The DOI matches its DataCite record; 14 of the 14 references it cites were found in a registry or an index.
Explaining and Harnessing Adversarial Examples
Open accessAbstract
Several machine learning models, including neural networks, consistently misclassify adversarial examples---inputs formed by applying small but intentionally worst-case perturbations to examples from the dataset, such that the perturbed input results in the model outputting an incorrect answer with high confidence. Early attempts at explaining this phenomenon focused on nonlinearity and overfitting. We argue instead that the primary cause of neural networks' vulnerability to adversarial perturbation is their linear nature. This explanation is supported by new quantitative results while giving the first explanation of the most intriguing fact about them: their generalization across architectures and training sets. Moreover, this view yields a simple and fast method of generating adversarial examples. Using this approach to provide examples for adversarial training, we reduce the test set error of a maxout network on the MNIST dataset.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Moreover, adversarial training typically only improves robustness to the specific type of adversarial examples incorporated during training, potentially leaving the trained model vulnerable to other forms of adversarial noise [176, 448, 414].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [414]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Adversarial attacks help adversaries evade FL system security detection and can generate poisoned samples to undermine the FL system accuracy (Goodfellow et al. 2014;Nair et al. 2023).”
From Survey: federated learning data security and privacy-preserving in edge-Internet of Things (2024) · cites this paper as Goodfellow et al. 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Additionally, neural network-based and zero-shot detectors rely on a deep net for their detection, and they can be vulnerable to adversarial and poisoning attacks (Goodfellow et al., 2014; Sadasivan et al., 2023; Kumar et al., 2022; Wang et al., 2022).”
From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Goodfellow et al., 2014
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Tabular data can be easily shuffled, but the perturbation of images can have unpredictable effects, with research demonstrating this type of manipulation (for example, adversarial noise) both as an attack against algorithms 65 and a regularization mechanism leading to increased robustness 66 and resilience against inversion attacks.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [65]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“On the other hand, it is worth noting that researchers have recently that noticed deep neural networks are vulnerable to adversarial examples, which are carefully chosen inputs that cause the network to change output without a visible change to a human (Fig. 15) [60–63].”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
The cited source says what the claim attributes to it.
In the citing paper
“Adversarial attacks have been widely studied against ML models [47,50] under both white-box [9, 21, 31, 55] and black-box assumptions [33, 43].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [21]
The cited source says what the claim attributes to it.
In the citing paper
“Although the impact of adversarial examples in the medical domain is unknown, these studies indicate that the way artificial networks see and predict is different from the way we do.”
From Convolutional neural networks: an overview and application in radiology (2018) · cites this paper as [61]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Hochreiter, S., & Schmidhuber, J. (1997) · Neural Computation · doi:10.1162/neco.1997.9.8.1735 · Cited by 102,318
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
(2014) · Cited by 33,419
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Multilayer feedforward networks are universal approximators
Hornik, K., Stinchcombe, M., & White, H. (1989) · Neural Networks · doi:10.1016/0893-6080(89)90020-8 · Cited by 21,728
Multilayer feedforward networks are universal approximators
HornikK., StinchcombeM., & WhiteH. (1989) · Neural Networks · doi:10.5555/70405.70408 · Cited by 9,266
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Self-citationLarge Scale Distributed Deep Networks
Dean, J. B., Corrado, G. S., Monga, R., Chen, K., Devin, M., Mao, M., Ranzato, M., Senior, A., Tucker, P. A., Yang, K., et al. (2012) · Cited by 3,202
What is the best multi-stage architecture for object recognition?
Jarrett, K., Kavukcuoglu, K., Ranzato, M. A., & LeCun, Y. (2009) · 2009 IEEE 12th International Conference on Computer Vision · doi:10.1109/iccv.2009.5459469 · Cited by 2,153
Going Deeper with Convolutions
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., & Rabinovich, A. (2014) · arXiv · doi:10.48550/arxiv.1409.4842 · Cited by 1,461
Self-citation
Research works printed but not linked: 6
- Bergstra, James, Breuleux, Olivier, Bastien, Fr´ ed´ eric, Lamblin, Pascal, Pascanu, Razvan, Desjardins, Guillaume, Turian, Joseph, Warde-Farley, David, and Bengio, Yoshua. Theano: a CPU and GPU math expression compiler. In Proceedings of the Python for Scientific Computing Conference (SciPy) , June 2010. Oral Presentation.
- Chalupka, K., Perona, P., and Eberhardt, F. Visual Causal Feature Learning. ArXiv e-prints , December 2014.
- Glorot, Xavier, Bordes, Antoine, and Bengio, Yoshua. Deep sparse rectifier neural networks. In JMLR W&CP: Proceedings of the Fourteenth International Conference on Artificial Intelligence and Statistics (AISTATS 2011) , April 2011.
- Goodfellow, Ian J., Warde-Farley, David, Mirza, Mehdi, Courville, Aaron, and Bengio, Yoshua. Maxout networks. In Dasgupta, Sanjoy and McAllester, David (eds.), International Conference on Machine Learning , pp. 1319-1327, 2013c.
- Nguyen, A., Yosinski, J., and Clune, J. Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images. ArXiv e-prints , December 2014.
- Rust, Nicole, Schwartz, Odelia, Movshon, J. Anthony, and Simoncelli, Eero. Spatiotemporal elements of macaque V1 receptive fields. Neuron , 46(6):945-956, 2005.
Cited by
Sorted by citations
Items 801–900 of 1,082
Adversarial Learning Attacks on Graph-based IoT Malware Detection Systems
Abusnaina, A., Khormali, A., Alasmary, H., Park, J., Anwar, A., & Mohaisen, A. (2019) · IEEE International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs.2019.00130 · Cited by 91
Adv-watermark: A Novel Watermark Perturbation for Adversarial Examples
Jia, X., Wei, X., Cao, X., & Han, X. (2020) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3394171.3413976 · Cited by 98
Chen, J., Gao, X., Deng, R., He, Y., Fang, C., & Cheng, P. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3037500 · Cited by 96
Multi-Source Adversarial Sample Attack on Autonomous Vehicles
Xiong, Z., Xu, H., Li, W., & Cai, Z. (2021) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2021.3061065 · Cited by 95
Attention based multi-agent intrusion detection systems using reinforcement learning
Sethi, K., Madhav, Y. V., Kumar, R., & Bera, P. (2021) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2021.102923 · Cited by 95
Adversarial Attacks and Defense for CNN Based Power Quality Recognition in Smart Grid
Tian, J., Wang, B., Li, J., & Wang, Z. (2021) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2021.3135565 · Cited by 95
Towards Risk‐Free Trustworthy Artificial Intelligence: Significance and Requirements
Alzubaidi, L., Al-Sabaawi, A., Bai, J., Dukhan, A., Alkenani, A. H., Al‐Asadi, A., Alwzwazy, H. A., Manoufali, M., Fadhel, M. A., Albahri, A. S., et al. (2023) · International Journal of Intelligent Systems · doi:10.1155/2023/4459198 · Cited by 116
A review of explainable artificial intelligence in smart manufacturing
Madathil, A. P., Luo, X., Liu, Q., Walker, C. T., Madarkar, R., & Qin, Y. (2025) · International Journal of Production Research · doi:10.1080/00207543.2025.2513574 · Cited by 121
The Limitations of Adversarial Training and the Blind-Spot AttackPreprint
Zhang, H., Chen, H., Song, Z., Boning, D. S., Dhillon, I. S., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.04684 · Cited by 103
Measure and Improve Robustness in NLP Models: A Survey
Wang, X., Wang, H., & Yang, D. (2022) · Proceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies · doi:10.18653/v1/2022.naacl-main.339 · Cited by 90
Soft biometric privacy: Retaining biometric utility of face images while perturbing gender
Mirjalili, V., & Ross, A. A. (2017) · IEEE International Joint Conference on Biometrics (IJCB) · doi:10.1109/btas.2017.8272743 · Cited by 97
Ruan, W., Wu, M., Sun, Y., Huang, X., Kroening, D., & Kwiatkowska, M. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/824 · Cited by 92
AdvGAN++: Harnessing Latent Layers for Adversary Generation
Jandial, S., Mangla, P., Varshney, S., & Balasubramanian, V. N. (2019) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw.2019.00257 · Cited by 92
A Survey of Deep Learning-Based Source Image Forensics
Yang, P., Baracchi, D., Ni, R., Zhao, Y., Argenti, F., & Piva, A. (2020) · Journal of Imaging · doi:10.3390/jimaging6030009 · Cited by 117
Understanding More About Human and Machine Attention in Deep Neural Networks
Lai, Q., Khan, S. H., Nie, Y., Sun, H., Shen, J., & Shao, L. (2020) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2020.3007321 · Cited by 102
The Quantum Wasserstein Distance of Order 1
Palma, G. D., Marvian, M., Trevisan, D., & Lloyd, S. (2021) · IEEE Transactions on Information Theory · doi:10.1109/tit.2021.3076442 · Cited by 117
Adversarial Attacks Against Deep Generative Models on Data: A Survey
Sun, H., Zhu, T., Zhang, Z., Jin, D., Xiong, P., & Zhou, W. (2023) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3130903 · Cited by 90
Robust Data-Driven Detection of Electricity Theft Adversarial Evasion Attacks in Smart Grids
Takiddin, A., Ismail, M., & Serpedin, E. (2022) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2022.3193989 · Cited by 93
Predictive Uncertainty Estimation for Camouflaged Object Detection
Zhang, Y., Zhang, J., Hamidouche, W., & Olivier Déforges, A. (2023) · IEEE Transactions on Image Processing · doi:10.1109/tip.2023.3287137 · Cited by 91
Supervised Adversarial Contrastive Learning for Emotion Recognition in Conversations
Hu, D., Bao, Y., Wei, L., Zhou, W. G., & Hu, S. (2023) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2023.acl-long.606 · Cited by 116
Fan, Y., Dong, H., Zhao, X., & Denissenko, P. (2024) · IEEE Transactions on Control Systems Technology · doi:10.1109/tcst.2024.3377876 · Cited by 97
Distinguishing Reality from AI: Approaches for Detecting Synthetic Content
Ghiurău, D., & Popescu, D. E. (2024) · Computers · doi:10.3390/computers14010001 · Cited by 122
Analyzing the Robustness of Nearest Neighbors to Adversarial ExamplesPreprint
Wang, Y., Jha, S., & Chaudhuri, K. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1706.03922 · Cited by 90
Scenic: a language for scenario specification and data generation
Fremont, D. J., Kim, E., Dreossi, T., Ghosh, S., Yue, X., Sangiovanni-Vincentelli, A. L., & Seshia, S. A. (2023) · Machine Learning · doi:10.1007/s10994-021-06120-5 · Cited by 112
Physics-Driven Regularization of Deep Neural Networks for Enhanced Engineering Design and Analysis
Nabian, M. A., & Meidani, H. (2019) · Journal of Computing and Information Science in Engineering · doi:10.1115/1.4044507 · Cited by 97
Feature Purification: How Adversarial Training Performs Robust Deep Learning
Allen-Zhu, Z., & Li, Y. (2022) · Annual Symposium on Foundations of Computer Science · doi:10.1109/focs52979.2021.00098 · Cited by 126
Understanding Catastrophic Overfitting in Single-step Adversarial Training
Kim, H., Lee, W., & Lee, J. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i9.16989 · Cited by 97
Adversarial Examples for CNN-Based SAR Image Classification: An Experience Study
Li, H., Huang, H., Chen, L., Peng, J., Huang, H., Cui, Z., Mei, X., & Wu, G. (2020) · IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing · doi:10.1109/jstars.2020.3038683 · Cited by 90
Turbulence closure for high Reynolds number airfoil flows by deep neural networks
Zhu, L., Zhang, W., Sun, X., Liu, Y., & Yuan, X. (2020) · Aerospace Science and Technology · doi:10.1016/j.ast.2020.106452 · Cited by 90
Fooling Thermal Infrared Pedestrian Detectors in Real World Using Small Bulbs
Zhu, X., Li, X., Li, J., Wang, Z., & Hu, X. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i4.16477 · Cited by 89
Structure and performance of fully connected neural networks: Emerging complex network properties
Scabini, L. F. D. S., & Bruno, O. M. (2023) · Physica A Statistical Mechanics and its Applications · doi:10.1016/j.physa.2023.128585 · Cited by 111
T-BFA: T argeted B it- F lip Adversarial Weight A ttack
Rakin, A. S., He, Z., Li, J., Yao, F., Chakrabarti, C., & Fan, D. (2021) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2021.3112932 · Cited by 106
Multimodal Emotion Recognition with High-Level Speech and Text Features
Makiuchi, M. R., Uto, K., & Shinoda, K. (2021) · IEEE Workshop on Automatic Speech Recognition and Understanding (ASRU) · doi:10.1109/asru51503.2021.9688036 · Cited by 92
Fusing feature engineering and deep learning: A case study for malware classification
Gibert, D., Planes, J., Mateu, C., & Le, Q. (2022) · Expert Systems with Applications · doi:10.1016/j.eswa.2022.117957 · Cited by 89
APMSA: Adversarial Perturbation Against Model Stealing Attacks
Zhang, J., Peng, S., Gao, Y., Zhang, Z., & Hong, Q. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3246766 · Cited by 89
Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization
Zhang, J., Huang, Y., Wu, W., & Lyu, M. R.-T. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01575 · Cited by 101
Dong, L., Wang, Z., Wang, T., Guan, W., Gao, H., & Zheng, F. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00016 · Cited by 92
Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete DataPreprint
Yang, P., Chen, J., Hsieh, C., Wang, J.-L., & Jordan, M. I. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1805.12316 · Cited by 93
Bad Characters: Imperceptible NLP Attacks
Boucher, N., Shumailov, I., Anderson, R., & Papernot, N. (2022) · 2022 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp46214.2022.9833641 · Cited by 102
Adversarial Attacks and Defenses Against Deep Neural Networks: A Survey
Ozdag, M. (2018) · Procedia Computer Science · doi:10.1016/j.procs.2018.10.315 · Cited by 95
Temel, D., Chen, M.-H., & AlRegib, G. (2019) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2019.2931429 · Cited by 88
Chernikova, A., Oprea, A., Nita-Rotaru, C., & Kim, B. (2019) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2019.00033 · Cited by 88
An Adversarial Perturbation Oriented Domain Adaptation Approach for Semantic Segmentation
Yang, J., Xu, R., Li, R., Qi, X., Shen, X., Li, G., & Lin, L. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6952 · Cited by 92
The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection
Hameed, M. Z., György, A., & Gündüz, D. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3025441 · Cited by 90
OpenAttack: An Open-source Textual Adversarial Attack Toolkit
Zeng, G., Qi, F., Zhou, Q., Zhang, T., Ma, Z., Hou, B., Zang, Y., Liu, Z., & Sun, M. (2021) · Annual Meeting of the Association for Computational Linguistics: System Demonstrations (ACL Demo) · doi:10.18653/v1/2021.acl-demo.43 · Cited by 111
Adversarial Robustness under Long-Tailed Distribution
Wu, T., Liu, Z., Huang, Q., Wang, Y., & Lin, D. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00855 · Cited by 92
Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions
Omar, M., Choi, S., Nyang, D., & Mohaisen, A. (2022) · IEEE Access · doi:10.1109/access.2022.3197769 · Cited by 104
Ensemble Multifeatured Deep Learning Models and Applications: A Survey
Abimannan, S., El-Alfy, E.-S. M., Chang, Y., Hussain, S., Shukla, S., & Satheesh, D. (2023) · IEEE Access · doi:10.1109/access.2023.3320042 · Cited by 107
Connecting Pixels to Privacy and Utility: Automatic Redaction of Private Information in Images
Orekondy, T., Fritz, M., & Schiele, B. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00883 · Cited by 94
Understanding and Enhancing the Transferability of Adversarial ExamplesPreprint
Wu, L., Zhu, Z., Tai, C., & Weinan, E. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1802.09707 · Cited by 133
An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences
Guo, W., Tondi, B., & Barni, M. (2022) · IEEE Open Journal of Signal Processing · doi:10.1109/ojsp.2022.3190213 · Cited by 91
Heuristic Black-Box Adversarial Attacks on Video Recognition Models
Wei, Z., Chen, J., Wei, X., Jiang, L., Chua, T., Zhou, F., & Jiang, Y. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6918 · Cited by 93
Adversarial Attacks and Defenses on Cyber–Physical Systems: A Survey
Li, J., Liu, Y., Chen, T., Xiao, Z., Li, Z., & Wang, J. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.2975654 · Cited by 95
One Parameter Defense—Defending Against Data Inference Attacks via Differential Privacy
Ye, D., Shen, S., Zhu, T., Liu, B., & Zhou, W. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3163591 · Cited by 94
A Survey on Malware Detection with Graph Representation Learning
Bilot, T., Madhoun, N. E., Agha, K. A., & Zouaoui, A. (2024) · ACM Computing Surveys · doi:10.1145/3664649 · Cited by 112
Black-box Detection of Backdoor Attacks with Limited Information and Data
Dong, Y., Yang, X., Deng, Z., Pang, T., Xiao, Z., Su, H., & Zhu, J. (2021) · 2021 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01617 · Cited by 92
Obfuscating Gender in Social Media Writing
Reddy, S., & Knight, K. K. (2016) · Workshop on Natural Language Processing and Computational Social Science (NLP+CSS) · doi:10.18653/v1/w16-5603 · Cited by 86
Ask, Acquire, and Attack: Data-Free UAP Generation Using Class Impressions
Mopuri, K. R., Uppala, P. K., & Babu, R. V. (2018) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-01240-3_2 · Cited by 86
Ranjan, A., Janai, J., Geiger, A., & Black, M. J. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00249 · Cited by 90
Apricot: A Weight-Adaptation Approach to Fixing Deep Learning Models
Zhang, H., & Chan, W. K. (2019) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase.2019.00043 · Cited by 88
Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study
Nguyen, D.-L., Arora, S. S., Wu, Y., & Yang, H. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00415 · Cited by 86
Adaptive Square Attack: Fooling Autonomous Cars With Adversarial Traffic Signs
Li, Y., Xu, X., Xiao, J., Li, S., & Shen, H. T. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3016145 · Cited by 86
Chaotic Weights: A Novel Approach to Protect Intellectual Property of Deep Neural Networks
Lin, N., Chen, X., Lü, H., & Li, X. (2020) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2020.3018403 · Cited by 89
FIFO: Learning Fog-invariant Features for Foggy Scene Segmentation
Lee, S., Son, T., & Kwak, S. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01834 · Cited by 90
An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability
Chen, B., Yin, J.-L., Chen, S., Chen, B., & Liu, X. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00414 · Cited by 96
Assuring the Machine Learning Lifecycle: Desiderata, Methods, and ChallengesPreprint
Ashmore, R., Călinescu, R., & Paterson, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.04223 · Cited by 86
Stealing Links from Graph Neural NetworksPreprint
He, X., Jia, J., Michael Backes, A., Gong, N. Z., & Zhang, Y. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2005.02131 · Cited by 95
Adversarial sample detection for deep neural network through model mutation testingPreprint
Wang, J., DONG, G., Sun, J., Wang, X., & PEIXIN, Z. (2019) · Singapore Management University Institutional Knowledge (InK) (Singapore Management University) · Cited by 96
Adversarially Regularising Neural
Minervini, P., & Riedel, S. (2018) · Conference on Computational Natural Language Learning · doi:10.18653/v1/k18-1007 · Cited by 85
PuVAE: A Variational Autoencoder to Purify Adversarial Examples
Hwang, U., Park, J., Jang, H., Yoon, S., & Cho, N. I. (2019) · IEEE Access · doi:10.1109/access.2019.2939352 · Cited by 91
Adversarial Attack on Skeleton-Based Human Action Recognition
Liu, J., Akhtar, N., & Mian, A. S. (2020) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2020.3043002 · Cited by 90
Trojan Attacks on Wireless Signal Classification with Adversarial Machine Learning
Davaslıoğlu, K., & Sagduyu, Y. E. (2019) · IEEE International Symposium on Dynamic Spectrum Access Networks · doi:10.1109/dyspan.2019.8935782 · Cited by 83
Defending and Harnessing the Bit-Flip Based Adversarial Weight Attack
He, Z., Rakin, A. S., Li, J., Chakrabarti, C., & Fan, D. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01410 · Cited by 85
Masksembles for Uncertainty Estimation
Durasov, N., Bagautdinov, T., Baqué, P., & Fua, P. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01333 · Cited by 90
Towards Data-Free Model Stealing in a Hard Label Setting
Sanyal, S., Addepalli, S., & Babu, R. V. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01485 · Cited by 85
Restricted Black-Box Adversarial Attack Against DeepFake Face Swapping
Dong, J., Wang, Y., Lai, J., & Xie, X. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3266702 · Cited by 93
Cybersecurity of Unmanned Aerial Vehicles: A Survey
Yu, Z., Wang, Z., Yu, J., Liu, D., Song, H. H., & Li, Z. (2023) · IEEE Aerospace and Electronic Systems Magazine · doi:10.1109/maes.2023.3318226 · Cited by 85
Regularizing Deep Networks Using Efficient Layerwise Adversarial Training
Sankaranarayanan, S., Jain, A., Chellappa, R., & Lim, S. N. (2018) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v32i1.11688 · Cited by 15
Improving Visual Road Condition Assessment by Extensive Experiments on the Extended GAPs Dataset
Stricker, R., Eisenbach, M., Sesselmann, M., Debes, K., & Groß, H. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8852257 · Cited by 87
Adversarial Metric Attack and Defense for Person Re-Identification
Bai, S., Li, Y., Zhou, Y., Li, Q., & Torr, P. H. S. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3031625 · Cited by 91
Mortier, T., Wieme, A. D., Vandamme, P. A. R., & Waegeman, W. (2021) · Computational and Structural Biotechnology Journal · doi:10.1016/j.csbj.2021.11.004 · Cited by 84
Anti-DreamBooth: Protecting users from personalized text-to-image synthesis
Le, T. V., Phung, H., Nguyen, T. H., Dao, Q. T., Tran, N., & Tran, A. N. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00202 · Cited by 112
Deep Dictionary Learning: A PARametric NETwork Approach
Mahdizadehaghdam, S., Panahi, A., Krim, H., & Dai, L. (2019) · IEEE Transactions on Image Processing · doi:10.1109/tip.2019.2914376 · Cited by 83
Ayhan, M. S., Kuehlewein, L., Aliyeva, G., INHOFFEN, W., Ziemssen, F., & Berens, P. (2020) · Medical Image Analysis · doi:10.1016/j.media.2020.101724 · Cited by 90
Robust Deep Learning-Based Diagnosis of Mixed Faults in Rotating Machinery
Chen, S., Meng, Y., Tang, H., Tian, Y., He, N., & Shao, C. (2020) · IEEE/ASME Transactions on Mechatronics · doi:10.1109/tmech.2020.3007441 · Cited by 83
A survey of machine learning techniques in adversarial image forensics
Nowroozi, E., Dehghantanha, A., Parizi, R. M., & Choo, K. R. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102092 · Cited by 88
Robust Android Malware Detection System Against Adversarial Attacks Using Q-Learning
Rathore, H., Sahay, S. K., Nikam, P., & Sewak, M. (2020) · Information Systems Frontiers · doi:10.1007/s10796-020-10083-8 · Cited by 83
Humans can decipher adversarial images
Zhou, Z., & Firestone, C. (2019) · RePEc: Research Papers in Economics · Cited by 87
Adversarial Attacks Against Face Recognition: A Comprehensive Study
Vakhshiteh, F., Nickabadi, A., & Ramachandra, R. (2021) · IEEE Access · doi:10.1109/access.2021.3092646 · Cited by 103
Explainable deep learning in healthcare: A methodological survey from an attribution view
Jin, D., Sergeeva, E., Weng, W., Chauhan, G., & Szolovits, P. (2022) · WIREs Mechanisms of Disease · doi:10.1002/wsbm.1548 · Cited by 98
A survey on adversarial attacks in computer vision: Taxonomy, visualization and future directions
Long, T., Gao, Q., Xu, L., & Zhou, Z. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102847 · Cited by 90
Johnson, J. S. (2022) · Defence Studies · doi:10.1080/14702436.2022.2102486 · Cited by 117
AI Security for Geoscience and Remote Sensing: Challenges and future trends
Xu, Y., Bai, T., Yu, W., Chang, S., Atkinson, P. M., & Ghamisi, P. (2023) · IEEE Geoscience and Remote Sensing Magazine · doi:10.1109/mgrs.2023.3272825 · Cited by 92
Roshan, K., Zafar, A., & Haque, S. B. U. (2023) · Computer Communications · doi:10.1016/j.comcom.2023.09.030 · Cited by 91
Fooling Vision and Language Models Despite Localization and Attention Mechanism
Xu, X., Chen, X., Liu, C., Rohrbach, A., Darrell, T., & Song, D. X. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00520 · Cited by 92
Survey of Face Detection on Low-Quality Images
Zhou, Y., Liu, D., & Huang, T. S. (2018) · International Conference on Automatic Face and Gesture Recognition · doi:10.1109/fg.2018.00121 · Cited by 83
Improving the Generalization of Adversarial Training with Domain AdaptationPreprint
Song, C., He, K., Wang, L., & Hopcroft, J. E. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.00740 · Cited by 111
Graph Neural Networks with Continual Learning for Fake News Detection from Social MediaPreprint
Han, Y., Karunasekera, S. A., & Leckie, C. A. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.03316 · Cited by 137
Wang, C., Yang, J., Xie, L., & Yuan, J. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00012 · Cited by 82
Automated detection & classification of knee arthroplasty using deep learning
Yi, P. H., Wei, J., Kim, T. K., Sair, H. I., Hui, F. K., Hager, G. D., Fritz, J. M., & Oni, J. K. (2019) · The Knee · doi:10.1016/j.knee.2019.11.020 · Cited by 84
Metadata
- Authors
- Goodfellow, I. J., Shlens, J., & Szegedy, C.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2014
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1412.6572
- OpenAlex
- W1945616565
- Cited by
- 10,381
- References
- 14
- Citations by year
- 2026: 66 · 2025: 843 · 2024: 1806 · 2023: 1966 · 2022: 1649 · 2021: 1599 · 2020: 1112 · 2019: 767 · 2018: 383 · 2017: 124 · 2016: 43 · 2015: 15 · 2014: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- International Conference on Learning Representations
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Keywords
- adversarial examples, adversarial perturbations, neural network vulnerabilities, linearization, adversarial training, MNIST, robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
