Adversarial Machine Learning at Scale

Cyclical Adversarial Attack Pierces Black-box Deep Neural Networks

Huang, L., Wei, S., Gao, C., & Liu, N. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.108831 · Cited by 22

Detecting Adversarial Perturbations Through Spatial Behavior in Activation Spaces

Katzir, Z., & Elovici, Y. (2019) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2019.8852285 · Cited by 22

Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against AttacksPreprint

Miller, D. J., Xiang, Z. J., & Kesidis, G. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1904.06292 · Cited by 26

Percival: Making In-Browser Perceptual Ad Blocking Practical With Deep LearningPreprint

Din, Z. A., Tigas, P., King, S. T., & Livshits, B. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.07444 · Cited by 24

FR-Train: A Mutual Information-Based Approach to Fair and Robust TrainingPreprint

Roh, Y., Lee, K., Whang, S. E., & Suh, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.10234 · Cited by 23

Second-Order Provable Defenses against Adversarial AttacksPreprint

Singla, S., & Feizi, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.00731 · Cited by 22

Bridging the Performance Gap between FGSM and PGD Adversarial TrainingPreprint

Huang, T., Menkovski, V., Pei, Y., & Pechenizkiy, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.05157 · Cited by 26

ZK-GanDef: A GAN Based Zero Knowledge Adversarial Training Defense for Neural Networks

Liu, G., Khalil, I. M., & Khreishah, A. A. (2019) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn.2019.00021 · Cited by 21

Subverting Network Intrusion Detection: Crafting Adversarial Examples Accounting for Domain-Specific Constraints

Teuffenbach, M., Piatkowska, E., & Smith, P. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-57321-8_17 · Cited by 21

Genetic adversarial training of decision trees

Ranzato, F., & Zanella, M. (2021) · Genetic and Evolutionary Computation Conference (GECCO) · doi:10.1145/3449639.3459286 · Cited by 21

FAWA: Fast Adversarial Watermark Attack on Optical Character Recognition (OCR) Systems

Lu, C., Sun, J., & Xu, W. H. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-67664-3_33 · Cited by 22

Privacy Protection in Deep Multi-modal Retrieval

Zhang, P.-F., Li, Y., Huang, Z. H., & Yin, H. (2021) · International ACM SIGIR Conference on Research and Development in Information Retrieval (SIGIR) · doi:10.1145/3404835.3462837 · Cited by 21

Achieving Model Robustness through Discrete Adversarial Training

Ivgi, M., & Berant, J. (2021) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/2021.emnlp-main.115 · Cited by 21

Detect and defense against adversarial examples in deep learning using natural scene statistics and adaptive denoising

kherchouche, A., Fezza, S. A., & Hamidouche, W. (2021) · Neural Computing and Applications · doi:10.1007/s00521-021-06330-x · Cited by 24

Robust Real-World Image Super-Resolution against Adversarial Attacks

Yue, J., Li, H., Wei, P., Li, G., & Lin, L. (2021) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3474085.3475627 · Cited by 21

Increasing neural network robustness improves match to macaque V1 eigenspectrum, spatial frequency preference and predictivity

Kong, N. C. L., Margalit, E., Gardner, J. L., & Norcia, A. M. (2022) · PLoS Computational Biology · doi:10.1371/journal.pcbi.1009739 · Cited by 21

DNN Model Architecture Fingerprinting Attack on CPU-GPU Edge Devices

Patwari, K., Hafiz, S. M., Wang, H., Homayoun, H., Shafiq, Z., & Chuah, C. (2022) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp53844.2022.00029 · Cited by 21

Perturbation Inactivation Based Adversarial Defense for Face Recognition

Ren, M., Zhu, Y., Wang, Y., & Sun, Z. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3195384 · Cited by 21

An autonomous decision-making framework for gait recognition systems against adversarial attack using reinforcement learning

Maqsood, M., Yasmin, S., Gillani, S. A., Aadil, F., Mehmood, I., Rho, S., & Yeo, S.-S. (2022) · ISA Transactions · doi:10.1016/j.isatra.2022.11.016 · Cited by 22

Physics-Constrained Adversarial Training for Neural Networks in Stochastic Power Grids

Li, W., Deka, D., Wang, R., & Paternina, M. R. A. (2023) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2023.3236377 · Cited by 21

The Art of Defense: Letting Networks Fool the Attacker

Zhang, J., Dong, Y., Kuang, M., Liu, B., Ouyang, B., Zhu, J., Wang, H., & Meng, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3278458 · Cited by 22

Robust Geometry-Dependent Attack for 3D Point Clouds

Liu, D., Hu, W., & Li, X. (2023) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2023.3304896 · Cited by 21

VectorDefense: Vectorization as a Defense to Adversarial Examples

Kabilan, V. M., Morris, B., Nguyen, H.-P., & Nguyen, A. (2020) · Studies in computational intelligence · doi:10.1007/978-3-030-49536-7_3 · Cited by 21

Securing Malware Cognitive Systems against Adversarial Attacks

Ji, Y., Bowman, B., & Huang, H. H. (2019) · IEEE International Conference on Cognitive Computing (ICCC) · doi:10.1109/iccc.2019.00014 · Cited by 21

Impact of Low-Bitwidth Quantization on the Adversarial Robustness for Embedded Neural Networks

Bernhard, R., Moëllic, P.-A., & Dutertre, J.-M. (2019) · International Conference on Cyberworlds (CW) · doi:10.1109/cw.2019.00057 · Cited by 21

Model-Agnostic Adversarial Detection by Random Perturbations

Huang, B., Wang, Y., & Wang, W. (2019) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2019/651 · Cited by 21

Adversarial Dual Network Learning With Randomized Image Transform for Restoring Attacked Images

Yuan, J., & He, Z. (2020) · IEEE Access · doi:10.1109/access.2020.2969288 · Cited by 21

Toward Invisible Adversarial Examples Against DNN-Based Privacy Leakage for Internet of Things

Ding, X., Zhang, S., Song, M., Ding, X., & Li, F. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3008232 · Cited by 21

Toward Visual Distortion in Black-Box Attacks

Li, N., & Chen, Z. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3092822 · Cited by 21

Stylized Adversarial Defense

Naseer, M., Khan, S. H., Hayat, M., Khan, F. S., & Porikli, F. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3207917 · Cited by 21

Spatial relation learning for explainable image classification and annotation in critical applications

Pierrard, R., Poli, J.-P., & Hudelot, C. (2020) · Artificial Intelligence · doi:10.1016/j.artint.2020.103434 · Cited by 21

“Know What You Know”: Predicting Behavior for Learning-Enabled Systems When Facing Uncertainty

Langford, M. A., & Cheng, B. H. C. (2021) · International Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS) · doi:10.1109/seams51251.2021.00020 · Cited by 21

Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial RobustnessPreprint

Wang, Z., Jian, T., Masoomi, A., Ioannidis, S., & Dy, J. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.02734 · Cited by 21

Enhancing Transformation-Based Defenses Against Adversarial Attacks with a Distribution Classifier

Kou, C., Lee, H. K., Ng, T. K., & Chang, E. (2020) · National University of Singapore · Cited by 20

On the security of ANN-based AC state estimation in smart grid

Liu, T., & Shu, T. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102265 · Cited by 20

AI and Its Implications for Organisations

Sharma, M., & Biros, D. P. (2021) · Emerald Group Publishing Limited eBooks · doi:10.1108/978-1-83909-812-320211001 · Cited by 21

Adversarial Defence by Diversified Simultaneous Training of Deep Ensembles

Huang, B., Ke, Z., Wang, Y., Wang, W., Shen, L., & Liu, F. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i9.16955 · Cited by 20

Adversarial Examples Detection of Radio Signals Based on Multifeature Fusion

Xu, D., Yang, H., Gu, C., Chen, Z., Xuan, Q., & Yang, X. (2021) · IEEE Transactions on Circuits & Systems II Express Briefs · doi:10.1109/tcsii.2021.3095663 · Cited by 20

Robustifying Deep Networks for Medical Image Segmentation

Liu, Z., Zhang, J., Jog, V., Loh, P., & McMillan, A. B. (2021) · Journal of Imaging Informatics in Medicine · doi:10.1007/s10278-021-00507-5 · Cited by 20

Adversarial Sample Detection for Speaker Verification by Neural Vocoders

Wu, H., Hsu, P.-C., Gao, J., Zhang, S., Huang, S., Kang, J., Wu, Z., Meng, H. M. L., & Lee, H.-Y. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9746900 · Cited by 20

Camouflaged Poisoning Attack on Graph Neural Networks

Jiang, C., He, Y., Chapman, R., & Wu, H. (2022) · International Conference on Multimedia Retrieval · doi:10.1145/3512527.3531373 · Cited by 19

Backdoor Attacks for Remote Sensing Data With Wavelet Transform

Dräger, N., Xu, Y., & Ghamisi, P. (2023) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2023.3289307 · Cited by 20

Frequency constraint-based adversarial attack on deep neural networks for medical image classification

Chen, F., Wang, J., Liu, H., Kong, W., Zhao, Z., Ma, L., Liao, H., & Zhang, D. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.107248 · Cited by 21

Cybersecurity Education in the Age of Artificial Intelligence: A Novel Proactive and Collaborative Learning Paradigm

Wei‐Kocsis, J., Sabounchi, M., Mendis, G. J., Fernando, P., Yang, B., & Zhang, T. (2023) · IEEE Transactions on Education · doi:10.1109/te.2023.3337337 · Cited by 22

Towards Building More Robust Models with Frequency Bias

Bu, Q., Huang, D., & Cui, H. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00406 · Cited by 20

Detection of Adversarial Attacks via Disentangling Natural Images and Perturbations

Qing, Y., Bai, T., Liu, Z., Moulin, P., & Wen, B. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3352837 · Cited by 20

Taxonomy Driven Fast Adversarial Training

Tong, K., Jiang, C., Gui, J., & Cao, Y. J. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i6.28330 · Cited by 21

SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications

Hamdi, A., Mueller, M., & Ghanem, B. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i07.6722 · Cited by 20

Longitudinal Adversarial Attack on Electronic Health Records Data

An, S., Xiao, C., Stewart, W. F., & Sun, J. (2019) · International World Wide Web Conference (WWW) · doi:10.1145/3308558.3313528 · Cited by 20

Symbolic Execution for Importance Analysis and Adversarial Generation in Neural Networks

Gopinath, D., Zhang, M., Wang, K., Kadron, İ. B., Păsăreanu, C. S., & Sarfraz Khurshid, D. (2019) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre.2019.00039 · Cited by 22

An improved ShapeShifter method of generating adversarial examples for physical attacks on stop signs against Faster R-CNNs

Huang, S., Liu, X., Yang, X., & Zhang, Z. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102120 · Cited by 20

DeepCert: Verification of Contextually Relevant Robustness for Neural Network Image Classifiers

Paterson, C., Wu, H., Grese, J., Călinescu, R., Păsăreanu, C. S., & Barrett, C. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-83903-1_5 · Cited by 20

Sentiment-Guided Adversarial Learning for Stock Price Prediction

Zhang, Y., Li, J., Wang, H., & Choi, S.-C. T. (2021) · Frontiers in Applied Mathematics and Statistics · doi:10.3389/fams.2021.601105 · Cited by 21

Adversarial Robustness in Multi-Task Learning: Promises and Illusions

Ghamizi, S., Cordy, M., Papadakis, M., & Traon, Y. L. (2022) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v36i1.19950 · Cited by 26

SimMC: Simple Masked Contrastive Learning of Skeleton Representations for Unsupervised Person Re-Identification

Rao, H., & Miao, C. (2022) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2022/180 · Cited by 20

Powerful Physical Adversarial Examples Against Practical Face Recognition Systems

Singh, I., Araki, T., & Kakizaki, K. (2022) · IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW) · doi:10.1109/wacvw54805.2022.00036 · Cited by 20

Enhancing Transferability of Adversarial Examples with Spatial Momentum

Wang, G., Yan, H., & Wei, X. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-18907-4_46 · Cited by 20

Robust Variational AutoencoderPreprint

Akrami, H., Joshi, A. A., Li, J., Aydöre, S., & Leahy, R. M. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.09961 · Cited by 27

Adversarial Attacks on Monocular Depth EstimationPreprint

Zhang, Z., Zhu, X., Li, Y., Chen, X., & Guo, Y. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.10315 · Cited by 20

Counterexample-Guided Learning of Monotonic Neural NetworksPreprint

Sivaraman, A., Farnadi, G., Millstein, T. D., & den Broeck, G. V. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.08852 · Cited by 20

Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and MorePreprint

Bojchevski, A., Gasteiger, J., & Günnemann, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2008.12952 · Cited by 20

A case for new neural network smoothness constraintsPreprint

Rosca, M., Weber, T., Gretton, A., & Mohamed, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.07969 · Cited by 22

A General Framework For Detecting Anomalous Inputs to DNN ClassifiersPreprint

Raghuram, J., Chandrasekaran, V., Jha, S., & Banerjee, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.15147 · Cited by 22

Robust Semantic Segmentation by Redundant Networks With a Layer-Specific Loss Contribution and Majority Vote

Bär, A., Klingner, M., Varghese, S., Hüger, F., Schlicht, P., & Fingscheidt, T. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00174 · Cited by 19

SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers

Huang, B., & Ling, H. (2022) · IEEE Conference on Virtual Reality and 3D User Interfaces (VR) · doi:10.1109/vr51125.2022.00073 · Cited by 20

Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Jiang, Y., Yin, G., Yuan, Y., & Da, Q. (2021) · Security and Communication Networks · doi:10.1155/2021/6663028 · Cited by 20

Data Security Challenges in Deep Neural Network for Healthcare IoT Systems

Ho, E. S. L. (2021) · Studies in big data · doi:10.1007/978-3-030-85428-7_2 · Cited by 19

Evasion Attack STeganography: Turning Vulnerability Of Machine Learning To Adversarial Attacks Into A Real-world Application

Ghamizi, S., Cordy, M., Papadakis, M., & Traon, Y. L. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00010 · Cited by 19

A real-time intrusion detection system based on OC-SVM for containerized applications

Zhang, L., Cushing, R., de Laat, C. T. A. M., & Grosso, P. (2021) · IEEE International Conference on Computational Science and Engineering (CSE) · doi:10.1109/cse53436.2021.00029 · Cited by 19

Feature-filter: Detecting adversarial examples by filtering out recessive features

Liu, H., Zhao, B., Ji, M., Peng, Y., Guo, J., & Liu, P. (2022) · Applied Soft Computing · doi:10.1016/j.asoc.2022.109027 · Cited by 19

ASQ-FastBM3D: An Adaptive Denoising Framework for Defending Adversarial Attacks in Machine Learning Enabled Systems

Xu, G., Han, Z., Gong, L., Jiao, L., Bai, H., Liu, S., & Zheng, X. (2022) · IEEE Transactions on Reliability · doi:10.1109/tr.2022.3171420 · Cited by 19

SoK: Modeling Explainability in Security Analytics for Interpretability, Trustworthiness, and Usability

Bhusal, D., Shin, H. J., Shewale, A. A., Veerabhadran, M. K., Clifford, M., Rampazzi, S., & Rastogi, N. (2023) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3600160.3600193 · Cited by 22

Robustness with Query-efficient Adversarial Attack using Reinforcement Learning

Sarkar, S., Babu, A. R., Mousavi, S., Ghorbanpour, S., Gundecha, V., Guillén, A., Luna, R., & Naug, A. (2023) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw59228.2023.00229 · Cited by 19

Dynamic Generative Targeted Attacks with Pattern Injection

Feng, W., Xu, N., Zhang, T., & Zhang, Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01574 · Cited by 21

Adversarial Adaptive Neighborhood With Feature Importance-Aware Convex Interpolation

Li, Q., Qi, Y., Hu, Q., Qi, S., Lin, Y., & Dong, J. S. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3047752 · Cited by 19

Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples

Liu, G., Khalil, I. M., & Khreishah, A. A. (2021) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3422337.3447841 · Cited by 20

Neural Networks and Deep Learning

Adcock, B., & Hansen, A. C. (2021) · Cambridge University Press eBooks · doi:10.1017/9781108377447.024 · Cited by 19

Adversarial Attacks and Defenses in Deep Learning: A Survey

Wang, C., Wang, J., & Lin, Q. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-84522-3_37 · Cited by 19

Learn2Evade: Learning-Based Generative Model for Evading PDF Malware Classifiers

Bae, H., Lee, Y., Kim, Y.-H., Hwang, U., Yoon, S., & Paek, Y. (2021) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2021.3103139 · Cited by 19

Research Progress and Challenges on Application-Driven Adversarial Examples: A Survey

Jiang, W., He, Z., Zhan, J., Pan, W., & Adhikari, D. (2021) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3470493 · Cited by 19

Selective transfer learning with adversarial training for stock movement prediction

Li, Y., Dai, H., & Zheng, Z. (2022) · Connection Science · doi:10.1080/09540091.2021.2021143 · Cited by 20

Adversarial Detection by Latent Style Transformations

Wang, S., Nepal‬, ‪., Abuadbba, A., Rudolph, C., & Grobler, M. M. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3155975 · Cited by 19

Imbalanced gradients: a subtle cause of overestimated adversarial robustness

Ma, X., Jiang, L., Huang, H., Weng, Z., Bailey, J., & Jiang, Y. (2023) · Machine Learning · doi:10.1007/s10994-023-06328-7 · Cited by 19

HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware SamplesPreprint

Li, D., Baral, R., Li, T., Wang, H., Li, Q., & Xu, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1809.06498 · Cited by 20

Improved Generalization Bounds for Robust Learning.Preprint

Attias, I., Kontorovich, A., & Mansour, Y. (2018) · arXiv (Cornell University) · Cited by 19

Adversarial Robustness via Label-SmoothingPreprint

Goibert, M., & Dohmatob, E. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.11567 · Cited by 19

Potential adversarial samples for white-box attacksPreprint

Nazemi, A., & Fieguth, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.06409 · Cited by 20

Online Adversarial Purification based on Self-SupervisionPreprint

Shi, C., Holtz, C., & Mishne, G. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2101.09387 · Cited by 35

RobFR: Benchmarking Adversarial Robustness on Face RecognitionPreprint

Yang, X. H., Yang, D., Dong, Y., Su, H., Yu, W., & Zhu, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.04118 · Cited by 19

Type-I Generative Adversarial Attack

He, S., Wang, R., Liu, T., Yi, C., Jin, X., Liu, R., & Zhou, W. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3186918 · Cited by 18

Dual Heterogeneous Complementary Networks for Single Image Deraining

Nanba, Y., Miyata, H., & Han, X. (2022) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw56347.2022.00072 · Cited by 18

Space Applications of a Trusted AI Framework: Experiences and Lessons Learned

Mandrake, L., Doran, G. B., Goel, A., Ono, H., Amini, R., Feather, M. S., Fesq, L. M., Slingerland, P. C., Perry, L., Bycroft, B. P., et al. (2022) · IEEE Aerospace Conference (AERO) · doi:10.1109/aero53065.2022.9843322 · Cited by 18

Frequency domain regularization for iterative adversarial attacks

Li, T., Li, M., Yang, Y., & Deng, C. D. (2022) · Pattern Recognition · doi:10.1016/j.patcog.2022.109075 · Cited by 18

Breaking Security-Critical Voice Authentication

Kassis, A., & Hengartner, U. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179374 · Cited by 19

Deep Learning Measures of Effectiveness

Blasch, E., Liu, S., Liu, Z., & Zheng, Y. (2018) · IEEE National Aerospace and Electronics Conference (NAECON) · doi:10.1109/naecon.2018.8556808 · Cited by 18

Adversarial Robustness by One Bit Double Quantization for Visual Classification

MaungMaung, A., Kinoshita, Y., & Kiya, H. (2019) · IEEE Access · doi:10.1109/access.2019.2958358 · Cited by 19

Unraveling robustness of deep face anti-spoofing models against pixel attacks

Bousnina, N., Zheng, L., Mikram, M., Ghouzali, S., & Minaoui, K. (2020) · Multimedia Tools and Applications · doi:10.1007/s11042-020-10041-1 · Cited by 18

Security Threats and Defensive Approaches in Machine Learning System Under Big Data Environment

Chen, H., Yongpeng, Z., Cao, Y., & Bhargava, B. (2021) · Wireless Personal Communications · doi:10.1007/s11277-021-08284-8 · Cited by 18

Brain programming is immune to adversarial attacks: Towards accurate and robust image classification using symbolic learning

Ibarra-Vázquez, G., Gustavo Olague, A., Chan-Ley, M., Puente, C., & Soubervielle‐Montalvo, C. (2022) · Swarm and Evolutionary Computation · doi:10.1016/j.swevo.2022.101059 · Cited by 18

Adversarial Reinforcement Learning in Dynamic Channel Access and Power Control

Wang, F., Gursoy, M. C., & Velipasalar, S. (2021) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc49053.2021.9417271 · Cited by 18

Ensemble Adversarial Training: Attacks and Defenses

Tramèr, F., Kurakin, A., Papernot, N., Goodfellow, I., Boneh, D., & McDaniel, P. (2017) · arXiv · doi:10.48550/arxiv.1705.07204 · Cited by 2,176

Revisiting Adversarial Training at Scale

Wang, Z., Li, X., Zhu, H., & Xie, C. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02330 · Cited by 34

Gray-box Adversarial TrainingPreprint

Vivek, B. S., Mopuri, K. R., & Babu, R. V. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1808.01753 · Cited by 2

On the Effectiveness of Adversarial Training in Defending against Adversarial Example Attacks for Image Classification

Park, S., & So, J. (2020) · Applied Sciences · doi:10.3390/app10228079 · Cited by 30

Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks

Wang, J., & Zhang, H. (2019) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2019.00673 · Cited by 118