The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 301–400 of 1,004
Robust Android Malware Detection System Against Adversarial Attacks Using Q-Learning
Rathore, H., Sahay, S. K., Nikam, P., & Sewak, M. (2020) · Information Systems Frontiers · doi:10.1007/s10796-020-10083-8 · Cited by 83
Sharing Machine Learning Models as Indicators of Compromise for Cyber Threat Intelligence
Preuveneers, D., & Joosen, W. (2021) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp1010008 · Cited by 87
Adversarial Distributional Training for Robust Deep LearningPreprint
Dong, Y., Deng, Z., Pang, T., Su, H., & Zhu, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.05999 · Cited by 85
Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT
Papadopoulos, P., von Essen, O. T., Pitropakis, N., Chrysoulas, C., Mylonas, A., & Buchanan, W. J. (2021) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp1020014 · Cited by 83
Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes
Lucas, K., Sharif, M., Bauer, L., Reiter, M. K., & Shintre, S. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3453086 · Cited by 80
Adversarial Noise Layer: Regularize Neural Network by Adding Noise
You, Z., Ye, J., Li, K., Xu, Z., & Wang, P. (2019) · 2019 IEEE International Conference on Image Processing (ICIP) · doi:10.1109/icip.2019.8803055 · Cited by 80
Towards quantum enhanced adversarial robustness in machine learning
West, M. T., Tsang, S.-L., Low, J. S., Hill, C. D., Leckie, C., Hollenberg, L. C. L., Erfani, S. M., & Usman, M. (2023) · Nature Machine Intelligence · doi:10.1038/s42256-023-00661-1 · Cited by 79
Adversarial Attacks on GMM I-Vector Based Speaker Verification Systems
Li, X., Zhong, J., Wu, X., Yu, J., Liu, X., & Meng, H. M. L. (2020) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp40776.2020.9053076 · Cited by 79
Robust Superpixel-Guided Attentional Adversarial Attack
Dong, X., Han, J., Chen, D., Liu, J., Bian, H., Ma, Z., Li, H., Wang, X., Zhang, W., & Yu, N. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01291 · Cited by 81
Towards characterizing adversarial defects of deep learning software from the lens of uncertainty
Zhang, X., Xie, X., Ma, L., Du, X., Hu, Q., Liu, Y., Zhao, J., & Sun, M. (2020) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3377811.3380368 · Cited by 84
Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification
Liu, D., & Hu, W. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3193449 · Cited by 79
A Survey of Black-Box Adversarial Attacks on Computer Vision ModelsPreprint
Bhambri, S., Muku, S., Tulasi, A., & Buduru, A. B. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.01667 · Cited by 111
Optimization and abstraction: a synergistic approach for analyzing neural network robustness
Anderson, G., Pailoor, S., Dillig, I., & Chaudhuri, S. (2019) · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI) · doi:10.1145/3314221.3314614 · Cited by 82
Generating Adversarial Examples By Makeup Attacks on Face Recognition
Zhu, Z.-A., Lu, Y.-Z., & Chiang, C.-K. (2019) · Proceedings - International Conference on Image Processing · doi:10.1109/icip.2019.8803269 · Cited by 80
Improving the Accuracy of Tesseract 4.0 OCR Engine Using Convolution-Based Preprocessing
Sporici, D., Cușnir, E., & Boiangiu, C.-A. (2020) · Symmetry · doi:10.3390/sym12050715 · Cited by 78
Zou, J., Pan, Z., Qiu, J., Liu, X., Rui, T., & Li, W. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58542-6_34 · Cited by 84
Robust and Accurate Object Detection via Adversarial Learning
Chen, X., Xie, C., Tan, M., Zhang, L., Hsieh, C., & Gong, B. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01635 · Cited by 81
Yamany, W., Moustafa, N., & Turnbull, B. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3130906 · Cited by 87
Liu, J., Nogueira, M., Fernandes, J., & Kantarcı, B. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3136132 · Cited by 84
Towards Interpretable Deep Neural Networks by Leveraging Adversarial ExamplesPreprint
Dong, Y., Bao, F., Su, H., & Zhu, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.09035 · Cited by 77
Invisible Mask: Practical Attacks on Face Recognition with InfraredPreprint
Zhou, Z. G., Tang, D., Wang, X., Han, W., Liu, X., & Zhang, K. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1803.04683 · Cited by 89
Neuron Shapley: Discovering the Responsible NeuronsPreprint
Ghorbani, A., & Zou, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.09815 · Cited by 87
Fake Node Attacks on Graph Convolutional Networks
Wang, X., Cheng, M., Eaton, J., Hsieh, C., & Wu, S. F. (2022) · Journal of Computational and Cognitive Engineering · doi:10.47852/bonviewjcce2202321 · Cited by 76
MixTrain: Scalable Training of Verifiably Robust Neural NetworksPreprint
Wang, S., Chen, Y., Abdou, A., & Jana, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.02625 · Cited by 97
To be Robust or to be Fair: Towards Fairness in Adversarial TrainingPreprint
Xu, H., Liu, X., Li, Y., Jain, A. K., & Tang, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.06121 · Cited by 76
Gotta Catch'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks
Shan, S., Wenger, E., Wang, B., Li, B., Zheng, H.-T., & Zhao, B. Y. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3417231 · Cited by 86
Security Analysis of Deep Neural Networks Operating in the Presence of Cache Side-Channel AttacksPreprint
Hong, S., Davinroy, M., Kaya, Y., Locke, S. N., Rackow, I., Kulda, K., Dachman-Soled, D., & Dumitraş, T. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.03487 · Cited by 75
Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Convolutional Networks
Co, K. T., Muñoz-González, L., de Maupeou, S., & Lupu, E. C. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3345660 · Cited by 79
DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural NetworksPreprint
Gopinath, D., Katz, G., Păsăreanu, C. S., & Barrett, C. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1710.00486 · Cited by 89
Evaluating Robustness of Deep Image Super-Resolution Against Adversarial Attacks
Choi, J. H., Zhang, H., Kim, J., Hsieh, C., & Lee, J. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00039 · Cited by 73
Enhancing Cross-Task Black-Box Transferability of Adversarial Examples With Dispersion Reduction
Lu, Y., Jia, Y., Wang, J., Li, B., Chai, W., Carin, L., & Velipasalar, S. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00102 · Cited by 77
The Attacker’s Perspective on Automatic Speaker Verification: An Overview
Das, R. K., Tian, X., Kinnunen, T., & Li, H. (2020) · Interspeech (USB) · doi:10.21437/interspeech.2020-1052 · Cited by 73
OnlineAugment: Online Data Augmentation with Less Domain Knowledge
Tang, Z., Gao, Y., Karlinsky, L., Sattigeri, P., Feris, R., & Metaxas, D. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58571-6_19 · Cited by 73
Infrared Invisible Clothing: Hiding from Infrared Detectors at Multiple Angles in Real World
Zhu, X., Hu, Z., Huang, S., Li, J., & Hu, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01296 · Cited by 73
Enhancing Adversarial Defense by k-Winners-Take-AllPreprint
Xiao, C., Zhong, P., & Zheng, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.10510 · Cited by 86
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks
He, X., Yang, S., Li, G., Li, H., Chang, H., & Yu, Y. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33018417 · Cited by 77
Imperceptible Adversarial Attacks on Tabular DataPreprint
Ballet, V., Renard, X., Aigrain, J., Laugel, T., Pascal Frossard, B., & Detyniecki, M. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.03274 · Cited by 72
Application and Construction of Deep Learning Networks in Medical Imaging
Torres-Velázquez, M., Chen, W., Li, X., & McMillan, A. B. (2020) · IEEE Transactions on Radiation and Plasma Medical Sciences · doi:10.1109/trpms.2020.3030611 · Cited by 74
A Survey of Adversarial Machine Learning in Cyber Warfare
Duddu, V. (2018) · Defence Science Journal · doi:10.14429/dsj.68.12371 · Cited by 73
Adversarially robust transfer learningPreprint
Shafahi, A., Saadatpanah, P., Zhu, C., Ghiasi, A., Studer, C., Jacobs, D. W., & Goldstein, T. (2019) · arXiv (Cornell University) · doi:10.3929/ethz-b-000458750 · Cited by 91
Backpropagated Gradient Representations for Anomaly Detection
Kwon, G., Prabhushankar, M., Temel, D., & AlRegib, G. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58589-1_13 · Cited by 77
ADGAN: Protect Your Location Privacy in Camera Data of Auto-Driving Vehicles
Xiong, Z., Cai, Z., Han, Q., Alrawais, A., & Li, W. (2020) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2020.3032352 · Cited by 71
Cascade Adversarial Machine Learning Regularized with a Unified EmbeddingPreprint
Na, T., Ko, J. H., & Mukhopadhyay, S. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1708.02582 · Cited by 78
Controlling Neural Level SetsPreprint
Atzmon, M., Haim, N., Yariv, L., Israelov, O., Maron, H., & Lipman, Y. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.11911 · Cited by 74
Defense Against Adversarial Attacks by Reconstructing Images
Zhang, S., Gao, H., & Rao, Q. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3092582 · Cited by 70
Towards Efficient Data Free Blackbox Adversarial Attack
Zhang, J., Li, B., Xu, J., Wu, S., Ding, S., Zhang, L., & Wu, C. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01469 · Cited by 70
Towards Robust Deep Neural Networks with BANG
Rozsa, A., Günther, M., & Boult, T. E. (2018) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv.2018.00093 · Cited by 69
Ensemble adversarial black-box attacks against deep learning systems
Hang, J., Han, K., Chen, H., & Li, Y. (2019) · Pattern Recognition · doi:10.1016/j.patcog.2019.107184 · Cited by 70
Attacking Binarized Neural NetworksPreprint
Galloway, A., Taylor, G. W., & Moussa, M. A. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1711.00449 · Cited by 69
Towards Robust Image Classification Using Sequential Attention Models
Zoran, D., Chrzanowski, M., Huang, P.-S., Gowal, S., Mott, A., & Kohli, P. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00950 · Cited by 69
A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks
Sharmin, S., Panda, P., Sarwar, S. S., Lee, C., Ponghiran, W., & Roy, K. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8851732 · Cited by 68
Training individually fair ML models with Sensitive Subspace RobustnessPreprint
Yurochkin, M., Bower, A., & Sun, Y. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1907.00020 · Cited by 90
A Review of Formal Methods applied to Machine LearningPreprint
Urban, C., & Miné, A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2104.02466 · Cited by 92
The Challenges of Leveraging Threat Intelligence to Stop Data Breaches
Ibrahim, A. S., Thiruvady, D., Schneider, J.-G., & Abdelrazek, M. (2020) · Frontiers in Computer Science · doi:10.3389/fcomp.2020.00036 · Cited by 67
ConAML: Constrained Adversarial Machine Learning for Cyber-Physical Systems
Li, J., Yang, Y., Sun, J., Tomsovic, K. L., & Qi, H. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3437513 · Cited by 72
Facial attributes: Accuracy and adversarial robustness
Rozsa, A., Günther, M., Rudd, E. M., & Boult, T. E. (2017) · Pattern Recognition Letters · doi:10.1016/j.patrec.2017.10.024 · Cited by 67
Learn2Perturb: An End-to-End Feature Perturbation Learning to Improve Adversarial Robustness
Jeddi, A., Shafiee, M. J., Karg, M. E., Scharfenberger, C., & Wong, A. K. C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00132 · Cited by 67
Block-Wise Image Transformation With Secret Key for Adversarially Robust Defense
MaungMaung, A., & Kiya, H. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3062977 · Cited by 72
Property Inference for Deep Neural Networks
Gopinath, D., Converse, H., Păsăreanu, C. S., & Taly, A. (2019) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase.2019.00079 · Cited by 66
Convergence of Adversarial Training in Overparametrized Neural NetworksPreprint
Gao, R., Cai, T., Li, H., Wang, L., Hsieh, C., & Lee, J. D. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.07916 · Cited by 72
A New Defense Against Adversarial Images: Turning a Weakness into a StrengthPreprint
Yu, T., Hu, S., Guo, C., Chao, W., & Weinberger, K. Q. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1910.07629 · Cited by 66
Transferable Perturbations of Deep Feature DistributionsPreprint
Inkawhich, N., Liang, K. J., Carin, L., & Chen, Y. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2004.12519 · Cited by 69
Robustness of Autoencoders for Anomaly Detection Under Adversarial Impact
Goodge, A., Hooi, B., Ng, S. K., & Ng, W. S. (2020) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2020/173 · Cited by 67
Security concerns on machine learning solutions for 6G networks in mmWave beam prediction
Çatak, F. Ö., Kuzlu, M., Çatak, E., Cali, Ü., & Ünal, D. (2022) · Physical Communication · doi:10.1016/j.phycom.2022.101626 · Cited by 65
Boosting the transferability of adversarial attacks with global momentum initialization
Wang, J., Chen, Z., Jiang, K., Yang, D., Hong, L., Guo, P., Guo, H., & Zhang, W. (2024) · Expert Systems with Applications · doi:10.1016/j.eswa.2024.124757 · Cited by 76
Discovering Adversarial Examples with MomentumPreprint
Dong, Y., Liao, F., Pang, T., Hu, X., & Zhu, J. (2017) · arXiv (Cornell University) · Cited by 65
Batch Normalization is a Cause of Adversarial VulnerabilityPreprint
Galloway, A., Golubeva, A., Tanay, T., Moussa, M. A., & Taylor, G. W. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.02161 · Cited by 65
Adversarial purification with Score-based generative modelsPreprint
Yoon, J., Hwang, S. J., & Lee, J. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.06041 · Cited by 65
Fooling Network Interpretation in Image Classification
Subramanya, A., Pillai, V., & Pirsiavash, H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00211 · Cited by 68
A Review of Computer Vision Methods in Network Security
Zhao, J., Masood, R., & Seneviratne, S. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3086475 · Cited by 74
Badjie, B., Cecílio, J., & Casimiro, A. (2024) · ACM Computing Surveys · doi:10.1145/3691625 · Cited by 73
Single-Step Adversarial Training With Dropout Scheduling
Vivek, B. S., & Babu, R. V. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00103 · Cited by 64
Adversarial Example Detection Using Latent Neighborhood Graph
Abusnaina, A., Wu, Y., Arora, S. S., Wang, Y., Wang, F., Yang, H., & Mohaisen, A. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00759 · Cited by 63
Exploring Targeted and Stealthy False Data Injection Attacks via Adversarial Machine Learning
Tian, J., Wang, B., Li, J., Wang, Z., Ma, B., & Özay, M. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3147040 · Cited by 63
Adversarial attacks and defenses in deep learning for image recognition: A survey
Wang, J., Wang, C., Lin, Q., Luo, C., Wu, C., & Li, J. (2022) · Neurocomputing · doi:10.1016/j.neucom.2022.09.004 · Cited by 69
Wang, T., Zhang, C., Hao, Z., Monti, A., & Ponci, F. (2023) · Applied Energy · doi:10.1016/j.apenergy.2023.120708 · Cited by 62
Structured Adversarial Self-Supervised Learning for Robust Object Detection in Remote Sensing Images
Zhang, C., Lam, K., Liu, T., Chan, Y., & Wang, Q. (2024) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2024.3375398 · Cited by 65
Self-Robust 3D Point Recognition via Gather-Vector Guidance
Dong, X., Chen, D., Zhou, H., Hua, G., Zhang, W., & Yu, N. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01153 · Cited by 61
MaskDGA: An Evasion Attack Against DGA Classifiers and Adversarial Defenses
Sidi, L., Nadler, A., & Shabtai, A. (2020) · IEEE Access · doi:10.1109/access.2020.3020964 · Cited by 61
Hu, T.-K., Chen, T., Wang, H., & Wang, Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.10025 · Cited by 61
Denoised Smoothing: A Provable Defense for Pretrained ClassifiersPreprint
Salman, H., Sun, M., Yang, G., Kapoor, A., & Kolter, J. Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.01908 · Cited by 61
Diversity can be Transferred: Output Diversification for White- and Black-box AttacksPreprint
Tashiro, Y., Song, Y., & Ermon, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.06878 · Cited by 63
Robust Detection of Adversarial Attacks on Medical Images
Li, X., & Zhu, D. (2020) · IEEE International Symposium on Biomedical Imaging (ISBI) · doi:10.1109/isbi45749.2020.9098628 · Cited by 60
Theory-based residual neural networks: A synergy of discrete choice models and deep neural networks
Wang, S., Mo, B., & Zhao, J. (2021) · Transportation Research Part B Methodological · doi:10.1016/j.trb.2021.03.002 · Cited by 64
Yu, Y., Yang, W., Tan, Y., & Kot, A. C. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00592 · Cited by 60
Wang, J., Li, F., & He, L. (2025) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2025.3525725 · Cited by 67
Defense Against Adversarial Images Using Web-Scale Nearest-Neighbor Search
Dubey, A., van der Maaten, L., Yalnız, İ. Z., Li, Y., & Mahajan, D. K. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00897 · Cited by 60
Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agents
Lee, X. Y., Ghadai, S., Tan, K. L., Hegde, C., & Sarkar, S. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.5887 · Cited by 7
Wang, H., Xu, J., Xu, C., Ma, X., & Lu, J. J. (2020) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3377811.3380379 · Cited by 61
Learning to Defend by Learning to AttackPreprint
Jiang, H., Chen, Z., Shi, Y., Dai, B., & Zhao, T. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.01213 · Cited by 60
Jia, J., Cao, X., Wang, B., & Gong, N. Z. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.09899 · Cited by 72
Zhao, P., Wang, S., Gongye, C., Wang, Y., Fei, Y., & Lin, X. (2019) · ACM/IEEE Design Automation Conference (DAC) · doi:10.1145/3316781.3317825 · Cited by 62
Shamji, M. H., Ollert, M. W., Adcock, I. M., Bennett, O., Favaro, A., Sarama, R., Riggioni, C., Annesi‐Maesano, I., Čustović, A., Fontanella, S., et al. (2023) · Allergy · doi:10.1111/all.15667 · Cited by 60
Are Image-Agnostic Universal Adversarial Perturbations for Face Recognition Difficult to Detect?
Agarwal, A., Singh, R., Mayank Vatsa, A., & Ratha, N. (2018) · IEEE International Conference on Biometrics: Theory, Applications and Systems (BTAS) · doi:10.1109/btas.2018.8698548 · Cited by 60
Training Augmentation with Adversarial Examples for Robust Speech Recognition
Sun, S., Yeh, C.-F., Mari Ostendorf, E., Hwang, M.-Y., & Xie, L. (2018) · Interspeech (USB) · doi:10.21437/interspeech.2018-1247 · Cited by 59
Learning Black-Box Attackers with Transferable Priors and Query FeedbackPreprint
Yang, J., Jiang, Y., Huang, X., Ni, B., & Zhao, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.11742 · Cited by 59
Adversarial Machine Learning for 5G Communications Security
Sagduyu, Y. E., Erpek, T., & Shi, Y. (2021) · Wiley eBooks · doi:10.1002/9781119723950.ch14 · Cited by 64
An Empirical Study on Correlation between Coverage and Robustness for Deep Neural Networks
Dong, Y., Zhang, P., Wang, J., Liu, S., Sun, J., Hao, J., Wang, X., Wang, L., Dong, J. S., & Dai, T. (2020) · IEEE International Conference on Engineering of Complex Computer Systems (ICECCS) · doi:10.1109/iceccs51672.2020.00016 · Cited by 66
The robust deep learning–based schemes for intrusion detection in Internet of Things environments
Fu, X., Zhou, N., Jiao, L., Li, H., & Zhang, J. (2021) · Annals of Telecommunications · doi:10.1007/s12243-021-00854-y · Cited by 58
Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs
Benz, P., Ham, S., Zhang, C., Karjauv, A., & Kweon, I. S. (2021) · British Machine Vision Conference (BMVC) · doi:10.5244/c.35.68 · Cited by 77
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
