The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 501–600 of 1,004
Liu, C., Chen, B., Shao, W., Zhang, W., Wong, K. K. L., & Zhang, Y. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3377730 · Cited by 45
DLA: Dense-Layer-Analysis for Adversarial Example Detection
Sperl, P., Kao, C.-Y., Chen, P., Lei, X., & Böttinger, K. (2020) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp48549.2020.00021 · Cited by 49
Xi, B. (2020) · Wiley Interdisciplinary Reviews Computational Statistics · doi:10.1002/wics.1511 · Cited by 45
Algorithms in Future Capital Markets
Koshiyama, A., Firoozye, N. B., & Treleaven, P. C. (2020) · ACM International Conference on AI in Finance (ICAIF) · doi:10.1145/3383455.3422539 · Cited by 48
Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency
Wang, X., Li, S., Liu, M., Wang, Y., & Roy–Chowdhury, A. K. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01482 · Cited by 43
Detecting Adversarial Samples for Deep Neural Networks through Mutation TestingPreprint
Wang, J., Sun, J., Zhang, P., & Wang, X. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1805.05010 · Cited by 48
Multi-Targeted Adversarial Example in Evasion Attack on Deep Neural Network
Kwon, H., Kim, Y., Park, K.-W., Yoon, H., & Choi, D. (2018) · IEEE Access · doi:10.1109/access.2018.2866197 · Cited by 43
ROSA: Robust Salient Object Detection Against Adversarial Attacks
Li, H., Li, G., & Yu, Y. (2019) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2019.2914099 · Cited by 42
Adaptive Wiener Filter and Natural Noise to Eliminate Adversarial Perturbation
Wu, F., Wenxue, Y., Xiao, L., & Zhu, J. (2020) · Electronics · doi:10.3390/electronics9101634 · Cited by 42
Bär, A., Löhdefink, J., Kapoor, N., Varghese, S., Hüger, F., Schlicht, P., & Fingscheidt, T. (2020) · IEEE Signal Processing Magazine · doi:10.1109/msp.2020.2983666 · Cited by 42
Influence of transportation network on transmission heterogeneity of COVID-19 in China
Lu, J., Lin, A., Jiang, C., Zhang, A., & Yang, Z. (2021) · Transportation Research Part C Emerging Technologies · doi:10.1016/j.trc.2021.103231 · Cited by 42
Defending Multimodal Fusion Models against Single-Source Adversaries
Yang, K., Lin, W.-Y., Barman, M., Condessa, F., & Kolter, J. Z. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00335 · Cited by 48
LAFEAT: Piercing Through Adversarial Defenses with Latent Features
Yu, Y., Gao, X., & Xu, C. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00568 · Cited by 43
Attack and Defense: Adversarial Security of Data-Driven FDC Systems
Zhuo, Y., Yin, Z., & Ge, Z. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3197190 · Cited by 43
Max-Mahalanobis Linear Discriminant Analysis NetworksPreprint
Pang, T., Du, C., & Zhu, J. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1802.09308 · Cited by 42
Improved Zeroth-Order Variance Reduced Algorithms and Analysis for Nonconvex OptimizationPreprint
Ji, K., Wang, Z., Zhou, Y., & Liang, Y. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1910.12166 · Cited by 42
Abstract Interpretation of Decision Tree Ensemble Classifiers
Ranzato, F., & Zanella, M. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.5998 · Cited by 42
Adversarial Machine Learning in Text Processing: A Literature Survey
Alsmadi, I. M., Aljaafari, N., Nazzal, M., Alhamed, S., Sawalmeh, A., Vizcarra, C. P., Khreishah, A. A., Anan, M., Algosaibi, A. A., Al-Naeem, M., et al. (2022) · IEEE Access · doi:10.1109/access.2022.3146405 · Cited by 47
Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning
Guo, J., Chen, Y., Hao, Y., Yin, Z., Yu, Y., & Li, S. (2022) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw56347.2022.00022 · Cited by 47
Enhancing the Transferability of Adversarial Examples with Random Patch
Zhang, Y., Tan, Y., Chen, T., Liu, X., Zhang, Q., & Li, Y. (2022) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2022/233 · Cited by 41
Wang, Y., Cao, T., Zheng, Y., Fang, Z., Wang, Y., Liu, Y., Chen, L., & Fu, B. (2022) · Security and Communication Networks · doi:10.1155/2022/8288855 · Cited by 41
Hsiung, L., Tsai, Y.-Y., Chen, P., & Ho, T.-Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.02362 · Cited by 48
Security, privacy, and robustness for trustworthy AI systems: A review
Saeed, M. M., & Alsharidah, M. (2024) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2024.109643 · Cited by 45
Multi-label Adversarial Perturbations
Song, Q., Jin, H., Huang, X. X., & Hu, X. (2018) · Proceedings · doi:10.1109/icdm.2018.00166 · Cited by 44
Adversarial Examples for Improving End-to-end Attention-based Small-footprint Keyword Spotting
Wang, X., Sun, S., Shan, C., Hou, J., Xie, L., Shen, L., & Lei, X. (2019) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp.2019.8683479 · Cited by 41
Anatomical context protects deep learning from adversarial perturbations in medical imaging
Li, Y., Zhang, H., Bermudez, C. L., Chen, Y., Landman, B. A., & Vorobeychik, Y. (2019) · Neurocomputing · doi:10.1016/j.neucom.2019.10.085 · Cited by 41
Auxiliary Training: Towards Accurate and Robust Models
Zhang, L., Yu, M., Chen, T., Shi, Z., Bao, C., & Ma, K. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00045 · Cited by 42
Akartuna, E. A., Johnson, S. D., & Thornton, A. E. (2022) · Security Journal · doi:10.1057/s41284-022-00356-z · Cited by 41
Minimalistic Attacks: How Little It Takes to Fool Deep Reinforcement Learning Policies
Qu, X., Sun, Z., Ong, Y.-S., Gupta, A., & Wei, P. (2021) · IEEE Transactions on Cognitive and Developmental Systems · doi:10.1109/tcds.2020.2974509 · Cited by 40
Investigating Top-k White-Box and Transferable Black-box Attack
Zhang, C., Benz, P., Karjauv, A., Cho, J. W., Zhang, K., & Kweon, I. S. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01466 · Cited by 43
Unified Adversarial Patch for Cross-modal Attacks in the Physical World
Wei, X., Huang, Y., Sun, Y., & Yu, J. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00410 · Cited by 40
Malytics: A Malware Detection Scheme
Yousefi‐Azar, M., Hamey, L., Varadharajan, V., & Chen, S. (2018) · IEEE Access · doi:10.1109/access.2018.2864871 · Cited by 42
Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss
Li, P., Yi, J., Zhou, B., & Zhang, L. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/403 · Cited by 48
Investigating Robustness of Adversarial Samples Detection for Automatic Speaker Verification
Xu, L., Li, N., Zhong, J., Wu, X., Liu, X., Su, D., Yu, D., & Meng, H. M. L. (2020) · Interspeech (USB) · doi:10.21437/interspeech.2020-2441 · Cited by 40
On Adversarial Robustness: A Neural Architecture Search perspective
Devaguptapu, C., Agarwal, D., Mittal, G., Gopalani, P., & Balasubramanian, V. N. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00022 · Cited by 47
Detecting Adversarial Attacks on Neural Network Policies with Visual ForesightPreprint
Lin, Y.-C., Liu, M.-Y., Sun, M., & Huang, J. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1710.00814 · Cited by 57
Value Propagation for Decentralized Networked Deep Multi-agent Reinforcement LearningPreprint
Qu, C., Mannor, S., Xu, H., Qi, Y., Song, L., & Xiong, J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1901.09326 · Cited by 40
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust AccuraciesPreprint
Wang, B., Yuan, B., Shi, Z., & Osher, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.10745 · Cited by 44
Towards data augmentation in graph neural network: An overview and evaluation
Adjeisah, M., Zhu, X., Xu, H., & Ayall, T. A. (2022) · Computer Science Review · doi:10.1016/j.cosrev.2022.100527 · Cited by 39
Leveraging explainable AI for sustainable agriculture: a comprehensive review of recent advances
Rajbongshi, A., Johora, F. T., Hossain, A., Sarker, M. S., Rahman, M. H., Rahman, M. W., Alotaibi, F. T., & Moni, M. A. (2026) · Artificial Intelligence Review · doi:10.1007/s10462-025-11459-5 · Cited by 45
Adversarial Robustness: Softmax versus Openmax
Rozsa, A., Günther, M., & Boult, T. E. (2017) · British Machine Vision Conference (BMVC) · doi:10.5244/c.31.156 · Cited by 39
The Adversarial Attack and Detection under the Fisher Information Metric
Zhao, C., Fletcher, P. T., Yu, M., Peng, Y., Zhang, G., & Shen, C. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33015869 · Cited by 42
Security Hardening of Botnet Detectors Using Generative Adversarial Networks
Randhawa, R. H., Aslam, N., Alauthman, M., Rafiq, H., & Comeau, F. (2021) · IEEE Access · doi:10.1109/access.2021.3083421 · Cited by 39
Just Noticeable Difference for Deep Machine Vision
Jin, J., Zhang, X., Fu, X., Zhang, H., Lin, W., Lou, J., & Zhao, Y. (2021) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2021.3113572 · Cited by 39
Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?Preprint
Kaur, S., Cohen, J., & Lipton, Z. C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1910.08640 · Cited by 57
A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network InferencePreprint
Hong, S., Kaya, Y., Modoranu, I.-V., & Dumitraş, T. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.02432 · Cited by 39
Understanding and combating robust overfitting via input loss landscape analysis and regularization
Li, L., & Spratling, M. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109229 · Cited by 40
RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World
Wang, D., Yao, W., Jiang, T., Li, C., & Chen, X. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00411 · Cited by 44
Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection
Yao, Q., He, Z., Han, H., & Zhou, S. K. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-59719-1_67 · Cited by 38
On the Robustness of Domain Constraints
Sheatsley, R., Hoak, B., Pauley, E., Beugin, Y., Weisman, M. J., & McDaniel, P. D. (2021) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3460120.3484570 · Cited by 43
Exploring the Devil in Graph Spectral Domain for 3D Point Cloud Attacks
Hu, Q., Liu, D., & Hu, W. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-20062-5_14 · Cited by 38
An Empirical Evaluation on Robustness and Uncertainty of Regularization Methods
Chun, S., Oh, S. J., Yun, S., Han, D., Choe, J., & Yoo, Y. (2020) · arXiv · doi:10.48550/arxiv.2003.03879 · Cited by 37
Removing Adversarial Noise in Class Activation Feature Space
Zhou, D., Wang, N., Peng, C., Gao, X., Wang, X., Yu, J., & Liu, T. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00778 · Cited by 38
Responsible cognitive digital clones as decision-makers: a design science research study
Golovianko, M., Gryshko, S., Terziyan, V. Y., & Tuunanen, T. (2022) · European Journal of Information Systems · doi:10.1080/0960085x.2022.2073278 · Cited by 43
Effective Adversarial Regularization for Neural Machine Translation
Sato, M., Suzuki, J., & Kiyono, S. (2019) · Proceedings of the conference - Association for Computational Linguistics. Meeting · doi:10.18653/v1/p19-1020 · Cited by 37
CRC-PUF: A Machine Learning Attack Resistant Lightweight PUF Construction
Dubrova, E., Naslund, O., Degen, B., Gawell, A., & Yu, Y. (2019) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw.2019.00036 · Cited by 38
Communication without Interception: Defense against Modulation Detection
Hameed, M. Z., György, A., & Gündüz, D. (2019) · IEEE Global Conference on Signal and Information Processing · doi:10.1109/globalsip45357.2019.8969541 · Cited by 37
Towards Achieving Adversarial Robustness by Enforcing Feature Consistency Across Bit Planes
Addepalli, S., Vivek, B. S., Baburaj, A., Sriramanan, G., & Babu, R. V. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00110 · Cited by 38
DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation
Cho, S., Jun, T. J., Oh, B., & Kim, D. (2020) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn48605.2020.9207291 · Cited by 37
Low Curvature Activations Reduce Overfitting in Adversarial Training
Singla, V., Singla, S., Feizi, S., & Jacobs, D. W. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01611 · Cited by 39
Adversarial Defense for Automatic Speaker Verification by Cascaded Self-Supervised Learning Models
Wu, H., Li, X., Liu, A. T., Wu, Z., Meng, H. M. L., & Lee, H.-Y. (2021) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp39728.2021.9413737 · Cited by 37
Adversarial Perturbation Defense on Deep Neural Networks
Zhang, X., Zheng, X., & Mao, W. (2021) · ACM Computing Surveys · doi:10.1145/3465397 · Cited by 40
Robustness of convolutional neural networks to physiological electrocardiogram noise
Venton, J., Harris, P. M., Sundar, A., Smith, N. A. S., & Aston, P. J. (2021) · Philosophical Transactions of the Royal Society A Mathematical Physical and Engineering Sciences · doi:10.1098/rsta.2020.0262 · Cited by 40
Xu, M., Zhang, T., & Zhang, D. (2022) · IEEE Transactions on Medical Imaging · doi:10.1109/tmi.2022.3156268 · Cited by 40
Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of PolytopesPreprint
Jordan, M., Lewis, J., & Dimakis, A. G. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1903.08778 · Cited by 37
Robust and Generalized Physical Adversarial Attacks via Meta-GAN
Feng, W., Xu, N., Zhang, T., Wu, B., & Zhang, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3288426 · Cited by 40
Robustness evaluation of deep neural networks for endoscopic image analysis: Insights and strategies
Jaspers, T. J. M., Boers, T. G. W., Kusters, C. H. J., Jong, M. R., Jukema, J. B., de Groof, A. J., Bergman, J. J. G. H. M., de With, P. H. N., & van der Sommen, F. (2024) · Medical Image Analysis · doi:10.1016/j.media.2024.103157 · Cited by 42
LOTS about attacking deep features
Rozsa, A., Günther, M., & Boult, T. E. (2017) · IEEE International Joint Conference on Biometrics (IJCB) · doi:10.1109/btas.2017.8272695 · Cited by 36
Lamb, A., Verma, V., Kawaguchi, K., Matyasko, A., Khosla, S., Kannala, J., & Bengio, Y. (2022) · Neural Networks · doi:10.1016/j.neunet.2022.07.012 · Cited by 39
MAG-GAN: Massive attack generator via GAN
Chen, J., Zheng, H., Xiong, H., Shen, S., & Su, M. (2020) · Information Sciences · doi:10.1016/j.ins.2020.04.019 · Cited by 38
Shi, Y., Davaslıoğlu, K., & Sagduyu, Y. E. (2020) · ACM Workshop on Wireless Security and Machine Learning (WiseML) · doi:10.1145/3395352.3404070 · Cited by 37
Contrastive Adversarial Domain Adaptation Networks for Speaker Recognition
Li, L., Mak, M., & Chien, J. (2020) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2020.3044215 · Cited by 36
Non-Negative Networks Against Adversarial AttacksPreprint
Fleshman, W., Raff, E., Sylvester, J., Forsyth, S., & McLean, M. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1806.06108 · Cited by 46
ROMark: A Robust Watermarking System Using Adversarial TrainingPreprint
Wen, B., & Aydöre, S. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1910.01221 · Cited by 36
Scalable Differential Privacy with Certified Robustness in Adversarial LearningPreprint
Phan, N., Thai, M. T., Hu, H., Jin, R., Sun, T., & Dou, D. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1903.09822 · Cited by 38
Adversarially Guided Actor-CriticPreprint
Flet-Berliac, Y., Ferret, J., Pietquin, O., Preux, P., & Geist, M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.04376 · Cited by 50
An Empirical Analysis of Backward Compatibility in Machine Learning Systems
Srivastava, M., Nushi, B., Kamar, E. S., Shah, S., & Horvitz, E. (2020) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3394486.3403379 · Cited by 40
DeepDyve: Dynamic Verification for Deep Neural Networks
Li, Y., Li, M., Luo, B., Tian, Y., & Xu, Q. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3423338 · Cited by 35
Adversarial Machine Learning Security Problems for 6G: mmWave Beam Prediction Use-Case
Çatak, E., Çatak, F. Ö., & Moldsvor, A. (2021) · IEEE International Black Sea Conference on Communications and Networking · doi:10.1109/blackseacom52164.2021.9527756 · Cited by 35
Adversarial Self-Supervised Learning for Robust SAR Target Recognition
Xu, Y., Sun, H., Chen, J., Lei, L., Ji, K., & Kuang, G. (2021) · Remote Sensing · doi:10.3390/rs13204158 · Cited by 35
TkML-AP: Adversarial Attacks to Top-k Multi-Label Learning
Hu, S., Ke, L., Wang, X., & Lyu, S. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00755 · Cited by 35
Chen, R., Li, Y., Lou, M., Fan, J., Tang, Y., Sensale‐Rodriguez, B., Yu, C., & Gao, W. (2022) · Laser & Photonics Review · doi:10.1002/lpor.202200348 · Cited by 37
Qian, Y., Ma, D., Wang, B., Pan, J., Wang, J., Gu, Z., Chen, J., Zhou, W., & Lei, J. (2020) · Computers & Security · doi:10.1016/j.cose.2020.101826 · Cited by 35
Robustifying models against adversarial attacks by Langevin dynamics
Srinivasan, V., Rohrer, C., Marbán, A., Müller, K., Samek, W., & Nakajima, S. (2021) · Neural Networks · doi:10.1016/j.neunet.2020.12.024 · Cited by 41
Adversarial Meta-LearningPreprint
Yin, C., Tang, J., Xu, Z., & Wang, Y. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1806.03316 · Cited by 35
Security Matters: A Survey on Adversarial Machine LearningPreprint
Li, G., Zhu, P., Li, J., Yang, Z., Ning, C., & Chen, Z. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.07339 · Cited by 35
Adversarial Defense based on Structure-to-Signal Autoencoders
Folz, J., Palacio, S., Hees, J., & Dengel, A. R. (2020) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv45572.2020.9093310 · Cited by 34
Data poisoning attacks on neighborhood‐based recommender systems
Chen, L., Xu, Y., Xie, F., Huang, M., & Zheng, Z. (2020) · Transactions on Emerging Telecommunications Technologies · doi:10.1002/ett.3872 · Cited by 34
Dynamic Divide-and-Conquer Adversarial Training for Robust Semantic Segmentation
Xu, X., Zhao, H., & Jia, J. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00739 · Cited by 34
Zeroth-Order Regularized Optimization (ZORO): Approximately Sparse Gradients and Adaptive Sampling
Cai, H., McKenzie, D. H., Yin, W., & Zhang, Z. (2022) · SIAM Journal on Optimization · doi:10.1137/21m1392966 · Cited by 40
Exploiting Joint Robustness to Adversarial Perturbations
Dabouei, A., Soleymani, S., Taherkhani, F., Dawson, J. M., & Nasrabadi, N. M. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00120 · Cited by 34
Making Adversarial Examples More Transferable and Indistinguishable
Zou, J., Duan, Y., Li, B., Zhang, W., Yu, P., & Pan, Z. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i3.20279 · Cited by 36
Suggestive Annotation of Brain Tumour Images with Gradient-Guided Sampling
Dai, C., Wang, S., Mo, Y., Zhou, K., Angelini, E. D., Guo, Y., & Bai, W. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-59719-1_16 · Cited by 34
Robust Deep Reinforcement Learning for Traffic Signal Control
Tan, K. L., Sharma, A., & Sarkar, S. (2020) · Journal of Big Data Analytics in Transportation · doi:10.1007/s42421-020-00029-6 · Cited by 36
KAT: A Knowledge Adversarial Training Method for Zero-Order Takagi–Sugeno–Kang Fuzzy Classifiers
Qin, B., Chung, F.-L., & Wang, S. (2020) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2020.3034792 · Cited by 34
Exploiting epistemic uncertainty of the deep learning models to generate adversarial samples
Tuna, Ö. F., Çatak, F. Ö., & Eskil, M. T. (2022) · Multimedia Tools and Applications · doi:10.1007/s11042-022-12132-7 · Cited by 34
Spectral Adversarial Training for Robust Graph Neural Network
Li, J., Peng, J., Chen, L., Zheng, Z., Liang, T., & Ling, Q. H. (2022) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2022.3222207 · Cited by 34
Imperceptible Adversarial Attack via Invertible Neural Networks
Chen, Z., Wang, Z., Huang, J., Zhao, W., Liu, X., & Guan, D. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i1.25115 · Cited by 34
Improving Adversarially Robust Few-shot Image Classification with Generalizable Representations
Dong, J., Wang, Y., Lai, J., & Xie, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.00882 · Cited by 33
Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?
Laugros, A., Caplier, A., & Ospici, M. (2019) · 2019 IEEE/CVF International Conference on Computer Vision Workshop (ICCVW) · doi:10.1109/iccvw.2019.00134 · Cited by 33
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
