The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 101–200 of 1,004
Adversarial Robustness through Local LinearizationPreprint
Qin, C., Martens, J., Gowal, S., Krishnan, D., Dvijotham, K., Fawzi, A., De, S., Stanforth, R., & Kohli, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1907.02610 · Cited by 218
Image Super-Resolution as a Defense Against Adversarial Attacks
Mustafa, A., Khan, S. H., Hayat, M., Shen, J., & Shao, L. (2019) · IEEE Transactions on Image Processing · doi:10.1109/tip.2019.2940533 · Cited by 224
Distortion Agnostic Deep Watermarking
Luo, X., Zhan, R., Chang, H., Yang, F., & Milanfar, P. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01356 · Cited by 216
Defense Against Universal Adversarial Perturbations
Akhtar, N., Liu, J., & Mian, A. S. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00357 · Cited by 224
When Machine Learning Meets Privacy in 6G: A Survey
Sun, Y., Liu, J., Wang, J., Cao, Y., & Kato, N. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3011561 · Cited by 211
Applying Machine Learning in Self-adaptive Systems
Gheibi, O., Weyns, D., & Quin, F. (2020) · ACM Transactions on Autonomous and Adaptive Systems · doi:10.1145/3469440 · Cited by 231
Are Labels Required for Improving Adversarial Robustness?Preprint
Uesato, J., Alayrac, J.-B., Huang, P.-S., Stanforth, R., Fawzi, A., & Kohli, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.13725 · Cited by 207
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural NetworksPreprint
Fazlyab, M., Robey, A., Hassani, H., Morari, M., & Pappas, G. J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.04893 · Cited by 207
Adversarial Deep Learning for Robust Detection of Binary Encoded Malware
Al-Dujaili, A., Huang, A., Hemberg, E., & O’Reilly, U.-M. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00020 · Cited by 206
Wang, Y., Sun, T. S., Li, S., Yuan, X., Ni, W., Hossain, E., & Poor, H. V. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3319492 · Cited by 230
Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning
Chen, T., Liu, S., Chang, S., Cheng, Y., Amini, L., & Wang, Z. (2020) · 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr42600.2020.00078 · Cited by 205
On the use of artificial neural networks in topology optimisation
Woldseth, R. V., Aage, N., Bærentzen, J. A., & Sigmund, O. (2022) · Structural and Multidisciplinary Optimization · doi:10.1007/s00158-022-03347-1 · Cited by 216
Measuring the tendency of CNNs to Learn Surface Statistical RegularitiesPreprint
Jo, J., & Bengio, Y. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1711.11561 · Cited by 250
A general framework for adversarial examples with objectives
Sharif, M., Bhagavatula, S., Bauer, L., & Reiter, M. K. (2019) · ACM Transactions on Privacy and Security · doi:10.1145/3317611 · Cited by 200
The security of machine learning in an adversarial setting: A survey
Wang, X., Li, J., Kuang, X., Tan, Y., & Li, J. (2019) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2019.03.003 · Cited by 206
Adversarial Training Towards Robust Multimedia Recommender System
Tang, J., Du, X., He, X., Yuan, F., Tian, Q., & Chua, T. (2019) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2019.2893638 · Cited by 197
Machine Learning Security: Threats, Countermeasures, and Evaluations
Xue, M., Yuan, C., Wu, H., Zhang, Y., & Liu, W. (2020) · IEEE Access · doi:10.1109/access.2020.2987435 · Cited by 215
Human Uncertainty Makes Classification More Robust
Peterson, J., Battleday, R., Griffiths, T., & Russakovsky, O. (2019) · 2019 IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00971 · Cited by 196
You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle
Zhang, D., Zhang, T., Lu, Y., Zhu, Z., & Dong, B. (2019) · ePrints Soton (University of Southampton) · doi:10.48550/arxiv.1905.00877 · Cited by 233
Artificial Intelligence Crime: An Overview of Malicious Use and Abuse of AI
Blauth, T. F., Gstrein, O. J., & Zwitter, A. (2022) · IEEE Access · doi:10.1109/access.2022.3191790 · Cited by 228
Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses
Deng, Y., Zhang, T., Lou, G., Zheng, X., Jin, J., & Han, Q. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3071405 · Cited by 203
Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial TrainingPreprint
Zhang, H., & Wang, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1907.10764 · Cited by 196
Fast Feature Fool: A data independent approach to universal adversarial perturbations
Reddy, K. R., Garg, U., & Babu, R. V. (2017) · British Machine Vision Conference (BMVC) · doi:10.5244/c.31.30 · Cited by 192
Improving the Reliability of Deep Neural Networks in NLP: A Review
Alshemali, B., & Kalita, J. K. (2019) · Knowledge-Based Systems · doi:10.1016/j.knosys.2019.105210 · Cited by 203
Towards Transferable Adversarial Attack Against Deep Face Recognition
Zhong, Y., & Deng, W. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3036801 · Cited by 196
Feature Space Perturbations Yield More Transferable Adversarial Examples
Inkawhich, N., Wen, W., Li, H. H., & Chen, Y. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00723 · Cited by 196
An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models
Deng, Y., Zheng, X., Zhang, T., Chen, C., Lou, G., & Kim, M. (2020) · IEEE International Conference on Pervasive Computing and Communications · doi:10.1109/percom45495.2020.9127389 · Cited by 197
Osadchy, M., Hernandez-Castro, J. C., Gibson, S. J., Dunkelman, O., & Pérez‐Cabo, D. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2718479 · Cited by 191
Adversarial Machine Learning in Image Classification: A Survey Toward the Defender’s Perspective
Machado, G. R., Silva, E., & Goldschmidt, R. R. (2021) · ACM Computing Surveys · doi:10.1145/3485133 · Cited by 195
Detecting the Unexpected via Image Resynthesis
Lis, K., Nakka, K. K., Fua, P., & Salzmann, M. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00224 · Cited by 192
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers
Liu, D., Yu, R., & Su, H. (2019) · Proceedings - International Conference on Image Processing · doi:10.1109/icip.2019.8803770 · Cited by 185
DaST: Data-Free Substitute Training for Adversarial Attacks
Zhou, M., Wu, J., Liu, Y., Liu, S., & Zhu, C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00031 · Cited by 180
Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection
Li, D., & Li, Q. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3003571 · Cited by 178
Towards Stable and Efficient Training of Verifiably Robust Neural NetworksPreprint
Zhang, H., Chen, H., Xiao, C., Gowal, S., Stanforth, R., Li, B., Boning, D. S., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.06316 · Cited by 177
Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification
Cao, X., & Gong, N. Z. (2017) · Annual Computer Security Applications Conference · doi:10.1145/3134600.3134606 · Cited by 190
Rethinking Feature Distribution for Loss Functions in Image Classification
Wan, W., Zhong, Y., Li, T., & Chen, J. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00950 · Cited by 181
DUP-Net: Denoiser and Upsampler Network for 3D Adversarial Point Clouds Defense
Zhou, H., Chen, K., Zhang, W., Fang, H., Zhou, W., & Yu, N. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00205 · Cited by 174
Hosseini, H., & Poovendran, R. (2018) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2018.00212 · Cited by 172
Boosting the Transferability of Adversarial Samples via Attention
Wu, W., Su, Y., Chen, X., Zhao, S., King, I., Lyu, M. R.-T., & Tai, Y. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00124 · Cited by 179
VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity
Abdelnabi, S., Krombholz, K., & Fritz, M. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3417233 · Cited by 170
Wani, N. A., Kumar, R., Mamta, ., Bedi, J., & Rida, I. (2024) · Information Fusion · doi:10.1016/j.inffus.2024.102472 · Cited by 172
Vulnerability of Machine Learning Approaches Applied in IoT-Based Smart Grid: A Review
Zhang, Z., Liu, M., Sun, M., Deng, R., Cheng, P., Niyato, D. T., Chow, M., & Chen, J. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3349381 · Cited by 170
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing
Wang, J., Dong, G., Sun, J., Wang, X., & Zhang, P. (2019) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse.2019.00126 · Cited by 175
How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses
Costa, J. C., Roxo, T., Proença, H. P. M. C., & Inácio, P. R. M. (2024) · IEEE Access · doi:10.1109/access.2024.3395118 · Cited by 196
LAS-AT: Adversarial Training with Learnable Attack Strategy
Jia, X., Zhang, Y., Wu, B., Ma, K., Wang, J., & Cao, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01304 · Cited by 168
Robust Deep Reinforcement Learning against Adversarial Perturbations on State ObservationsPreprint
Zhang, H., Chen, H., Xiao, C., Li, B., Liu, M., Boning, D. S., & Hsieh, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.08938 · Cited by 181
AdvFaces: Adversarial Face Synthesis
Deb, D., Zhang, J., & Jain, A. K. (2020) · IEEE International Joint Conference on Biometrics (IJCB) · doi:10.1109/ijcb48548.2020.9304898 · Cited by 167
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data
Correia-Silva, J. R., Berriel, R. F., Badue, C. S., Souza, A. F. D., & Oliveira-Santos, T. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489592 · Cited by 168
Quantum adversarial machine learning
Lu, S., Duan, L.-M., & Deng, D.-L. (2020) · Physical Review Research · doi:10.1103/physrevresearch.2.033212 · Cited by 187
Macas, M., Wu, C., & Fuertes, W. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.122223 · Cited by 175
Patch-Wise Attack for Fooling Deep Neural Network
Gao, L., Zhang, Q., Song, J., Liu, X., & Shen, H. T. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58604-1_19 · Cited by 168
Defensive Quantization: When Efficiency Meets RobustnessPreprint
Lin, J., Gan, C., & Han, S. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1904.08444 · Cited by 190
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorchPreprint
Ding, G. W., Wang, L., & Jin, X. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.07623 · Cited by 199
Curriculum Adversarial Training
Cai, Q.-Z., Liu, C., & Song, D. X. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/520 · Cited by 185
Towards Adversarially Robust Object Detection
Zhang, H., & Wang, J. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00051 · Cited by 157
Quantum noise protects quantum classifiers against adversaries
Du, Y., Hsieh, M.-H., Liu, T., Tao, D., & Liu, N. (2021) · Physical Review Research · doi:10.1103/physrevresearch.3.023153 · Cited by 173
Deep-Based Conditional Probability Density Function Forecasting of Residential Loads
Afrasiabi, M., Mohammadi, M., Rastegar, M., Stanković, L., Afrasiabi, S., & Khazaei, M. (2020) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2020.2972513 · Cited by 156
Solving a Class of Non-Convex Min-Max Games Using Iterative First Order MethodsPreprint
Nouiehed, M., Sanjabi, M., Huang, T., Lee, J. D., & Razaviyayn, M. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.08297 · Cited by 156
Towards Robust Detection of Adversarial ExamplesPreprint
Pang, T., Du, C., Dong, Y., & Zhu, J. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1706.00633 · Cited by 159
Barrage of Random Transforms for Adversarially Robust Defense
Raff, E., Sylvester, J., Forsyth, S., & McLean, M. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00669 · Cited by 157
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks
Mustafa, A., Khan, S. H., Hayat, M., Goecke, R., Shen, J., & Shao, L. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00348 · Cited by 158
DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model
Ling, X., Ji, S., Zou, J., Wang, J., Wu, C., Li, B., & Wang, T. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00023 · Cited by 152
Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability
Xiong, Y., Lin, J., Zhang, M., Hopcroft, J. E., & He, K. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01456 · Cited by 165
PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving
Kong, Z., Guo, J., Li, A., & Liu, C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01426 · Cited by 160
Adversarial Examples on Object Recognition
Serban, A., Poll, E., & Visser, J. (2020) · ACM Computing Surveys · doi:10.1145/3398394 · Cited by 160
AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds
Hamdi, A., Rojas, S., Thabet, A., & Ghanem, B. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58610-2_15 · Cited by 149
Jain, A. K., Deb, D., & Engelsma, J. J. (2021) · IEEE Transactions on Biometrics Behavior and Identity Science · doi:10.1109/tbiom.2021.3115465 · Cited by 158
NAG: Network for Adversary Generation
Mopuri, K. R., Ojha, U., Garg, U., & Babu, R. V. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00084 · Cited by 148
Survey on smart homes: Vulnerabilities, risks, and countermeasures
Hammi, B., Zeadally, S., Khatoun, R., & Nebhen, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102677 · Cited by 162
Xu, Y., Du, B., & Zhang, L. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3118977 · Cited by 150
Benchmarking Neural Network Robustness to Common Corruptions and Surface VariationsPreprint
Hendrycks, D., & Dietterich, T. G. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1807.01697 · Cited by 203
Adversarial training and robustness for multiple perturbations
Tramèr, F., & Boneh, D. (2019) · arXiv · doi:10.48550/arxiv.1904.13000 · Cited by 145
Adversarial Robustness vs. Model Compression, or Both?
Ye, S., Xu, K., Liu, S., Cheng, H., Lambrechts, J.-H., Zhang, H., Zhou, A., Ma, K., Wang, Y., & Lin, X. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00020 · Cited by 149
Deep learning models for electrocardiograms are susceptible to adversarial attack
Han, X., Hu, Y., Foschini, L., Chinitz, L. A., Jankelson, L., & Ranganath, R. (2020) · Nature Medicine · doi:10.1038/s41591-020-0791-x · Cited by 146
Understanding Adversarial Examples From the Mutual Influence of Images and Perturbations
Zhang, C., Benz, P., Imtiaz, T., & Kweon, I. S. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01453 · Cited by 144
When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures
Fidel, G., Bitton, R., & Shabtai, A. (2020) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn48605.2020.9207637 · Cited by 151
Towards a Robust Deep Neural Network against Adversarial Texts: A Survey
Wang, W., Wang, R., Wang, L., Wang, Z., & Ye, A. (2021) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3117608 · Cited by 171
Machine learning accelerates the materials discovery
Fang, J., Xie, M., He, X., Zhang, J., Hu, J., Chen, Y., Yang, Y., & Jin, Q. (2022) · Materials Today Communications · doi:10.1016/j.mtcomm.2022.104900 · Cited by 145
Adversarial Examples in Modern Machine Learning: A ReviewPreprint
Wiyatno, R. R., Xu, A., Dia, O., & de Berker, A. O. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.05268 · Cited by 168
On Physical Adversarial Patches for Object DetectionPreprint
Lee, M., & Kolter, J. Z. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.11897 · Cited by 181
Avoiding an Oppressive Future of Machine Learning: A Design Theory for Emancipatory assistants
Kane, G. C., Young, A., Majchrzak, A., & Ransbotham, S. (2021) · MIS Quarterly · doi:10.25300/misq/2021/1578 · Cited by 151
Adversarial Attacks Beyond the Image Space
Zeng, X., Liu, C., Wang, Y.-S., Qiu, W., Xie, L., Tai, Y., Tang, C., & Yuille, A. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00443 · Cited by 140
Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors
Cohen, G., Sapiro, G., & Giryes, R. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01446 · Cited by 139
A Systematic Review of the State of Cyber-Security in Water Systems
Tuptuk, N., Hazell, P., Watson, J., & Hailes, S. (2021) · Water · doi:10.3390/w13010081 · Cited by 138
Adversarial attacks and defenses on AI in medical imaging informatics: A survey
Kaviani, S., Han, K. J., & Sohn, I. (2022) · Expert Systems with Applications · doi:10.1016/j.eswa.2022.116815 · Cited by 148
A Closer Look at Accuracy vs. RobustnessPreprint
Yang, Y.-Y., Rashtchian, C., Change Institutions to: University of Waterloo, Salakhutdinov, R., & Chaudhuri, K. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.02460 · Cited by 150
Adversarial Examples Against the Deep Learning Based Network Intrusion Detection Systems
Yang, K., Liu, J., Zhang, C., & Fang, Y. M. (2018) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2018.8599759 · Cited by 137
Chen, H., Zhang, H., Chen, P., Yi, J., & Hsieh, C. (2018) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p18-1241 · Cited by 155
Towards Transferable Targeted Attack
Li, M., Deng, C. D., Li, T., Yan, J., Gao, X., & Huang, H. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00072 · Cited by 134
Adversarial attack and defense in reinforcement learning-from AI security view
Chen, T., Liu, J., Xiang, Y., Niu, W., Tong, E., & Han, Z. (2019) · Cybersecurity · doi:10.1186/s42400-019-0027-x · Cited by 135
Qian, B., Su, J., Wen, Z., Jha, D. N., Li, Y., Guan, Y., Puthal, D., James, P., Yang, R., Zomaya, A. Y., et al. (2021) · ACM Computing Surveys · doi:10.1145/3398020 · Cited by 132
Threats of Adversarial Attacks in DNN-Based Modulation Recognition
Lin, Y., Zhao, H., Tu, Y., Mao, S., & Dou, Z. (2020) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom41043.2020.9155389 · Cited by 136
Koay, A. M. Y., Ko, R. K. L., Hettema, H., & Radke, K. (2023) · Journal of Intelligent Information Systems · doi:10.1007/s10844-022-00753-1 · Cited by 131
CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks
Boopathy, A., Weng, T.-W., Chen, P., Liu, S., & Daniel, L. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33013240 · Cited by 17
Park, H., Ahn, D., Hosanagar, K., & Lee, J. (2021) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3411764.3445304 · Cited by 152
Adversarial machine learning for network intrusion detection: A comparative study
Jmila, H., & Khedher, M. I. (2022) · Computer Networks · doi:10.1016/j.comnet.2022.109073 · Cited by 132
Fuzz testing based data augmentation to improve robustness of deep neural networks
Gao, X. Y., Saha, R. K., Prasad, M. R., & Roychoudhury, A. (2020) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3377811.3380415 · Cited by 129
On the Suitability of Lp-Norms for Creating and Preventing Adversarial Examples
Sharif, M., Bauer, L., & Reiter, M. K. (2018) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2018.00211 · Cited by 128
Universal Adversarial Perturbations for Speech Recognition Systems
Neekhara, P., Hussain, S., Pandey, P., Dubnov, S., McAuley, J., & Koushanfar, F. (2019) · Interspeech (USB) · doi:10.21437/interspeech.2019-1353 · Cited by 150
Learning Transferable Adversarial Examples via Ghost Networks
Li, Y., Bai, S., Zhou, Y., Xie, C., Zhang, Z., & Yuille, A. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6810 · Cited by 139
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
