The DOI matches its DataCite record; 16 of the 16 references it cites were found in a registry or an index.
Adversarial Machine Learning at Scale
Open accessAbstract
Adversarial examples are malicious inputs designed to fool machine learning models. They often transfer from one model to another, allowing attackers to mount black box attacks without knowledge of the target model's parameters. Adversarial training is the process of explicitly training a model on adversarial examples, in order to make it more robust to attack or to reduce its test error on clean inputs. So far, adversarial training has primarily been applied to small problems. In this research, we apply adversarial training to ImageNet. Our contributions include: (1) recommendations for how to succesfully scale adversarial training to large models and datasets, (2) the observation that adversarial training confers robustness to single-step attack methods, (3) the finding that multi-step attack methods are somewhat less transferable than single-step attack methods, so single-step attacks are the best for mounting black-box attacks, and (4) resolution of a "label leaking" effect that causes adversarially trained models to perform better on adversarial examples than on clean examples, because the adversarial example construction process uses the true label and the model can learn to exploit regularities in the construction process.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“fully decentralized variants of SGD and other optimization algorithms have recently been considered in machine learning both for improved scalability in datacenters [29] as well as for decentralized networks of devices [127, 459, 443, 59, 278, 291, 173].”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [443]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 1
- Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional smoothing with virtual adversarial training. In International Conference on Learning Representations (ICLR2016) , April 2016b.
Cited by
Sorted by citations
Items 701–800 of 1,004
Learning Security Classifiers with Verified Global Robustness Properties
Chen, Y., Wang, S., Qin, Y., Liao, X.-J., Jana, S., & Wagner, D. A. (2021) · Conference on Computer and Communications Security · doi:10.1145/3460120.3484776 · Cited by 36
Interpreting Adversarial Examples and Robustness for Deep Learning-Based Auto-Driving Systems
Wang, K., Li, F., Chen, C., Hassan, M. M., Long, J., & Kumar, N. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3108520 · Cited by 28
Open-Set Adversarial Defense with Clean-Adversarial Mutual Learning
Shao, R., Perera, P., Yuen, P. C., & Patel, V. M. (2022) · International Journal of Computer Vision · doi:10.1007/s11263-022-01581-0 · Cited by 28
Bridging Machine Learning and Cryptography in Defence Against Adversarial Attacks
Taran, O., Rezaeifar, S., & Voloshynovskiy, S. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-11012-3_23 · Cited by 27
Towards Private and Scalable Cross-Media Retrieval
Hu, S., Zhang, L. Y., Wang, Q., Qin, Z., & Wang, C. (2019) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2019.2926968 · Cited by 29
A Network Framework for Small-Sample Learning
Liu, D., He, Z., Chen, D., & Lv, J. (2019) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2019.2951803 · Cited by 27
Adversarial Attacks for Image Segmentation on Multiple Lightweight Models
Xu, K., Song, B., Du, X., & Guizani, M. (2020) · IEEE Access · doi:10.1109/access.2020.2973069 · Cited by 29
Noise is Inside Me! Generating Adversarial Perturbations with Noise Derived from Natural Filters
Agarwal, A., Mayank Vatsa, A., Singh, R., & Ratha, N. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00395 · Cited by 27
Adversarial Defense for Deep Speaker Recognition Using Hybrid Adversarial Training
Pal, M., Jati, A., Peri, R., Hsu, C.-C., AbdAlmageed, W., & Narayanan, S. S. (2021) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp39728.2021.9414843 · Cited by 27
Shao, R., Perera, P., Yuen, P. C., & Patel, V. M. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58520-4_40 · Cited by 29
Adversarial Neural Pruning with Latent Vulnerability SuppressionPreprint
Madaan, D., Shin, J., & Hwang, S. J. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1908.04355 · Cited by 27
Towards Understanding Fast Adversarial TrainingPreprint
Li, B., Wang, S., Jana, S., & Carin, L. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.03089 · Cited by 44
Adaptive Perturbation for Adversarial Attack
Yuan, Z., Zhang, J., Jiang, Z., Li, L., & Shan, S. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3367773 · Cited by 27
Adversarial Machine Learning Attacks on Multiclass Classification of IoT Network Traffic
Pantelakis, V., Bountakas, P., Farao, A., & Xenakis, C. (2023) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3600160.3605086 · Cited by 26
Differentiable JPEG: The Devil is in the Details
Reich, C., Debnath, B. K., Patel, D., & Chakradhar, S. (2024) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv57701.2024.00408 · Cited by 26
Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey
Zhang, C., Zhou, L. Q., Xu, X., Wu, J., & Liu, Z. (2025) · ACM Computing Surveys · doi:10.1145/3743126 · Cited by 35
Ning, M., Salah, A. A., & Ertuğrul, I. Ö. (2025) · International Conference on Automatic Face and Gesture Recognition · doi:10.1109/fg61629.2025.11099375 · Cited by 36
Connected Cars: Automotive Cybersecurity and Privacy for Smart Cities
Olufowobi, H., & Bloom, G. (2018) · Elsevier eBooks · doi:10.1016/b978-0-12-815032-0.00016-0 · Cited by 26
Enhanced Security Against Volumetric DDoS Attacks Using Adversarial Machine Learning
Shroff, J., Walambe, R. A., Singh, S. K., & Kotecha, K. V. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/5757164 · Cited by 27
Targeted Universal Adversarial Examples for Remote Sensing
Bai, T., Wang, H., & Wen, B. (2022) · Remote Sensing · doi:10.3390/rs14225833 · Cited by 26
Gradient Descent Ascent for Minimax Problems on Riemannian Manifolds
Huang, F., & Gao, S. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3234160 · Cited by 26
BiasAdv: Bias-Adversarial Augmentation for Model Debiasing
Lim, J., Kim, Y., Kim, B., Ahn, C., Shin, J., Yang, E., & Han, S. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.00373 · Cited by 28
Quality Assurance for Machine Learning – an approach to function and system safeguarding
Poth, A., Meyer, B., Schlicht, P., & Riel, A. (2020) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs51102.2020.00016 · Cited by 26
On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration
Patel, K., Beluch, W., Zhang, D., Pfeiffer, M., & Yang, B. (2021) · Proceedings - International Conference on Pattern Recognition/Proceedings/International Conference on Pattern Recognition · doi:10.1109/icpr48806.2021.9413010 · Cited by 26
Unsupervised Adversarial Attacks on Deep Feature-based Retrieval with GANPreprint
Zhao, G., Zhang, M., Liu, J., & Wen, J.-R. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1907.05793 · Cited by 26
GraphDefense: Towards Robust Graph Convolutional NetworksPreprint
Wang, X., Liu, X., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.04429 · Cited by 30
Adversarial Robustness through the Lens of Causality.Preprint
Zhang, Y., Gong, M., Liu, T., Niu, G., Tian, X., Han, B., Schölkopf, B., & Zhang, K. (2021) · arXiv (Cornell University) · Cited by 26
Majumder, R., Khan, S. M., Ahmed, F., Khan, Z., Ngeni, F., Comert, G., Mwakalonge, J., Michalaka, D., & Chowdhury, M. A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2108.01125 · Cited by 29
Shafiee, M. J., Jeddi, A., Nazemi, A., Fieguth, P., & Wong, A. K. C. (2020) · IEEE Signal Processing Magazine · doi:10.1109/msp.2020.2982820 · Cited by 27
Can audio-visual integration strengthen robustness under multimodal attacks?
Tian, Y., & Xu, C. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00555 · Cited by 25
Wong, L. J., Clark, W. H., Flowers, B., Buehrer, R. M., Headley, W. C., & Michaels, A. J. (2021) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2021.3112939 · Cited by 27
Crafting transferable adversarial examples via contaminating the salient feature variance
Ren, Y., Zhu, H., Sui, X., & Liu, C. (2023) · Information Sciences · doi:10.1016/j.ins.2023.119273 · Cited by 25
A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks
Yao, Q., He, Z., Lin, Y., Ma, K., Zheng, Y., & Zhou, S. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-87199-4_4 · Cited by 25
Defense Against Adversarial Attacks with Saak TransformPreprint
Song, S., Chen, Y., Cheung, N. M., & Kuo, C. ‐. J. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1808.01785 · Cited by 25
Xu, Y., Xu, Y., Jiao, H., Gao, Z. Y., & Zhang, L. (2024) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2024.3381824 · Cited by 24
Improving Robustness of Medical Image Diagnosis with Denoising Convolutional Neural Networks
Xue, F.-F., Peng, J., Wang, R., Zhang, Q., & Zheng, W. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-32226-7_94 · Cited by 24
Novelty Detection Through Model-Based Characterization of Neural Networks
Kwon, G., Prabhushankar, M., Temel, D., & AlRegib, G. (2020) · Proceedings - International Conference on Image Processing · doi:10.1109/icip40778.2020.9190706 · Cited by 26
Increasing the Confidence of Deep Neural Networks by Coverage Analysis
Rossolini, G., Biondi, A., & Buttazzo, G. (2022) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2022.3163682 · Cited by 27
Morphence: Moving Target Defense Against Adversarial Examples
Amich, A., & Eshete, B. (2021) · Annual Computer Security Applications Conference · doi:10.1145/3485832.3485899 · Cited by 24
Adversarial Robustness of Deep Learning: Theory, Algorithms, and Applications
Ruan, W., Yi, X., & Huang, X. (2021) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3459637.3482029 · Cited by 24
Evolutionary Multilabel Adversarial Examples: An Effective Black-Box Attack
Kong, L., Luo, W., Zhang, H., Liu, Y., & Shi, Y. (2022) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2022.3198629 · Cited by 25
EIFDAA: Evaluation of an IDS with function-discarding adversarial attacks in the IIoT
Li, S., Wang, J., Wang, Y., Zhou, G., & Zhao, Y. L. (2023) · Heliyon · doi:10.1016/j.heliyon.2023.e13520 · Cited by 24
Alkadi, S., Al-Ahmadi, S. A., & Ismail, M. M. B. (2023) · Applied Sciences · doi:10.3390/app13106001 · Cited by 24
3DHacker: Spectrum-based Decision Boundary Generation for Hard-label 3D Point Cloud Attack
Tao, Y., Liu, D., Zhou, P., Xie, Y., Du, W. F., & Hu, W. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.01319 · Cited by 26
Improving the transferability of adversarial examples through black-box feature attacks
Wang, M., Wang, J., Ma, B., & Luo, X. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127863 · Cited by 25
Towards Robust Compressed Convolutional Neural Networks
Wijayanto, A. W., Choong, J. J., Madhawa, K., & Murata, T. (2019) · IEEE International Conference on Big Data and Smart Computing (BigComp) · doi:10.1109/bigcomp.2019.8679132 · Cited by 24
Li, C. Y., Shamsabadi, A. S., Sánchez-Matilla, R., Mazzon, R., & Cavallaro, A. (2019) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp.2019.8682225 · Cited by 24
GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier
Liu, G., Khalil, I. M., & Khreishah, A. A. (2019) · IFIP advances in information and communication technology · doi:10.1007/978-3-030-22312-0_2 · Cited by 24
Defending Against Multiple and Unforeseen Adversarial Videos
Lo, S.-Y., & Patel, V. M. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3137648 · Cited by 24
Bu, L., Zhao, Z., Duan, Y., & Song, F. (2021) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3088661 · Cited by 24
Attacking Optical Character Recognition (OCR) Systems with Adversarial WatermarksPreprint
Chen, L., & Xu, W. H. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.03095 · Cited by 25
Blacklight: Defending Black-Box Adversarial Attacks on Deep Neural Networks.Preprint
Li, H., Shan, S., Wenger, E., Zhang, J., Zheng, H.-T., & Zhao, B. Y. (2020) · arXiv (Cornell University) · Cited by 24
Attack-Aware Detection and Defense to Resist Adversarial Examples
Jiang, W., He, Z., Zhan, J., & Pan, W. (2020) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2020.3033746 · Cited by 23
FaceGuard: A Self-Supervised Defense Against Adversarial Face Images
Deb, D., Liu, X., & Jain, A. K. (2023) · International Conference on Automatic Face and Gesture Recognition · doi:10.1109/fg57933.2023.10042617 · Cited by 27
Crafting Adversarial Examples for Deep Learning Based Prognostics
Mode, G. R., & Hoque, K. A. (2020) · International Conference on Machine Learning and Applications · doi:10.1109/icmla51294.2020.00079 · Cited by 23
Lie to Me: A Soft Threshold Defense Method for Adversarial Examples of Remote Sensing Images
Chen, L., Xiao, J., Zou, P., & Li, H. (2021) · IEEE Geoscience and Remote Sensing Letters · doi:10.1109/lgrs.2021.3096244 · Cited by 23
Accurate and Robust Malware Detection: Running XGBoost on Runtime Data From Performance Counters
Elnaggar, R., Servadei, L., Mathur, S., Wille, R., Ecker, W., & Chakrabarty, K. (2021) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2021.3102007 · Cited by 23
Lin, Y., Palaniappan, R., Wilde, P. D., & Li, L. (2022) · IEEE Transactions on Neural Systems and Rehabilitation Engineering · doi:10.1109/tnsre.2022.3141593 · Cited by 23
Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition
Wang, H., Wang, S., Jin, Z., Wang, Y., Chen, C., & Tistarelli, M. (2021) · International Conference on Automatic Face and Gesture Recognition · doi:10.1109/fg52635.2021.9667076 · Cited by 25
A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space
Simonetto, T., Dyrmishi, S., Ghamizi, S., Cordy, M., & Traon, Y. L. (2022) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2022/183 · Cited by 23
Adversarial Robustness through Bias Variance Decomposition
Zhou, Y., Wu, J., Wang, H., & He, J. (2022) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3511808.3557232 · Cited by 29
Defending against adversarial attacks on Covid-19 classifier: A denoiser-based approach
Kansal, K., Krishna, P. S., Jain, P. B., Surya, R. J., Honnavalli, P. B., & Eswaran, S. (2022) · Heliyon · doi:10.1016/j.heliyon.2022.e11209 · Cited by 23
Quantum Robustness Verification: A Hybrid Quantum-Classical Neural Network Certification Algorithm
Franco, N., Wollschläger, T., Gao, N., Lorenz, J. M., & Günnemann, S. (2022) · IEEE International Conference on Quantum Computing and Engineering (QCE) · doi:10.1109/qce53715.2022.00033 · Cited by 28
Multi-Spectral Palmprints Joint Attack and Defense With Adversarial Examples Learning
Zhu, Q., Zhou, Y., Fei, L., Zhang, D., & Zhang, D. D. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3254432 · Cited by 23
Ge, S., Jiang, Z., Cheng, Z., Wang, C., Yin, Y., & Gu, Q. (2023) · International World Wide Web Conference (WWW) · doi:10.1145/3543507.3583258 · Cited by 23
Exploring the Relationship Between Architectural Design and Adversarially Robust Generalization
Liu, A., Tang, S., Liang, S., Gong, R., Wu, B., Liu, X., & Tao, D. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.00399 · Cited by 26
Proximal Splitting Adversarial Attack for Semantic Segmentation
Rony, J., Pesquet, J.-C., & Ayed, I. B. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01966 · Cited by 23
Chen, Z., Chai, X., Gan, Z., Wang, B., & Zhang, Y. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3373636 · Cited by 23
Robustness Verification of Support Vector Machines
Ranzato, F., & Zanella, M. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-32304-2_14 · Cited by 23
Li, Y., Zhu, Z., Zhou, Y., Xia, Y., Shen, W., Fishman, E. K., & Yuille, A. (2019) · Advances in computer vision and pattern recognition · doi:10.1007/978-3-030-13969-8_4 · Cited by 23
Fischer, I., & Alemi, A. A. (2020) · Entropy · doi:10.3390/e22101081 · Cited by 23
The Adversarial Attacks Threats on Computer Vision: A Survey
Zhou, Y., Han, M., Liu, L., He, J., & Gao, X. (2019) · IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS) · doi:10.1109/massw.2019.00012 · Cited by 24
One Man’s Trash Is Another Man’s Treasure: Resisting Adversarial Examples by Adversarial Examples
Xiao, C., & Zheng, C. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00049 · Cited by 23
Mask-guided noise restriction adversarial attacks for image classification
Duan, Y., Zhou, X., Zou, J., Qiu, J., Zhang, J., & Pan, Z. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102111 · Cited by 23
Deceiving Machine Learning-Based Saturation Attack Detection Systems in SDN
Khamaiseh, S. Y., Alsmadi, I. M., & Al-Alaj, A. (2020) · IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN) · doi:10.1109/nfv-sdn50289.2020.9289908 · Cited by 23
Laplacian networks: bounding indicator function smoothness for neural networks robustness
Lassance, C., Gripon, V., & Ortega, A. (2021) · APSIPA Transactions on Signal and Information Processing · doi:10.1017/atsip.2021.2 · Cited by 24
A Differentiable Language Model Adversarial Attack on Text Classifiers
Fursov, I., Zaytsev, A., Burnyshev, P., Dmitrieva, E., Klyuchnikov, N., Kravchenko, A., Artemova, E., Komleva, E., & Burnaev, E. V. (2022) · IEEE Access · doi:10.1109/access.2022.3148413 · Cited by 26
Robust Text CAPTCHAs Using Adversarial Examples
Shao, R., Shi, Z., Yi, J., Chen, P., & Hsieh, C.-J. (2022) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata55660.2022.10021100 · Cited by 26
Adversarial Examples in Deep Learning: Characterization and DivergencePreprint
Wei, W., Liu, L., Loper, M., Truex, S., Yu, L., Gürsoy, M. E., & Wu, Y. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1807.00051 · Cited by 23
Gradient Band-based Adversarial Training for Generalized Attack Immunity of A3C Path FindingPreprint
Chen, T., Niu, W., Xiang, Y., Bai, X., Liu, J., Han, Z., & Li, G. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1807.06752 · Cited by 23
Backdoor Attacks on Facial Recognition in the Physical WorldPreprint
Wenger, E., Passananti, J., Yao, Y., Zheng, H.-T., & Zhao, B. Y. (2020) · arXiv (Cornell University) · Cited by 23
Robust Pervasive Detection for Adversarial Samples of Artificial Intelligence in IoT Environments
Wang, S., & Qiao, Z. (2019) · IEEE Access · doi:10.1109/access.2019.2919695 · Cited by 23
Improved Adversarial Training via Learned Optimizer
Xiong, Y., & Hsieh, C. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58598-3_6 · Cited by 23
Characteristic Examples: High-Robustness, Low-Transferability Fingerprinting of Neural Networks
Wang, S., Wang, X., Chen, P., Zhao, P., & Lin, X. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/80 · Cited by 24
Voting for the Right Answer: Adversarial Defense for Speaker Verification
Wu, H., Zhang, Y., Wu, Z., Wang, D., & Lee, H.-Y. (2021) · Interspeech (USB) · doi:10.21437/interspeech.2021-1452 · Cited by 22
Downlink Power Allocation in Massive MIMO via Deep Learning: Adversarial Attacks and Training
Manoj, B. R., Sadeghi, M., & Larsson, E. G. (2022) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2022.3147203 · Cited by 22
Investigating machine learning attacks on financial time series models
Gallagher, M., Pitropakis, N., Chrysoulas, C., Papadopoulos, P., Mylonas, A., & Katsikas, S. K. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102933 · Cited by 27
Rethinking Label Flipping Attack: From Sample Masking to Sample Thresholding
Xu, Q., Yang, Z., Zhao, Y., Cao, X., & Huang, Q. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3220849 · Cited by 22
ART-Point: Improving Rotation Robustness of Point Cloud Classifiers via Adversarial Rotation
Wang, R., Yang, Y., & Tao, D. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01397 · Cited by 23
Youssef, E.-N. S., Labeau, F., & Kassouf, M. (2023) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2023.3300239 · Cited by 22
Adversarial Obstacle Generation Against LiDAR-Based 3D Object Detection
Wang, J., Li, F., Zhang, X., & Sun, H. (2023) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2023.3302018 · Cited by 22
AdvST: Generating Unrestricted Adversarial Images via Style Transfer
Wang, X., Chen, H., Sun, P., Li, J., Zhang, A., Liu, W., & Jiang, N. (2023) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2023.3327017 · Cited by 22
Improving Transferability of Universal Adversarial Perturbation With Feature Disruption
Wang, D., Yao, W., Jiang, T., & Chen, X. (2023) · IEEE Transactions on Image Processing · doi:10.1109/tip.2023.3345136 · Cited by 22
Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning
Fang, Z., Wang, R., Huang, T., & Jing, L. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02346 · Cited by 22
Adversarial Example Soups: Improving Transferability and Stealthiness for Free
Yang, B., Zhang, H., Wang, J., Yang, Y., Lin, C., Shen, C. Q., & Zhao, Z. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3536611 · Cited by 22
Random Untargeted Adversarial Example on Deep Neural Network
Kwon, H., Kim, Y., Yoon, H., & Choi, D. (2018) · Symmetry · doi:10.3390/sym10120738 · Cited by 22
Car telematics big data analytics for insurance and innovative mobility services
Longhi, L., & Nanni, M. (2019) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-019-01632-4 · Cited by 22
Chen, C., Xiong, Z., Liu, X., & Wu, F. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.00302 · Cited by 22
AP-GAN: Adversarial patch attack on content-based image retrieval systems
Zhao, G., Zhang, M., Liu, J., Li, Y., & Wen, J.-R. (2020) · GeoInformatica · doi:10.1007/s10707-020-00418-7 · Cited by 22
Robust graph convolutional networks with directional graph adversarial training
Hu, W., Chen, C., Chang, Y., Zheng, Z., & Du, Y. (2021) · Applied Intelligence · doi:10.1007/s10489-021-02272-y · Cited by 22
Metadata
- Authors
- Kurakin, A., Goodfellow, I., & Bengio, S.
- Affiliations
- Google (United States) (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2016
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1611.01236
- OpenAlex
- W2552767274
- Cited by
- 2,325
- References
- 0
- Citations by year
- 2026: 2 · 2025: 93 · 2024: 264 · 2023: 259 · 2022: 281 · 2021: 475 · 2020: 447 · 2019: 329 · 2018: 143 · 2017: 30 · 2016: 2
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial training, adversarial examples, adversarial robustness, black-box attacks, transferability, multi-stage attacks, ImageNet, large-scale machine learning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
