The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 601–700 of 1,004
On the Robustness of Redundant Teacher-Student Frameworks for Semantic Segmentation
Bär, A., Hüger, F., Schlicht, P., & Fingscheidt, T. (2019) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw.2019.00178 · Cited by 33
Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once
Han, J., Dong, X., Zhang, R., Chen, D., Zhang, W., Yu, N., Luo, P., & Wang, X. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00526 · Cited by 33
A Hamiltonian Monte Carlo Method for Probabilistic Adversarial Attack and Learning
Wang, H., Li, G., Liu, X., & Lin, L. (2020) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2020.3032061 · Cited by 33
Precise statistical analysis of classification accuracies for adversarial training
Javanmard, A., & Soltanolkotabi, M. (2022) · The Annals of Statistics · doi:10.1214/22-aos2180 · Cited by 47
Yet Another Intermediate-Level Attack
Li, Q., Guo, Y., & Chen, H. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58517-4_15 · Cited by 35
Security of Neural Networks from Hardware Perspective
Xu, Q., Arafin, M. T., & Qu, G. (2021) · Asia and South Pacific Design Automation Conference (ASP-DAC) · doi:10.1145/3394885.3431639 · Cited by 33
A Black-Box Attack Method against Machine-Learning-Based Anomaly Network Flow Detection Models
Guo, S., Zhao, J., Li, X., Duan, J., Mu, D., & Jing, X. (2021) · Security and Communication Networks · doi:10.1155/2021/5578335 · Cited by 34
Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning
Wu, H., Xu, L., Liu, A. T., Wu, Z., Meng, H. M. L., & Lee, H.-Y. (2021) · IEEE/ACM Transactions on Audio Speech and Language Processing · doi:10.1109/taslp.2021.3133189 · Cited by 37
AVA: Adversarial Vignetting Attack against Visual Recognition
Tian, B., Juefei-Xu, F., Guo, Q., Xie, X., Li, X., & Liu, Y. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/145 · Cited by 33
Benz, P., Zhang, C., & Kweon, I. S. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00772 · Cited by 33
Adversarial Deep Learning for Indoor Localization With Channel State Information Tensors
Wang, X., Wang, X., Mao, S., Zhang, J., Periaswamy, S. C., & Patton, J. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3155562 · Cited by 33
Understanding Real-world Threats to Deep Learning Models in Android Apps
Deng, Z., Chen, K., Meng, G., Zhang, X., Xu, K. H., & Cheng, Y. (2022) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3548606.3559388 · Cited by 34
Language Model Agnostic Gray-Box Adversarial Attack on Image Captioning
Aafaq, N., Akhtar, N., Liu, W., Shah, M., & Mian, A. S. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3226905 · Cited by 35
Adversarial Attacks for Optical Flow-Based Action Recognition ClassifiersPreprint
Inkawhich, N., Inkawhich, M. J., Chen, Y., & Li, H. H. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.11875 · Cited by 33
Interpreting Adversarial Examples by Activation Promotion and SuppressionPreprint
Xu, K., Liu, S., Zhang, G., Sun, M., Zhao, P., Fan, Q., Gan, C., & Lin, X. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1904.02057 · Cited by 33
Automated federated learning‐based adversarial attack and defence in industrial control systems
Zeng, G., Shao, J., Lu, K., Geng, G., & Weng, J. (2024) · IET Cyber-Systems and Robotics · doi:10.1049/csy2.12117 · Cited by 32
Resurrecting Old Classes with New Data for Exemplar-Free Continual Learning
Goswami, D., Soutif--Cormerais, A., Liu, Y., Kamath, S., Twardowski, B., & van de Weijer, J. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02695 · Cited by 34
James, U. U., Idika, C. N., Enyejo, L. A., Abiodun, K. E., & Enyejo, J. O. (2024) · International Journal of Scientific Research and Modern Technology. · doi:10.38124/ijsrmt.v3i12.644 · Cited by 32
Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning
Schuster, R., Schuster, T., Meri, Y., & Shmatikov, V. (2020) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40000.2020.00115 · Cited by 34
Deep learning architecture for direct probability density prediction of small‐scale solar generation
Afrasiabi, M., Mohammadi, M., Rastegar, M., & Afrasiabi, S. (2020) · IET Generation Transmission & Distribution · doi:10.1049/iet-gtd.2019.1289 · Cited by 32
Selectivity and robustness of sparse coding networks
Paiton, D. M., Frye, C. G., Lundquist, S. Y., Bowen, J. D., Zarcone, R. V., & Olshausen, B. A. (2020) · Journal of Vision · doi:10.1167/jov.20.12.10 · Cited by 36
Adversarial Ranking Attack and Defense
Zhou, M., Niu, Z., Wang, L., Zhang, Q., & Hua, G. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58568-6_46 · Cited by 34
Chen, J., Zheng, H., Xiong, H., Chen, R., Du, T., Hong, Z., & Ji, S. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102220 · Cited by 32
Relating Adversarially Robust Generalization to Flat Minima
Stutz, D., Hein, M., & Schiele, B. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00771 · Cited by 32
Lipschitz Continuity Guided Knowledge Distillation
Shang, Y., Duan, B., Zong, Z., Nie, L., & Yan, Y. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01050 · Cited by 32
Learning Universal Adversarial Perturbation by Adversarial Example
Li, M., Yang, Y., Wei, K., Yang, X., & Huang, H. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i2.20023 · Cited by 32
Adversarial examples based on object detection tasks: A survey
Mi, J., Wang, X.-D., Zhou, L., & Cheng, K. (2022) · Neurocomputing · doi:10.1016/j.neucom.2022.10.046 · Cited by 34
Bypassing Feature Squeezing by Increasing Adversary StrengthPreprint
Sharma, Y., & Chen, P. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1803.09868 · Cited by 32
Improving Robustness of Deep-Learning-Based Image ReconstructionPreprint
Raj, A., Bresler, Y., & Li, B. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.11821 · Cited by 33
Thierno Hamidou, S. O. W., & Adda, M. (2025) · Machine Learning with Applications · doi:10.1016/j.mlwa.2025.100738 · Cited by 31
Privacy Against a Hypothesis Testing Adversary
Li, Z., Oechtering, T. J., & Gündüz, D. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2018.2882343 · Cited by 31
Information Aware max-norm Dirichlet networks for predictive uncertainty estimation
Tsiligkaridis, T. (2020) · Neural Networks · doi:10.1016/j.neunet.2020.12.011 · Cited by 33
SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems
Chen, Y., Zhang, J., Yuan, X., Zhang, S., Chen, K., Wang, X., & Guo, S. (2022) · ACM Transactions on Privacy and Security · doi:10.1145/3510582 · Cited by 31
Bhattacharjee, A., Bhatnagar, L., Kim, Y., & Panda, P. (2021) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2021.3109857 · Cited by 31
On the Adversarial Robustness of LASSO Based Feature Selection
Li, F., Lai, L., & Cui, S. R. (2021) · IEEE Transactions on Signal Processing · doi:10.1109/tsp.2021.3115943 · Cited by 31
Singh, A., & Sikdar, B. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3138541 · Cited by 31
Information-Containing Adversarial Perturbation for Combating Facial Manipulation Systems
Zhu, Y. T., Chen, Y., Li, X., Zhang, R., Tian, X., Zheng, B., & Chen, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3262156 · Cited by 33
Adversarial AI Testcases for Maritime Autonomous Systems
Walter, M. J., Barrett, A., Walker, D. J., & Tam, K. (2023) · AI Computer Science and Robotics Technology · doi:10.5772/acrt.15 · Cited by 31
Layerwise Perturbation-Based Adversarial Training for Hard Drive Health Degree Prediction
Zhang, J., Wang, J., He, L., Li, Z., & Yu, P. S. (2018) · Proceedings · doi:10.1109/icdm.2018.00197 · Cited by 31
DeepEC: Adversarial attacks against graph structure prediction models
Xian, X., Wu, T., Qiao, S., Wang, W., Wang, C., Liu, Y., & Xu, G. (2020) · Neurocomputing · doi:10.1016/j.neucom.2020.07.126 · Cited by 31
Intelligent Systems and Applications
Bi, Y., Bhatia, R., & Kapoor, S. (2019) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-29513-4 · Cited by 31
A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial ExamplesPreprint
Wang, B., Gao, J., & Qi, Y. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1612.00334 · Cited by 43
Lamb, A., Binas, J., Goyal, A., Serdyuk, D., Subramanian, S., Mitliagkas, I., & Bengio, Y. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1804.02485 · Cited by 37
Robust Neural Networks using Randomized Adversarial TrainingPreprint
Araujo, A., Meunier, L., Pinot, R., & Négrevergne, B. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1903.10219 · Cited by 31
How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?Preprint
Dong, X., Tuan, L. A., Lin, M., Yan, S., & Zhang, H. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2112.11668 · Cited by 31
Improving adversarial robustness by learning shared information
Yu, X., Smedemark-Margulies, N., Aeron, S., Koike–Akino, T., Moulin, P., Brand, M., Parsons, K., & Wang, Y. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109054 · Cited by 31
Gong, Z., Shen, L., Zhang, Y., Zhang, L. Y., Wang, J., Bai, G., & Xiang, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3333555 · Cited by 30
Deistler, M., Kadhim, K. L., Pals, M., Beck, J., Huang, Z., Gloeckler, M., Lappalainen, J. K., Schröder, C., Berens, P., Gonçalves, P. J., et al. (2025) · Nature Methods · doi:10.1038/s41592-025-02895-w · Cited by 38
Attack Strength vs. Detectability Dilemma in Adversarial Machine Learning
Frederickson, C., Moore, M., Dawson, G., & Robi Polikar, A. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489495 · Cited by 30
Adversarial Training of Gradient-Boosted Decision Trees
Calzavara, S., Lucchese, C., & Tolomei, G. (2019) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3357384.3358149 · Cited by 30
An Overview of the Machine Learning Applied in Smart Cities
França, R. P., Monteiro, A. C. B., Arthur, R., & Iano, Y. (2020) · Lecture notes in intelligent transportation and infrastructure · doi:10.1007/978-3-030-60922-1_5 · Cited by 31
Bias Field Poses a Threat to DNN-Based X-Ray Recognition
Tian, B., Guo, Q., Juefei-Xu, F., Chan, W. L., Cheng, Y., Li, X., Xie, X., & Qin, S. (2021) · IEEE International Conference on Multimedia and Expo (ICME) · doi:10.1109/icme51207.2021.9428437 · Cited by 30
Chiang, P.-H., Chan, C.-S., & Wu, S.-H. (2021) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3474085.3475338 · Cited by 30
Liu, J., Zhang, Q., Mo, K., Xiang, X., Li, J., Cheng, D., Gao, R., Liu, B., Chen, K., & Wei, G. (2021) · Computer Standards & Interfaces · doi:10.1016/j.csi.2021.103612 · Cited by 33
Adaptive Image Transformations for Transfer-Based Adversarial Attack
Yuan, Z., Zhang, J., & Shan, S. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-20065-6_1 · Cited by 30
Improving adversarial robustness of medical imaging systems via adding global attention noise
Dai, Y., Qian, Y., Fang, L., Wang, B., Gu, Z., Wang, W., Wan, J., & Zhang, Y. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.107251 · Cited by 30
RX-ADS: Interpretable Anomaly Detection Using Adversarial ML for Electric Vehicle CAN Data
Wickramasinghe, C. S., Marino, D., Mavikumbure, H. S., Cobilean, V., Pennington, T. D., Varghese, B. J., Rieger, C. G., & Manic, M. (2023) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2023.3294349 · Cited by 30
Liu, A., Tang, S., Chen, X., Huang, L., Qin, H., Liu, X., & Tao, D. (2023) · International Journal of Computer Vision · doi:10.1007/s11263-023-01884-w · Cited by 36
Neural Networks Should Be Wide Enough to Learn Disconnected Decision RegionsPreprint
Nguyen, Q., Mukkamala, M. C., & Hein, M. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1803.00094 · Cited by 30
Prism: Real-Time Privacy Protection Against Temporal Network Traffic Analyzers
Li, W., Zhang, X., Bao, H., Yang, B., Li, Z., Shi, H., & Wang, Q. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3267885 · Cited by 29
Unified Adversarial Patch for Visible-Infrared Cross-Modal Attacks in the Physical World
Wei, X., Huang, Y., Sun, Y., & Yu, J. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3330769 · Cited by 29
Data filtering for efficient adversarial training
Chen, E., & Lee, C. (2024) · Pattern Recognition · doi:10.1016/j.patcog.2024.110394 · Cited by 30
West, M. T., Nakhl, A. C., Heredge, J., Creevey, F. M., Hollenberg, L. C. L., Sevior, M. E., & Usman, M. (2024) · Intelligent Computing · doi:10.34133/icomputing.0100 · Cited by 38
UnMask: Adversarial Detection and Defense Through Robust Feature Alignment
Freitas, S., Chen, S.-T., Wang, Z. J., & Chau, D. H. (2020) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata50022.2020.9378303 · Cited by 31
Rare-event Simulation for Neural Network and Random Forest Predictors
Bai, Y., Huang, Z., Lam, H., & Zhao, D. X. (2022) · ACM Transactions on Modeling and Computer Simulation · doi:10.1145/3519385 · Cited by 29
Adversarial Training is Not Ready for Robot Learning
Lechner, M., Hasani, R., Grosu, R., Rus, D. L., & Henzinger, T. A. (2021) · Proceedings - IEEE International Conference on Robotics and Automation/Proceedings · doi:10.1109/icra48506.2021.9561036 · Cited by 29
Robustness via Cross-Domain Ensembles
Yeo, T., Kar, O. F., & Zamir, A. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01197 · Cited by 29
Semi-supervised Active Salient Object Detection
Lv, Y., Liu, B., Zhang, J., Dai, Y., Li, A., & Zhang, T. (2021) · Pattern Recognition · doi:10.1016/j.patcog.2021.108364 · Cited by 29
Projected Gradient Descent Adversarial Attack and Its Defense on a Fault Diagnosis System
Ayas, M. Ş., Ayas, S., & Djouadi, S. M. (2022) · International Conference on Telecommunications and Signal Processing (TSP) · doi:10.1109/tsp55681.2022.9851334 · Cited by 29
Eliciting and Learning with Soft Labels from Every Annotator
Collins, K. M., Bhatt, U., & Weller, A. (2022) · Proceedings of the AAAI Conference on Human Computation and Crowdsourcing · doi:10.1609/hcomp.v10i1.21986 · Cited by 35
Adversarial Artificial Intelligence in Insurance: From an Example to Some Potential Remedies
Ameridad, B., Cattaneo, M., Kenett, R. S., & Luciano, E. (2023) · Risks · doi:10.3390/risks11010020 · Cited by 29
Gradient Correction for White-Box Adversarial Attacks
Liu, H., Ge, Z., Zhou, Z., Shang, F., Liu, Y., & Jiao, L. (2023) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2023.3315414 · Cited by 32
Exploiting Vulnerabilities of Deep Neural Networks for Privacy Protection
Sanchez-Matilla, R., Li, C. Y., Shamsabadi, A. S., Mazzon, R., & Cavallaro, A. (2020) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2020.2987694 · Cited by 29
Vulnerability of Person Re-Identification Models to Metric Adversarial Attacks
Bouniot, Q., Audigier, R., & Loesch, A. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00405 · Cited by 30
Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket PerspectivePreprint
Chen, T., Cheng, Y., Gan, Z., Liu, J., & Wang, Z. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.00397 · Cited by 44
Universal Adversarial Training
Shafahi, A., Najibi, M., Xu, Z., Dickerson, J. P., Davis, L. S., & Goldstein, T. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.6017 · Cited by 39
Kwon, H., Kim, Y., Park, K.-W., Yoon, H., & Choi, D. (2018) · Computers & Security · doi:10.1016/j.cose.2018.07.015 · Cited by 29
Bagchi, S., Aggarwal, V., Chaterji, S., Douglis, F., Gamal, A. E., Han, J., Henz, B. J., Hoffmann, H., Jana, S., Kulkarni, M., et al. (2020) · IEEE Open Journal of the Computer Society · doi:10.1109/ojcs.2020.3006807 · Cited by 28
FoolHD: Fooling Speaker Identification by Highly Imperceptible Adversarial Disturbances
Shamsabadi, A. S., Teixeira, F. S., Abad, A., Raj, B., Cavallaro, A., & Trancoso, I. M. (2021) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp39728.2021.9413760 · Cited by 28
Meta-Attack: Class-agnostic and Model-agnostic Physical Adversarial Attack
Feng, W., Wu, B., Zhang, T., Zhang, Y., & Zhang, Y. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.00769 · Cited by 30
IWA: Integrated gradient‐based white‐box attacks for fooling deep neural networks
Wang, Y., Liu, J., Chang, X., Mišić, J., & Mišić, V. B. (2021) · International Journal of Intelligent Systems · doi:10.1002/int.22720 · Cited by 28
Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration
Weng, J., Luo, Z., Li, S., Sebe, N., & Zhong, Z. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3284649 · Cited by 31
AdaChain: A Learned Adaptive Blockchain
Wu, C., Mehta, B., Amiri, M. J., Marcus, R., & Loo, B. T. (2023) · Proceedings of the VLDB Endowment · doi:10.14778/3594512.3594531 · Cited by 28
(2023) · doi:10.1109/cvpr52729.2023.00627 · Cited by 28
Li, J., Yang, Y., Sun, J., Tomsovic, K. L., & Qi, H. (2023) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn58024.2023.10230180 · Cited by 31
MAT: A Multi-strength Adversarial Training Method to Mitigate Adversarial Attacks
Song, C., Cheng, H.-P., Yang, H., Li, S., Wu, C., Wu, Q., Chen, Y., & Li, H. H. (2018) · IEEE Computer Society Annual Symposium on VLSI · doi:10.1109/isvlsi.2018.00092 · Cited by 28
Defense-VAE: A Fast and Accurate Defense Against Adversarial Attacks
Li, X., & Ji, S. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-43887-6_15 · Cited by 28
Can you fool AI with adversarial examples on a visual Turing testPreprint
Xu, X., Chen, X., Liu, C., Rohrbach, A., Darrell, T., & Song, D. X. (2017) · arXiv (Cornell University) · Cited by 28
Wong, L. J., Clark, W. H., Flowers, B., Buehrer, R. M., Michaels, A. J., & Headley, W. C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.00432 · Cited by 30
Unadversarial Examples: Designing Objects for Robust VisionPreprint
Salman, H., Ilyas, A., Engstrom, L., Vemprala, S. H., Mądry, A., & Kapoor, A. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.12235 · Cited by 28
Towards deep neural networks robust to adversarial examples
Matyasko, A. (2020) · doi:10.32657/10356/143316 · Cited by 28
Ibitoye, O., Shafiq, M. O., & Matrawy, A. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102631 · Cited by 27
Landmark Breaker: Obstructing DeepFake By Disturbing Landmark Extraction
Sun, P., Li, Y., Qi, H., & Lyu, S. (2020) · 2020 IEEE International Workshop on Information Forensics and Security (WIFS) · doi:10.1109/wifs49906.2020.9360910 · Cited by 27
Zheng, Y., Chang, C.-H., Huang, S.-H., Chen, P., & Picek, S. (2024) · IEEE Journal on Emerging and Selected Topics in Circuits and Systems · doi:10.1109/jetcas.2024.3477348 · Cited by 31
Toward an Understanding of Adversarial Examples in Clinical Trials
Papangelou, K., Sechidis, K., Weatherall, J., & Gavin Brown, B. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-10925-7_3 · Cited by 27
Indirect Local Attacks for Context-Aware Semantic Segmentation Networks
Nakka, K. K., & Salzmann, M. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58558-7_36 · Cited by 27
Saak Transform-Based Machine Learning for Light-Sheet Imaging of Cardiac Trabeculation
Ding, Y., Gudapati, V., Lin, R., Fei, Y., Packard, R. R. S., Song, S., Chang, C., Baek, K. I., Wang, Z., Roustaei, M., et al. (2020) · IEEE Transactions on Biomedical Engineering · doi:10.1109/tbme.2020.2991754 · Cited by 27
A Black-Box Attack Model for Visually-Aware Recommender Systems
Cohen, R., Shalom, O. S., Jannach, D., & Amir, A. (2021) · ACM International Conference on Web Search and Data Mining (WSDM) · doi:10.1145/3437963.3441757 · Cited by 27
Algorithms in Future Insurance Markets
Śmietanka, M., Koshiyama, A., & Treleaven, P. C. (2020) · International Journal of Data Science and Big Data Analytics · doi:10.2139/ssrn.3641518 · Cited by 27
Crafting Adversarial Samples for Anomaly Detectors in Industrial Control Systems
Gómez, Á. L. P., Maimó, L. F., Celdrán, A. H., Clemente, F. J. G., & Cleary, F. (2021) · Procedia Computer Science · doi:10.1016/j.procs.2021.03.072 · Cited by 27
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
