The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 401–500 of 1,004
Image Transformation based Defense Against Adversarial Perturbation on Deep Learning Models
Agarwal, A., Singh, R., Mayank Vatsa, A., & Ratha, N. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3027183 · Cited by 58
Characterizing and Evaluating Adversarial Examples for Offline Handwritten Signature Verification
Hafemann, L. G., Sabourin, R., & Oliveira, L. S. (2019) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2019.2894031 · Cited by 59
Interpolated Adversarial Training
Lamb, A., Verma, V., Kannala, J., & Bengio, Y. (2019) · ACM Workshop on Artificial Intelligence and Security (AISec) · doi:10.1145/3338501.3357369 · Cited by 61
Decision-based evasion attacks on tree ensemble classifiers
Zhang, F., Wang, Y., Liu, S., & Wang, H. (2020) · World Wide Web · doi:10.1007/s11280-020-00813-y · Cited by 60
Defending Your Voice: Adversarial Attack on Voice Conversion
Huang, C., Lin, Y. Y., Lee, H.-Y., & Lee, L.-S. (2021) · IEEE Spoken Language Technology Workshop (SLT) · doi:10.1109/slt48900.2021.9383529 · Cited by 57
Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing
Wang, X., Zhang, Z., Wu, B., Shen, F., & Lu, G. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01609 · Cited by 57
Wasserstein Introspective Neural Networks
Lee, K., Xu, W., Fan, F., & Tu, Z. (2018) · 2018 IEEE/CVF Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2018.00390 · Cited by 56
Security and Privacy Issues in Deep Learning
Bae, H., Jang, J., Jung, D., Jang, H., Ha, H., Lee, H., & Yoon, S. (2018) · arXiv · doi:10.48550/arxiv.1807.11655 · Cited by 56
Countering Adversarial Attacks on Autonomous Vehicles Using Denoising Techniques: A Review
Kloukiniotis, A., Papandreou, A., Lalos, A. S., Kapsalas, P., Nguyen, D.-V., & Moustakas, K. (2022) · IEEE Open Journal of Intelligent Transportation Systems · doi:10.1109/ojits.2022.3142612 · Cited by 57
A Generalized and Robust Method Towards Practical Gaze Estimation on Smart Phone
Guo, T., Liu, Y., Zhang, H., Liu, X., Kwak, Y., Yoo, B. I., Han, J., & Choi, C. (2019) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw.2019.00144 · Cited by 60
Machine Learning for Speaker Recognition
Mak, M., & Chien, J. (2020) · Cambridge University Press eBooks · doi:10.1017/9781108552332 · Cited by 55
Enhancing Noise Robustness of Retrieval-Augmented Language Models with Adaptive Adversarial Training
Fang, F., Bai, Y., Ni, S., Yang, M., Chen, X., & Xu, R. (2024) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/2024.acl-long.540 · Cited by 56
CD-UAP: Class Discriminative Universal Adversarial Perturbation
Zhang, C., Benz, P., Imtiaz, T., & Kweon, I.-S. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6154 · Cited by 59
Compressive Imaging: Structure, Sampling, Learning
Adcock, B., & Hansen, A. C. (2021) · Cambridge University Press eBooks · doi:10.1017/9781108377447 · Cited by 59
Defending Against Universal Perturbations With Shared Adversarial Training
Mummadi, C. K., Brox, T., & Metzen, J. H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00503 · Cited by 56
Improving Adversarial Robustness via Guided Complement Entropy
Chen, H., Liang, J.-H., Chang, S.-C., Pan, J.-Y., Chen, Y., Wei, W., & Juan, D.-C. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00498 · Cited by 57
Spatiotemporal Attacks for Embodied Agents
Liu, A., Huang, T., Liu, X., Xu, Y., Ma, Y., Chen, X., Maybank, S. J., & Tao, D. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58520-4_8 · Cited by 54
Deep image prior based defense against adversarial examples
Dai, T., Feng, Y., Chen, B., Lu, J. J., & Xia, S. (2021) · Pattern Recognition · doi:10.1016/j.patcog.2021.108249 · Cited by 55
Arms Race in Adversarial Malware Detection: A Survey
Li, D., Li, Q., Ye, Y., & Xu, S. (2021) · ACM Computing Surveys · doi:10.1145/3484491 · Cited by 57
Tramèr, F., Dupré, P., Rusak, G., Pellegrino, G., & Boneh, D. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3354222 · Cited by 65
Koshiyama, A., Kazim, E., & Treleaven, P. (2022) · Computer · doi:10.1109/mc.2021.3067225 · Cited by 55
Joshi, S., Villalba, J., Zelasko, P., Moro-Velazquez, L., & Dehak, N. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3116438 · Cited by 53
Boosting 3D Adversarial Attacks With Attacking on Frequency
Liu, B., Zhang, J., & Zhu, J. (2022) · IEEE Access · doi:10.1109/access.2022.3171659 · Cited by 53
Black-box Adversarial Machine Learning Attack on Network Traffic Classification
Usama, M., Qayyum, A., Qadir, J., & Al‐Fuqaha, A. (2019) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2019.8766505 · Cited by 53
Principal Component Adversarial Example
Zhang, Y., Tian, X., Li, Y., Wang, X., & Tao, D. (2020) · IEEE Transactions on Image Processing · doi:10.1109/tip.2020.2975918 · Cited by 53
Semantic Equivalent Adversarial Data Augmentation for Visual Question Answering
Tang, R., Ma, C., Zhang, W. E., Wu, Q., & Yang, X. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58529-7_26 · Cited by 56
A Survey on Physical Adversarial Attack in Computer VisionPreprint
Wang, D., Yao, W., Jiang, T., Tang, G., & Chen, X. (2023) · Research Square · doi:10.21203/rs.3.rs-2459893/v1 · Cited by 72
Better Safe Than Sorry: An Adversarial Approach to Improve Social Bot Detection
Cresci, S., Petrocchi, M., Spognardi, A., & Tognazzi, S. (2019) · Proceedings of the 10th ACM Conference on Web Science · doi:10.1145/3292522.3326030 · Cited by 52
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks
Lin, J., Song, C., He, K., Wang, L., & Hopcroft, J. E. (2020) · International Conference on Learning Representations · Cited by 52
Tsuzuku, Y., & Sato, I. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00014 · Cited by 54
A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks
Dasgupta, P., & Collins, J. B. (2019) · AI Magazine · doi:10.1609/aimag.v40i2.2847 · Cited by 60
Double Targeted Universal Adversarial Perturbations
Benz, P., Zhang, C., Imtiaz, T., & Kweon, I. S. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-69538-5_18 · Cited by 54
Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety
Houben, S., Abrecht, S., Akila, M., Bär, A., Brockherde, F., Feifel, P., Fingscheidt, T., Gannamaneni, S. S., Ghobadi, S. E., Hammam, A., et al. (2022) · Springer eBooks · doi:10.1007/978-3-031-01233-4_1 · Cited by 62
Liu, W., Liu, Z., Yu, Z., Dai, B., Lin, R., Wang, Y., Rehg, J. M., & Song, L. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00293 · Cited by 52
Adversarially Robust Neural Architectures
Dong, M., Li, Y., Wang, Y., & Xu, C. (2025) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2025.3542350 · Cited by 66
Symbolic Execution for Deep Neural NetworksPreprint
Gopinath, D., Wang, K., Zhang, M., Păsăreanu, C. S., & Sarfraz Khurshid, D. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1807.10439 · Cited by 63
Learning perturbation sets for robust machine learningPreprint
Wong, E., & Kolter, J. Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.08450 · Cited by 52
Deepfake Forensics via an Adversarial Game
Zhi, W., Guo, Y., & Zuo, W. (2022) · IEEE Transactions on Image Processing · doi:10.1109/tip.2022.3172845 · Cited by 53
Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Models
Zolfi, A., Avidan, S., Elovici, Y., & Shabtai, A. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-26409-2_19 · Cited by 58
Butt, M. A., Qayyum, A., Ali, H. M., Al‐Fuqaha, A., & Qadir, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.103058 · Cited by 51
AL-Khassawneh, Y. A. (2022) · Indonesian Journal of Science and Technology · doi:10.17509/ijost.v8i1.52709 · Cited by 51
Hilbert-Based Generative Defense for Adversarial Examples
Bai, Y., Feng, Y., Wang, Y., Dai, T., Xia, S., & Jiang, Y. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00488 · Cited by 51
Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial ExamplesPreprint
Nar, K., Öçal, O., Sastry, S., & Ramchandran, K. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.08360 · Cited by 61
Robustness Verification of Tree-based ModelsPreprint
Chen, H., Zhang, H., Si, S., Li, Y., Boning, D. S., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.03849 · Cited by 53
FAT: Federated Adversarial TrainingPreprint
Zizzo, G., Rawat, A., Sinn, M., & Buesser, B. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.01791 · Cited by 67
Adversarial Shape Perturbations on 3D Point Clouds
Liu, D., Yu, R., & Su, H. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-66415-2_6 · Cited by 51
R-HTDetector: Robust Hardware-Trojan Detection Based on Adversarial Training
Hasegawa, K., Hidano, S., Nozawa, K., Kiyomoto, S., & Togawa, N. (2022) · IEEE Transactions on Computers · doi:10.1109/tc.2022.3222090 · Cited by 54
Discretization Based Solutions for Secure Machine Learning Against Adversarial Attacks
Panda, P., Chakraborty, I., & Roy, K. (2019) · IEEE Access · doi:10.1109/access.2019.2919463 · Cited by 53
A New Perspective on Stabilizing GANs Training: Direct Adversarial Training
Li, Z., Xia, P., Tao, R., Niu, H., & Li, B. (2022) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2022.3193373 · Cited by 50
Adversarial Examples - A Complete Characterisation of the PhenomenonPreprint
Serban, A. C., Poll, E., & Visser, J. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.01185 · Cited by 59
Defending against Whitebox Adversarial Attacks via Randomized DiscretizationPreprint
Zhang, Y., & Liang, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1903.10586 · Cited by 51
On the Adversarial Robustness of Visual TransformersPreprint
Shao, R., Shi, Z., Yi, J., Chen, P., & Hsieh, C. (2021) · arXiv (Cornell University) · Cited by 50
Balancing Logit Variation for Long-Tailed Semantic Segmentation
Wang, Y., Fei, J., Wang, H., Li, W., Bao, T., Wu, L., Zhao, R., & Shen, Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01874 · Cited by 54
Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing
Liu, D., Hu, W., & Li, X. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3339130 · Cited by 49
Deeply Supervised Discriminative Learning for Adversarial Defense
Mustafa, A., Khan, S. H., Hayat, M., Goecke, R., Shen, J., & Shao, L. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.2978474 · Cited by 51
A study on generic object detection with emphasis on future research directions
Arulprakash, E., & Aruldoss, M. (2021) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2021.08.001 · Cited by 52
3D adversarial attacks beyond point cloud
Zhang, J., Chen, L., Liu, B., Ouyang, B., Xie, Q., Zhu, J., Li, W., & Meng, Y. (2023) · Information Sciences · doi:10.1016/j.ins.2023.03.084 · Cited by 53
Task-generalizable Adversarial Attack based on Perceptual MetricPreprint
Naseer, M., Khan, S. H., Rahman, S., & Porikli, F. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.09020 · Cited by 60
Over-the-Air Adversarial Flickering Attacks against Video Recognition Networks
Pony, R., Naeh, I., & Mannor, S. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00058 · Cited by 48
Unauthorized AI cannot recognize me: Reversible adversarial example
Liu, J., Zhang, W., Fukuchi, K., Akimoto, Y., & Sakuma, J. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109048 · Cited by 50
Enhancing the Self-Universality for Transferable Targeted Attacks
Wei, Z., Chen, J., Wu, Z., & Jiang, Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01182 · Cited by 50
Cali, Ü., Çatak, F. Ö., & Halden, U. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10827-x · Cited by 51
EVADE: Targeted Adversarial False Data Injection Attacks for State Estimation in Smart Grid
Tian, J., Shen, C. Q., Wang, B., Ren, C., Xia, X., Dong, R., & Cheng, T. (2024) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2024.3492290 · Cited by 48
Deep Restricted Kernel Machines Using Conjugate Feature Duality
Suykens, J. A. K. (2017) · Neural Computation · doi:10.1162/neco_a_00984 · Cited by 48
Structure Preserving Video Prediction
Xu, J., Ni, B., Li, Z., Cheng, S., & Yang, X. (2018) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2018.00158 · Cited by 48
Lu, Y., Lin, H., Han, X., & Sun, L. (2019) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p19-1429 · Cited by 48
Achieving Robustness in the Wild via Adversarial Mixing With Disentangled Representations
Gowal, S., Qin, C., Huang, P.-S., Cemgil, A. T., Dvijotham, K., Mann, T., & Kohli, P. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00129 · Cited by 50
Robustifying Reinforcement Learning Agents via Action Space Adversarial Training
Tan, K. L., Esfandiari, Y., Lee, X. Y., Aakanksha, A., & Sarkar, S. (2020) · Proceedings of the ... American Control Conference/Proceedings of the American Control Conference · doi:10.23919/acc45564.2020.9147846 · Cited by 48
Towards Feature Space Adversarial Attack by Style Perturbation
Xu, Q., Tao, G., Cheng, S., & Zhang, X. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i12.17259 · Cited by 48
Automatic Shortcut Removal for Self-Supervised Representation LearningPreprint
Minderer, M., Bachem, O., Houlsby, N., & Tschannen, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.08822 · Cited by 48
Adversarial Collaborative Auto-encoder for Top-N Recommendation
Feng, Y., Yao, L., & Benatallah, B. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8851902 · Cited by 47
Deep Validation: Toward Detecting Real-World Corner Cases for Deep Neural Networks
Wu, W., Xu, H. F., Zhong, S., Lyu, M. R.-T., & King, I. (2019) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn.2019.00026 · Cited by 47
Adversarial Learning With Margin-Based Triplet Embedding Regularization
Zhong, Y., & Deng, W. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00665 · Cited by 48
Adversarial Attacks and Defenses
Liu, N., Du, M., Guo, R., Liu, H., & Hu, X. (2021) · ACM SIGKDD Explorations Newsletter · doi:10.1145/3468507.3468519 · Cited by 56
On Training Robust PDF Malware ClassifiersPreprint
Chen, Y., Wang, S., She, D., & Jana, S. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1904.03542 · Cited by 47
When Wireless Security Meets Machine Learning: Motivation, Challenges, and Research DirectionsPreprint
Sagduyu, Y. E., Shi, Y., Erpek, T., Headley, W. C., Flowers, B., Stantchev, G. M., & Lu, Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2001.08883 · Cited by 47
Sun, Z., Sun, R., Lu, L. J., & Mislove, A. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.07687 · Cited by 47
Inkawhich, N., Liang, K. J., Wang, B., Inkawhich, M. J., Carin, L., & Chen, Y. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2004.14861 · Cited by 48
Brendel, W., Rauber, J., Kurakin, A., Papernot, N., Veliqi, B., Mohanty, S. P., Laurent, F., Salathé, M., Bethge, M., Yu, Y., et al. (2019) · The Springer series on challenges in machine learning · doi:10.1007/978-3-030-29135-8_5 · Cited by 50
Self-citationRobust in practice: Adversarial attacks on quantum machine learning
Liao, H., Convy, I., Huggins, W. J., & Whaley, K. B. (2021) · Physical Review A · doi:10.1103/physreva.103.042427 · Cited by 60
Boosting the Transferability of Video Adversarial Examples via Temporal Translation
Wei, Z., Chen, J., Wu, Z., & Jiang, Y. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i3.20168 · Cited by 47
Pyramid Adversarial Training Improves ViT Performance
Herrmann, C., Sargent, K., Lu, J., Zabih, R., Chang, H., Liu, C., Krishnan, D., & Sun, D. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01306 · Cited by 56
Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security
Tao, G., Liu, Y., Shen, G., Xu, Q., An, S., Zhang, Z., & Zhang, X. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833688 · Cited by 49
Deceiving AI-based malware detection through polymorphic attacks
Catalano, C., Chezzi, A., Angelelli, M., & Tommasi, F. (2022) · Computers in Industry · doi:10.1016/j.compind.2022.103751 · Cited by 46
Zhang, Y., Hou, J., & Yuan, Y. (2023) · International Journal of Computer Vision · doi:10.1007/s11263-023-01934-3 · Cited by 50
Vivek, B. S., Mopuri, K. R., & Babu, R. V. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-01267-0_13 · Cited by 46
Efficient Joint Gradient Based Attack Against SOR Defense for 3D Point Cloud Classification
Ma, C., Meng, W., Wu, B., Xu, S., & Zhang, X. (2020) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3394171.3413875 · Cited by 46
Point Adversarial Self-Mining: A Simple Method for Facial Expression Recognition
Liu, P., Lin, Y., Meng, Z., Lu, L., Deng, W., Zhou, J. T., & Yang, Y. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2021.3085744 · Cited by 54
Do Wider Neural Networks Really Help Adversarial Robustness?Preprint
Wu, B., Chen, J., Cai, D., He, X., & Gu, Q. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.01279 · Cited by 46
Lee, J., Kim, E., Mok, J., & Yoon, S. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3166916 · Cited by 46
Transferable Multimodal Attack on Vision-Language Pre-training Models
Wang, H., Dong, K., Zhu, Z., Qin, H., Liu, A., Fang, X., Wang, J., & Liu, X. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00102 · Cited by 53
Awad, Z., Zakaria, M., & Hassan, R. (2025) · Scientific Reports · doi:10.1038/s41598-025-94023-z · Cited by 45
Adversarial Defense Through Network Profiling Based Path Extraction
Qiu, Y., Leng, J., Guo, C., Chen, Q., Li, C., Guo, M., & Zhu, Y. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.00491 · Cited by 45
Online Social Deception and Its Countermeasures: A Survey
Guo, Z. Y., Cho, J.-H., Chen, I.-R., Sengupta, S., Hong, M., & Mitra, T. (2020) · IEEE Access · doi:10.1109/access.2020.3047337 · Cited by 49
Security and Privacy Issues in Deep Learning: A Brief Review
Ha, T., Dang, T. K., Le, T. H., & Truong, T. A. (2020) · SN Computer Science · doi:10.1007/s42979-020-00254-4 · Cited by 46
Temporal sparse adversarial attack on sequence-based gait recognition
He, Z., Wang, W., Dong, J., & Tan, T. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109028 · Cited by 44
Secure Deep Graph Generation with Link Differential Privacy
Yang, C., Wang, H., Zhang, K., Chen, L., & Sun, L. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/450 · Cited by 44
ADef: an Iterative Algorithm to Construct Adversarial DeformationsPreprint
Alaifari, R., Alberti, G. S., & Gauksson, T. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1804.07729 · Cited by 56
On the role of deep learning model complexity in adversarial robustness for medical images
Rodriguez, D., Nayak, T., Chen, Y., Krishnan, R., & Huang, Y. (2022) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-022-01891-w · Cited by 47
Towards automatic detection of wildlife trade using machine vision models
Kulkarni, R., & Minin, E. D. (2023) · Biological Conservation · doi:10.1016/j.biocon.2023.109924 · Cited by 47
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
