The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 901–1,000 of 1,004
A defense method based on attention mechanism against traffic sign adversarial samples
Li, H., Zhang, B., Zhang, Y., Dang, X., Han, Y., Wei, L., Mao, Y., & Weng, J. (2021) · Information Fusion · doi:10.1016/j.inffus.2021.05.005 · Cited by 19
Adversarial Attack and Defense in Deep Ranking
Zhou, M., Wang, L., Niu, Z., Zhang, Q., Zheng, N., & Hua, G. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3365699 · Cited by 20
Signed Laplacian Deep Learning with Adversarial Augmentation for Improved Mammography Diagnosis
Li, H., Chen, D., Nailon, W. H., Davies, M. E., & Laurenson, D. I. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-32226-7_54 · Cited by 18
On the Robustness to Adversarial Examples of Neural ODE Image Classifiers
Carrara, F., Caldelli, R., Falchi, F., & Amato, G. M. (2019) · IEEE International Workshop on Information Forensics and Security · doi:10.1109/wifs47025.2019.9035109 · Cited by 18
Li, D., Li, Q., Ye, Y., & Xu, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1812.08108 · Cited by 18
RANDOM MASK: Towards Robust Convolutional Neural NetworksPreprint
Luo, T., Cai, T., Zhang, M., Chen, S., & Wang, L. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.14249 · Cited by 18
Improved Adversarial Robustness by Reducing Open Space Risk via Tent ActivationsPreprint
Rozsa, A., & Boult, T. E. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1908.02435 · Cited by 18
Towards an Adversarially Robust Normalization ApproachPreprint
Awais, M., Shamshad, F., & Bae, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.11007 · Cited by 21
How benign is benign overfitting?Preprint
Sanyal, A., Dokania, P. K., Kanade, V., & Torr, P. H. S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.04028 · Cited by 32
Generative Adversarial Networks and Adversarial Autoencoders: Tutorial and SurveyPreprint
Ghojogh, B., Ghodsi, A., Karray, F. O., & Crowley, M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2111.13282 · Cited by 18
Adversarial Attack: A New Threat to Smart Devices and How to Defend It
Song, C., Cheng, H.-P., Yang, H., Li, S., Wu, C., Wu, Q., & Li, H. H. (2020) · IEEE Consumer Electronics Magazine · doi:10.1109/mce.2020.2969150 · Cited by 17
Saga: Sparse Adversarial Attack on EEG-Based Brain Computer Interface
Feng, B., Wang, Y., & Ding, Y. (2021) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp39728.2021.9413507 · Cited by 17
Adversarial Machine Learning on Social Network: A Survey
Guo, S., Li, X., & Mu, Z. (2021) · Frontiers in Physics · doi:10.3389/fphy.2021.766540 · Cited by 17
Model scheduling and sample selection for ensemble adversarial example attacks
Hu, Z., Li, H., Yuan, L., Cheng, Z., Yuan, W. M., & Zhu, M. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.108824 · Cited by 19
Multi-targeted audio adversarial example for use against speech recognition systems
Ko, K., Kim, S., & Kwon, H. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103168 · Cited by 17
XAI enhancing cyber defence against adversarial attacks in industrial applications
Makridis, G., Theodoropoulos, S., Dardanis, D., Makridis, I., Separdani, M. M., Fatouros, G., Kyriazis, D., & Koulouris, P. (2022) · IEEE International Conference on Image Processing, Applications and Systems (IPAS) · doi:10.1109/ipas55744.2022.10052858 · Cited by 17
Remix: Towards the transferability of adversarial examples
Zhao, H., Hao, L., Hao, K., Wei, B., & Cai, X. (2023) · Neural Networks · doi:10.1016/j.neunet.2023.04.012 · Cited by 17
Adversarial Data Augmentation for HMM-Based Anomaly Detection
Castellini, A., Masillo, F., Azzalini, D., Francesco Amigoni, A., & Farinelli, A. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3303099 · Cited by 17
Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks
Zhang, L., Zhou, Y., Yang, Y., & Gao, X. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3385745 · Cited by 18
Boosting the Transferability of Adversarial Attacks With Frequency-Aware Perturbation
Wang, Y., Wu, Y., Wu, S., Liu, X., Zhou, W., Zhu, L., & Zhang, C. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3411921 · Cited by 19
Duy, P. T., Minh, V. Q., Dang, B. T. H., Son, N. D. H., Quyen, N. H., & Pham, V.-H. (2024) · IEEE Access · doi:10.1109/access.2024.3436812 · Cited by 17
Open-Source Artificial Intelligence Privacy and Security: A Review
AL-Kharusi, Y., Khan, A., Mughal, M. R., & Bait‐Suwailam, M. M. (2024) · Computers · doi:10.3390/computers13120311 · Cited by 23
Curse of Dimensionality in Adversarial Examples
Chattopadhyay, N., Chattopadhyay, A., Gupta, S. S., & Kasper, M. E. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8851795 · Cited by 20
Ensemble Generative Cleaning With Feedback Loops for Defending Adversarial Attacks
Yuan, J., & He, Z. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00066 · Cited by 17
On Connections Between Regularizations for Improving DNN Robustness
Guo, Y., Chen, L., Chen, Y., & Zhang, C. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3006917 · Cited by 17
Improving adversarial robustness of deep neural networks by using semantic information
Wang, L., Chen, X., Tang, R., Yue, Y., Zhu, Y., Zeng, X., & Wang, W. (2021) · Knowledge-Based Systems · doi:10.1016/j.knosys.2021.107141 · Cited by 18
Dai, J., & Shu, L. (2020) · Neurocomputing · doi:10.1016/j.neucom.2020.09.052 · Cited by 17
Robust Deep Neural Network Model for Identification of Malaria Parasites in Cell Images
Huq, A., & Pervin, M. T. (2020) · IEEE Region 10 Symposium (TENSYMP) · doi:10.1109/tensymp50017.2020.9230832 · Cited by 17
Recent Advances in Large Margin Learning
Guo, Y., & Zhang, C. (2021) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2021.3091717 · Cited by 18
NIA-Network: Towards improving lung CT infection detection for COVID-19 diagnosis
Li, W., Chen, J., Chen, P., Yu, L., Cui, X., Li, Y., Cheng, F., & Ouyang, W. (2021) · Artificial Intelligence in Medicine · doi:10.1016/j.artmed.2021.102082 · Cited by 17
Crafting Adversarial Example to Bypass Flow-&ML- based Botnet Detector via RL
Wang, J., Qixu, L., Di, W., Dong, Y., & Cui, X. (2021) · International Symposium on Research in Attacks, Intrusions and Defenses (RAID) · doi:10.1145/3471621.3471841 · Cited by 17
MLCHECK– Property-Driven Testing of Machine Learning Classifiers
Sharma, A., Demir, C., Ngomo, A.-C. N., & Wehrheim, H. (2021) · International Conference on Machine Learning and Applications · doi:10.1109/icmla52953.2021.00123 · Cited by 20
Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks
Jiang, X., & Ge, Z. (2022) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2022.3145335 · Cited by 17
MRC-Based Medical NER with Multi-task Learning and Multi-strategies
Du, X., Jia, Y., & Zan, H. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-18315-7_10 · Cited by 17
Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free
Chen, T., Zhang, Z., Zhang, Y., Chang, S., Liu, S., & Wang, Z. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00068 · Cited by 18
Adversarial Attacks on Machine Learning-Based State Estimation in Power Distribution Systems
Afrin, A., & Ardakanian, O. (2023) · ACM International Conference on Future Energy Systems (e-Energy) · doi:10.1145/3575813.3597352 · Cited by 17
Deep learning for situational understanding
Chakraborty, S., Preece, A. D., Alzantot, M., Xing, T., Braines, D., & Srivastava, M. B. (2017) · International Conference on Information Fusion (FUSION) · doi:10.23919/icif.2017.8009785 · Cited by 17
Challenges of Testing Machine Learning Applications
Huang, S. (2018) · International Journal of Performability Engineering · doi:10.23940/ijpe.18.06.p18.12751282 · Cited by 17
Justification-Based Reliability in Machine Learning
Virani, N., Iyer, N., & Yang, Z. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6071 · Cited by 17
Gradients Cannot Be Tamed: Behind the Impossible Paradox of Blocking Targeted Adversarial Attacks
Katzir, Z., & Elovici, Y. (2020) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2020.2977142 · Cited by 17
Sehwag, V., Bhagoji, A. N., Song, L., Sitawarin, C., Cullina, D., Chiang, M., & Mittal, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.01726 · Cited by 20
Poison as a Cure: Detecting & Neutralizing Variable-Sized Backdoor Attacks in Deep Neural NetworksPreprint
Chan, A., & Ong, Y.-S. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.08040 · Cited by 28
Risk Bounds for Robust Deep LearningPreprint
Lederer, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2009.06202 · Cited by 17
Multi-Task Federated Reinforcement Learning with AdversariesPreprint
Anwar, A., & Raychowdhury, A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.06473 · Cited by 17
Adversarial Training Helps Transfer Learning via Better RepresentationsPreprint
Deng, Z., Zhang, L., Vodrahalli, K., Kawaguchi, K., & Zou, J. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.10189 · Cited by 17
Provably Efficient Black-Box Action Poisoning Attacks Against Reinforcement LearningPreprint
Liu, G., & Lai, L. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.04471 · Cited by 17
Kim, S. G., Ryu, S., Jin, K., & Kim, H. (2025) · Progress in Nuclear Energy · doi:10.1016/j.pnucene.2025.105605 · Cited by 16
Moving Target Defense Against Adversarial False Data Injection Attacks in Power Grids
Chen, Y., Lakshminarayana, S., & Poor, H. V. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3560127 · Cited by 16
Defense Against Adversarial Attacks via Controlling Gradient Leaking on Embedded Manifolds
Li, Y., Cheng, S., Su, H., & Zhu, J. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58604-1_45 · Cited by 16
Aliasing and adversarial robust generalization of CNNs
Grabinski, J., Keuper, J., & Keuper, M. (2022) · Machine Learning · doi:10.1007/s10994-022-06222-8 · Cited by 16
Adversarial Medical Image With Hierarchical Feature Hiding
Yao, Q., He, Z., Li, Y., Lin, Y., Ma, K., Zheng, Y., & Zhou, S. K. (2023) · IEEE Transactions on Medical Imaging · doi:10.1109/tmi.2023.3335098 · Cited by 17
Inverse design of electromagnetic metamaterials: from iterative to deep learning-based methods
Ma, C., Wang, Z., Zhang, H., Yang, F., Chen, J., Ren, Q., Ma, Y., & Wang, N. (2024) · Journal of Micromechanics and Microengineering · doi:10.1088/1361-6439/ad3a72 · Cited by 21
Generation and Countermeasures of adversarial examples on vision: a survey
Liu, J., Li, Y., Guo, Y., Liu, Y., Tang, J., & Nie, Y. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10841-z · Cited by 18
Toward Transferable Adversarial Attacks Against Autoencoder-Based Network Intrusion Detectors
Zhang, Y., Wu, Y., & Huang, X. (2024) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2024.3435532 · Cited by 16
Robust Overfitting Does Matter: Test-Time Adversarial Purification with FGSM
Tang, L., & Zhang, L. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02298 · Cited by 16
On Effectiveness of Adversarial Examples and Defenses for Malware Classification
Podschwadt, R., & Takabi, H. (2019) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-37231-6_22 · Cited by 16
Improving the affordability of robustness training for DNNs
Gupta, S., Dube, P., & Verma, A. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00398 · Cited by 16
Zhang, Q., Xin, C., & Wu, H. (2020) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2020.3040704 · Cited by 16
Chen, J., Qian, L., Urakov, T. M., Gu, W., & Liang, L. (2021) · SPIE Medical Imaging: Image Processing · doi:10.1117/12.2580852 · Cited by 16
Real-time detectors for digital and physical adversarial inputs to perception systems
Kantaros, Y., Carpenter, T. J., Sridhar, K., Yang, Y., Lee, I., & Weimer, J. E. (2021) · ACM/IEEE International Conference on Cyber-Physical Systems (ICCPS) · doi:10.1145/3450267.3450535 · Cited by 16
Active dropblock: Method to enhance deep model accuracy and robustness
Yao, J., Xing, W., Wang, D., Xing, J., & Wang, L. (2021) · Neurocomputing · doi:10.1016/j.neucom.2021.04.101 · Cited by 16
Boosting Adversarial Attacks on Neural Networks with Better Optimizer
Yin, H., Zhang, H., Wang, J., & Dou, R. (2021) · Security and Communication Networks · doi:10.1155/2021/9983309 · Cited by 17
Targeted Attack of Deep Hashing Via Prototype-Supervised Adversarial Networks
Zhang, Z., Wang, X., Lu, G., Shen, F., & Zhu, L. (2021) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2021.3097506 · Cited by 16
Adversarial Attack for Uncertainty Estimation: Identifying Critical Regions in Neural Networks
Alarab, I., & Prakoonwit, S. (2021) · Neural Processing Letters · doi:10.1007/s11063-021-10707-3 · Cited by 16
Generalized Real-World Super-Resolution through Adversarial Robustness
Castillo, A., Escobar, M., Pérez, J. C., Romero, A., Timofte, R., Gool, L. V., & Arbeláez, P. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00212 · Cited by 16
Machine Learning Approaches for the Traveling Salesman Problem: A Survey
Mele, U. J., Gambardella, L. M., & Montemanni, R. (2021) · doi:10.1145/3463858.3463869 · Cited by 18
Achieving adversarial robustness via sparsity
Liao, N., Wang, S., Xiang, L., Ye, N., Shao, S., & Chu, P. (2021) · Machine Learning · doi:10.1007/s10994-021-06049-9 · Cited by 17
Adversarial Attacks to Solar Power Forecast
Tang, N., Mao, S., & Nelms, R. M. (2021) · Globecom · doi:10.1109/globecom46510.2021.9685910 · Cited by 16
Ni, Z., Xu, J., Wu, Y., Li, M., Xu, G., & Xu, B. (2022) · IEEE Transactions on Neural Systems and Rehabilitation Engineering · doi:10.1109/tnsre.2022.3150007 · Cited by 16
Input-Specific Robustness Certification for Randomized Smoothing
Chen, R., Li, J., Yan, J., Li, P., & Sheng, B. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i6.20579 · Cited by 16
Feature selection with limited bit depth mutual information for portable embedded systems
Morán‐Fernández, L., Sechidis, K., Bolón‐Canedo, V., Alonso‐Betanzos, A., & Gavin Brown, B. (2020) · Knowledge-Based Systems · doi:10.1016/j.knosys.2020.105885 · Cited by 16
Towards Interpretable Defense Against Adversarial Attacks via Causal Inference
Ren, M., Wang, Y., & He, Z. (2022) · Machine Intelligence Research · doi:10.1007/s11633-022-1330-7 · Cited by 18
Xue, M., Yuan, C., He, C., Wu, Y., Wu, Z., Zhang, Y., Liu, Z., & Liu, W. (2022) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2022.3184408 · Cited by 16
Wang, Y., Lyu, L., & Anand, A. (2022) · ACM SIGIR International Conference on Theory of Information Retrieval (ICTIR) · doi:10.1145/3539813.3545122 · Cited by 16
Bhattacharjee, A., & Panda, P. (2022) · ACM Transactions on Design Automation of Electronic Systems · doi:10.1145/3576195 · Cited by 16
Li, W., Li, Z., Sun, J., Wang, Y., Liu, H., Yang, J., & Gui, G. (2019) · IEEE Access · doi:10.1109/access.2019.2927376 · Cited by 16
K-Anonymity inspired adversarial attack and multiple one-class classification defense
Mygdalis, V., Tefas, A., & Pitas, I. (2020) · Neural Networks · doi:10.1016/j.neunet.2020.01.015 · Cited by 17
Adversarially Robust Training through Structured Gradient RegularizationPreprint
Roth, K., Lucchi, A., Nowozin, S., & Hofmann, T. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1805.08736 · Cited by 16
Sun, K., Zhu, Z., & Lin, Z. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.11019 · Cited by 16
On the Robustness of Human Pose EstimationPreprint
Shah, S., Jain, N., Sharma, A., & Jain, A. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1908.06401 · Cited by 16
The Search for Sparse, Robust Neural NetworksPreprint
Cosentino, J., Zaiter, F., Pei, D., & Zhu, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.02386 · Cited by 24
Towards Understanding the Regularization of Adversarial Robustness on Neural NetworksPreprint
Wen, Y., Li, S., & Jia, K. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.07478 · Cited by 16
Rao, C. J. M., Cao, J., Zeng, R., Chen, Q., Fu, H., Xu, Y., & Tan, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.13969 · Cited by 16
Poisoned classifiers are not only backdoored, they are fundamentally brokenPreprint
Sun, M., Agarwal, S., & Kolter, J. Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.09080 · Cited by 16
On the Limitation of MagNet Defense Against L1-Based Adversarial Examples
Lu, P.-H., Chen, P., Chen, K.-C., & Yu, C.-M. (2018) · International Conference on Dependable Systems and Networks workshops · doi:10.1109/dsn-w.2018.00065 · Cited by 15
Masking Adversarial Damage: Finding Adversarial Saliency for Robust and Sparse Network
Lee, B., Kim, J., & Ro, Y. M. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01470 · Cited by 15
Evaluating the Vulnerability of YOLOv5 to Adversarial Attacks for Enhanced Cybersecurity in MASS
Lee, C., & Lee, S. (2023) · Journal of Marine Science and Engineering · doi:10.3390/jmse11050947 · Cited by 15
Improving Robust Fariness via Balance Adversarial Training
Sun, C., Xu, C., Yao, C., Liang, S., Wu, Y., Ding, L., Liu, X., & Liu, A. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i12.26769 · Cited by 15
CALEB: A Conditional Adversarial Learning Framework to enhance bot detection
Dimitriadis, I., Dialektakis, G., & Vakali, A. I. (2023) · Data & Knowledge Engineering · doi:10.1016/j.datak.2023.102245 · Cited by 15
Frequency-aware GAN for Adversarial Manipulation Generation
Zhu, P., Osada, G., Kataoka, H., & Takahashi, T. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00398 · Cited by 15
Order-preserving Consistency Regularization for Domain Adaptation and Generalization
Jing, M., Zhen, X., Li, J., & Snoek, C. G. M. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.01734 · Cited by 17
Explicitly Perceiving and Preserving the Local Geometric Structures for 3D Point Cloud Attack
Liu, D., & Hu, W. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i4.28146 · Cited by 15
DeeBBAA: A Benchmark Deep Black-Box Adversarial Attack Against Cyber–Physical Power Systems
Bhattacharjee, A., Bai, G., Tushar, W., Verma, A., Mishra, S., & Saha, T. K. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3454257 · Cited by 15
Improving Transferable Targeted Adversarial Attacks with Model Self-Enhancement
Wu, H., Ou, G., Wu, W., & Zheng, Z. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02324 · Cited by 15
Zhu, X., Li, K., Yang, Z., & Li, Z. (2024) · Computers & Geosciences · doi:10.1016/j.cageo.2024.105743 · Cited by 15
Challenges and prospects of artificial intelligence in aviation: a bibliometric study
Lopes, N. M., Aparício, M., & Neves, F. T. (2024) · Data Science and Management · doi:10.1016/j.dsm.2024.11.001 · Cited by 19
On the Robustness of Object Detection Models on Aerial Images
He, H., Ding, J., Xu, B., & Xia, G.-S. (2024) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2024.3514741 · Cited by 19
Kazmi, S. M. K. A., Aafaq, N., Khan, M. A., Khalil, M., & Saleem, A. (2023) · IEEE Access · doi:10.1109/access.2023.3299878 · Cited by 13
A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples
Liu, G., Khalil, I., Khreishah, A., & Phan, N. (2021) · 2021 IEEE International Conference on Big Data (Big Data) · doi:10.1109/bigdata52589.2021.9671964 · Cited by 11
Towards Quantifying the Carbon Emissions of Differentially Private Machine Learning
Naidu, R., Diddee, H., Mulay, A., Vardhan, A., Ramesh, K., & Zamzam, A. (2021) · arXiv · doi:10.48550/arxiv.2107.06946 · Cited by 10
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
