The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 201–300 of 1,004
Robust Machine Learning Systems: Challenges,Current Trends, Perspectives, and the Road Ahead
Shafique, M., Naseer, M., Theocharides, T., Kyrkou, C., Mutlu, O., Orosa, L., & Choi, J. (2020) · IEEE Design and Test · doi:10.1109/mdat.2020.2971217 · Cited by 132
Efficient Adversarial Training With Transferable Adversarial Examples
Zheng, H., Zhang, Z., Gu, J., Lee, H., & Prakash, A. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00126 · Cited by 129
Distributionally Adversarial Attack
Zheng, T., Chen, C., & Ren, K. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33012253 · Cited by 130
Abdullah, H., Warren, K., Bindschaedler, V., Papernot, N., & Traynor, P. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00014 · Cited by 132
Security and Privacy for Artificial Intelligence: Opportunities and ChallengesPreprint
Oseni, A., Moustafa, N., Janicke, H., Liu, P., Tari, Z., & Vasilakos, A. V. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.04661 · Cited by 175
Rahman, M. S., Imani, M., Mathews, N., & Wright, M. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3039691 · Cited by 130
Towards Transferable Adversarial Attacks on Vision Transformers
Wei, Z., Chen, J., Goldblum, M., Wu, Z., Goldstein, T., & Jiang, Y. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i3.20169 · Cited by 136
Nonconvex Min-Max Optimization: Applications, Challenges, and Recent Theoretical Advances
Razaviyayn, M., Huang, T., Lu, S., Nouiehed, M., Sanjabi, M., & Hong, M. (2020) · IEEE Signal Processing Magazine · doi:10.1109/msp.2020.3003851 · Cited by 131
Improving Adversarial Robustness of Ensembles with Diversity TrainingPreprint
Kariyappa, S., & Qureshi, M. K. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.09981 · Cited by 123
FDA: Feature Disruptive Attack
Ganeshan, A., Vivek, B. S., & Radhakrishnan, V. B. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00816 · Cited by 129
AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine LearningPreprint
Jia, J., & Gong, N. Z. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1805.04810 · Cited by 119
Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization
Lee, S., Lee, H., & Yoon, S. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00035 · Cited by 121
Wang, S., Wang, Q., & Zhao, J. (2020) · Transportation Research Part C Emerging Technologies · doi:10.1016/j.trc.2020.102701 · Cited by 127
Interpreting and Improving Adversarial Robustness of Deep Neural Networks With Neuron Sensitivity
Zhang, C., Liu, A., Liu, X., Xu, Y., Yu, H., Ma, Y., & Li, T. (2020) · IEEE Transactions on Image Processing · doi:10.1109/tip.2020.3042083 · Cited by 120
Training Robust Deep Neural Networks via Adversarial Noise Propagation
Liu, A., Liu, X., Yu, H., Zhang, C., Liu, Q., & Tao, D. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3082317 · Cited by 119
Joint Adversarial Example and False Data Injection Attacks for State Estimation in Power Systems
Tian, J., Wang, B., Wang, Z., Cao, K., Li, J., & Ozay, M. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2021.3125345 · Cited by 120
A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking
Liu, C., Dong, Y., Xiang, W., Yang, X. H., Su, H., Zhu, J., Chen, Y., He, Y., Xue, H., & Zheng, S. (2024) · International Journal of Computer Vision · doi:10.1007/s11263-024-02196-3 · Cited by 162
Diffusion Models for Imperceptible and Transferable Adversarial Attack
Chen, J., Chen, H., Chen, K., Zhang, Y., Zou, Z., & Shi, Z. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3480519 · Cited by 154
Wang, J., & Zhang, H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00673 · Cited by 118
A Survey of Deep Learning-Based Source Image Forensics
Yang, P., Baracchi, D., Ni, R., Zhao, Y., Argenti, F., & Piva, A. (2020) · Journal of Imaging · doi:10.3390/jimaging6030009 · Cited by 117
Deep Learning for Android Malware Defenses: A Systematic Literature Review
Liu, Y., Tantithamthavorn, C. K., Li, L., & Liu, Y. (2022) · ACM Computing Surveys · doi:10.1145/3544968 · Cited by 123
A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directions
Senevirathna, T., La, V. H., Marchal, S., Siniarski, B., Liyanage, M., & Wang, S. (2024) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2024.3437248 · Cited by 122
A Survey of Privacy Risks and Mitigation Strategies in the Artificial Intelligence Life Cycle
Shahriar, S., Allana, S., Hazratifard, S. M., & Dara, R. (2023) · IEEE Access · doi:10.1109/access.2023.3287195 · Cited by 114
Towards Security Threats of Deep Learning Systems: A Survey
He, Y., Meng, G., Chen, K., Hu, X., & He, J. (2020) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2020.3034721 · Cited by 121
Shen, J., & Robertson, N. M. (2020) · Information Sciences · doi:10.1016/j.ins.2020.11.026 · Cited by 114
Smooth Adversarial TrainingPreprint
Xie, C., Tan, M., Gong, B., Yuille, A., & Le, Q. V. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.14536 · Cited by 113
Opportunities and Challenges in Deep Learning Adversarial Robustness: A SurveyPreprint
Silva, S. H., & Najafirad, P. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.00753 · Cited by 165
Ghaoui, L. E., Gu, F., Travacca, B., Askari, A., & Tsai, A. Y. (2021) · SIAM Journal on Mathematics of Data Science · doi:10.1137/20m1358517 · Cited by 149
Adversarial Defense via Learning to Generate Diverse Attacks
Jang, Y., Zhao, T., Hong, S., & Lee, H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00283 · Cited by 114
Low Frequency Adversarial PerturbationPreprint
Guo, C., Frank, J. S., & Weinberger, K. Q. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1809.08758 · Cited by 132
Model-Agnostic Boundary-Adversarial Sampling for Test-Time Generalization in Few-Shot Learning
Kim, J., Kim, H., & Kim, G. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58452-8_35 · Cited by 114
Test Selection for Deep Learning Systems
Ma, W., Papadakis, M., Tsakmalis, A., Cordy, M., & Traon, Y. L. (2021) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3417330 · Cited by 121
Improving the Transferability of Adversarial Samples with Adversarial Transformations
Wu, W., Su, Y., Lyu, M. R.-T., & King, I. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00891 · Cited by 116
Koshiyama, A., Kazim, E., Treleaven, P., Rai, P., Szpruch, L., Pavey, G., Ahamat, G., Leutner, F., Goebel, R., Knight, A., et al. (2024) · Royal Society Open Science · doi:10.1098/rsos.230859 · Cited by 110
LESSON: Multi-Label Adversarial False Data Injection Attack for Deep Learning Locational Detection
Tian, J., Shen, C. Q., Wang, B., Xia, X., Zhang, M., Lin, C., & Li, Q. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3353302 · Cited by 110
Gradient Shielding: Towards Understanding Vulnerability of Deep Neural Networks
Gu, Z., Hu, W., Zhang, C., Lu, H. D., Yin, L., & Wang, L. (2020) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2020.2996738 · Cited by 111
Stealthy Adversarial Perturbations Against Real-Time Video Classification Systems
Li, S., Neupane, A., Paul, S., Song, C., Krishnamurthy, S. V., Chowdhury, A. K. R., & Swami, A. (2019) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2019.23202 · Cited by 108
Interpretable Deep Learning under FirePreprint
Zhang, X., Wang, N., Shen, H., Ji, S., Luo, X., & Wang, T. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1812.00891 · Cited by 111
Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and RobustnessPreprint
Zhao, L., Liu, T., Peng, X., & Metaxas, D. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.08001 · Cited by 113
A Survey of Adversarial Attack and Defense Methods for Malware Classification in Cyber Security
Yan, S., Ren, J., Wang, W., Sun, L., Zhang, W., & Yu, Q. (2022) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2022.3225137 · Cited by 113
With Great Training Comes Great Vulnerability: Practical Attacks against Transfer Learning
Wang, B., Yao, Y., Viswanath, B., Zheng, H.-T., & Zhao, B. Y. (2018) · USENIX Security Symposium · Cited by 105
Ghojogh, B., Crowley, M., Karray, F. O., & Ghodsi, A. (2022) · Springer eBooks · doi:10.1007/978-3-031-10602-6_21 · Cited by 106
Trojaning Language Models for Fun and Profit
Zhang, X., Zhang, Z., Ji, S., & Wang, T. (2021) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp51992.2021.00022 · Cited by 117
The Limitations of Adversarial Training and the Blind-Spot AttackPreprint
Zhang, H., Chen, H., Song, Z., Boning, D. S., Dhillon, I. S., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.04684 · Cited by 103
The Conditional Entropy Bottleneck
Fischer, I. (2020) · Entropy · doi:10.3390/e22090999 · Cited by 102
Robust Machine Comprehension Models via Adversarial Training
Wang, Y., & Bansal, M. (2018) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/n18-2091 · Cited by 111
Privacy and Artificial Intelligence
Curzon, J., Kosa, T. A., Akalu, R., & El‐Khatib, K. (2021) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2021.3088084 · Cited by 117
LPViT: A Transformer Based Model for PCB Image Classification and Defect Detection
An, K., & Zhang, Y. (2022) · IEEE Access · doi:10.1109/access.2022.3168861 · Cited by 104
UPSET and ANGRI : Breaking High Performance Image ClassifiersPreprint
Sarkar, S., Bansal, A., Mahbub, U., & Chellappa, R. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1707.01159 · Cited by 115
Boosting Adversarial Training with Hypersphere EmbeddingPreprint
Pang, T., Yang, X. H., Dong, Y., Xu, K., Zhu, J., & Su, H. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.08619 · Cited by 104
ML-LOO: Detecting Adversarial Examples with Feature Attribution
Yang, P., Chen, J., Hsieh, C., Wang, J.-L., & Jordan, M. I. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6140 · Cited by 106
THE NORMS OF ALGORITHMIC CREDIT SCORING
Aggarwal, N. (2020) · The Cambridge Law Journal · doi:10.1017/s0008197321000015 · Cited by 104
Qian, Z., Huang, K., Wang, Q., & Zhang, X.-Y. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.108889 · Cited by 110
Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identification
Dong, N., Zhang, L., Yan, S., Tang, H., & Tang, J. (2023) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2023.3339167 · Cited by 106
Improving the Generalization of Adversarial Training with Domain AdaptationPreprint
Song, C., He, K., Wang, L., & Hopcroft, J. E. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.00740 · Cited by 111
Exploring Connections Between Active Learning and Model ExtractionPreprint
Chandrasekaran, V., Chaudhuri, K., Giacomelli, I., Jha, S., & Yan, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.02054 · Cited by 103
Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark
Xu, Y., & Ghamisi, P. (2022) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2022.3156392 · Cited by 97
Keleko, A. T., Kamsu-Foguem, B., Ngouna, R. H., & Tongne, A. (2022) · Advances in Engineering Software · doi:10.1016/j.advengsoft.2022.103339 · Cited by 100
Black-Box Adversarial Attack with Transferable Model-based EmbeddingPreprint
Huang, Z., & Zhang, T. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.07140 · Cited by 103
Adversarial Attacks Against Face Recognition: A Comprehensive Study
Vakhshiteh, F., Nickabadi, A., & Ramachandra, R. (2021) · IEEE Access · doi:10.1109/access.2021.3092646 · Cited by 103
Adversarial sample detection for deep neural network through model mutation testingPreprint
Wang, J., DONG, G., Sun, J., Wang, X., & PEIXIN, Z. (2019) · Singapore Management University Institutional Knowledge (InK) (Singapore Management University) · Cited by 96
Cross-Domain Transferability of Adversarial PerturbationsPreprint
Naseer, M., Khan, S. H., Khan, M. H., Khan, F. S., & Porikli, F. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.11736 · Cited by 95
Adversarial Defense by Stratified Convolutional Sparse Coding
Sun, B., Tsai, N.-H., Liu, F., Yu, R., & Su, H. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.01171 · Cited by 99
Zaidi, A., Estella-Aguerri, I., & Shamai, S. S. (2020) · Entropy · doi:10.3390/e22020151 · Cited by 102
Chen, J., Gao, X., Deng, R., He, Y., Fang, C., & Cheng, P. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3037500 · Cited by 96
Physical Adversarial Attacks on an Aerial Imagery Object Detector
Du, A., Chen, B., Chin, T.-J., Law, Y. W., Sasdelli, M., Rajasegaran, R., & Campbell, D. T. (2022) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv51458.2022.00385 · Cited by 104
Machine learning and blockchain technologies for cybersecurity in connected vehicles
Ahmad, J., Zia, M. U., Naqvi, I. H., Chattha, J. N., Butt, F. A., Huang, T., & Xiang, W. (2023) · Wiley Interdisciplinary Reviews Data Mining and Knowledge Discovery · doi:10.1002/widm.1515 · Cited by 101
Crafting Adversarial Examples For Speech Paralinguistics ApplicationsPreprint
Gong, Y., & Poellabauer, C. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1711.03280 · Cited by 110
A Direct Approach to Robust Deep Learning Using Adversarial NetworksPreprint
Wang, H., & Yu, C.-N. J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.09591 · Cited by 94
An Empirical Study of Adversarial Examples on Remote Sensing Image Scene Classification
Chen, L., Xu, Z., Li, Q., Peng, J., Wang, S., & Li, H. (2021) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2021.3051641 · Cited by 95
A Survey on Universal Adversarial Attack
Zhang, C., Benz, P., Lin, C., Karjauv, A., Wu, J., & Kweon, I. S. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/635 · Cited by 93
Model Compression with Adversarial Robustness: A Unified Optimization FrameworkPreprint
Gui, S., Wang, H., Yu, C., Yang, H., Wang, Z., & Liu, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.03538 · Cited by 96
Contrastive Learning with Adversarial ExamplesPreprint
Ho, C.-H., & Vasconcelos, N. M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.12050 · Cited by 102
Rabin, M. R. I., Bui, N. D. Q., Wang, K., Yu, Y., Jiang, L., & Alipour, M. A. (2021) · Information and Software Technology · doi:10.1016/j.infsof.2021.106552 · Cited by 107
Heuristic Black-Box Adversarial Attacks on Video Recognition Models
Wei, Z., Chen, J., Wei, X., Jiang, L., Chua, T., Zhou, F., & Jiang, Y. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6918 · Cited by 93
Roshan, K., Zafar, A., & Haque, S. B. U. (2023) · Computer Communications · doi:10.1016/j.comcom.2023.09.030 · Cited by 91
Deep Defense: Training DNNs with Improved Adversarial RobustnessPreprint
Yan, Z., Guo, Y., & Zhang, C. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1803.00404 · Cited by 91
Randomized Smoothing of All Shapes and SizesPreprint
Yang, G., Duan, T., Hu, J., Salman, H., Razenshteyn, I., & Li, J. Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.08118 · Cited by 98
The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection
Hameed, M. Z., György, A., & Gündüz, D. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3025441 · Cited by 90
3D Common Corruptions and Data Augmentation
Kar, O. F., Yeo, T., Atanov, A., & Zamir, A. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01839 · Cited by 106
Adversarial Metric Attack and Defense for Person Re-Identification
Bai, S., Li, Y., Zhou, Y., Li, Q., & Torr, P. H. S. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3031625 · Cited by 91
Fooling Thermal Infrared Pedestrian Detectors in Real World Using Small Bulbs
Zhu, X., Li, X., Li, J., Wang, Z., & Hu, X. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i4.16477 · Cited by 89
Adversarial Attacks and Defenses Against Deep Neural Networks: A Survey
Ozdag, M. (2018) · Procedia Computer Science · doi:10.1016/j.procs.2018.10.315 · Cited by 95
Adversarial Attack on Skeleton-Based Human Action Recognition
Liu, J., Akhtar, N., & Mian, A. S. (2020) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2020.3043002 · Cited by 90
Adversarial Training and Provable Defenses: Bridging the Gap
Balunović, M., & Vechev, M. (2020) · Repository for Publications and Research Data (ETH Zurich) · doi:10.3929/ethz-b-000465446 · Cited by 88
Learning to Correct Climate Projection Biases
Pan, B., Anderson, G. J., Gonçalves, A. R., Lucas, D. D., Bonfils, C., Lee, J., Tian, Y., & Ma, H. (2021) · Journal of Advances in Modeling Earth Systems · doi:10.1029/2021ms002509 · Cited by 92
Robust Adversarial Attacks Against DNN-Based Wireless Communication Systems
Bahramali, A., Nasr, M., Houmansadr, A., Goeckel, D., & Towsley, D. (2021) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3460120.3484777 · Cited by 88
Fooling Vision and Language Models Despite Localization and Attention Mechanism
Xu, X., Chen, X., Liu, C., Rohrbach, A., Darrell, T., & Song, D. X. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00520 · Cited by 92
Robust Decision Trees Against Adversarial ExamplesPreprint
Chen, H., Zhang, H., Boning, D. S., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1902.10660 · Cited by 87
Deep Representation Learning in Speech Processing: Challenges, Recent Advances, and Future TrendsPreprint
Latif, S., Rana, R. K., Khalifa, S., Jurdak, R., Qadir, J., & Schuller, B. W. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2001.00378 · Cited by 108
Adversarial Generative Nets: Neural Network Attacks on State-of-the-Art Face Recognition.Preprint
Sharif, M., Bhagavatula, S., Bauer, L., & Reiter, M. K. (2018) · arXiv (Cornell University) · Cited by 86
PuVAE: A Variational Autoencoder to Purify Adversarial Examples
Hwang, U., Park, J., Jang, H., Yoon, S., & Cho, N. I. (2019) · IEEE Access · doi:10.1109/access.2019.2939352 · Cited by 91
A Tale of Evil Twins: Adversarial Inputs versus Poisoned Models
Pang, R., Shen, H., Zhang, X., Ji, S., Vorobeychik, Y., Luo, X., Liu, A., & Wang, T. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3417253 · Cited by 87
Tripathi, S., Muhr, D., Manuel, B., Jodlbauer, H., Dehmer, M., & Emmert‐Streib, F. (2021) · Frontiers in Artificial Intelligence · doi:10.3389/frai.2021.576892 · Cited by 85
A network security situation assessment method based on adversarial deep learning
Yang, H., Zeng, R., Xu, G., & Zhang, L. (2021) · Applied Soft Computing · doi:10.1016/j.asoc.2021.107096 · Cited by 85
Perceptual Adversarial Robustness: Defense Against Unseen Threat ModelsPreprint
Laidlaw, C., Singla, S., & Feizi, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.12655 · Cited by 126
Certifiable Robustness to Adversarial State Uncertainty in Deep Reinforcement Learning
Everett, M., Lütjens, B., & How, J. P. (2021) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2021.3056046 · Cited by 96
Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically Differentiable RendererPreprint
Liu, H. D., Tao, M. W., Li, C., Nowrouzezahrai, D., & Jacobson, A. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1808.02651 · Cited by 94
CAT: Customized Adversarial Training for Improved Robustness
Cheng, M., Lei, Q., Chen, P., Dhillon, I. S., & Hsieh, C. (2022) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2022/95 · Cited by 101
A System-Driven Taxonomy of Attacks and Defenses in Adversarial Machine Learning
Sadeghi, K., Banerjee, A., & Gupta, S. K. S. (2020) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2020.2968933 · Cited by 87
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
