mindom, P. S. N., Pequignot, Y., Khomh, F., Antoniol, G., Merlo, E., & Laviolette, F. (2022) · Automated Software Engineering · doi:10.1007/s10515-022-00337-x · Cited by 112
Physical Adversarial Attacks on an Aerial Imagery Object Detector
Du, A., Chen, B., Chin, T.-J., Law, Y. W., Sasdelli, M., Rajasegaran, R., & Campbell, D. T. (2022) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv51458.2022.00385 · Cited by 104
Backdoor Attacks on Self-Supervised Learning
Saha, A., Tejankar, A., Koohpayegani, S. A., & Pirsiavash, H. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01298 · Cited by 106
Huang, R., & Li, Y. (2022) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2022.3217060 · Cited by 100
Yang, X., Yang, G., & Chu, J. (2024) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2024.3350666 · Cited by 101
Generative Counterfactual Introspection for Explainable Deep Learning
Liu, S., Kailkhura, B., Loveland, D., & Han, Y. (2019) · IEEE Global Conference on Signal and Information Processing · doi:10.1109/globalsip45357.2019.8969491 · Cited by 114
Practical Blind Membership Inference Attack via Differential Comparisons
Hui, B., Yang, Y., Yuan, H., Burlina, P., Gong, N. Z., & Cao, Y. (2021) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2021.24293 · Cited by 127
Toward Open-World Electroencephalogram Decoding Via Deep Learning: A comprehensive survey
Chen, X., Li, C., Liu, A., McKeown, M. J., Qian, R., & Wang, Z. J. (2022) · IEEE Signal Processing Magazine · doi:10.1109/msp.2021.3134629 · Cited by 99
Exploring Frequency Adversarial Attacks for Face Forgery Detection
Jia, S., Ma, C., Yao, T., Yin, B., Ding, S., & Yang, X. (2022) · 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr52688.2022.00407 · Cited by 97
Security Risks in Deep Learning Implementations
Xiao, Q., Li, K., Zhang, D., & Xu, W. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00027 · Cited by 92
Membership Inference Attacks Against Adversarially Robust Deep Learning Models
Song, L., Shokri, R., & Mittal, P. (2019) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2019.00021 · Cited by 99
A Collaborative Learning Framework via Federated Meta-Learning
Lin, S., Yang, G., & Zhang, J. (2020) · IEEE International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs47774.2020.00032 · Cited by 95
Semantic Robustness of Models of Source Code
Henkel, J., Ramakrishnan, G., Wang, Z., Albarghouthi, A., Jha, S., & Reps, T. (2022) · 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) · doi:10.1109/saner53432.2022.00070 · Cited by 92
Deep Nets: What have They Ever Done for Vision?
Yuille, A. L., & Liu, C. (2021) · International Journal of Computer Vision · doi:10.1007/s11263-020-01405-z · Cited by 98
An Empirical Study of Adversarial Examples on Remote Sensing Image Scene Classification
Chen, L., Xu, Z., Li, Q., Peng, J., Wang, S., & Li, H. (2021) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2021.3051641 · Cited by 95
On Machine Learning-Based Techniques for Future Sustainable and Resilient Energy Systems
Wang, J., Pinson, P., Chatzivasileiadis, S., Panteli, M., Štrbac, G., & Terzija, V. V. (2022) · IEEE Transactions on Sustainable Energy · doi:10.1109/tste.2022.3194728 · Cited by 92
EVAA—Exchange Vanishing Adversarial Attack on LiDAR Point Clouds in Autonomous Vehicles
Vishnu, C., Khandelwal, J., Mohan, C. K., & Cenkeramaddi, L. R. (2023) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2023.3292372 · Cited by 92
Is Machine Learning in Power Systems Vulnerable?
Chen, Y., Tan, Y., & Deka, D. (2018) · IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) · doi:10.1109/smartgridcomm.2018.8587547 · Cited by 95
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
