A Complete List of All (arXiv) Adversarial Example Papers
by Nicholas Carlini 2019-06-15
It can be hard to stay up-to-date on the published papers in the field of adversarial examples, where we have seen massive growth in the number of papers written each year. I have been somewhat religiously keeping track of these papers for the last few years, and realized it may be helpful for others to release this list.
The only requirement I used for selecting papers for this list is that it is primarily a paper about adversarial examples, or extensively uses adversarial examples. Due to the sheer quantity of papers, I can't guarantee that I actually have found all of them.
But I did try.
I also may have included papers that don't match these criteria (and are about something different instead), or made inconsistent judgement calls as to whether or not any given paper is mainly an adversarial example paper. Send me an email if something is wrong and I'll correct it.
As a result, this list is completely un-filtered. Everything that mainly presents itself as an adversarial example paper is listed here; I pass no judgement of quality. For a curated list of papers that I think are excellent and worth reading, see the Adversarial Machine Learning Reading List.
One final note about the data. This list automatically updates with new papers, even before I get a chance to manually filter through them. I do this filtering roughly twice a week, and it's then that I'll remove the ones that aren't related to adversarial examples. As a result, there may be some false positives on the most recent few entries. The new un-verified entries will have a probability indicated that my simplistic (but reasonably well calibrated) bag-of-words classifier believes the given paper is actually about adversarial examples.
The full paper list appears below. I've also released a TXT file (and a TXT file with abstracts) and a JSON file with the same data. If you do anything interesting with this data I'd be happy to hear from you what it was.
Paper List
2021-12-03
Single-Shot Black-Box Adversarial Attacks Against Malware Detectors: A Causal Language Model Approach. (99%)
Blackbox Untargeted Adversarial Testing of Automatic Speech Recognition Systems. (98%)
Attack-Centric Approach for Evaluating Transferability of Adversarial Samples in Machine Learning Models. (54%)
Adversarial Attacks against a Satellite-borne Multispectral Cloud Detector. (13%)
2021-12-02
A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space. (99%)
Is Approximation Universally Defensive Against Adversarial Attacks in Deep Neural Networks? (93%)
Is RobustBench/AutoAttack a suitable Benchmark for Adversarial Robustness? (75%)
Training Efficiency and Robustness in Deep Learning. (41%)
FedRAD: Federated Robust Adaptive Distillation. (10%)
FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis. (3%)
On the Existence of the Adversarial Bayes Classifier (Extended Version). (2%)
Editing a classifier by rewriting its prediction rules. (1%)
2021-12-01
Adversarial Robustness of Deep Reinforcement Learning based Dynamic Recommender Systems. (99%)
Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness. (99%)
$\ell_\infty$-Robustness and Beyond: Unleashing Efficient Adversarial Training. (99%)
Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines. (96%)
Adv-4-Adv: Thwarting Changing Adversarial Perturbations via Adversarial Domain Adaptation. (95%)
Robustness in Deep Learning for Computer Vision: Mind the gap? (31%)
CYBORG: Blending Human Saliency Into the Loss Improves Deep Learning. (1%)
2021-11-30
Using a GAN to Generate Adversarial Examples to Facial Image Recognition. (99%)
Mitigating Adversarial Attacks by Distributing Different Copies to Different Users. (86%)
Human Imperceptible Attacks and Applications to Improve Fairness. (83%)
Evaluating Gradient Inversion Attacks and Defenses in Federated Learning. (81%)
FROB: Few-shot ROBust Model for Classification and Out-of-Distribution Detection. (78%)
COREATTACK: Breaking Up the Core Structure of Graphs. (78%)
Adversarial Attacks Against Deep Generative Models on Data: A Survey. (12%)
A Face Recognition System's Worst Morph Nightmare, Theoretically. (1%)
New Datasets for Dynamic Malware Classification. (1%)
Reliability Assessment and Safety Arguments for Machine Learning Components in Assuring Learning-Enabled Autonomous Systems. (1%)
2021-11-29
MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack. (99%)
Adversarial Attacks in Cooperative AI. (82%)
Living-Off-The-Land Command Detection Using Active Learning. (10%)
A Simple Long-Tailed Recognition Baseline via Vision-Language Model. (1%)
ROBIN : A Benchmark for Robustness to Individual Nuisances in Real-World Out-of-Distribution Shifts. (1%)
Pyramid Adversarial Training Improves ViT Performance. (1%)
2021-11-28
Detecting Adversaries, yet Faltering to Noise? Leveraging Conditional Variational AutoEncoders for Adversary Detection in the Presence of Noisy Images. (96%)
MALIGN: Adversarially Robust Malware Family Detection using Sequence Alignment. (54%)
Automated Runtime-Aware Scheduling for Multi-Tenant DNN Inference on GPU. (1%)
ExCon: Explanation-driven Supervised Contrastive Learning for Image Classification. (1%)
2021-11-27
Adaptive Image Transformations for Transfer-based Adversarial Attack. (99%)
Adaptive Perturbation for Adversarial Attack. (99%)
Statically Detecting Adversarial Malware through Randomised Chaining. (98%)
Dissecting Malware in the Wild. (1%)
2021-11-26
ArchRepair: Block-Level Architecture-Oriented Repairing for Deep Neural Networks. (50%)
2021-11-25
AdvBokeh: Learning to Adversarially Defocus Blur. (99%)
Clustering Effect of (Linearized) Adversarial Robust Models. (97%)
Simple Contrastive Representation Adversarial Learning for NLP Tasks. (93%)
Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks. (92%)
Going Grayscale: The Road to Understanding and Improving Unlearnable Examples. (92%)
Gradient Inversion Attack: Leaking Private Labels in Two-Party Split Learning. (3%)
Joint inference and input optimization in equilibrium networks. (1%)
2021-11-24
Thundernna: a white box adversarial attack. (99%)
EAD: an ensemble approach to detect adversarial examples from the hidden features of deep neural networks. (99%)
Robustness against Adversarial Attacks in Neural Networks using Incremental Dissipativity. (92%)
WFDefProxy: Modularly Implementing and Empirically Evaluating Website Fingerprinting Defenses. (15%)
SLA$^2$P: Self-supervised Anomaly Detection with Adversarial Perturbation. (5%)
An Attack on Feature Level-based Facial Soft-biometric Privacy Enhancement. (2%)
Accelerating Deep Learning with Dynamic Data Pruning. (1%)
2021-11-23
Adversarial machine learning for protecting against online manipulation. (92%)
Fixed Points in Cyber Space: Rethinking Optimal Evasion Attacks in the Age of AI-NIDS. (84%)
Subspace Adversarial Training. (69%)
HERO: Hessian-Enhanced Robust Optimization for Unifying and Improving Generalization and Quantization Performance. (1%)
2021-11-22
Adversarial Examples on Segmentation Models Can be Easy to Transfer. (99%)
Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes. (99%)
Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification. (99%)
Backdoor Attack through Frequency Domain. (92%)
NTD: Non-Transferability Enabled Backdoor Detection. (69%)
A Comparison of State-of-the-Art Techniques for Generating Adversarial Malware Binaries. (33%)
Poisoning Attacks to Local Differential Privacy Protocols for Key-Value Data. (13%)
Automatic Mapping of the Best-Suited DNN Pruning Schemes for Real-Time Mobile Acceleration. (1%)
Electric Vehicle Attack Impact on Power Grid Operation. (1%)
2021-11-21
Adversarial Mask: Real-World Adversarial Attack Against Face Recognition Models. (99%)
Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability. (99%)
Medical Aegis: Robust adversarial protectors for medical images. (99%)
Local Linearity and Double Descent in Catastrophic Overfitting. (73%)
Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attacks. (62%)
2021-11-20
Are Vision Transformers Robust to Patch Perturbations? (98%)
2021-11-19
Zero-Shot Certified Defense against Adversarial Patches with Vision Transformers. (99%)
Towards Efficiently Evaluating the Robustness of Deep Neural Networks in IoT Systems: A GAN-based Method. (99%)
Meta Adversarial Perturbations. (99%)
Resilience from Diversity: Population-based approach to harden models against adversarial attacks. (99%)
Enhanced countering adversarial attacks via input denoising and feature restoring. (99%)
Fooling Adversarial Training with Inducing Noise. (98%)
Exposing Weaknesses of Malware Detectors with Explainability-Guided Evasion Attacks. (86%)
2021-11-18
TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems. (99%)
A Review of Adversarial Attack and Defense for Classification Methods. (99%)
Robust Person Re-identification with Multi-Modal Joint Defence. (98%)
Enhancing the Insertion of NOP Instructions to Obfuscate Malware via Deep Reinforcement Learning. (96%)
Adversarial attacks on voter model dynamics in complex networks. (76%)
Enhanced Membership Inference Attacks against Machine Learning Models. (12%)
Wiggling Weights to Improve the Robustness of Classifiers. (2%)
Improving Transferability of Representations via Augmentation-Aware Self-Supervision. (1%)
2021-11-17
TraSw: Tracklet-Switch Adversarial Attacks against Multi-Object Tracking. (99%)
Generating Unrestricted 3D Adversarial Point Clouds. (99%)
SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness. (93%)
Attacking Deep Learning AI Hardware with Universal Adversarial Perturbation. (92%)
Do Not Trust Prediction Scores for Membership Inference Attacks. (33%)
2021-11-16
Robustness of Bayesian Neural Networks to White-Box Adversarial Attacks. (99%)
Improving the robustness and accuracy of biomedical language models through adversarial training. (99%)
Detecting AutoAttack Perturbations in the Frequency Domain. (99%)
Adversarial Tradeoffs in Linear Inverse Problems and Robust StateEstimation. (92%)
Consistent Semantic Attacks on Optical Flow. (81%)
An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences. (54%)
2021-11-15
A Survey on Adversarial Attacks for Malware Analysis. (98%)
Triggerless Backdoor Attack for NLP Tasks with Clean Labels. (67%)
Property Inference Attacks Against GANs. (67%)
2021-11-14
Generating Band-Limited Adversarial Surfaces Using Neural Networks. (99%)
Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks. (76%)
Towards Interpretability of Speech Pause in Dementia Detection using Adversarial Learning. (75%)
Improving Compound Activity Classification via Deep Transfer and Representation Learning. (1%)
2021-11-13
Robust and Accurate Object Detection via Self-Knowledge Distillation. (62%)
UNTANGLE: Unlocking Routing and Logic Obfuscation Using Graph Neural Networks-based Link Prediction. (2%)
2021-11-12
Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception. (99%)
Measuring the Contribution of Multiple Model Representations in Detecting Adversarial Instances. (98%)
Adversarially Robust Learning for Security-Constrained Optimal Power Flow. (10%)
On Transferability of Prompt Tuning for Natural Language Understanding. (8%)
A Bayesian Nash equilibrium-based moving target defense against stealthy sensor attacks. (1%)
Resilient Consensus-based Multi-agent Reinforcement Learning. (1%)
2021-11-11
On the Equivalence between Neural Network and Support Vector Machine. (1%)
2021-11-10
Trustworthy Medical Segmentation with Uncertainty Estimation. (13%)
Robust Learning via Ensemble Density Propagation in Deep Neural Networks. (2%)
2021-11-09
Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search. (99%)
MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps. (99%)
Sparse Adversarial Video Attacks with Spatial Transformations. (98%)
A Statistical Difference Reduction Method for Escaping Backdoor Detection. (97%)
Data Augmentation Can Improve Robustness. (73%)
Are Transformers More Robust Than CNNs? (67%)
2021-11-08
Geometrically Adaptive Dictionary Attack on Face Recognition. (99%)
Defense Against Explanation Manipulation. (98%)
DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories. (98%)
On Assessing The Safety of Reinforcement Learning algorithms Using Formal Methods. (75%)
Get a Model! Model Hijacking Attack Against Machine Learning Models. (69%)
Robust and Information-theoretically Safe Bias Classifier against Adversarial Attacks. (69%)
Characterizing the adversarial vulnerability of speech self-supervised learning. (68%)
HAPSSA: Holistic Approach to PDF Malware Detection Using Signal and Statistical Analysis. (67%)
Graph Robustness Benchmark: Benchmarking the Adversarial Robustness of Graph Machine Learning. (67%)
BARFED: Byzantine Attack-Resistant Federated Averaging Based on Outlier Elimination. (1%)
2021-11-07
Generative Dynamic Patch Attack. (99%)
Natural Adversarial Objects. (81%)
2021-11-06
"How Does It Detect A Malicious App?" Explaining the Predictions of AI-based Android Malware Detector. (11%)
2021-11-05
A Unified Game-Theoretic Interpretation of Adversarial Robustness. (98%)
Federated Learning Attacks Revisited: A Critical Discussion of Gaps, Assumptions, and Evaluation Setups. (2%)
2021-11-04
Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models. (99%)
Adversarial Attacks on Graph Classification via Bayesian Optimisation. (87%)
Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods. (47%)
Attacking Deep Reinforcement Learning-Based Traffic Signal Control Systems with Colluding Vehicles. (3%)
2021-11-03
LTD: Low Temperature Distillation for Robust Adversarial Training. (54%)
Multi-Glimpse Network: A Robust and Efficient Classification Architecture based on Recurrent Downsampled Attention. (41%)
2021-11-02
HydraText: Multi-objective Optimization for Adversarial Textual Attack. (99%)
Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks. (96%)
Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds. (70%)
Pareto Adversarial Robustness: Balancing Spatial Robustness and Sensitivity-based Robustness. (68%)
Knowledge Cross-Distillation for Membership Privacy. (13%)
Adversarially Perturbed Wavelet-based Morphed Face Generation. (9%)
2021-11-01
Robustness of deep learning algorithms in astronomy -- galaxy morphology studies. (83%)
Indiscriminate Poisoning Attacks Are Shortcuts. (75%)
When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning? (69%)
Graph Structural Attack by Spectral Distance. (67%)
ZeBRA: Precisely Destroying Neural Networks with Zero-Data Based Repeated Bit Flip Attack. (9%)
2021-10-31
An Actor-Critic Method for Simulation-Based Optimization. (56%)
2021-10-30
Get Fooled for the Right Reason: Improving Adversarial Robustness through a Teacher-guided Curriculum Learning Approach. (97%)
AdvCodeMix: Adversarial Attack on Code-Mixed Data. (93%)
Backdoor Pre-trained Models Can Transfer to All. (3%)
2021-10-29
Attacking Video Recognition Models with Bullet-Screen Comments. (99%)
Adversarial Robustness with Semi-Infinite Constrained Learning. (92%)
{\epsilon}-weakened Robustness of Deep Neural Networks. (62%)
You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership. (11%)
2021-10-28
Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework. (99%)
AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis. (92%)
The magnitude vector of images. (1%)
2021-10-27
Towards Evaluating the Robustness of Neural Networks Learned by Transduction. (98%)
CAP: Co-Adversarial Perturbation on Weights and Features for Improving Generalization of Graph Neural Networks. (98%)
Towards Robust Reasoning over Knowledge Graphs. (83%)
Generalized Depthwise-Separable Convolutions for Adversarially Robust and Efficient Neural Networks. (74%)
Adversarial Neuron Pruning Purifies Backdoored Deep Models. (15%)
From Intrinsic to Counterfactual: On the Explainability of Contextualized Recommender Systems. (5%)
Robust Contrastive Learning Using Negative Samples with Diminished Semantics. (1%)
RoMA: Robust Model Adaptation for Offline Model-based Optimization. (1%)
2021-10-26
Can't Fool Me: Adversarially Robust Transformer for Video Understanding. (99%)
Frequency Centric Defense Mechanisms against Adversarial Examples. (99%)
Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks. (99%)
ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers. (99%)
FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspective. (98%)
A Frequency Perspective of Adversarial Robustness. (98%)
Disrupting Deep Uncertainty Estimation Without Harming Accuracy. (86%)
Improving Local Effectiveness for Global robust training. (83%)
Robustness of Graph Neural Networks at Scale. (76%)
Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directions. (75%)
Adversarial Robustness in Multi-Task Learning: Promises and Illusions. (64%)
AugMax: Adversarial Composition of Random Augmentations for Robust Training. (56%)
Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes. (50%)
Semantic Host-free Trojan Attack. (10%)
CAFE: Catastrophic Data Leakage in Vertical Federated Learning. (3%)
MEST: Accurate and Fast Memory-Economic Sparse Training Framework on the Edge. (1%)
Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection. (1%)
Defensive Tensorization. (1%)
Task-Aware Meta Learning-based Siamese Neural Network for Classifying Obfuscated Malware. (1%)
2021-10-25
Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks. (99%)
Generating Watermarked Adversarial Texts. (99%)
Beyond $L_p$ clipping: Equalization-based Psychoacoustic Attacks against ASRs. (92%)
Ensemble Federated Adversarial Training with Non-IID data. (87%)
Scalable Lipschitz Residual Networks with Convex Potential Flows. (81%)
GANash -- A GAN approach to steganography. (81%)
Fast Gradient Non-sign Methods. (74%)
An Adaptive Structural Learning of Deep Belief Network for Image-based Crack Detection in Concrete Structures Using SDNET2018. (13%)
2021-10-24
Towards A Conceptually Simple Defensive Approach for Few-shot classifiers Against Adversarial Support Samples. (80%)
2021-10-23
ADC: Adversarial attacks against object Detection that evade Context consistency checks. (99%)
A Layer-wise Adversarial-aware Quantization Optimization for Improving Robustness. (81%)
2021-10-22
Improving Robustness of Malware Classifiers using Adversarial Strings Generated from Perturbed Latent Representations. (99%)
How and When Adversarial Robustness Transfers in Knowledge Distillation? (91%)
Fairness Degrading Adversarial Attacks Against Clustering Algorithms. (86%)
Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff. (75%)
ProtoShotXAI: Using Prototypical Few-Shot Architecture for Explainable AI. (15%)
PRECAD: Privacy-Preserving and Robust Federated Learning via Crypto-Aided Differential Privacy. (15%)
Spoofing Detection on Hand Images Using Quality Assessment. (1%)
On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning. (1%)
Text Counterfactuals via Latent Optimization and Shapley-Guided Search. (1%)
MANDERA: Malicious Node Detection in Federated Learning via Ranking. (1%)
2021-10-21
CAPTIVE: Constrained Adversarial Perturbations to Thwart IC Reverse Engineering. (98%)
PROVES: Establishing Image Provenance using Semantic Signatures. (93%)
RoMA: a Method for Neural Network Robustness Measurement and Assessment. (92%)
Anti-Backdoor Learning: Training Clean Models on Poisoned Data. (83%)
PipAttack: Poisoning Federated Recommender Systems forManipulating Item Promotion. (68%)
Generalization of Neural Combinatorial Solvers Through the Lens of Adversarial Robustness. (61%)
Physical Side-Channel Attacks on Embedded Neural Networks: A Survey. (8%)
Watermarking Graph Neural Networks based on Backdoor Attacks. (1%)
2021-10-20
Adversarial Socialbot Learning via Multi-Agent Deep Hierarchical Reinforcement Learning. (75%)
Surrogate Representation Learning with Isometric Mapping for Gray-box Graph Adversarial Attacks. (62%)
Moir\'e Attack (MA): A New Potential Risk of Screen Photos. (56%)
Adversarial attacks against Bayesian forecasting dynamic models. (13%)
No One Representation to Rule Them All: Overlapping Features of Training Methods. (1%)
2021-10-19
Multi-concept adversarial attacks. (99%)
A Regularization Method to Improve Adversarial Robustness of Neural Networks for ECG Signal Classification. (96%)
TESSERACT: Gradient Flip Score to Secure Federated Learning Against Model Poisoning Attacks. (69%)
Understanding Convolutional Neural Networks from Theoretical Perspective via Volterra Convolution. (61%)
Detecting Backdoor Attacks Against Point Cloud Classifiers. (26%)
Speech Pattern based Black-box Model Watermarking for Automatic Speech Recognition. (13%)
A Deeper Look into RowHammer`s Sensitivities: Experimental Analysis of Real DRAM Chips and Implications on Future Attacks and Defenses. (5%)
2021-10-18
Boosting the Transferability of Video Adversarial Examples via Temporal Translation. (99%)
Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information. (99%)
Improving Robustness using Generated Data. (97%)
MEMO: Test Time Robustness via Adaptation and Augmentation. (13%)
Minimal Multi-Layer Modifications of Deep Neural Networks. (4%)
2021-10-17
Unrestricted Adversarial Attacks on ImageNet Competition. (99%)
Improving Robustness of Reinforcement Learning for Power System Control with Adversarial Training. (99%)
ECG-ATK-GAN: Robustness against Adversarial Attacks on ECG using Conditional Generative Adversarial Networks. (97%)
Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications. (22%)
Poisoning Attacks on Fair Machine Learning. (12%)
2021-10-16
Black-box Adversarial Attacks on Network-wide Multi-step Traffic State Prediction Models. (99%)
Analyzing Dynamic Adversarial Training Data in the Limit. (82%)
Characterizing Improper Input Validation Vulnerabilities of Mobile Crowdsourcing Services. (5%)
Tackling the Imbalance for GNNs. (4%)
2021-10-15
Adversarial Attacks on Gaussian Process Bandits. (99%)
Generating Natural Language Adversarial Examples through An Improved Beam Search Algorithm. (99%)
Adversarial Attacks on ML Defense Models Competition. (99%)
Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture. (76%)
Robustness of different loss functions and their impact on networks learning capability. (76%)
Chunked-Cache: On-Demand and Scalable Cache Isolation for Security Architectures. (22%)
Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks. (10%)
Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentation. (8%)
Hand Me Your PIN! Inferring ATM PINs of Users Typing with a Covered Hand. (1%)
2021-10-14
Adversarial examples by perturbing high-level features in intermediate decoder layers. (99%)
DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks. (99%)
Adversarial Purification through Representation Disentanglement. (99%)
RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models. (93%)
An Optimization Perspective on Realizing Backdoor Injection Attacks on Deep Neural Networks in Hardware. (82%)
Interactive Analysis of CNN Robustness. (80%)
On Adversarial Vulnerability of PHM algorithms: An Initial Study. (69%)
Identifying and Mitigating Spurious Correlations for Improving Robustness in NLP Models. (61%)
Toward Degradation-Robust Voice Conversion. (9%)
Retrieval-guided Counterfactual Generation for QA. (2%)
Effective Certification of Monotone Deep Equilibrium Models. (1%)
2021-10-13
A Framework for Verification of Wasserstein Adversarial Robustness. (99%)
Identification of Attack-Specific Signatures in Adversarial Examples. (99%)
Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness. (99%)
Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer. (98%)
Brittle interpretations: The Vulnerability of TCAV and Other Concept-based Explainability Tools to Adversarial Attack. (93%)
Traceback of Data Poisoning Attacks in Neural Networks. (92%)
Benchmarking the Robustness of Spatial-Temporal Models Against Corruptions. (1%)
2021-10-12
Graph-Fraudster: Adversarial Attacks on Graph Neural Network Based Vertical Federated Learning. (99%)
Adversarial Attack across Datasets. (99%)
SEPP: Similarity Estimation of Predicted Probabilities for Defending and Detecting Adversarial Text. (92%)
On the Security Risks of AutoML. (45%)
Zero-bias Deep Neural Network for Quickest RF Signal Surveillance. (1%)
2021-10-11
Boosting Fast Adversarial Training with Learnable Adversarial Initialization. (99%)
Parameterizing Activation Functions for Adversarial Robustness. (98%)
Amicable examples for informed source separation. (86%)
Doubly-Trained Adversarial Data Augmentation for Neural Machine Translation. (12%)
Large Language Models Can Be Strong Differentially Private Learners. (1%)
Homogeneous Learning: Self-Attention Decentralized Deep Learning. (1%)
Source Mixing and Separation Robust Audio Steganography. (1%)
Intriguing Properties of Input-dependent Randomized Smoothing. (1%)
Hiding Images into Images with Real-world Robustness. (1%)
Certified Patch Robustness via Smoothed Vision Transformers. (1%)
2021-10-10
Adversarial Attacks in a Multi-view Setting: An Empirical Study of the Adversarial Patches Inter-view Transferability. (98%)
Universal Adversarial Attacks on Neural Networks for Power Allocation in a Massive MIMO System. (92%)
2021-10-09
Demystifying the Transferability of Adversarial Attacks in Computer Networks. (99%)
Provably Efficient Black-Box Action Poisoning Attacks Against Reinforcement Learning. (93%)
Widen The Backdoor To Let More Attackers In. (13%)
2021-10-08
Explainability-Aware One Point Attack for Point Cloud Neural Networks. (99%)
Game Theory for Adversarial Attacks and Defenses. (98%)
Graphs as Tools to Improve Deep Learning Methods. (10%)
IHOP: Improved Statistical Query Recovery against Searchable Symmetric Encryption through Quadratic Optimization. (3%)
A Wireless Intrusion Detection System for 802.11 WPA3 Networks. (1%)
Salient ImageNet: How to discover spurious features in Deep Learning? (1%)
2021-10-07
EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detection. (99%)
Adversarial Attack by Limited Point Cloud Surface Modifications. (98%)
Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks. (98%)
One Thing to Fool them All: Generating Interpretable, Universal, and Physically-Realizable Adversarial Features. (92%)
Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction. (80%)
Fingerprinting Multi-exit Deep Neural Network Models via Inference Time. (62%)
Adversarial Unlearning of Backdoors via Implicit Hypergradient. (56%)
MPSN: Motion-aware Pseudo Siamese Network for Indoor Video Head Detection. (1%)
2021-10-06
HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noise. (99%)
Reversible adversarial examples against local visual perturbation. (99%)
Attack as the Best Defense: Nullifying Image-to-image Translation GANs via Limit-aware Adversarial Attack. (99%)
Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs. (99%)
Adversarial Attacks on Machinery Fault Diagnosis. (99%)
Adversarial Attacks on Spiking Convolutional Networks for Event-based Vision. (98%)
A Uniform Framework for Anomaly Detection in Deep Neural Networks. (97%)
Double Descent in Adversarial Training: An Implicit Label Noise Perspective. (88%)
Improving Adversarial Robustness for Free with Snapshot Ensemble. (83%)
DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle Avoidance in Autonomous Systems. (45%)
Inference Attacks Against Graph Neural Networks. (2%)
Efficient Sharpness-aware Minimization for Improved Training of Neural Networks. (1%)
Data-driven behavioural biometrics for continuous and adaptive user verification using Smartphone and Smartwatch. (1%)
On The Vulnerability of Recurrent Neural Networks to Membership Inference Attacks. (1%)
Stegomalware: A Systematic Survey of MalwareHiding and Detection in Images, Machine LearningModels and Research Challenges. (1%)
Exploring the Common Principal Subspace of Deep Features in Neural Networks. (1%)
Generalizing Neural Networks by Reflecting Deviating Data in Production. (1%)
2021-10-05
Adversarial Robustness Verification and Attack Synthesis in Stochastic Systems. (99%)
Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations. (99%)
Adversarial defenses via a mixture of generators. (99%)
Neural Network Adversarial Attack Method Based on Improved Genetic Algorithm. (92%)
BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models. (33%)
CADA: Multi-scale Collaborative Adversarial Domain Adaptation for Unsupervised Optic Disc and Cup Segmentation. (1%)
Noisy Feature Mixup. (1%)
2021-10-04
Benchmarking Safety Monitors for Image Classifiers with Machine Learning. (1%)
2021-10-03
Adversarial Examples Generation for Reducing Implicit Gender Bias in Pre-trained Models. (82%)
2021-10-02
Evaluating Deep Learning Models and Adversarial Attacks on Accelerometer-Based Gesture Authentication. (98%)
Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Function. (13%)
2021-10-01
Calibrated Adversarial Training. (98%)
Universal Adversarial Spoofing Attacks against Face Recognition. (87%)
Score-Based Generative Classifiers. (84%)
One Timestep is All You Need: Training Spiking Neural Networks with Ultra Low Latency. (1%)
2021-09-30
Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation. (98%)
You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors. (95%)
Adversarial Semantic Contour for Object Detection. (92%)
From Zero-Shot Machine Learning to Zero-Day Attack Detection. (10%)
2021-09-29
On Brightness Agnostic Adversarial Examples Against Face Recognition Systems. (99%)
Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks. (70%)
BulletTrain: Accelerating Robust Neural Network Training via Boundary Example Mining. (41%)
Mitigation of Adversarial Policy Imitation via Constrained Randomization of Policy (CRoP). (10%)
2021-09-28
slimTrain -- A Stochastic Approximation Method for Training Separable Deep Neural Networks. (1%)
2021-09-27
MUTEN: Boosting Gradient-Based Adversarial Attacks via Mutant-Based Ensembles. (99%)
Query-based Adversarial Attacks on Graph with Fake Nodes. (99%)
Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective. (98%)
GANG-MAM: GAN based enGine for Modifying Android Malware. (64%)
Distributionally Robust Multi-Output Regression Ranking. (3%)
Improving Uncertainty of Deep Learning-based Object Classification on Radar Spectra using Label Smoothing. (1%)
Federated Deep Learning with Bayesian Privacy. (1%)
2021-09-26
Distributionally Robust Multiclass Classification and Applications in Deep CNN Image Classifiers. (11%)
2021-09-25
Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency. (99%)
Contributions to Large Scale Bayesian Inference and Adversarial Machine Learning. (98%)
MINIMAL: Mining Models for Data Free Universal Adversarial Triggers. (93%)
2021-09-24
Local Intrinsic Dimensionality Signals Adversarial Perturbations. (98%)
2021-09-23
Breaking BERT: Understanding its Vulnerabilities for Biomedical Named Entity Recognition through Adversarial Attack. (98%)
FooBaR: Fault Fooling Backdoor Attack on Neural Network Training. (88%)
AES Systems Are Both Overstable And Oversensitive: Explaining Why And Proposing Defenses. (68%)
DeepAID: Interpreting and Improving Deep Learning-based Anomaly Detection in Security Applications. (1%)
2021-09-22
Exploring Adversarial Examples for Efficient Active Learning in Machine Learning Classifiers. (99%)
CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks. (81%)
Security Analysis of Capsule Network Inference using Horizontal Collaboration. (69%)
Adversarial Transfer Attacks With Unknown Data and Class Overlap. (62%)
Pushing the Right Buttons: Adversarial Evaluation of Quality Estimation. (1%)
Backdoor Attacks on Federated Learning with Lottery Ticket Hypothesis. (1%)
2021-09-21
Attacks on Visualization-Based Malware Detection: Balancing Effectiveness and Executability. (99%)
3D Point Cloud Completion with Geometric-Aware Adversarial Augmentation. (93%)
DeSMP: Differential Privacy-exploited Stealthy Model Poisoning Attacks in Federated Learning. (76%)
Privacy, Security, and Utility Analysis of Differentially Private CPES Data. (13%)
2021-09-20
Robust Physical-World Attacks on Face Recognition. (99%)
Modeling Adversarial Noise for Adversarial Defense. (99%)
Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection? (99%)
Robustness Analysis of Deep Learning Frameworks on Mobile Platforms. (10%)
"Hello, It's Me": Deep Learning-based Speech Synthesis Attacks in the Real World. (2%)
Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Framework. (1%)
2021-09-19
On the Noise Stability and Robustness of Adversarially Trained Networks on NVM Crossbars. (99%)
Adversarial Training with Contrastive Learning in NLP. (16%)
2021-09-18
Clean-label Backdoor Attack against Deep Hashing based Retrieval. (98%)
2021-09-17
Messing Up 3D Virtual Environments: Transferable Adversarial 3D Objects. (98%)
2021-09-16
Harnessing Perceptual Adversarial Patches for Crowd Counting. (99%)
KATANA: Simple Post-Training Robustness Using Test Time Augmentations. (98%)
Adversarial Attacks against Deep Learning Based Power Control in Wireless Communications. (95%)
Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns. (92%)
Don't Search for a Search Method -- Simple Heuristics Suffice for Adversarial Text Attacks. (68%)
Membership Inference Attacks Against Recommender Systems. (3%)
2021-09-15
Universal Adversarial Attack on Deep Learning Based Prognostics. (99%)
Balancing detectability and performance of attacks on the control channel of Markov Decision Processes. (98%)
FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack. (93%)
BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification. (92%)
Adversarial Mixing Policy for Relaxing Locally Linear Constraints in Mixup. (13%)
Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel. (10%)
2021-09-14
A Novel Data Encryption Method Inspired by Adversarial Attacks. (99%)
Improving Gradient-based Adversarial Training for Text Classification by Contrastive Learning and Auto-Encoder. (99%)
PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Models. (99%)
EVAGAN: Evasion Generative Adversarial Network for Low Data Regimes. (76%)
Dodging Attack Using Carefully Crafted Natural Makeup. (47%)
Avengers Ensemble! Improving Transferability of Authorship Obfuscation. (12%)
ARCH: Efficient Adversarial Regularized Training with Caching. (2%)
2021-09-13
Adversarial Bone Length Attack on Action Recognition. (99%)
Randomized Substitution and Vote for Textual Adversarial Example Detection. (99%)
Improving Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator. (99%)
Evolving Architectures with Gradient Misalignment toward Low Adversarial Transferability. (98%)
A Practical Adversarial Attack on Contingency Detection of Smart Energy Systems. (98%)
Adversarial Examples for Evaluating Math Word Problem Solvers. (96%)
PAT: Pseudo-Adversarial Training For Detecting Adversarial Videos. (86%)
SignGuard: Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering. (81%)
Virtual Data Augmentation: A Robust and General Framework for Fine-tuning Pre-trained Models. (50%)
Formalizing and Estimating Distribution Inference Risks. (50%)
Sensor Adversarial Traits: Analyzing Robustness of 3D Object Detection Sensor Fusion Models. (16%)
Adversarially Trained Object Detector for Unsupervised Domain Adaptation. (3%)
Perturbation CheckLists for Evaluating NLG Evaluation Metrics. (1%)
How to Select One Among All? An Extensive Empirical Study Towards the Robustness of Knowledge Distillation in Natural Language Understanding. (1%)
Detecting Safety Problems of Multi-Sensor Fusion in Autonomous Driving. (1%)
2021-09-12
TREATED:Towards Universal Defense against Textual Adversarial Attacks. (99%)
CoG: a Two-View Co-training Framework for Defending Adversarial Attacks on Graph. (98%)
Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain. (93%)
RockNER: A Simple Method to Create Adversarial Examples for Evaluating the Robustness of Named Entity Recognition Models. (84%)
Shape-Biased Domain Generalization via Shock Graph Embeddings. (2%)
Source Inference Attacks in Federated Learning. (1%)
2021-09-11
RobustART: Benchmarking Robustness on Architecture Design and Training Techniques. (98%)
2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency. (81%)
2021-09-10
A Strong Baseline for Query Efficient Attacks in a Black Box Setting. (99%)
2021-09-09
Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification. (99%)
Energy Attack: On Transferring Adversarial Examples. (99%)
Protein Folding Neural Networks Are Not Robust. (99%)
Towards Transferable Adversarial Attacks on Vision Transformers. (99%)
Multi-granularity Textual Adversarial Attack with Behavior Cloning. (98%)
Spatially Focused Attack against Spatiotemporal Graph Neural Networks. (81%)
Differential Privacy in Personalized Pricing with Nonparametric Demand Models. (26%)
EvilModel 2.0: Bringing Neural Network Models into Malware Attacks. (5%)
2021-09-08
Where Did You Learn That From? Surprising Effectiveness of Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning. (89%)
Robust Optimal Classification Trees Against Adversarial Examples. (80%)
2021-09-07
Adversarial Parameter Defense by Multi-Step Risk Minimization. (98%)
POW-HOW: An enduring timing side-channel to evade online malware sandboxes. (12%)
Unpaired Adversarial Learning for Single Image Deraining with Rain-Space Contrastive Constraints. (1%)
2021-09-06
Robustness and Generalization via Generative Adversarial Training. (82%)
Trojan Signatures in DNN Weights. (33%)
Automated Robustness with Adversarial Training as a Post-Processing Step. (4%)
Exposing Length Divergence Bias of Textual Matching Models. (2%)
2021-09-05
Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack. (98%)
Tolerating Adversarial Attacks and Byzantine Faults in Distributed Machine Learning. (2%)
DexRay: A Simple, yet Effective Deep Learning Approach to Android Malware Detection based on Image Representation of Bytecode. (1%)
2021-09-04
Real-World Adversarial Examples involving Makeup Application. (99%)
Utilizing Adversarial Targeted Attacks to Boost Adversarial Robustness. (99%)
Training Meta-Surrogate Model for Transferable Adversarial Attack. (99%)
2021-09-03
SEC4SR: A Security Analysis Platform for Speaker Recognition. (99%)
Risk Assessment for Connected Vehicles under Stealthy Attacks on Vehicle-to-Vehicle Networks. (1%)
2021-09-02
A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples. (99%)
Impact of Attention on Adversarial Robustness of Image Classification Models. (99%)
Adversarial Robustness for Unsupervised Domain Adaptation. (98%)
Real World Robustness from Systematic Noise. (91%)
Building Compact and Robust Deep Neural Networks with Toeplitz Matrices. (61%)
2021-09-01
Towards Improving Adversarial Training of NLP Models. (98%)
Excess Capacity and Backdoor Poisoning. (97%)
Regional Adversarial Training for Better Robust Generalization. (96%)
R-SNN: An Analysis and Design Methodology for Robustifying Spiking Neural Networks against Adversarial Attacks through Noise Filters for Dynamic Vision Sensors. (86%)
Proof Transfer for Neural Network Verification. (9%)
Guarding Machine Learning Hardware Against Physical Side-Channel Attacks. (2%)
2021-08-31
EG-Booster: Explanation-Guided Booster of ML Evasion Attacks. (99%)
Morphence: Moving Target Defense Against Adversarial Examples. (99%)
DPA: Learning Robust Physical Adversarial Camouflages for Object Detectors. (86%)
Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction. (83%)
Segmentation Fault: A Cheap Defense Against Adversarial Machine Learning. (75%)
Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning. (4%)
2021-08-30
Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings. (99%)
Investigating Vulnerabilities of Deep Neural Policies. (99%)
Adversarial Example Devastation and Detection on Speech Recognition System by Adding Random Noise. (99%)
Single Node Injection Attack against Graph Neural Networks. (68%)
Benchmarking the Accuracy and Robustness of Feedback Alignment Algorithms. (41%)
Adaptive perturbation adversarial training: based on reinforcement learning. (41%)
How Does Adversarial Fine-Tuning Benefit BERT? (33%)
ML-based IoT Malware Detection Under Adversarial Settings: A Systematic Evaluation. (26%)
DuTrust: A Sentiment Analysis Dataset for Trustworthiness Evaluation. (1%)
2021-08-29
Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution. (99%)
Reinforcement Learning Based Sparse Black-box Adversarial Attack on Video Recognition Models. (98%)
DropAttack: A Masked Weight Adversarial Training Method to Improve Generalization of Neural Networks. (82%)
Rumor Detection on Social Media with Hierarchical Adversarial Training. (47%)
2021-08-27
Mal2GCN: A Robust Malware Detection Approach Using Deep Graph Convolutional Networks With Non-Negative Weights. (99%)
Disrupting Adversarial Transferability in Deep Neural Networks. (98%)
Evaluating the Robustness of Neural Language Models to Input Perturbations. (16%)
Deep learning models are not robust against noise in clinical text. (1%)
2021-08-26
Understanding the Logit Distributions of Adversarially-Trained Deep Neural Networks. (99%)
A Hierarchical Assessment of Adversarial Severity. (98%)
Physical Adversarial Attacks on an Aerial Imagery Object Detector. (96%)
Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference. (80%)
Detection and Continual Learning of Novel Face Presentation Attacks. (2%)
2021-08-25
Adversarially Robust One-class Novelty Detection. (99%)
Backdoor Attacks on Network Certification via Data Poisoning. (98%)
Bridged Adversarial Training. (93%)
Generalized Real-World Super-Resolution through Adversarial Robustness. (93%)
2021-08-24
Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE. (99%)
Are socially-aware trajectory prediction models really socially-aware? (92%)
OOWL500: Overcoming Dataset Collection Bias in the Wild. (76%)
StyleAugment: Learning Texture De-biased Representations by Style Augmentation without Pre-defined Textures. (1%)
2021-08-23
Adversarial Robustness of Deep Learning: Theory, Algorithms, and Applications. (99%)
Semantic-Preserving Adversarial Text Attacks. (99%)
Deep Bayesian Image Set Classification: A Defence Approach against Adversarial Attacks. (99%)
Kryptonite: An Adversarial Attack Using Regional Focus. (99%)
Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Federated Learning. (54%)
SegMix: Co-occurrence Driven Mixup for Semantic Segmentation and Adversarial Robustness. (4%)
2021-08-22
Robustness-via-Synthesis: Robust Training with Generative Adversarial Perturbations. (99%)
Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency. (92%)
Relating CNNs with brain: Challenges and findings. (10%)
2021-08-21
A Hard Label Black-box Adversarial Attack Against Graph Neural Networks. (99%)
"Adversarial Examples" for Proof-of-Learning. (98%)
Regularizing (Stabilizing) Deep Learning Based Reconstruction Algorithms. (2%)
2021-08-20
PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier. (99%)
AdvDrop: Adversarial Attack to DNNs by Dropping Information. (99%)
Integer-arithmetic-only Certified Robustness for Quantized Neural Networks. (98%)
Towards Understanding the Generative Capability of Adversarially Robust Classifiers. (98%)
Detecting and Segmenting Adversarial Graphics Patterns from Images. (93%)
UnSplit: Data-Oblivious Model Inversion, Model Stealing, and Label Inference Attacks Against Split Learning. (1%)
Early-exit deep neural networks for distorted images: providing an efficient edge offloading. (1%)
2021-08-19
Application of Adversarial Examples to Physical ECG Signals. (99%)
Pruning in the Face of Adversaries. (99%)
ASAT: Adaptively Scaled Adversarial Training in Time Series. (98%)
Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain. (80%)
2021-08-18
Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better. (99%)
Exploiting Multi-Object Relationships for Detecting Adversarial Attacks in Complex Scenes. (98%)
MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression. (45%)
Proceedings of the 1st International Workshop on Adaptive Cyber Defense. (1%)
2021-08-17
When Should You Defend Your Classifier -- A Game-theoretical Analysis of Countermeasures against Adversarial Examples. (98%)
Adversarial Relighting against Face Recognition. (98%)
Semantic Perturbations with Normalizing Flows for Improved Generalization. (13%)
Coalesced Multi-Output Tsetlin Machines with Clause Sharing. (1%)
Appearance Based Deep Domain Adaptation for the Classification of Aerial Images. (1%)
2021-08-16
Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy. (99%)
Interpreting Attributions and Interactions of Adversarial Attacks. (83%)
Patch Attack Invariance: How Sensitive are Patch Attacks to 3D Pose? (62%)
NeuraCrypt is not private. (10%)
Identifying and Exploiting Structures for Reliable Deep Learning. (2%)
On the Opportunities and Risks of Foundation Models. (2%)
2021-08-15
Neural Architecture Dilation for Adversarial Robustness. (81%)
Deep Adversarially-Enhanced k-Nearest Neighbors. (74%)
IADA: Iterative Adversarial Data Augmentation Using Formal Verification and Expert Guidance. (1%)
2021-08-14
LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysis. (1%)
2021-08-13
Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks. (99%)
Optical Adversarial Attack. (98%)
Understanding Structural Vulnerability in Graph Convolutional Networks. (96%)
The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs. (1%)
2021-08-12
AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learning. (99%)
Deep adversarial attack on target detection systems. (99%)
Hatemoji: A Test Suite and Adversarially-Generated Dataset for Benchmarking and Detecting Emoji-based Hate. (68%)
2021-08-11
Turning Your Strength against You: Detecting and Mitigating Robust and Universal Adversarial Patch Attacks. (98%)
Attacks against Ranking Algorithms with Text Embeddings: a Case Study on Recruitment Algorithms. (78%)
Are Neural Ranking Models Robust? (4%)
Logic Explained Networks. (1%)
2021-08-10
Simple black-box universal adversarial attacks on medical image classification based on deep neural networks. (99%)
On the Effect of Pruning on Adversarial Robustness. (81%)
SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version). (68%)
Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing. (64%)
UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attacks. (2%)
Instance-wise Hard Negative Example Generation for Contrastive Learning in Unpaired Image-to-Image Translation. (1%)
2021-08-09
Meta Gradient Adversarial Attack. (99%)
On Procedural Adversarial Noise Attack And Defense. (99%)
Enhancing Knowledge Tracing via Adversarial Training. (98%)
Neural Network Repair with Reachability Analysis. (96%)
Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks. (92%)
Mis-spoke or mis-lead: Achieving Robustness in Multi-Agent Communicative Reinforcement Learning. (82%)
Privacy-Preserving Machine Learning: Methods, Challenges and Directions. (16%)
Explainable AI and susceptibility to adversarial attacks: a case study in classification of breast ultrasound images. (15%)
2021-08-07
Jointly Attacking Graph Neural Network and its Explanations. (96%)
Membership Inference Attacks on Lottery Ticket Networks. (33%)
Information Bottleneck Approach to Spatial Attention Learning. (1%)
2021-08-06
Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles. (80%)
Ensemble Augmentation for Deep Neural Networks Using 1-D Time Series Vibration Data. (2%)
2021-08-05
BOSS: Bidirectional One-Shot Synthesis of Adversarial Examples. (99%)
Poison Ink: Robust and Invisible Backdoor Attack. (99%)
Imperceptible Adversarial Examples by Spatial Chroma-Shift. (99%)
Householder Activations for Provable Robustness against Adversarial Attacks. (83%)
Fairness Properties of Face Recognition and Obfuscation Systems. (68%)
Exploring Structure Consistency for Deep Model Watermarking. (10%)
Locally Interpretable One-Class Anomaly Detection for Credit Card Fraud Detection. (1%)
2021-08-04
Robust Transfer Learning with Pretrained Language Models through Adapters. (82%)
Semi-supervised Conditional GAN for Simultaneous Generation and Detection of Phishing URLs: A Game theoretic Perspective. (31%)
2021-08-03
On the Robustness of Domain Adaption to Adversarial Attacks. (99%)
On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples. (99%)
AdvRush: Searching for Adversarially Robust Neural Architectures. (99%)
The Devil is in the GAN: Defending Deep Generative Models Against Backdoor Attacks. (88%)
DeepFreeze: Cold Boot Attacks and High Fidelity Model Recovery on Commercial EdgeML Device. (69%)
Tutorials on Testing Neural Networks. (1%)
2021-08-02
Hybrid Classical-Quantum Deep Learning Models for Autonomous Vehicle Traffic Image Classification Under Adversarial Attack. (98%)
Adversarial Attacks Against Deep Reinforcement Learning Framework in Internet of Vehicles. (10%)
Information Stealing in Federated Learning Systems Based on Generative Adversarial Networks. (9%)
Efficacy of Statistical and Artificial Intelligence-based False Information Cyberattack Detection Models for Connected Vehicles. (1%)
2021-08-01
Advances in adversarial attacks and defenses in computer vision: A survey. (92%)
Certified Defense via Latent Space Randomized Smoothing with Orthogonal Encoders. (80%)
An Effective and Robust Detector for Logo Detection. (70%)
Style Curriculum Learning for Robust Medical Image Segmentation. (2%)
2021-07-31
Delving into Deep Image Prior for Adversarial Defense: A Novel Reconstruction-based Defense Framework. (99%)
Adversarial Robustness of Deep Code Comment Generation. (99%)
Towards Adversarially Robust and Domain Generalizable Stereo Matching by Rethinking DNN Feature Backbones. (93%)
T$_k$ML-AP: Adversarial Attacks to Top-$k$ Multi-Label Learning. (81%)
BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning. (67%)
Fair Representation Learning using Interpolation Enabled Disentanglement. (1%)
2021-07-30
Who's Afraid of Thomas Bayes? (92%)
Practical Attacks on Voice Spoofing Countermeasures. (86%)
Can You Hear It? Backdoor Attacks via Ultrasonic Triggers. (50%)
Unveiling the potential of Graph Neural Networks for robust Intrusion Detection. (13%)
2021-07-29
Feature Importance-aware Transferable Adversarial Attacks. (99%)
Enhancing Adversarial Robustness via Test-time Transformation Ensembling. (98%)
The Robustness of Graph k-shell Structure under Adversarial Attacks. (93%)
Understanding the Effects of Adversarial Personalized Ranking Optimization Method on Recommendation Quality. (31%)
Towards robust vision by multi-task learning on monkey visual cortex. (3%)
2021-07-28
Imbalanced Adversarial Training with Reweighting. (86%)
Towards Robustness Against Natural Language Word Substitutions. (73%)
Models of Computational Profiles to Study the Likelihood of DNN Metamorphic Test Cases. (67%)
WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification. (15%)
TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing. (2%)
2021-07-27
Towards Black-box Attacks on Deep Learning Apps. (89%)
Poisoning of Online Learning Filters: DDoS Attacks and Countermeasures. (50%)
PDF-Malware: An Overview on Threats, Detection and Evasion Attacks. (8%)
2021-07-26
Benign Adversarial Attack: Tricking Algorithm for Goodness. (99%)
Learning to Adversarially Blur Visual Object Tracking. (98%)
Adversarial Attacks with Time-Scale Representations. (96%)
2021-07-24
Adversarial training may be a double-edged sword. (99%)
Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them. (98%)
Stress Test Evaluation of Biomedical Word Embeddings. (73%)
X-GGM: Graph Generative Modeling for Out-of-Distribution Generalization in Visual Question Answering. (1%)
2021-07-23
A Differentiable Language Model Adversarial Attack on Text Classifiers. (99%)
Structack: Structure-based Adversarial Attacks on Graph Neural Networks. (86%)
Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigation. (45%)
Clipped Hyperbolic Classifiers Are Super-Hyperbolic Classifiers. (8%)
2021-07-22
On the Certified Robustness for Ensemble Models and Beyond. (99%)
Unsupervised Detection of Adversarial Examples with Model Explanations. (99%)
Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning. (83%)
Towards Explaining Adversarial Examples Phenomenon in Artificial Neural Networks. (75%)
Estimating Predictive Uncertainty Under Program Data Distribution Shift. (1%)
Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack. (1%)
2021-07-21
Fast and Scalable Adversarial Training of Kernel SVM via Doubly Stochastic Gradients. (98%)
Improved Text Classification via Contrastive Adversarial Training. (84%)
Black-box Probe for Unsupervised Domain Adaptation without Model Transferring. (81%)
Defending against Reconstruction Attack in Vertical Federated Learning. (10%)
Generative Models for Security: Attacks, Defenses, and Opportunities. (10%)
A Tandem Framework Balancing Privacy and Security for Voice User Interfaces. (5%)
Spinning Sequence-to-Sequence Models with Meta-Backdoors. (4%)
On the Convergence of Prior-Guided Zeroth-Order Optimization Algorithms. (2%)
2021-07-20
Using Undervolting as an On-Device Defense Against Adversarial Machine Learning Attacks. (99%)
A Markov Game Model for AI-based Cyber Security Attack Mitigation. (10%)
Leaking Secrets through Modern Branch Predictor in the Speculative World. (1%)
2021-07-19
Discriminator-Free Generative Adversarial Attack. (99%)
Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features. (99%)
Examining the Human Perceptibility of Black-Box Adversarial Attacks on Face Recognition. (98%)
On the Veracity of Local, Model-agnostic Explanations in Audio Classification: Targeted Investigations with Adversarial Examples. (80%)
MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI. (33%)
Structural Watermarking to Deep Neural Networks via Network Channel Pruning. (11%)
Generative Adversarial Neural Cellular Automata. (1%)
Improving Interpretability of Deep Neural Networks in Medical Diagnosis by Investigating the Individual Units. (1%)
Just Train Twice: Improving Group Robustness without Training Group Information. (1%)
2021-07-18
RobustFed: A Truth Inference Approach for Robust Federated Learning. (1%)
2021-07-17
BEDS-Bench: Behavior of EHR-models under Distributional Shift--A Benchmark. (9%)
2021-07-16
EGC2: Enhanced Graph Classification with Easy Graph Compression. (84%)
Proceedings of ICML 2021 Workshop on Theoretic Foundation, Criticism, and Application Trend of Explainable AI. (1%)
2021-07-15
Self-Supervised Contrastive Learning with Adversarial Perturbations for Robust Pretrained Language Models. (99%)
Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving. (98%)
ECG-Adv-GAN: Detecting ECG Adversarial Examples with Conditional Generative Adversarial Networks. (92%)
Adversarial Attack for Uncertainty Estimation: Identifying Critical Regions in Neural Networks. (80%)
Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting. (16%)
Shifts: A Dataset of Real Distributional Shift Across Multiple Large-Scale Tasks. (1%)
2021-07-14
AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning. (99%)
Conservative Objective Models for Effective Offline Model-Based Optimization. (67%)
2021-07-13
AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense. (88%)
Using BERT Encoding to Tackle the Mad-lib Attack in SMS Spam Detection. (69%)
Correlation Analysis between the Robustness of Sparse Neural Networks and their Random Hidden Structural Priors. (41%)
What classifiers know what they don't? (1%)
2021-07-12
EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks. (99%)
Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising. (99%)
Perceptual-based deep-learning denoiser as a defense against adversarial attacks on ASR systems. (96%)
Putting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoning. (81%)
A Closer Look at the Adversarial Robustness of Information Bottleneck Models. (70%)
SoftHebb: Bayesian inference in unsupervised Hebbian soft winner-take-all networks. (56%)
2021-07-11
Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks. (76%)
Stateful Detection of Model Extraction Attacks. (2%)
Attack Rules: An Adversarial Approach to Generate Attacks for Industrial Control Systems using Machine Learning. (1%)
2021-07-10
Hack The Box: Fooling Deep Learning Abstraction-Based Monitors. (91%)
Identifying Layers Susceptible to Adversarial Attacks. (83%)
HOMRS: High Order Metamorphic Relations Selector for Deep Neural Networks. (81%)
Out of Distribution Detection and Adversarial Attacks on Deep Neural Networks for Robust Medical Image Analysis. (22%)
Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends. (1%)
2021-07-09
Learning to Detect Adversarial Examples Based on Class Scores. (99%)
Resilience of Autonomous Vehicle Object Category Detection to Universal Adversarial Perturbations. (99%)
Universal 3-Dimensional Perturbations for Black-Box Attacks on Video Recognition Systems. (99%)
GGT: Graph-Guided Testing for Adversarial Sample Detection of Deep Neural Network. (98%)
Towards Robust General Medical Image Segmentation. (83%)
ARC: Adversarially Robust Control Policies for Autonomous Vehicles. (38%)
2021-07-08
Output Randomization: A Novel Defense for both White-box and Black-box Adversarial Models. (99%)
Improving Model Robustness with Latent Distribution Locally and Globally. (99%)
Analytically Tractable Hidden-States Inference in Bayesian Neural Networks. (50%)
Understanding the Limits of Unsupervised Domain Adaptation via Data Poisoning. (33%)
2021-07-07
Controlled Caption Generation for Images Through Adversarial Attacks. (99%)
Incorporating Label Uncertainty in Understanding Adversarial Robustness. (38%)
RoFL: Attestable Robustness for Secure Federated Learning. (1%)
2021-07-06
GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization. (99%)
Self-Adversarial Training incorporating Forgery Attention for Image Forgery Localization. (95%)
ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients. (76%)
On Generalization of Graph Autoencoders with Adversarial Training. (12%)
On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving. (1%)
2021-07-05
When and How to Fool Explainable Models (and Humans) with Adversarial Examples. (99%)
Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks. (99%)
Adversarial Robustness of Probabilistic Network Embedding for Link Prediction. (87%)
Dealing with Adversarial Player Strategies in the Neural Network Game iNNk through Ensemble Learning. (69%)
Understanding the Security of Deepfake Detection. (33%)
Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems. (15%)
Poisoning Attack against Estimating from Pairwise Comparisons. (15%)
Confidence Conditioned Knowledge Distillation. (10%)
2021-07-04
Certifiably Robust Interpretation via Renyi Differential Privacy. (67%)
Mirror Mirror on the Wall: Next-Generation Wireless Jamming Attacks Based on Software-Controlled Surfaces. (1%)
2021-07-03
Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity. (99%)
2021-07-01
Using Anomaly Feature Vectors for Detecting, Classifying and Warning of Outlier Adversarial Examples. (99%)
DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networks. (99%)
CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding. (68%)
Spotting adversarial samples for speaker verification by neural vocoders. (26%)
The Interplay between Distribution Parameters and the Accuracy-Robustness Tradeoff in Classification. (16%)
Reinforcement Learning for Feedback-Enabled Cyber Resilience. (10%)
2021-06-30
Single-Step Adversarial Training for Semantic Segmentation. (96%)
Understanding Adversarial Attacks on Observations in Deep Reinforcement Learning. (84%)
Explanation-Guided Diagnosis of Machine Learning Evasion Attacks. (82%)
Bi-Level Poisoning Attack Model and Countermeasure for Appliance Consumption Data of Smart Homes. (8%)
Exploring Robustness of Neural Networks through Graph Measures. (8%)
A Context-Aware Information-Based Clone Node Attack Detection Scheme in Internet of Things. (1%)
Understanding and Improving Early Stopping for Learning with Noisy Labels. (1%)
2021-06-29
Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges. (99%)
Understanding Adversarial Examples Through Deep Neural Network's Response Surface and Uncertainty Regions. (99%)
Attack Transferability Characterization for Adversarially Robust Multi-label Classification. (99%)
Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices. (99%)
Bio-Inspired Adversarial Attack Against Deep Neural Networks. (98%)
Do Not Deceive Your Employer with a Virtual Background: A Video Conferencing Manipulation-Detection System. (62%)
The Threat of Offensive AI to Organizations. (54%)
Local Reweighting for Adversarial Training. (22%)
On the Interaction of Belief Bias and Explanations. (15%)
2021-06-28
Feature Importance Guided Attack: A Model Agnostic Adversarial Attack. (99%)
Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent. (99%)
Improving Transferability of Adversarial Patches on Face Recognition with Generative Models. (99%)
Data Poisoning Won't Save You From Facial Recognition. (93%)
Adversarial Robustness of Streaming Algorithms through Importance Sampling. (61%)
Test-Time Adaptation to Distribution Shift by Confidence Maximization and Input Transformation. (2%)
Realtime Robust Malicious Traffic Detection via Frequency Domain Analysis. (1%)
2021-06-27
RAILS: A Robust Adversarial Immune-inspired Learning System. (96%)
Who is Responsible for Adversarial Defense? (93%)
ASK: Adversarial Soft k-Nearest Neighbor Attack and Defense. (82%)
Immuno-mimetic Deep Neural Networks (Immuno-Net). (64%)
Stabilizing Equilibrium Models by Jacobian Regularization. (1%)
2021-06-26
Multi-stage Optimization based Adversarial Training. (99%)
The Feasibility and Inevitability of Stealth Attacks. (68%)
2021-06-24
On the (Un-)Avoidability of Adversarial Examples. (99%)
Countering Adversarial Examples: Combining Input Transformation and Noisy Training. (99%)
2021-06-23
Adversarial Examples in Multi-Layer Random ReLU Networks. (81%)
Teacher Model Fingerprinting Attacks Against Transfer Learning. (2%)
Meaningfully Explaining Model Mistakes Using Conceptual Counterfactuals. (1%)
Feature Attributions and Counterfactual Explanations Can Be Manipulated. (1%)
2021-06-22
DetectX -- Adversarial Input Detection using Current Signatures in Memristive XBar Arrays. (99%)
Self-Supervised Iterative Contextual Smoothing for Efficient Adversarial Defense against Gray- and Black-Box Attack. (99%)
Long-term Cross Adversarial Training: A Robust Meta-learning Method for Few-shot Classification Tasks. (83%)
On Adversarial Robustness of Synthetic Code Generation. (81%)
NetFense: Adversarial Defenses against Privacy Attacks on Neural Networks for Graph Data. (67%)
2021-06-21
Policy Smoothing for Provably Robust Reinforcement Learning. (99%)
Delving into the pixels of adversarial samples. (98%)
Hardness of Samples Is All You Need: Protecting Deep Learning Models Using Hardness of Samples. (98%)
Friendly Training: Neural Networks Can Adapt Data To Make Learning Easier. (91%)
Membership Inference on Word Embedding and Beyond. (38%)
An Alternative Auxiliary Task for Enhancing Image Classification. (11%)
Zero-shot learning approach to adaptive Cybersecurity using Explainable AI. (1%)
2021-06-20
Adversarial Examples Make Strong Poisons. (98%)
Adversarial Attack on Graph Neural Networks as An Influence Maximization Problem. (95%)
Generative Model Adversarial Training for Deep Compressed Sensing. (8%)
2021-06-19
Attack to Fool and Explain Deep Networks. (99%)
A Stealthy and Robust Fingerprinting Scheme for Generative Models. (47%)
2021-06-18
Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples. (99%)
Residual Error: a New Performance Measure for Adversarial Robustness. (99%)
Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis. (99%)
The Dimpled Manifold Model of Adversarial Examples in Machine Learning. (98%)
Light Lies: Optical Adversarial Attack. (92%)
BinarizedAttack: Structural Poisoning Attacks to Graph-based Anomaly Detection. (82%)
Less is More: Feature Selection for Adversarial Robustness with Compressive Counter-Adversarial Attacks. (80%)
Group-Structured Adversarial Training. (68%)
Accumulative Poisoning Attacks on Real-time Data. (45%)
Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks. (45%)
Federated Robustness Propagation: Sharing Adversarial Robustness in Federated Learning. (5%)
2021-06-17
Analyzing Adversarial Robustness of Deep Neural Networks in Pixel Space: a Semantic Perspective. (99%)
Bad Characters: Imperceptible NLP Attacks. (99%)
DeepInsight: Interpretability Assisting Detection of Adversarial Samples on Graphs. (99%)
Adversarial Visual Robustness by Causal Intervention. (99%)
Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning. (92%)
Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks. (91%)
Modeling Realistic Adversarial Attacks against Network Intrusion Detection Systems. (82%)
Poisoning and Backdooring Contrastive Learning. (70%)
CoCoFuzzing: Testing Neural Code Models with Coverage-Guided Fuzzing. (64%)
CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing. (56%)
On Deep Neural Network Calibration by Regularization and its Impact on Refinement. (3%)
2021-06-16
Real-time Attacks Against Deep Reinforcement Learning Policies. (99%)
Localized Uncertainty Attacks. (99%)
Evaluating the Robustness of Bayesian Neural Networks Against Different Types of Attacks. (67%)
Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch. (38%)
Explainable AI for Natural Adversarial Images. (13%)
A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustness. (2%)
Scaling-up Diverse Orthogonal Convolutional Networks with a Paraunitary Framework. (1%)
Loki: Hardening Code Obfuscation Against Automated Attacks. (1%)
2021-06-15
Adversarial Attacks on Deep Models for Financial Transaction Records. (99%)
Model Extraction and Adversarial Attacks on Neural Networks using Switching Power Information. (99%)
Towards Adversarial Robustness via Transductive Learning. (80%)
Voting for the right answer: Adversarial defense for speaker verification. (78%)
Detect and remove watermark in deep neural networks via generative adversarial networks. (68%)
CRFL: Certifiably Robust Federated Learning against Backdoor Attacks. (13%)
Securing Face Liveness Detection Using Unforgeable Lip Motion Patterns. (12%)
Probabilistic Margins for Instance Reweighting in Adversarial Training. (8%)
CAN-LOC: Spoofing Detection and Physical Intrusion Localization on an In-Vehicle CAN Bus Based on Deep Features of Voltage Signals. (1%)
2021-06-14
PopSkipJump: Decision-Based Attack for Probabilistic Classifiers. (99%)
Now You See It, Now You Dont: Adversarial Vulnerabilities in Computational Pathology. (99%)
Audio Attacks and Defenses against AED Systems -- A Practical Study. (99%)
Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions. (92%)
Evading Malware Classifiers via Monte Carlo Mutant Feature Discovery. (81%)
On the Relationship between Heterophily and Robustness of Graph Neural Networks. (81%)
Partial success in closing the gap between human and machine vision. (15%)
Text Generation with Efficient (Soft) Q-Learning. (2%)
Resilient Control of Platooning Networked Robitic Systems via Dynamic Watermarking. (1%)
Self-training Guided Adversarial Domain Adaptation For Thermal Imagery. (1%)
Code Integrity Attestation for PLCs using Black Box Neural Network Predictions. (1%)
2021-06-13
Target Model Agnostic Adversarial Attacks with Query Budgets on Language Understanding Models. (99%)
Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks. (99%)
ATRAS: Adversarially Trained Robust Architecture Search. (96%)
Security Analysis of Camera-LiDAR Semantic-Level Fusion Against Black-Box Attacks on Autonomous Vehicles. (64%)
Weakly-supervised High-resolution Segmentation of Mammography Images for Breast Cancer Diagnosis. (1%)
HistoTransfer: Understanding Transfer Learning for Histopathology. (1%)
2021-06-12
Adversarial Robustness via Fisher-Rao Regularization. (54%)
What can linearized neural networks actually say about generalization? (31%)
FeSHI: Feature Map Based Stealthy Hardware Intrinsic Attack. (2%)
2021-06-11
Adversarial Robustness through the Lens of Causality. (99%)
Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks. (99%)
Adversarial purification with Score-based generative models. (89%)
Relaxing Local Robustness. (80%)
TDGIA:Effective Injection Attacks on Graph Neural Networks. (76%)
Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution. (56%)
CARTL: Cooperative Adversarially-Robust Transfer Learning. (8%)
A Shuffling Framework for Local Differential Privacy. (1%)
2021-06-10
Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm. (99%)
Deep neural network loses attention to adversarial images. (99%)
Verifying Quantized Neural Networks using SMT-Based Model Checking. (92%)
Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation. (80%)
An Ensemble Approach Towards Adversarial Robustness. (41%)
Towards an Automated Pipeline for Detecting and Classifying Malware through Machine Learning. (1%)
Fair Classification with Adversarial Perturbations. (1%)
2021-06-09
HASI: Hardware-Accelerated Stochastic Inference, A Defense Against Adversarial Machine Learning Attacks. (99%)
Towards Defending against Adversarial Examples via Attack-Invariant Features. (99%)
Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training. (99%)
Attacking Adversarial Attacks as A Defense. (99%)
We Can Always Catch You: Detecting Adversarial Patched Objects WITH or WITHOUT Signature. (98%)
Who Is the Strongest Enemy? Towards Optimal and Efficient Evasion Attacks in Deep RL. (88%)
URLTran: Improving Phishing URL Detection Using Transformers. (10%)
ZoPE: A Fast Optimizer for ReLU Networks with Low-Dimensional Inputs. (3%)
Practical Machine Learning Safety: A Survey and Primer. (2%)
Network insensitivity to parameter noise via adversarial regularization. (2%)
2021-06-08
On Improving Adversarial Transferability of Vision Transformers. (99%)
Simulated Adversarial Testing of Face Recognition Models. (99%)
Towards the Memorization Effect of Neural Networks in Adversarial Training. (93%)
Handcrafted Backdoors in Deep Neural Networks. (92%)
Enhancing Robustness of Neural Networks through Fourier Stabilization. (73%)
Provably Robust Detection of Out-of-distribution Data (almost) for free. (1%)
2021-06-07
Adversarial Attack and Defense in Deep Ranking. (99%)
Reveal of Vision Transformers Robustness against Adversarial Attacks. (99%)
Position Bias Mitigation: A Knowledge-Aware Graph Model for EmotionCause Extraction. (89%)
3DB: A Framework for Debugging Computer Vision Models. (45%)
RoSearch: Search for Robust Student Architectures When Distilling Pre-trained Language Models. (11%)
2021-06-06
A Primer on Multi-Neuron Relaxation-based Adversarial Robustness Certification. (98%)
Zero-Shot Knowledge Distillation from a Decision-Based Black-Box Model. (4%)
2021-06-05
Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness. (92%)
Robust Stochastic Linear Contextual Bandits Under Adversarial Attacks. (69%)
RDA: Robust Domain Adaptation via Fourier Adversarial Attacking. (2%)
2021-06-04
Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness. (99%)
BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization. (99%)
Human-Adversarial Visual Question Answering. (31%)
Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics. (15%)
DOCTOR: A Simple Method for Detecting Misclassification Errors. (1%)
Teaching keyword spotters to spot new keywords with limited examples. (1%)
2021-06-03
Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout. (99%)
Imperceptible Adversarial Examples for Fake Image Detection. (99%)
A Little Robustness Goes a Long Way: Leveraging Universal Features for Targeted Transfer Attacks. (99%)
Transferable Adversarial Examples for Anchor Free Object Detection. (99%)
Exploring Memorization in Adversarial Training. (98%)
Improving Neural Network Robustness via Persistency of Excitation. (68%)
Defending against Backdoor Attacks in Natural Language Generation. (38%)
Sneak Attack against Mobile Robotic Networks under Formation Control. (1%)
2021-06-02
PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack. (99%)
Towards Robustness of Text-to-SQL Models against Synonym Substitution. (75%)
BERT-Defense: A Probabilistic Model Based on BERT to Combat Cognitively Inspired Orthographic Adversarial Attacks. (62%)
2021-06-01
Adversarial Defense for Automatic Speaker Verification by Self-Supervised Learning. (99%)
Improving Compositionality of Neural Networks by Decoding Representations to Inputs. (68%)
Markpainting: Adversarial Machine Learning meets Inpainting. (12%)
On the Efficacy of Adversarial Data Collection for Question Answering: Results from a Large-Scale Randomized Study. (9%)
Adversarial VQA: A New Benchmark for Evaluating the Robustness of VQA Models. (5%)
Memory Wrap: a Data-Efficient and Interpretable Extension to Image Classification Models. (1%)
Concurrent Adversarial Learning for Large-Batch Training. (1%)
2021-05-31
Adaptive Feature Alignment for Adversarial Training. (99%)
QueryNet: An Efficient Attack Framework with Surrogates Carrying Multiple Identities. (99%)
Transferable Sparse Adversarial Attack. (99%)
Adversarial Training with Rectified Rejection. (87%)
Robustifying $\ell_\infty$ Adversarial Training to the Union of Perturbation Models. (82%)
Dominant Patterns: Critical Features Hidden in Deep Neural Networks. (80%)
Exploration and Exploitation: Two Ways to Improve Chinese Spelling Correction Models. (75%)
Gradient-based Data Subversion Attack Against Binary Classifiers. (73%)
DISSECT: Disentangled Simultaneous Explanations via Concept Traversals. (1%)
The effectiveness of feature attribution methods and its correlation with automatic evaluation scores. (1%)
2021-05-30
Generating Adversarial Examples with Graph Neural Networks. (99%)
Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice. (98%)
Evaluating Resilience of Encrypted Traffic Classification Against Adversarial Evasion Attacks. (62%)
NoiLIn: Do Noisy Labels Always Hurt Adversarial Training? (26%)
DAAIN: Detection of Anomalous and Adversarial Input using Normalizing Flows. (12%)
EEG-based Cross-Subject Driver Drowsiness Recognition with an Interpretable Convolutional Neural Network. (1%)
2021-05-29
Detecting Backdoor in Deep Neural Networks via Intentional Adversarial Perturbations. (99%)
Analysis and Applications of Class-wise Robustness in Adversarial Training. (99%)
A Measurement Study on the (In)security of End-of-Life (EoL) Embedded Devices. (2%)
2021-05-28
Demotivate adversarial defense in remote sensing. (99%)
AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption. (92%)
Robust Regularization with Adversarial Labelling of Perturbed Samples. (83%)
SafeAMC: Adversarial training for robust modulation recognition models. (83%)
Towards optimally abstaining from prediction. (81%)
Rethinking Noisy Label Models: Labeler-Dependent Noise with Adversarial Awareness. (76%)
Visualizing Representations of Adversarially Perturbed Inputs. (68%)
Chromatic and spatial analysis of one-pixel attacks against an image classifier. (15%)
DeepMoM: Robust Deep Learning With Median-of-Means. (1%)
2021-05-27
A BIC based Mixture Model Defense against Data Poisoning Attacks on Classifiers. (84%)
2021-05-26
Deep Repulsive Prototypes for Adversarial Robustness. (99%)
Adversarial Attack Framework on Graph Embedding Models with Limited Knowledge. (98%)
Adversarial robustness against multiple $l_p$-threat models at the price of one and how to quickly fine-tune robust models to another threat model. (76%)
Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger. (61%)
Fooling Partial Dependence via Data Poisoning. (13%)
2021-05-25
Practical Convex Formulation of Robust One-hidden-layer Neural Network Training. (98%)
Adversarial Attack Driven Data Augmentation for Accurate And Robust Medical Image Segmentation. (98%)
Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs. (67%)
Robust Value Iteration for Continuous Control Tasks. (9%)
2021-05-24
OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS. (99%)
Learning Security Classifiers with Verified Global Robustness Properties. (92%)
Feature Space Targeted Attacks by Statistic Alignment. (82%)
Improved OOD Generalization via Adversarial Training and Pre-training. (12%)
Out-of-Distribution Detection in Dermatology using Input Perturbation and Subset Scanning. (5%)
Every Byte Matters: Traffic Analysis of Bluetooth Wearable Devices. (1%)
Using Adversarial Attacks to Reveal the Statistical Bias in Machine Reading Comprehension Models. (1%)
Dissecting Click Fraud Autonomy in the Wild. (1%)
2021-05-23
Killing Two Birds with One Stone: Stealing Model and Inferring Attribute from BERT-based APIs. (92%)
CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes. (92%)
Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters. (12%)
2021-05-22
Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems. (99%)
Exploring Robustness of Unsupervised Domain Adaptation in Semantic Segmentation. (98%)
Securing Optical Networks using Quantum-secured Blockchain: An Overview. (1%)
2021-05-21
ReLUSyn: Synthesizing Stealthy Attacks for Deep Neural Network Based Cyber-Physical Systems. (81%)
Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks. (76%)
Backdoor Attacks on Self-Supervised Learning. (47%)
Intriguing Properties of Vision Transformers. (8%)
Explainable Enterprise Credit Rating via Deep Feature Crossing Network. (1%)
2021-05-20
Simple Transparent Adversarial Examples. (99%)
Anomaly Detection of Test-Time Evasion Attacks using Class-conditional Generative Adversarial Networks. (86%)
Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance. (11%)
TestRank: Bringing Order into Unlabeled Test Instances for Deep Learning Tasks. (1%)
2021-05-19
Attack on practical speaker verification system using universal adversarial perturbations. (99%)
Local Aggressive Adversarial Attacks on 3D Point Cloud. (99%)
An Orthogonal Classifier for Improving the Adversarial Robustness of Neural Networks. (76%)
Balancing Robustness and Sensitivity using Feature Contrastive Learning. (15%)
DeepStrike: Remotely-Guided Fault Injection Attacks on DNN Accelerator in Cloud-FPGA. (1%)
User Label Leakage from Gradients in Federated Learning. (1%)
Hunter in the Dark: Deep Ensemble Networks for Discovering Anomalous Activity from Smart Networks. (1%)
2021-05-18
Sparta: Spatially Attentive and Adversarially Robust Activation. (99%)
Detecting Adversarial Examples with Bayesian Neural Network. (99%)
Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks. (98%)
On the Robustness of Domain Constraints. (98%)
Learning and Certification under Instance-targeted Poisoning. (82%)
2021-05-17
Towards Robust Vision Transformer. (95%)
Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning. (93%)
An SDE Framework for Adversarial Training, with Convergence and Robustness Analysis. (69%)
2021-05-16
Vision Transformers are Robust Learners. (99%)
Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing. (99%)
SoundFence: Securing Ultrasonic Sensors in Vehicles Using Physical-Layer Defense. (2%)
2021-05-15
Real-time Detection of Practical Universal Adversarial Perturbations. (99%)
2021-05-14
Salient Feature Extractor for Adversarial Defense on Deep Neural Networks. (99%)
High-Robustness, Low-Transferability Fingerprinting of Neural Networks. (9%)
Information-theoretic Evolution of Model Agnostic Global Explanations. (1%)
Iterative Algorithms for Assessing Network Resilience Against Structured Perturbations. (1%)
2021-05-13
Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs. (98%)
When Human Pose Estimation Meets Robustness: Adversarial Algorithms and Benchmarks. (5%)
DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks. (1%)
Biometrics: Trust, but Verify. (1%)
2021-05-12
AVA: Adversarial Vignetting Attack against Visual Recognition. (99%)
OutFlip: Generating Out-of-Domain Samples for Unknown Intent Detection with Natural Language Attack. (70%)
Adversarial Reinforcement Learning in Dynamic Channel Access and Power Control. (2%)
A Statistical Threshold for Adversarial Classification in Laplace Mechanisms. (1%)
2021-05-11
Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds. (99%)
Improving Adversarial Transferability with Gradient Refining. (99%)
Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective. (5%)
2021-05-10
Adversarial examples attack based on random warm restart mechanism and improved Nesterov momentum. (99%)
Examining and Mitigating Kernel Saturation in Convolutional Neural Networks using Negative Images. (1%)
2021-05-09
Automated Decision-based Adversarial Attacks. (99%)
Efficiency-driven Hardware Optimization for Adversarially Robust Neural Networks. (88%)
Security Concerns on Machine Learning Solutions for 6G Networks in mmWave Beam Prediction. (81%)
Robust Training Using Natural Transformation. (13%)
Learning Image Attacks toward Vision Guided Autonomous Vehicles. (4%)
Combining Time-Dependent Force Perturbations in Robot-Assisted Surgery Training. (1%)
2021-05-08
Self-Supervised Adversarial Example Detection by Disentangled Representation. (99%)
De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks. (96%)
Certified Robustness to Text Adversarial Attacks by Randomized [MASK]. (93%)
Provable Guarantees against Data Poisoning Using Self-Expansion and Compatibility. (16%)
2021-05-07
Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition. (99%)
Uniform Convergence, Adversarial Spheres and a Simple Remedy. (15%)
2021-05-06
Dynamic Defense Approach for Adversarial Robustness in Deep Neural Networks via Stochastic Ensemble Smoothed Model. (99%)
A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking. (99%)
Understanding Catastrophic Overfitting in Adversarial Training. (92%)
Attestation Waves: Platform Trust via Remote Power Analysis. (1%)
2021-05-05
Attack-agnostic Adversarial Detection on Medical Data Using Explainable Machine Learning. (99%)
Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks. (97%)
Contrastive Learning and Self-Training for Unsupervised Domain Adaptation in Semantic Segmentation. (1%)
A Theoretical-Empirical Approach to Estimating Sample Complexity of DNNs. (1%)
2021-05-04
Poisoning the Unlabeled Dataset of Semi-Supervised Learning. (92%)
Broadly Applicable Targeted Data Sample Omission Attacks. (68%)
An Overview of Laser Injection against Embedded Neural Network Models. (2%)
2021-05-03
Physical world assistive signals for deep neural network classifiers -- neither defense nor attack. (83%)
Black-Box Dissector: Towards Erasing-based Hard-Label Model Stealing Attack. (73%)
2021-05-02
Intriguing Usage of Applicability Domain: Lessons from Cheminformatics Applied to Adversarial Learning. (99%)
Who's Afraid of Adversarial Transferability? (99%)
Multi-Robot Coordination and Planning in Uncertain and Adversarial Environments. (10%)
GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning. (1%)
Spinner: Automated Dynamic Command Subsystem Perturbation. (1%)
2021-05-01
Adversarial Example Detection for DNN Models: A Review and Experimental Comparison. (99%)
A Perceptual Distortion Reduction Framework: Towards Generating Adversarial Examples with High Perceptual Quality and Attack Success Rate. (98%)
On the Adversarial Robustness of Quantized Neural Networks. (75%)
Hidden Backdoors in Human-Centric Language Models. (73%)
One Detector to Rule Them All: Towards a General Deepfake Attack Detection Framework. (62%)
A Master Key Backdoor for Universal Impersonation Attack against DNN-based Face Verification. (62%)
Load Oscillating Attacks of Smart Grids: Demand Strategies and Vulnerability Analysis. (2%)
RATT: Leveraging Unlabeled Data to Guarantee Generalization. (1%)
2021-04-30
Deep Image Destruction: A Comprehensive Study on Vulnerability of Deep Image-to-Image Models against Adversarial Attacks. (99%)
Black-box Gradient Attack on Graph Neural Networks: Deeper Insights in Graph-based Attack and Defense. (99%)
Black-box adversarial attacks using Evolution Strategies. (98%)
IPatch: A Remote Adversarial Patch. (97%)
DeFiRanger: Detecting Price Manipulation Attacks on DeFi Applications. (10%)
FIPAC: Thwarting Fault- and Software-Induced Control-Flow Attacks with ARM Pointer Authentication. (2%)
2021-04-29
GasHis-Transformer: A Multi-scale Visual Transformer Approach for Gastric Histopathology Image Classification. (67%)
A neural anisotropic view of underspecification in deep learning. (26%)
Analytical bounds on the local Lipschitz constants of ReLU networks. (12%)
Learning Robust Variational Information Bottleneck with Reference. (5%)
2021-04-28
AdvHaze: Adversarial Haze Attack. (99%)
2021-04-27
Improved and Efficient Text Adversarial Attacks using Target Information. (97%)
Metamorphic Detection of Repackaged Malware. (91%)
Structure-Aware Hierarchical Graph Pooling using Information Bottleneck. (2%)
Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity. (1%)
2021-04-26
Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT. (99%)
Delving into Data: Effectively Substitute Training for Black-box Attack. (99%)
secml-malware: Pentesting Windows Malware Classifiers with Adversarial EXEmples in Python. (99%)
Impact of Spatial Frequency Based Constraints on Adversarial Robustness. (98%)
PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches. (87%)
Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Generative Adversarial Networks. (22%)
2021-04-25
3D Adversarial Attacks Beyond Point Cloud. (99%)
Making GAN-Generated Images Difficult To Spot: A New Attack Against Synthetic Image Detectors. (80%)
2021-04-24
Influence Based Defense Against Data Poisoning Attacks in Online Learning. (99%)
2021-04-23
Theoretical Study of Random Noise Defense against Query-Based Black-Box Attacks. (98%)
Evaluating Deception Detection Model Robustness To Linguistic Variation. (82%)
Lightweight Detection of Out-of-Distribution and Adversarial Samples via Channel Mean Discrepancy. (3%)
Improving Neural Silent Speech Interface Models by Adversarial Training. (1%)
2021-04-22
Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting. (99%)
Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors. (98%)
Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions. (86%)
SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics. (22%)
2021-04-21
Dual Head Adversarial Training. (99%)
Mixture of Robust Experts (MoRE): A Flexible Defense Against Multiple Perturbations. (99%)
Robust Certification for Laplace Learning on Geometric Graphs. (96%)
Jacobian Regularization for Mitigating Universal Adversarial Perturbations. (95%)
Dataset Inference: Ownership Resolution in Machine Learning. (83%)
2021-04-20
Adversarial Training for Deep Learning-based Intrusion Detection Systems. (99%)
MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis. (99%)
MagicPai at SemEval-2021 Task 7: Method for Detecting and Rating Humor Based on Multi-Task Adversarial Training. (64%)
Does enhanced shape bias improve neural network robustness to common corruptions? (26%)
Robust Sensor Fusion Algorithms Against Voice Command Attacks in Autonomous Vehicles. (9%)
Network Defense is Not a Game. (1%)
2021-04-19
Staircase Sign Method for Boosting Adversarial Attacks. (99%)
Improving Adversarial Robustness Using Proxy Distributions. (99%)
Adversarial Diffusion Attacks on Graph-based Traffic Prediction Models. (99%)
LAFEAT: Piercing Through Adversarial Defenses with Latent Features. (99%)
Removing Adversarial Noise in Class Activation Feature Space. (99%)
Direction-Aggregated Attack for Transferable Adversarial Examples. (99%)
Manipulating SGD with Data Ordering Attacks. (95%)
Provable Robustness of Adversarial Training for Learning Halfspaces with Noise. (22%)
Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images. (11%)
Semi-Supervised Domain Adaptation with Prototypical Alignment and Consistency Learning. (1%)
2021-04-18
Best Practices for Noise-Based Augmentation to Improve the Performance of Emotion Recognition "In the Wild". (83%)
2021-04-17
Attacking Text Classifiers via Sentence Rewriting Sampler. (99%)
Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems. (99%)
Improving Question Answering Model Robustness with Synthetic Adversarial Data Generation. (98%)
Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training. (87%)
AM2iCo: Evaluating Word Meaning in Context across Low-ResourceLanguages with Adversarial Examples. (15%)
2021-04-16
Fashion-Guided Adversarial Attack on Person Segmentation. (99%)
Towards Variable-Length Textual Adversarial Attacks. (99%)
An Adversarially-Learned Turing Test for Dialog Generation Models. (96%)
Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators. (81%)
Lower Bounds on Cross-Entropy Loss in the Presence of Test-time Adversaries. (2%)
2021-04-15
Gradient-based Adversarial Attacks against Text Transformers. (99%)
Robust Backdoor Attacks against Deep Neural Networks in Real Physical World. (86%)
Are Multilingual BERT models robust? A Case Study on Adversarial Attacks for Multilingual Question Answering. (12%)
Federated Learning for Malware Detection in IoT Devices. (10%)
2021-04-14
Meaningful Adversarial Stickers for Face Recognition in Physical World. (98%)
Orthogonalizing Convolutional Layers with the Cayley Transform. (80%)
Defending Against Adversarial Denial-of-Service Data Poisoning Attacks. (38%)
Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition. (1%)
2021-04-13
Mitigating Adversarial Attack for Compute-in-Memory Accelerator Utilizing On-chip Finetune. (99%)
Detecting Operational Adversarial Examples for Reliable Deep Learning. (82%)
Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack. (75%)
2021-04-12
Sparse Coding Frontend for Robust Neural Networks. (99%)
A Backdoor Attack against 3D Point Cloud Classifiers. (96%)
Plot-guided Adversarial Example Construction for Evaluating Open-domain Story Generation. (56%)
Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation. (50%)
Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack. (1%)
2021-04-11
Achieving Model Robustness through Discrete Adversarial Training. (99%)
2021-04-10
Fool Me Twice: Entailment from Wikipedia Gamification. (61%)
Adversarial Regularization as Stackelberg Game: An Unrolled Optimization Approach. (15%)
Disentangled Contrastive Learning for Learning Robust Textual Representations. (11%)
2021-04-09
Relating Adversarially Robust Generalization to Flat Minima. (99%)
Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication. (1%)
Learning Sampling Policy for Faster Derivative Free Optimization. (1%)
2021-04-08
FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systems. (98%)
Explainability-based Backdoor Attacks Against Graph Neural Networks. (15%)
A single gradient step finds adversarial examples on random two-layers neural networks. (10%)
Adversarial Learning Inspired Emerging Side-Channel Attacks and Defenses. (8%)
2021-04-07
Universal Adversarial Training with Class-Wise Perturbations. (99%)
Universal Spectral Adversarial Attacks for Deformable Shapes. (81%)
Adversarial Robustness Guarantees for Gaussian Processes. (68%)
The art of defense: letting networks fool the attacker. (64%)
Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective. (61%)
Improving Robustness of Deep Reinforcement Learning Agents: Environment Attacks based on Critic Networks. (8%)
Sparse Oblique Decision Trees: A Tool to Understand and Manipulate Neural Net Features. (3%)
An Object Detection based Solver for Google's Image reCAPTCHA v2. (1%)
2021-04-06
Exploring Targeted Universal Adversarial Perturbations to End-to-end ASR Models. (93%)
Adversarial Robustness under Long-Tailed Distribution. (89%)
Robust Adversarial Classification via Abstaining. (75%)
Backdoor Attack in the Physical World. (2%)
2021-04-05
Robust Classification Under $\ell_0$ Attack for the Gaussian Mixture Model. (99%)
Adaptive Clustering of Robust Semantic Representations for Adversarial Image Purification. (98%)
BBAEG: Towards BERT-based Biomedical Adversarial Example Generation for Text Classification. (96%)
Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses. (74%)
Can audio-visual integration strengthen robustness under multimodal attacks? (68%)
Jekyll: Attacking Medical Image Diagnostics using Deep Generative Models. (33%)
Unified Detection of Digital and Physical Face Attacks. (8%)
Beyond Categorical Label Representations for Image Classification. (2%)
Rethinking Perturbations in Encoder-Decoders for Fast Training. (1%)
2021-04-04
Semantically Stealthy Adversarial Attacks against Segmentation Models. (99%)
Reliably fast adversarial training via latent adversarial perturbation. (93%)
2021-04-03
Mitigating Gradient-based Adversarial Attacks via Denoising and Compression. (99%)
Gradient-based Adversarial Deep Modulation Classification with Data-driven Subsampling. (93%)
Property-driven Training: All You (N)Ever Wanted to Know About. (26%)
2021-04-02
Defending Against Image Corruptions Through Adversarial Augmentations. (92%)
RABA: A Robust Avatar Backdoor Attack on Deep Neural Network. (83%)
Fast-adapting and Privacy-preserving Federated Recommender System. (1%)
2021-04-01
TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness. (99%)
Domain Invariant Adversarial Learning. (98%)
Normal vs. Adversarial: Salience-based Analysis of Adversarial Samples for Relation Extraction. (93%)
Towards Evaluating and Training Verifiably Robust Neural Networks. (45%)
Augmenting Zero Trust Architecture to Endpoints Using Blockchain: A Systematic Review. (3%)
Learning from Noisy Labels via Dynamic Loss Thresholding. (1%)
2021-03-31
Adversarial Heart Attack: Neural Networks Fooled to Segment Heart Symbols in Chest X-Ray Images. (99%)
Adversarial Attacks and Defenses for Speech Recognition Systems. (99%)
Fast Certified Robust Training with Short Warmup. (86%)
Fast Jacobian-Vector Product for Deep Networks. (22%)
Too Expensive to Attack: A Joint Defense Framework to Mitigate Distributed Attacks for the Internet of Things Grid. (2%)
Digital Forensics vs. Anti-Digital Forensics: Techniques, Limitations and Recommendations. (1%)
2021-03-30
On the Robustness of Vision Transformers to Adversarial Examples. (99%)
Class-Aware Robust Adversarial Training for Object Detection. (96%)
PointBA: Towards Backdoor Attacks in 3D Point Cloud. (92%)
Statistical inference for individual fairness. (67%)
Learning Robust Feedback Policies from Demonstrations. (47%)
What Causes Optical Flow Networks to be Vulnerable to Physical Adversarial Attacks. (33%)
Improving robustness against common corruptions with frequency biased models. (1%)
2021-03-29
Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training. (99%)
Enhancing the Transferability of Adversarial Attacks through Variance Tuning. (99%)
On the Adversarial Robustness of Vision Transformers. (99%)
ZeroGrad : Mitigating and Explaining Catastrophic Overfitting in FGSM Adversarial Training. (95%)
Certifiably-Robust Federated Adversarial Learning via Randomized Smoothing. (93%)
Fooling LiDAR Perception via Adversarial Trajectory Perturbation. (83%)
Robust Reinforcement Learning under model misspecification. (31%)
Automating Defense Against Adversarial Attacks: Discovery of Vulnerabilities and Application of Multi-INT Imagery to Protect Deployed Models. (16%)
MISA: Online Defense of Trojaned Models using Misattributions. (10%)
Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models. (9%)
2021-03-28
Improved Autoregressive Modeling with Distribution Smoothing. (86%)
2021-03-27
On the benefits of robust models in modulation recognition. (99%)
IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking. (99%)
LiBRe: A Practical Bayesian Approach to Adversarial Detection. (99%)
2021-03-26
Cyclic Defense GAN Against Speech Adversarial Attacks. (99%)
Combating Adversaries with Anti-Adversaries. (93%)
On Generating Transferable Targeted Perturbations. (93%)
Building Reliable Explanations of Unreliable Neural Networks: Locally Smoothing Perspective of Model Interpretation. (86%)
Ensemble-in-One: Learning Ensemble within Random Gated Networks for Enhanced Adversarial Robustness. (83%)
Visual Explanations from Spiking Neural Networks using Interspike Intervals. (62%)
Unsupervised Robust Domain Adaptation without Source Data. (13%)
2021-03-25
Adversarial Attacks are Reversible with Natural Supervision. (99%)
Adversarial Attacks on Deep Learning Based mmWave Beam Prediction in 5G and Beyond. (98%)
MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakes. (81%)
Deep-RBF Networks for Anomaly Detection in Automotive Cyber-Physical Systems. (70%)
Orthogonal Projection Loss. (45%)
THAT: Two Head Adversarial Training for Improving Robustness at Scale. (26%)
A Survey of Microarchitectural Side-channel Vulnerabilities, Attacks and Defenses in Cryptography. (11%)
HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks. (10%)
The Geometry of Over-parameterized Regression and Adversarial Perturbations. (2%)
Synthesize-It-Classifier: Learning a Generative Classifier through RecurrentSelf-analysis. (1%)
Spirit Distillation: Precise Real-time Prediction with Insufficient Data. (1%)
Recent Advances in Large Margin Learning. (1%)
2021-03-24
Adversarial Feature Stacking for Accurate and Robust Predictions. (99%)
Vulnerability of Appearance-based Gaze Estimation. (97%)
Black-box Detection of Backdoor Attacks with Limited Information and Data. (96%)
Deepfake Forensics via An Adversarial Game. (10%)
2021-03-23
Robust and Accurate Object Detection via Adversarial Learning. (98%)
CLIP: Cheap Lipschitz Training of Neural Networks. (96%)
The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers? (92%)
Characterizing and Improving the Robustness of Self-Supervised Learning through Background Augmentations. (87%)
RPATTACK: Refined Patch Attack on General Object Detectors. (76%)
NNrepair: Constraint-based Repair of Neural Network Classifiers. (50%)
Are all outliers alike? On Understanding the Diversity of Outliers for Detecting OODs. (31%)
Improved Estimation of Concentration Under $\ell_p$-Norm Distance Metrics Using Half Spaces. (22%)
ESCORT: Ethereum Smart COntRacTs Vulnerability Detection using Deep Neural Network and Transfer Learning. (1%)
2021-03-22
Grey-box Adversarial Attack And Defence For Sentiment Classification. (99%)
Fast Approximate Spectral Normalization for Robust Deep Neural Networks. (98%)
Spatio-Temporal Sparsification for General Robust Graph Convolution Networks. (87%)
RA-BNN: Constructing Robust & Accurate Binary Neural Network to Simultaneously Defend Adversarial Bit-Flip Attack and Improve Accuracy. (75%)
Adversarial Feature Augmentation and Normalization for Visual Recognition. (13%)
Adversarially Optimized Mixup for Robust Classification. (13%)
2021-03-21
ExAD: An Ensemble Approach for Explanation-based Adversarial Detection. (99%)
TextFlint: Unified Multilingual Robustness Evaluation Toolkit for Natural Language Processing. (75%)
Natural Perturbed Training for General Robustness of Neural Network Classifiers. (38%)
Self adversarial attack as an augmentation method for immunohistochemical stainings. (33%)
2021-03-20
Robust Models Are More Interpretable Because Attributions Look Normal. (15%)
2021-03-19
LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack. (99%)
SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems. (93%)
Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions. (86%)
Interpretable Deep Learning: Interpretation, Interpretability, Trustworthiness, and Beyond. (2%)
2021-03-18
Generating Adversarial Computer Programs using Optimized Obfuscations. (99%)
Boosting Adversarial Transferability through Enhanced Momentum. (99%)
Explainable Adversarial Attacks in Deep Neural Networks Using Activation Profiles. (98%)
Enhancing Transformer for Video Understanding Using Gated Multi-Level Attention and Temporal Adversarial Training. (76%)
Model Extraction and Adversarial Transferability, Your BERT is Vulnerable! (69%)
TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation. (61%)
Noise Modulation: Let Your Model Interpret Itself. (54%)
KoDF: A Large-scale Korean DeepFake Detection Dataset. (16%)
Reading Isn't Believing: Adversarial Attacks On Multi-Modal Neurons. (9%)
2021-03-17
Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap? (99%)
Adversarial Attacks on Camera-LiDAR Models for 3D Car Detection. (98%)
Improved, Deterministic Smoothing for L1 Certified Robustness. (82%)
Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition. (41%)
Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglots. (38%)
Cyber Intrusion Detection by Using Deep Neural Networks with Attack-sharing Loss. (13%)
2021-03-16
Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches. (92%)
Anti-Adversarially Manipulated Attributions for Weakly and Semi-Supervised Semantic Segmentation. (75%)
Bio-inspired Robustness: A Review. (70%)
Adversarial Driving: Attacking End-to-End Autonomous Driving Systems. (68%)
2021-03-15
Constant Random Perturbations Provide Adversarial Robustness with Minimal Effect on Accuracy. (83%)
Adversarial Training is Not Ready for Robot Learning. (67%)
HDTest: Differential Fuzz Testing of Brain-Inspired Hyperdimensional Computing. (64%)
Understanding invariance via feedforward inversion of discriminatively trained classifiers. (10%)
Meta-Solver for Neural Ordinary Differential Equations. (2%)
2021-03-14
Towards Robust Speech-to-Text Adversarial Attack. (99%)
BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attacks. (98%)
Multi-Discriminator Sobolev Defense-GAN Against Adversarial Attacks for End-to-End Speech Systems. (82%)
Membership Inference Attacks on Machine Learning: A Survey. (68%)
2021-03-13
Attack as Defense: Characterizing Adversarial Examples using Robustness. (99%)
Generating Unrestricted Adversarial Examples via Three Parameters. (99%)
Simeon -- Secure Federated Machine Learning Through Iterative Filtering. (12%)
2021-03-12
Learning Defense Transformers for Counterattacking Adversarial Examples. (99%)
Internal Wasserstein Distance for Adversarial Attack and Defense. (99%)
A Unified Game-Theoretic Interpretation of Adversarial Robustness. (98%)
Adversarial Machine Learning Security Problems for 6G: mmWave Beam Prediction Use-Case. (82%)
Network Environment Design for Autonomous Cyberdefense. (1%)
2021-03-11
Stochastic-HMDs: Adversarial Resilient Hardware Malware Detectors through Voltage Over-scaling. (99%)
Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Verification. (99%)
Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink. (99%)
DAFAR: Detecting Adversaries by Feedback-Autoencoder Reconstruction. (99%)
ReinforceBug: A Framework to Generate Adversarial Textual Examples. (97%)
Multi-Task Federated Reinforcement Learning with Adversaries. (15%)
BODAME: Bilevel Optimization for Defense Against Model Extraction. (8%)
2021-03-10
Improving Adversarial Robustness via Channel-wise Activation Suppressing. (99%)
TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attack. (92%)
VideoMoCo: Contrastive Video Representation Learning with Temporally Adversarial Examples. (67%)
Fine-tuning of Pre-trained End-to-end Speech Recognition with Generative Adversarial Networks. (1%)
2021-03-09
Stabilized Medical Image Attacks. (99%)
Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection. (99%)
Practical Relative Order Attack in Deep Ranking. (99%)
BASAR:Black-box Attack on Skeletal Action Recognition. (99%)
Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack. (98%)
Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency. (10%)
Deep Learning for Android Malware Defenses: a Systematic Literature Review. (4%)
Towards Strengthening Deep Learning-based Side Channel Attacks with Mixup. (2%)
2021-03-08
Packet-Level Adversarial Network Traffic Crafting using Sequence Generative Adversarial Networks. (99%)
Enhancing Transformation-based Defenses against Adversarial Examples with First-Order Perturbations. (99%)
Contemplating real-world object classification. (81%)
Consistency Regularization for Adversarial Robustness. (47%)
Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses. (2%)
Deep Model Intellectual Property Protection via Deep Watermarking. (1%)
2021-03-07
Universal Adversarial Perturbations and Image Spam Classifiers. (99%)
Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain. (99%)
Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN. (99%)
Insta-RS: Instance-wise Randomized Smoothing for Improved Robustness and Accuracy. (76%)
2021-03-06
T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification. (98%)
Hidden Backdoor Attack against Semantic Segmentation Models. (93%)
2021-03-05
Cyber Threat Intelligence Model: An Evaluation of Taxonomies, Sharing Standards, and Ontologies within Cyber Threat Intelligence. (13%)
Don't Forget to Sign the Gradients! (10%)
PCP: Preemptive Circuit Padding against Tor circuit fingerprinting. (1%)
2021-03-04
Hard-label Manifolds: Unexpected Advantages of Query Efficiency for Finding On-manifold Adversarial Examples. (99%)
WaveGuard: Understanding and Mitigating Audio Adversarial Examples. (99%)
Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack. (99%)
QAIR: Practical Query-efficient Black-Box Attacks for Image Retrieval. (99%)
SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain. (99%)
Gradient-Guided Dynamic Efficient Adversarial Training. (96%)
PointGuard: Provably Robust 3D Point Cloud Classification. (92%)
Defending Medical Image Diagnostics against Privacy Attacks using Generative Methods. (12%)
A Novel Framework for Threat Analysis of Machine Learning-based Smart Healthcare Systems. (1%)
2021-03-03
Structure-Preserving Progressive Low-rank Image Completion for Defending Adversarial Attacks. (99%)
A Modified Drake Equation for Assessing Adversarial Risk to Machine Learning Models. (89%)
Shift Invariance Can Reduce Adversarial Robustness. (87%)
A Robust Adversarial Network-Based End-to-End Communications System With Strong Generalization Ability Against Adversarial Attacks. (81%)
On the effectiveness of adversarial training against common corruptions. (67%)
Formalizing Generalization and Robustness of Neural Networks to Weight Perturbations. (64%)
2021-03-02
A Survey On Universal Adversarial Attack. (99%)
Evaluating the Robustness of Geometry-Aware Instance-Reweighted Adversarial Training. (99%)
Online Adversarial Attacks. (99%)
Adversarial Examples for Unsupervised Machine Learning Models. (98%)
ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples. (97%)
DeepCert: Verification of Contextually Relevant Robustness for Neural Network Image Classifiers. (97%)
Fixing Data Augmentation to Improve Adversarial Robustness. (69%)
A Brief Survey on Deep Learning Based Data Hiding, Steganography and Watermarking. (26%)
Group-wise Inhibition based Feature Regularization for Robust Classification. (16%)
DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations. (1%)
2021-03-01
Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World. (99%)
Brain Programming is Immune to Adversarial Attacks: Towards Accurate and Robust Image Classification using Symbolic Learning. (99%)
Smoothness Analysis of Adversarial Training. (98%)
Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis. (96%)
Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers. (93%)
Adversarial training in communication constrained federated learning. (87%)
Counterfactual Explanations for Oblique Decision Trees: Exact, Efficient Algorithms. (82%)
Am I a Real or Fake Celebrity? Measuring Commercial Face Recognition Web APIs under Deepfake Impersonation Attack. (70%)
A Multiclass Boosting Framework for Achieving Fast and Provable Adversarial Robustness. (64%)
Benchmarking Robustness of Deep Learning Classifiers Using Two-Factor Perturbation. (62%)
2021-02-28
Model-Agnostic Defense for Lane Detection against Adversarial Attack. (98%)
Robust learning under clean-label attack. (22%)
2021-02-27
Effective Universal Unrestricted Adversarial Attacks using a MOE Approach. (98%)
Tiny Adversarial Mulit-Objective Oneshot Neural Architecture Search. (93%)
End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering. (73%)
Adversarial Information Bottleneck. (33%)
Neuron Coverage-Guided Domain Generalization. (2%)
2021-02-26
What Doesn't Kill You Makes You Robust(er): Adversarial Training against Poisons and Backdoors.
NEUROSPF: A tool for the Symbolic Analysis of Neural Networks. (68%)
2021-02-25
On Instabilities of Conventional Multi-Coil MRI Reconstruction to Small Adverserial Perturbations.
Do Input Gradients Highlight Discriminative Features?
Nonlinear Projection Based Gradient Estimation for Query Efficient Blackbox Attacks.
Understanding Robustness in Teacher-Student Setting: A New Perspective.
Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints.
Cybersecurity Threats in Connected and Automated Vehicles based Federated Learning Systems.
2021-02-24
Confidence Calibration with Bounded Error Using Transformations.
Sketching Curvature for Efficient Out-of-Distribution Detection for Deep Neural Networks.
Robust SleepNets.
Multiplicative Reweighting for Robust Neural Network Optimization.
Identifying Untrustworthy Predictions in Neural Networks by Geometric Gradient Analysis.
Graphfool: Targeted Label Adversarial Attack on Graph Embedding.
2021-02-23
The Sensitivity of Word Embeddings-based Author Detection Models to Semantic-preserving Adversarial Perturbations.
Rethinking Natural Adversarial Examples for Classification Models.
Automated Discovery of Adaptive Attacks on Adversarial Defenses.
Adversarial Robustness with Non-uniform Perturbations.
Non-Singular Adversarial Robustness of Neural Networks.
Enhancing Model Robustness By Incorporating Adversarial Knowledge Into Semantic Representation.
Adversarial Examples Detection beyond Image Space.
Oriole: Thwarting Privacy against Trustworthy Deep Learning Models.
2021-02-22
On the robustness of randomized classifiers to adversarial examples.
Resilience of Bayesian Layer-Wise Explanations under Adversarial Attacks.
Man-in-The-Middle Attacks and Defense in a Power System Cyber-Physical Testbed.
Sandwich Batch Normalization: A Drop-In Replacement for Feature Distribution Heterogeneity.
2021-02-21
The Effects of Image Distribution and Task on Adversarial Robustness.
A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization.
Constrained Optimization to Train Neural Networks on Critical and Under-Represented Classes. (1%)
2021-02-20
On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning.
Measuring $\ell_\infty$ Attacks by the $\ell_2$ Norm.
2021-02-19
A PAC-Bayes Analysis of Adversarial Robustness.
Effective and Efficient Vote Attack on Capsule Networks.
2021-02-18
Random Projections for Improved Adversarial Robustness.
Fortify Machine Learning Production Systems: Detect and Classify Adversarial Attacks.
Make Sure You're Unsure: A Framework for Verifying Probabilistic Specifications.
Center Smoothing: Provable Robustness for Functions with Metric-Space Outputs.
2021-02-17
Towards Adversarial-Resilient Deep Neural Networks for False Data Injection Attack Detection in Power Grids.
Improving Hierarchical Adversarial Robustness of Deep Neural Networks.
Consistent Non-Parametric Methods for Maximizing Robustness.
Bridging the Gap Between Adversarial Robustness and Optimization Bias.
2021-02-16
Globally-Robust Neural Networks.
A Law of Robustness for Weight-bounded Neural Networks.
Just Noticeable Difference for Machine Perception and Generation of Regularized Adversarial Images with Minimal Perturbation.
2021-02-15
Data Profiling for Adversarial Training: On the Ruin of Problematic Data.
Certified Robustness to Programmable Transformations in LSTMs.
And/or trade-off in artificial neurons: impact on adversarial robustness.
Generating Structured Adversarial Attacks Using Frank-Wolfe Method.
Universal Adversarial Examples and Perturbations for Quantum Classifiers.
Low Curvature Activations Reduce Overfitting in Adversarial Training.
Certifiably Robust Variational Autoencoders.
2021-02-14
Guided Interpolation for Adversarial Training.
Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS.
Exploring Adversarial Robustness of Deep Metric Learning.
Adversarial Attack on Network Embeddings via Supervised Network Poisoning.
Perceptually Constrained Adversarial Attacks.
CAP-GAN: Towards Adversarial Robustness with Cycle-consistent Attentional Purification.
Cross-modal Adversarial Reprogramming.
2021-02-13
Mixed Nash Equilibria in the Adversarial Examples Game.
Adversarial defense for automatic speaker verification by cascaded self-supervised learning models.
2021-02-12
UAVs Path Deviation Attacks: Survey and Research Challenges.
Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective.
Universal Adversarial Perturbations for Malware.
Certified Defenses: Why Tighter Relaxations May Hurt Training. (13%)
2021-02-11
Adversarially robust deepfake media detection using fused convolutional neural network predictions.
Defuse: Harnessing Unrestricted Adversarial Examples for Debugging Models Beyond Test Accuracy.
RobOT: Robustness-Oriented Testing for Deep Learning Systems.
2021-02-10
RoBIC: A benchmark suite for assessing classifiers robustness.
Meta Federated Learning.
Adversarial Robustness: What fools you makes you stronger.
CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection.
Dompteur: Taming Audio Adversarial Examples.
Enhancing Real-World Adversarial Patches through 3D Modeling of Complex Target Scenes.
Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons.
Bayesian Inference with Certifiable Adversarial Robustness.
2021-02-09
Target Training Does Adversarial Training Without Adversarial Samples.
Security and Privacy for Artificial Intelligence: Opportunities and Challenges.
"What's in the box?!": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models.
Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers.
Detecting Localized Adversarial Examples: A Generic Approach using Critical Region Analysis.
Making Paper Reviewing Robust to Bid Manipulation Attacks.
Adversarially Trained Models with Test-Time Covariate Shift Adaptation.
2021-02-08
Efficient Certified Defenses Against Patch Attacks on Image Classifiers.
A Real-time Defense against Website Fingerprinting Attacks.
Benford's law: what does it say on adversarial images?
Exploiting epistemic uncertainty of the deep learning models to generate adversarial samples.
2021-02-07
Adversarial example generation with AdaBelief Optimizer and Crop Invariance.
Adversarial Imaging Pipelines.
2021-02-06
SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation.
2021-02-05
Corner Case Generation and Analysis for Safety Assessment of Autonomous Vehicles.
Model Agnostic Answer Reranking System for Adversarial Question Answering.
Robust Single-step Adversarial Training with Regularizer.
Understanding the Interaction of Adversarial Training with Noisy Labels.
Optimal Transport as a Defense Against Adversarial Attacks.
2021-02-04
DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks.
Adversarial Training Makes Weight Loss Landscape Sharper in Logistic Regression.
Adversarial Robustness Study of Convolutional Neural Network for Lumbar Disk Shape Reconstruction from MR images.
PredCoin: Defense against Query-based Hard-label Attack.
Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review.
Audio Adversarial Examples: Attacks Using Vocal Masks.
ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models.
2021-02-03
Adversarially Robust Learning with Unknown Perturbation Sets.
IWA: Integrated Gradient based White-box Attacks for Fooling Deep Neural Networks.
2021-02-02
On Robustness of Neural Semantic Parsers.
Towards Robust Neural Networks via Close-loop Control.
Recent Advances in Adversarial Training for Adversarial Robustness.
Probabilistic Trust Intervals for Out of Distribution Detection. (2%)
2021-02-01
Fast Training of Provably Robust Neural Networks by SingleProp.
Towards Speeding up Adversarial Training in Latent Spaces.
Robust Adversarial Attacks Against DNN-Based Wireless Communication Systems.
2021-01-31
Deep Deterministic Information Bottleneck with Matrix-based Entropy Functional.
Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss.
Admix: Enhancing the Transferability of Adversarial Attacks.
2021-01-30
Cortical Features for Defense Against Adversarial Audio Attacks.
2021-01-29
You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries.
2021-01-28
Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities.
Adversarial Attacks on Deep Learning Based Power Allocation in a Massive MIMO Network.
Increasing the Confidence of Deep Neural Networks by Coverage Analysis.
Adversarial Learning with Cost-Sensitive Classes.
2021-01-27
Robust Android Malware Detection System against Adversarial Attacks using Q-Learning.
Adversaries in Online Learning Revisited: with applications in Robust Optimization and Adversarial training.
Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling.
Meta Adversarial Training against Universal Patches.
Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting.
Improving Neural Network Robustness through Neighborhood Preserving Layers.
2021-01-26
Blind Image Denoising and Inpainting Using Robust Hadamard Autoencoders.
Property Inference From Poisoning.
Adversarial Vulnerability of Active Transfer Learning.
Introducing and assessing the explainable AI (XAI)method: SIDU.
SkeletonVis: Interactive Visualization for Understanding Adversarial Attacks on Human Action Recognition Models.
The Effect of Class Definitions on the Transferability of Adversarial Attacks Against Forensic CNNs.
Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers.
Investigating the significance of adversarial attacks and their relation to interpretability for radar-based human activity recognition systems.
Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models.
2021-01-25
Diverse Adversaries for Mitigating Bias in Training.
They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors.
Probabilistic Robustness Analysis for DNNs based on PAC Learning.
Generalizing Adversarial Examples by AdaBelief Optimizer.
Few-Shot Website Fingerprinting Attack.
Understanding and Achieving Efficient Robustness with Adversarial Supervised Contrastive Learning.
2021-01-23
A Transferable Anti-Forensic Attack on Forensic CNNs Using A Generative Adversarial Network.
A Comprehensive Evaluation Framework for Deep Model Robustness.
Error Diffusion Halftoning Against Adversarial Examples.
2021-01-22
Partition-Based Convex Relaxations for Certifying the Robustness of ReLU Neural Networks.
Online Adversarial Purification based on Self-Supervision.
Generating Black-Box Adversarial Examples in Sparse Domain.
Adaptive Neighbourhoods for the Discovery of Adversarial Examples.
2021-01-21
Self-Adaptive Training: Bridging the Supervised and Self-Supervised Learning.
Robust Reinforcement Learning on State Observations with Learned Optimal Adversary.
Adv-OLM: Generating Textual Adversaries via OLM.
A Person Re-identification Data Augmentation Method with Adversarial Defense Effect.
Adversarial Attacks and Defenses for Speaker Identification Systems.
A general multi-modal data learning method for Person Re-identification. (78%)
2021-01-20
Fooling thermal infrared pedestrian detectors in real world using small bulbs.
Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data.
Invariance, encodings, and generalization: learning identity effects with neural networks.
2021-01-19
LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition.
A Search-Based Testing Framework for Deep Neural Networks of Source Code Embedding.
PICA: A Pixel Correlation-based Attentional Black-box Adversarial Attack.
Attention-Guided Black-box Adversarial Attacks with Large-Scale Multiobjective Evolutionary Optimization.
2021-01-18
What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space.
Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks. (1%)
2021-01-17
Adversarial Interaction Attack: Fooling AI to Misinterpret Human Intentions.
Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving.
GraphAttacker: A General Multi-Task GraphAttack Framework.
2021-01-16
Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks.
Adversarial Attacks On Multi-Agent Communication.
2021-01-15
Fundamental Tradeoffs in Distributionally Adversarial Training.
Black-box Adversarial Attacks in Autonomous Vehicle Technology.
Heating up decision boundaries: isocapacitory saturation, adversarial scenarios and generalization bounds.
Mining Data Impressions from Deep Models as Substitute for the Unavailable Training Data.
2021-01-14
Context-Aware Image Denoising with Auto-Threshold Canny Edge Detection to Suppress Adversarial Perturbation.
Robusta: Robust AutoML for Feature Selection via Reinforcement Learning.
Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks.
2021-01-13
Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series.
Image Steganography based on Iteratively Adversarial Samples of A Synchronized-directions Sub-image.
2021-01-12
Robustness Gym: Unifying the NLP Evaluation Landscape.
Robustness of on-device Models: Adversarial Attack to Deep Learning Models on Android Apps.
Random Transformation of Image Brightness for Adversarial Attack.
On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks.
2021-01-11
The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing.
2021-01-10
Adversarially Robust and Explainable Model Compression with On-Device Personalization for Text Classification.
2021-01-08
Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks.
DiPSeN: Differentially Private Self-normalizing Neural Networks For Adversarial Robustness in Federated Learning.
Exploring Adversarial Fake Images on Face Manifold.
2021-01-07
The Effect of Prior Lipschitz Continuity on the Adversarial Robustness of Bayesian Neural Networks.
Robust Text CAPTCHAs Using Adversarial Examples.
2021-01-06
Adversarial Robustness by Design through Analog Computing and Synthetic Gradients.
Understanding the Error in Evaluating Adversarial Robustness.
2021-01-05
Noise Sensitivity-Based Energy Efficient and Robust Adversary Detection in Neural Networks.
2021-01-04
Fooling Object Detectors: Adversarial Attacks by Half-Neighbor Masks.
Local Competition and Stochasticity for Adversarial Robustness in Deep Learning.
Local Black-box Adversarial Attacks: A Query Efficient Approach.
Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead.
2021-01-02
Improving DGA-Based Malicious Domain Classifiers for Malware Defense with Adversarial Machine Learning.
2020-12-31
Better Robustness by More Coverage: Adversarial Training with Mixup Augmentation for Robust Fine-tuning.
Patch-wise++ Perturbation for Adversarial Targeted Attacks.
2020-12-30
Temporally-Transferable Perturbations: Efficient, One-Shot Adversarial Attacks for Online Visual Object Trackers.
Beating Attackers At Their Own Games: Adversarial Example Detection Using Adversarial Gradient Directions.
2020-12-29
Black-box Adversarial Attacks on Monocular Depth Estimation Using Evolutionary Multi-objective Optimization.
Generating Adversarial Examples in Chinese Texts Using Sentence-Pieces.
Improving Adversarial Robustness in Weight-quantized Neural Networks.
With False Friends Like These, Who Can Have Self-Knowledge?
Generating Natural Language Attacks in a Hard Label Black Box Setting.
2020-12-28
Enhanced Regularizers for Attributional Robustness.
Analysis of Dominant Classes in Universal Adversarial Perturbations.
2020-12-27
Person Re-identification with Adversarial Triplet Embedding.
My Teacher Thinks The World Is Flat! Interpreting Automatic Essay Scoring Mechanism.
2020-12-26
Sparse Adversarial Attack to Object Detection.
Assessment of the Relative Importance of different hyper-parameters of LSTM for an IDS.
2020-12-25
Robustness, Privacy, and Generalization of Adversarial Training.
A Simple Fine-tuning Is All You Need: Towards Robust Deep Learning Via Adversarial Fine-tuning.
2020-12-24
A Context Aware Approach for Generating Natural Language Attacks.
Exploring Adversarial Examples via Invertible Neural Networks.
Improving the Certified Robustness of Neural Networks via Consistency Regularization.
Adversarial Momentum-Contrastive Pre-Training.
Learning Robust Representation for Clustering through Locality Preserving Variational Discriminative Network.
2020-12-23
The Translucent Patch: A Physical and Universal Attack on Object Detectors.
Gradient-Free Adversarial Attacks for Bayesian Neural Networks.
SCOPE CPS: Secure Compiling of PLCs in Cyber-Physical Systems.
Poisoning Attacks on Cyber Attack Detectors for Industrial Control Systems.
2020-12-22
Learning to Initialize Gradient Descent Using Gradient Descent.
Unadversarial Examples: Designing Objects for Robust Vision.
Multi-shot NAS for Discovering Adversarially Robust Convolutional Neural Architectures at Targeted Capacities.
On Frank-Wolfe Optimization for Adversarial Robustness and Interpretability.
2020-12-21
Genetic Adversarial Training of Decision Trees.
Incremental Verification of Fixed-Point Implementations of Neural Networks.
Blurring Fools the Network -- Adversarial Attacks by Feature Peak Suppression and Gaussian Blurring.
Exploiting Vulnerability of Pooling in Convolutional Neural Networks by Strict Layer-Output Manipulation for Adversarial Attacks.
Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification.
Self-Progressing Robust Training.
Adjust-free adversarial example generation in speech recognition using evolutionary multi-objective optimization under black-box condition.
Defence against adversarial attacks using classical and quantum-enhanced Boltzmann machines.
On Success and Simplicity: A Second Look at Transferable Targeted Attacks.
2020-12-20
Color Channel Perturbation Attacks for Fooling Convolutional Neural Networks and A Defense Against Such Attacks.
2020-12-19
Sample Complexity of Adversarially Robust Linear Classification on Separated Data.
2020-12-18
Semantics and explanation: why counterfactual explanations produce adversarial examples in deep neural networks.
ROBY: Evaluating the Robustness of a Deep Model by its Decision Boundaries.
AdvExpander: Generating Natural Language Adversarial Examples by Expanding Text.
Adversarially Robust Estimate and Risk Analysis in Linear Regression.
RAILS: A Robust Adversarial Immune-inspired Learning System.
Efficient Training of Robust Decision Trees Against Adversarial Examples.
On the human-recognizability phenomenon of adversarially trained deep image classifiers.
2020-12-17
Characterizing the Evasion Attackability of Multi-label Classifiers.
A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks.
2020-12-16
On the Limitations of Denoising Strategies as Adversarial Defenses.
2020-12-15
FoggySight: A Scheme for Facial Lookup Privacy.
FAWA: Fast Adversarial Watermark Attack on Optical Character Recognition (OCR) Systems.
Amata: An Annealing Mechanism for Adversarial Training Acceleration.
2020-12-14
Disentangled Information Bottleneck.
Adaptive Verifiable Training Using Pairwise Class Similarity.
Robustness Threats of Differential Privacy.
HaS-Nets: A Heal and Select Mechanism to Defend DNNs Against Backdoor Attacks for Data Collection Scenarios.
Improving Adversarial Robustness via Probabilistically Compact Loss with Logit Constraints.
Binary Black-box Evasion Attacks Against Deep Learning-based Static Malware Detectors with Adversarial Byte-Level Language Model.
Contrastive Learning with Adversarial Perturbations for Conditional Text Generation.
2020-12-13
Achieving Adversarial Robustness Requires An Active Teacher.
2020-12-12
Query-free Black-box Adversarial Attacks on Graphs.
2020-12-11
Closeness and Uncertainty Aware Adversarial Examples Detection in Adversarial Machine Learning.
Attack Agnostic Detection of Adversarial Examples via Random Subspace Analysis.
2020-12-10
GNNUnlock: Graph Neural Networks-based Oracle-less Unlocking Scheme for Provably Secure Logic Locking.
Next Wave Artificial Intelligence: Robust, Explainable, Adaptable, Ethical, and Accountable.
DSRNA: Differentiable Search of Robust Neural Architectures.
I-GCN: Robust Graph Convolutional Network via Influence Mechanism.
An Empirical Review of Adversarial Defenses.
Robustness and Transferability of Universal Attacks on Compressed Models.
Geometric Adversarial Attacks and Defenses on 3D Point Clouds.
SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers.
2020-12-09
Generating Out of Distribution Adversarial Attack using Latent Space Poisoning.
Detection of Adversarial Supports in Few-shot Classifiers Using Self-Similarity and Filtering.
Securing Deep Spiking Neural Networks against Adversarial Attacks through Inherent Structural Parameters.
Composite Adversarial Attacks.
2020-12-08
Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective.
On 1/n neural representation and robustness.
Locally optimal detection of stochastic targeted universal adversarial perturbations.
A Deep Marginal-Contrastive Defense against Adversarial Attacks on 1D Models.
Using Feature Alignment can Improve Clean Average Precision and Adversarial Robustness in Object Detection.
EvaLDA: Efficient Evasion Attacks Towards Latent Dirichlet Allocation.
Overcomplete Representations Against Adversarial Videos.
Mitigating the Impact of Adversarial Attacks in Very Deep Networks.
Reinforcement Based Learning on Classification Task Could Yield Better Generalization and Adversarial Accuracy.
Data Dependent Randomized Smoothing. (1%)
2020-12-07
A Singular Value Perspective on Model Robustness.
Sparse Fooling Images: Fooling Machine Perception through Unrecognizable Images.
Backpropagating Linearly Improves Transferability of Adversarial Examples.
Learning to Separate Clusters of Adversarial Representations for Robust Adversarial Detection.
Reprogramming Language Models for Molecular Representation Learning.
2020-12-06
Black-box Model Inversion Attribute Inference Attacks on Classification Models.
PAC-Learning for Strategic Classification.
2020-12-05
Evaluating adversarial robustness in simulated cerebellum.
2020-12-04
Advocating for Multiple Defense Strategies against Adversarial Examples.
Practical No-box Adversarial Attacks against DNNs.
Towards Natural Robustness Against Adversarial Examples.
Unsupervised Adversarially-Robust Representation Learning on Graphs.
Kernel-convoluted Deep Neural Networks with Data Augmentation.
2020-12-03
Ethical Testing in the Real World: Evaluating Physical Testing of Adversarial Machine Learning.
FAT: Federated Adversarial Training.
An Empirical Study of Derivative-Free-Optimization Algorithms for Targeted Black-Box Attacks in Deep Neural Networks.
Channel Effects on Surrogate Models of Adversarial Attacks against Wireless Signal Classifiers.
Attribute-Guided Adversarial Training for Robustness to Natural Perturbations.
2020-12-02
From a Fourier-Domain Perspective on Adversarial Examples to a Wiener Filter Defense for Semantic Segmentation.
Towards Defending Multiple Adversarial Perturbations via Gated Batch Normalization.
FenceBox: A Platform for Defeating Adversarial Examples with Data Augmentation Techniques.
Essential Features: Content-Adaptive Pixel Discretization to Improve Model Robustness to Adaptive Adversarial Attacks.
How Robust are Randomized Smoothing based Defenses to Data Poisoning?
2020-12-01
Adversarial Robustness Across Representation Spaces.
Robustness Out of the Box: Compositional Representations Naturally Defend Against Black-Box Patch Attacks.
Boosting Adversarial Attacks on Neural Networks with Better Optimizer.
One-Pixel Attack Deceives Computer-Assisted Diagnosis of Cancer.
Towards Imperceptible Adversarial Image Patches Based on Network Explanations.
2020-11-30
Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses.
Just One Moment: Structural Vulnerability of Deep Action Recognition against One Frame Attack.
2020-11-29
Architectural Adversarial Robustness: The Case for Deep Pursuit.
SwitchX- Gmin-Gmax Switching for Energy-Efficient and Robust Implementation of Binary Neural Networks on Memristive Xbars.
A Targeted Universal Attack on Graph Convolutional Network.
2020-11-28
Cyberbiosecurity: DNA Injection Attack in Synthetic Biology.
Deterministic Certification to Adversarial Attacks via Bernstein Polynomial Approximation.
FaceGuard: A Self-Supervised Defense Against Adversarial Face Images.
2020-11-27
3D Invisible Cloak.
SocialGuard: An Adversarial Example Based Privacy-Preserving Technique for Social Images.
Use the Spear as a Shield: A Novel Adversarial Example based Privacy-Preserving Technique against Membership Inference Attacks.
Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifiers.
Voting based ensemble improves robustness of defensive models.
Generalized Adversarial Examples: Attacks and Defenses.
Robust and Natural Physical Adversarial Examples for Object Detectors.
2020-11-26
Regularization with Latent Space Virtual Adversarial Training.
Rethinking Uncertainty in Deep Learning: Whether and How it Improves Robustness.
Exposing the Robustness and Vulnerability of Hybrid 8T-6T SRAM Memory Architectures to Adversarial Attacks in Deep Neural Networks.
Robust Attacks on Deep Learning Face Recognition in the Physical World.
Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect.
2020-11-25
Adversarial Attack on Facial Recognition using Visible Light.
SurFree: a fast surrogate-free black-box attack.
Adversarial Evaluation of Multimodal Models under Realistic Gray Box Assumption.
Advancing diagnostic performance and clinical usability of neural networks via adversarial training and dual batch normalization.
Probing Model Signal-Awareness via Prediction-Preserving Input Minimization. (80%)
2020-11-24
Trust but Verify: Assigning Prediction Credibility by Counterfactual Constrained Learning.
Stochastic sparse adversarial attacks.
On the Adversarial Robustness of 3D Point Cloud Classification.
Towards Imperceptible Universal Attacks on Texture Recognition.
2020-11-23
Omni: Automated Ensemble with Unexpected Models against Adversarial Evasion Attack.
Augmented Lagrangian Adversarial Attacks.
2020-11-22
Learnable Boundary Guided Adversarial Training.
Nudge Attacks on Point-Cloud DNNs.
2020-11-21
Spatially Correlated Patterns in Adversarial Images.
A Neuro-Inspired Autoencoding Defense Against Adversarial Perturbations.
Robust Data Hiding Using Inverse Gradient Attention. (2%)
2020-11-20
Are Chess Discussions Racist? An Adversarial Hate Speech Data Set.
Detecting Universal Trigger's Adversarial Attack with Honeypot.
2020-11-19
An Experimental Study of Semantic Continuity for Deep Learning Models.
Adversarial Examples for $k$-Nearest Neighbor Classifiers Based on Higher-Order Voronoi Diagrams.
Adversarial Threats to DeepFake Detection: A Practical Perspective.
Multi-Task Adversarial Attack.
Latent Adversarial Debiasing: Mitigating Collider Bias in Deep Neural Networks.
2020-11-18
Robustified Domain Adaptation.
Adversarial collision attacks on image hashing functions.
Contextual Fusion For Adversarial Robustness.
Adversarial Turing Patterns from Cellular Automata.
Self-Gradient Networks.
Adversarial Profiles: Detecting Out-Distribution & Adversarial Samples in Pre-trained CNNs.
2020-11-17
FoolHD: Fooling speaker identification by Highly imperceptible adversarial Disturbances.
SIENA: Stochastic Multi-Expert Neural Patcher.
Shaping Deep Feature Space towards Gaussian Mixture for Visual Classification.
Generating universal language adversarial examples by understanding and enhancing the transferability across neural models.
Robustness and Generalization to Nearest Categories. (54%)
2020-11-16
MAAC: Novel Alert Correlation Method To Detect Multi-step Attack.
Enforcing robust control guarantees within neural network policies.
Adversarially Robust Classification based on GLRT.
Combining GANs and AutoEncoders for Efficient Anomaly Detection.
Extreme Value Preserving Networks.
2020-11-15
Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations.
Towards Understanding the Regularization of Adversarial Robustness on Neural Networks.
Ensemble of Models Trained by Key-based Transformed Images for Adversarially Robust Defense Against Black-box Attacks.
Power Side-Channel Attacks on BNN Accelerators in Remote FPGAs. (1%)
2020-11-14
Audio-Visual Event Recognition through the lens of Adversary.
2020-11-13
Transformer-Encoder Detector Module: Using Context to Improve Robustness to Adversarial Attacks on Object Detection.
Query-based Targeted Action-Space Adversarial Policies on Deep Reinforcement Learning Agents.
2020-11-12
Adversarial Robustness Against Image Color Transformation within Parametric Filter Space.
Sparse PCA: Algorithms, Adversarial Perturbations and Certificates.
2020-11-11
Adversarial images for the primate brain.
Detecting Adversarial Patches with Class Conditional Reconstruction Networks.
2020-11-10
Efficient and Transferable Adversarial Examples from Bayesian Neural Networks.
2020-11-09
Solving Inverse Problems With Deep Neural Networks -- Robustness Included?
2020-11-07
Adversarial Black-Box Attacks On Text Classifiers Using Multi-Objective Genetic Optimization Guided By Deep Networks.
Bridging the Performance Gap between FGSM and PGD Adversarial Training.
2020-11-06
Single-Node Attack for Fooling Graph Neural Networks.
A survey on practical adversarial examples for malware classifiers.
2020-11-05
A Black-Box Attack Model for Visually-Aware Recommender Systems.
Data Augmentation via Structured Adversarial Perturbations.
Defense-friendly Images in Adversarial Attacks: Dataset and Metrics forPerturbation Difficulty.
Dynamically Sampled Nonlocal Gradients for Stronger Adversarial Attacks.
2020-11-03
You Do (Not) Belong Here: Detecting DPI Evasion Attacks with Context Learning.
Detecting Word Sense Disambiguation Biases in Machine Translation for Model-Agnostic Adversarial Attacks.
Penetrating RF Fingerprinting-based Authentication with a Generative Adversarial Attack.
Recent Advances in Understanding Adversarial Robustness of Deep Neural Networks.
MalFox: Camouflaged Adversarial Malware Example Generation Based on Conv-GANs Against Black-Box Detectors.
A Tunable Robust Pruning Framework Through Dynamic Network Rewiring of DNNs.
2020-11-02
Adversarial Examples in Constrained Domains.
Frequency-based Automated Modulation Classification in the Presence of Adversaries.
Robust Algorithms for Online Convex Problems via Primal-Dual.
Trustworthy AI.
2020-11-01
LG-GAN: Label Guided Adversarial Network for Flexible Targeted Attack of Point Cloud-based Deep Networks.
Vulnerability of the Neural Networks Against Adversarial Examples: A Survey.
2020-10-31
MAD-VAE: Manifold Awareness Defense Variational Autoencoder.
2020-10-30
Integer Programming-based Error-Correcting Output Code Design for Robust Classification.
Leveraging Extracted Model Adversaries for Improved Black Box Attacks.
EEG-Based Brain-Computer Interfaces Are Vulnerable to Backdoor Attacks.
Adversarial Attacks on Optimization based Planners.
Capture the Bot: Using Adversarial Examples to Improve CAPTCHA Robustness to Bot Attacks.
Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification.
Adversarial Robust Training of Deep Learning MRI Reconstruction Models.
2020-10-29
Volumetric Medical Image Segmentation: A 3D Deep Coarse-to-fine Framework and Its Adversarial Examples.
Perception Matters: Exploring Imperceptible and Transferable Anti-forensics for GAN-generated Fake Face Imagery Detection.
Can the state of relevant neurons in a deep neural networks serve as indicators for detecting adversarial attacks?
Reliable Graph Neural Networks via Robust Aggregation.
Passport-aware Normalization for Deep Model Protection.
Robustifying Binary Classification to Adversarial Perturbation.
Beyond cross-entropy: learning highly separable feature distributions for robust and accurate classification.
WaveTransform: Crafting Adversarial Examples via Input Decomposition.
2020-10-28
Most ReLU Networks Suffer from $\ell^2$ Adversarial Perturbations.
Object Hider: Adversarial Patch Attack Against Object Detectors.
Evaluating Robustness of Predictive Uncertainty Estimation: Are Dirichlet-based Models Reliable?
Transferable Universal Adversarial Perturbations Using Generative Models.
2020-10-27
Fast Local Attack: Generating Local Adversarial Examples for Object Detectors.
Anti-perturbation of Online Social Networks by Graph Label Transition.
2020-10-26
Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes.
GreedyFool: Distortion-Aware Sparse Adversarial Attack.
Robust Pre-Training by Adversarial Contrastive Learning.
Versatile Verification of Tree Ensembles.
Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy.
2020-10-25
Attack Agnostic Adversarial Defense via Visual Imperceptible Bound.
Dynamic Adversarial Patch for Evading Object Detection Models.
Asymptotic Behavior of Adversarial Training in Binary Classification.
2020-10-24
ATRO: Adversarial Training with a Rejection Option.
Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-uniform Attacks.
Stop Bugging Me! Evading Modern-Day Wiretapping Using Adversarial Perturbations.
2020-10-23
Improving Robustness by Augmenting Training Sentences with Predicate-Argument Structures.
Towards Robust Neural Networks via Orthogonal Diversity.
2020-10-22
Contrastive Learning with Adversarial Examples.
Adversarial Attacks on Binary Image Recognition Systems.
Rewriting Meaningful Sentences via Conditional BERT Sampling and an application on fooling text classifiers.
An Efficient Adversarial Attack for Tree Ensembles.
Adversarial Robustness of Supervised Sparse Coding.
Enabling certification of verification-agnostic networks via memory-efficient semidefinite programming.
Defense-guided Transferable Adversarial Attacks.
Once-for-All Adversarial Training: In-Situ Tradeoff between Robustness and Accuracy for Free.
2020-10-21
Adversarial Attacks on Deep Algorithmic Trading Policies.
Maximum Mean Discrepancy is Aware of Adversarial Attacks.
Precise Statistical Analysis of Classification Accuracies for Adversarial Training.
Learning Black-Box Attackers with Transferable Priors and Query Feedback.
Class-Conditional Defense GAN Against End-to-End Speech Attacks.
A Distributional Robustness Certificate by Randomized Smoothing.
2020-10-20
Preventing Personal Data Theft in Images with Adversarial ML.
Towards Understanding the Dynamics of the First-Order Adversaries.
Robust Neural Networks inspired by Strong Stability Preserving Runge-Kutta methods.
Boosting Gradient for White-Box Adversarial Attacks.
Tight Second-Order Certificates for Randomized Smoothing.
2020-10-19
A Survey of Machine Learning Techniques in Adversarial Image Forensics.
Against All Odds: Winning the Defense Challenge in an Evasion Competition with Diversification.
RobustBench: a standardized adversarial robustness benchmark.
Optimism in the Face of Adversity: Understanding and Improving Deep Learning through Adversarial Robustness.
Verifying the Causes of Adversarial Examples.
When Bots Take Over the Stock Market: Evasion Attacks Against Algorithmic Traders.
FLAG: Adversarial Data Augmentation for Graph Neural Networks.
2020-10-18
FADER: Fast Adversarial Example Rejection.
Poisoned classifiers are not only backdoored, they are fundamentally broken.
2020-10-17
A Generative Model based Adversarial Security of Deep Learning and Linear Classifier Models.
Finding Physical Adversarial Examples for Autonomous Driving with Fast and Differentiable Image Compositing.
Weight-Covariance Alignment for Adversarially Robust Neural Networks.
2020-10-16
DPAttack: Diffused Patch Attacks against Universal Object Detection.
Mischief: A Simple Black-Box Attack Against Transformer Architectures.
Learning Robust Algorithms for Online Allocation Problems Using Adversarial Training.
2020-10-15
Certifying Neural Network Robustness to Random Input Noise from Samples.
Adversarial Images through Stega Glasses.
A Hamiltonian Monte Carlo Method for Probabilistic Adversarial Attack and Learning.
Generalizing Universal Adversarial Attacks Beyond Additive Perturbations.
Overfitting or Underfitting? Understand Robustness Drop in Adversarial Training.
Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and Robustness.
Exploiting Vulnerabilities of Deep Learning-based Energy Theft Detection in AMI through Adversarial Attacks.
Progressive Defense Against Adversarial Attacks for Deep Learning as a Service in Internet of Things.
2020-10-14
Pair the Dots: Jointly Examining Training History and Test Stimuli for Model Interpretability.
Towards Resistant Audio Adversarial Examples.
An Adversarial Attack against Stacked Capsule Autoencoder.
Explain2Attack: Text Adversarial Attacks via Cross-Domain Interpretability.
GreedyFool: Multi-Factor Imperceptibility and Its Application to Designing Black-box Adversarial Example Attack.
2020-10-13
Toward Few-step Adversarial Training from a Frequency Perspective.
Higher-Order Certification for Randomized Smoothing.
Linking average- and worst-case perturbation robustness via class selectivity and dimensionality.
2020-10-12
Universal Model for 3D Medical Image Analysis.
To be Robust or to be Fair: Towards Fairness in Adversarial Training.
Towards Understanding Pixel Vulnerability under Adversarial Attacks for Images.
Shape-Texture Debiased Neural Network Training.
On the Power of Abstention and Data-Driven Decision Making for Adversarial Robustness.
From Hero to Z\'eroe: A Benchmark of Low-Level Adversarial Attacks.
EFSG: Evolutionary Fooling Sentences Generator.
Contrast and Classify: Training Robust VQA Models. (2%)
2020-10-11
Gradient-based Analysis of NLP Models is Manipulable.
IF-Defense: 3D Adversarial Point Cloud Defense via Implicit Function based Restoration.
2020-10-10
Is It Time to Redefine the Classification Task for Deep Neural Networks?
Regularizing Neural Networks via Adversarial Model Perturbation. (1%)
2020-10-09
Understanding Spatial Robustness of Deep Neural Networks.
How Does Mixup Help With Robustness and Generalization?
2020-10-08
Transcending Transcend: Revisiting Malware Classification with Conformal Evaluation.
Improve Adversarial Robustness via Weight Penalization on Classification Layer.
A Unified Approach to Interpreting and Boosting Adversarial Transferability.
Improved Techniques for Model Inversion Attacks.
Affine-Invariant Robust Training.
Targeted Attention Attack on Deep Learning Models in Road Sign Recognition.
Gaussian MRF Covariance Modeling for Efficient Black-Box Adversarial Attacks.
2020-10-07
Hiding the Access Pattern is Not Enough: Exploiting Search Pattern Leakage in Searchable Encryption.
Learning Clusterable Visual Features for Zero-Shot Recognition.
Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks.
Revisiting Batch Normalization for Improving Corruption Robustness.
Batch Normalization Increases Adversarial Vulnerability: Disentangling Usefulness and Robustness of Model Features.
Decamouflage: A Framework to Detect Image-Scaling Attacks on Convolutional Neural Networks.
Global Optimization of Objective Functions Represented by ReLU Networks.
CD-UAP: Class Discriminative Universal Adversarial Perturbation.
Not All Datasets Are Born Equal: On Heterogeneous Data and Adversarial Examples.
Double Targeted Universal Adversarial Perturbations.
Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples.
Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems.
Adversarial attacks on audio source separation.
2020-10-06
Visualizing Color-wise Saliency of Black-Box Image Classification Models.
Constraining Logits by Bounded Function for Adversarial Robustness.
Adversarial Patch Attacks on Monocular Depth Estimation Networks.
BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models.
2020-10-05
Detecting Misclassification Errors in Neural Networks with a Gaussian Process Model.
Adversarial Boot Camp: label free certified robustness in one epoch.
Understanding Classifier Mistakes with Generative Models.
CAT-Gen: Improving Robustness in NLP Models via Controlled Adversarial Text Generation.
Second-Order NLP Adversarial Examples.
A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inference.
InfoBERT: Improving Robustness of Language Models from An Information Theoretic Perspective.
Understanding Catastrophic Overfitting in Single-step Adversarial Training.
Downscaling Attack and Defense: Turning What You See Back Into What You Get.
Metadata-Based Detection of Child Sexual Abuse Material. (1%)
2020-10-04
TextAttack: Lessons learned in designing Python frameworks for NLP.
A Study for Universal Adversarial Attacks on Texture Recognition.
Adversarial Attack and Defense of Structured Prediction Models.
Geometry-aware Instance-reweighted Adversarial Training.
Unknown Presentation Attack Detection against Rational Attackers.
2020-10-03
Adversarial and Natural Perturbations for General Robustness.
Multi-Step Adversarial Perturbations on Recommender Systems Embeddings.
A Geometry-Inspired Attack for Generating Natural Language Adversarial Examples.
Efficient Robust Training via Backward Smoothing.
Do Wider Neural Networks Really Help Adversarial Robustness?
2020-10-02
Note: An alternative proof of the vulnerability of $k$-NN classifiers in high intrinsic dimensionality regions.
An Empirical Study of DNNs Robustification Inefficacy in Protecting Visual Recommenders.
Block-wise Image Transformation with Secret Key for Adversarially Robust Defense.
Query complexity of adversarial attacks.
CorrAttack: Black-box Adversarial Attack with Structured Search.
A Deep Genetic Programming based Methodology for Art Media Classification Robust to Adversarial Perturbations.
2020-10-01
Assessing Robustness of Text Classification through Maximal Safe Radius Computation.
Bag of Tricks for Adversarial Training.
2020-09-30
Erratum Concerning the Obfuscated Gradients Attack on Stochastic Activation Pruning.
Accurate and Robust Feature Importance Estimation under Distribution Shifts.
Uncertainty-Matching Graph Neural Networks to Defend Against Poisoning Attacks.
DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles.
2020-09-29
Neural Topic Modeling with Cycle-Consistent Adversarial Training.
Fast Fr\'echet Inception Distance.
2020-09-28
Generating End-to-End Adversarial Examples for Malware Classifiers Using Explainability.
Adversarial Attacks Against Deep Learning Systems for ICD-9 Code Assignment.
STRATA: Building Robustness with a Simple Method for Generating Black-box Adversarial Attacks for Models of Code.
Graph Adversarial Networks: Protecting Information against Adversarial Attacks.
Adversarial Robustness of Stabilized NeuralODEs Might be from Obfuscated Gradients.
Learned Fine-Tuner for Incongruous Few-Shot Adversarial Learning. (82%)
2020-09-27
Learning to Improve Image Compression without Changing the Standard Decoder.
RoGAT: a robust GNN combined revised GAT with adjusted graphs.
Where Does the Robustness Come from? A Study of the Transformation-based Ensemble Defence.
2020-09-26
Differentially Private Adversarial Robustness Through Randomized Perturbations.
Beneficial Perturbations Network for Defending Adversarial Examples.
2020-09-25
Training CNNs in Presence of JPEG Compression: Multimedia Forensics vs Computer Vision.
Attention Meets Perturbations: Robust and Interpretable Attention with Adversarial Training.
2020-09-24
Advancing the Research and Development of Assured Artificial Intelligence and Machine Learning Capabilities.
Adversarial Examples in Deep Learning for Multivariate Time Series Regression.
Improving Query Efficiency of Black-box Adversarial Attack.
2020-09-23
Enhancing Mixup-based Semi-Supervised Learning with Explicit Lipschitz Regularization.
Improving Dialog Evaluation with a Multi-reference Adversarial Dataset and Large Scale Pretraining.
Adversarial robustness via stochastic regularization of neural activation sensitivity.
A Partial Break of the Honeypots Defense to Catch Adversarial Attacks.
Semantics-Preserving Adversarial Training.
Robustification of Segmentation Models Against Adversarial Perturbations In Medical Imaging.
Detection of Iterative Adversarial Attacks via Counter Attack.
Torchattacks: A PyTorch Repository for Adversarial Attacks.
2020-09-22
What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoors.
Tailoring: encoding inductive biases by optimizing unsupervised objectives at prediction time.
Adversarial Attack Based Countermeasures against Deep Learning Side-Channel Attacks.
2020-09-21
Uncertainty-aware Attention Graph Neural Network for Defending Adversarial Attacks.
Scalable Adversarial Attack on Graph Neural Networks with Alternating Direction Method of Multipliers.
Generating Adversarial yet Inconspicuous Patches with a Single Image.
Adversarial Training with Stochastic Weight Average.
Improving Ensemble Robustness by Collaboratively Promoting and Demoting Adversarial Robustness.
DeepDyve: Dynamic Verification for Deep Neural Networks.
Feature Distillation With Guided Adversarial Contrastive Learning.
Crafting Adversarial Examples for Deep Learning Based Prognostics (Extended Version).
Stereopagnosia: Fooling Stereo Networks with Adversarial Perturbations.
Optimal Provable Robustness of Quantum Classification via Quantum Hypothesis Testing.
Password Strength Signaling: A Counter-Intuitive Defense Against Password Cracking. (1%)
2020-09-20
Improving Robustness and Generality of NLP Models Using Disentangled Representations.
2020-09-19
Efficient Certification of Spatial Robustness.
OpenAttack: An Open-source Textual Adversarial Attack Toolkit.
It's Raining Cats or Dogs? Adversarial Rain Attack on DNN Perception.
Making Images Undiscoverable from Co-Saliency Detection.
Adversarial Exposure Attack on Diabetic Retinopathy Imagery.
Bias Field Poses a Threat to DNN-based X-Ray Recognition.
Learning to Attack: Towards Textual Adversarial Attacking in Real-world Situations.
EI-MTD:Moving Target Defense for Edge Intelligence against Adversarial Attacks.
2020-09-18
Robust Decentralized Learning for Neural Networks.
MIRAGE: Mitigating Conflict-Based Cache Attacks with a Practical Fully-Associative Design. (1%)
2020-09-17
Certifying Confidence via Randomized Smoothing.
Generating Label Cohesive and Well-Formed Adversarial Claims.
Vax-a-Net: Training-time Defence Against Adversarial Patch Attacks.
Label Smoothing and Adversarial Robustness.
Online Alternate Generator against Adversarial Attacks.
MultAV: Multiplicative Adversarial Videos.
On the Transferability of Minimal Prediction Preserving Inputs in Question Answering.
Large Norms of CNN Layers Do Not Hurt Adversarial Robustness.
2020-09-16
Multimodal Safety-Critical Scenarios Generation for Decision-Making Algorithms Evaluation.
Analysis of Generalizability of Deep Neural Networks Based on the Complexity of Decision Boundary.
Malicious Network Traffic Detection via Deep Learning: An Information Theoretic View.
Contextualized Perturbation for Textual Adversarial Attack.
2020-09-15
Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixup.
Light Can Hack Your Face! Black-box Backdoor Attack on Face Recognition Systems.
Switching Gradient Directions for Query-Efficient Black-Box Adversarial Attacks.
Decision-based Universal Adversarial Attack.
2020-09-14
A Game Theoretic Analysis of Additive Adversarial Attacks and Defenses.
Input Hessian Regularization of Neural Networks.
Robust Deep Learning Ensemble against Deception.
Hold Tight and Never Let Go: Security of Deep Learning based Automated Lane Centering under Physical-World Attack.
2020-09-13
Manifold attack.
Towards the Quantification of Safety Risks in Deep Neural Networks.
2020-09-12
Certified Robustness of Graph Classification against Topology Attack with Randomized Smoothing.
2020-09-11
Achieving Adversarial Robustness via Sparsity.
Defending Against Multiple and Unforeseen Adversarial Videos.
Robust Neural Machine Translation: Modeling Orthographic and Interpunctual Variation.
The Intriguing Relation Between Counterfactual Explanations and Adversarial Examples.
Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection.
2020-09-10
Second Order Optimization for Adversarial Robustness and Interpretability.
Quantifying the Preferential Direction of the Model Gradient in Adversarial Training With Projected Gradient Descent.
2020-09-09
End-to-end Kernel Learning via Generative Random Fourier Features.
SoK: Certified Robustness for Deep Neural Networks.
Searching for a Search Method: Benchmarking Search Algorithms for Generating NLP Adversarial Examples.
A black-box adversarial attack for poisoning clustering.
2020-09-08
Fuzzy Unique Image Transformation: Defense Against Adversarial Attacks On Deep COVID-19 Models.
Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective.
2020-09-07
Adversarial attacks on deep learning models for fatty liver disease classification by modification of ultrasound image reconstruction method.
Adversarial Attack on Large Scale Graph.
Black Box to White Box: Discover Model Characteristics Based on Strategic Probing.
2020-09-06
A Game Theoretic Analysis of LQG Control under Adversarial Attack.
Dynamically Computing Adversarial Perturbations for Recurrent Neural Networks.
Detection Defense Against Adversarial Attacks with Saliency Map.
2020-09-05
Bluff: Interactively Deciphering Adversarial Attacks on Deep Neural Networks.
Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks.
2020-09-03
MIPGAN -- Generating Strong and High Quality Morphing Attacks Using Identity Prior Driven GAN. (10%)
2020-09-02
Yet Meta Learning Can Adapt Fast, It Can Also Break Easily.
Perceptual Deep Neural Networks: Adversarial Robustness through Input Recreation.
Open-set Adversarial Defense.
Adversarially Robust Neural Architectures.
Flow-based detection and proxy-based evasion of encrypted malware C2 traffic.
Adversarial Attacks on Deep Learning Systems for User Identification based on Motion Sensors.
Simulating Unknown Target Models for Query-Efficient Black-box Attacks.
2020-09-01
Defending against substitute model black box adversarial attacks with the 01 loss.
2020-08-31
Adversarial Patch Camouflage against Aerial Detection.
Evasion Attacks to Graph Neural Networks via Influence Function.
MALCOM: Generating Malicious Comments to Attack Neural Fake News Detection Models.
2020-08-30
An Integrated Approach to Produce Robust Models with High Efficiency.
Benchmarking adversarial attacks and defenses for time-series data.
Shape Defense.
2020-08-29
Improving Resistance to Adversarial Deformations by Regularizing Gradients.
2020-08-27
A Scene-Agnostic Framework with Adversarial Training for Abnormal Event Detection in Video.
GhostBuster: Looking Into Shadows to Detect Ghost Objects in Autonomous Vehicle 3D Sensing.
Minimal Adversarial Examples for Deep Learning on 3D Point Clouds.
On the Intrinsic Robustness of NVM Crossbars Against Adversarial Attacks.
Adversarial Eigen Attack on Black-Box Models.
Color and Edge-Aware Adversarial Image Perturbations.
Adversarially Robust Learning via Entropic Regularization.
2020-08-26
Adversarially Training for Audio Classifiers.
2020-08-25
Likelihood Landscapes: A Unifying Principle Behind Many Adversarial Defenses.
Two Sides of the Same Coin: White-box and Black-box Attacks for Transfer Learning.
Rethinking Non-idealities in Memristive Crossbars for Adversarial Robustness in Neural Networks.
An Adversarial Attack Defending System for Securing In-Vehicle Networks.
2020-08-24
Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation.
2020-08-23
Developing and Defeating Adversarial Examples.
Ptolemy: Architecture Support for Robust Deep Learning.
PermuteAttack: Counterfactual Explanation of Machine Learning Credit Scorecards.
2020-08-22
Self-Competitive Neural Networks.
2020-08-21
A Survey on Assessing the Generalization Envelope of Deep Neural Networks: Predictive Uncertainty, Out-of-distribution and Adversarial Samples.
2020-08-20
Towards adversarial robustness with 01 loss neural networks.
On Attribution of Deepfakes.
$\beta$-Variational Classifiers Under Attack.
Yet Another Intermediate-Level Attack.
2020-08-19
Prototype-based interpretation of the functionality of neurons in winner-take-all neural networks.
Addressing Neural Network Robustness with Mixup and Targeted Labeling Adversarial Training.
On $\ell_p$-norm Robustness of Ensemble Stumps and Trees.
2020-08-18
Improving adversarial robustness of deep neural networks by using semantic information.
Direct Adversarial Training for GANs.
Accelerated Zeroth-Order and First-Order Momentum Methods from Mini to Minimax Optimization.
2020-08-17
A Deep Dive into Adversarial Robustness in Zero-Shot Learning.
Adversarial Attack and Defense Strategies for Deep Speaker Recognition Systems.
Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection.
Robustness Verification of Quantum Classifiers. (81%)
2020-08-16
TextDecepter: Hard Label Black Box Attack on Text Classifiers.
Adversarial Concurrent Training: Optimizing Robustness and Accuracy Trade-off of Deep Neural Networks.
2020-08-15
Relevance Attack on Detectors.
2020-08-14
Efficiently Constructing Adversarial Examples by Feature Watermarking.
Defending Adversarial Attacks without Adversarial Attacks in Deep Reinforcement Learning.
On the Generalization Properties of Adversarial Training.
2020-08-13
Semantically Adversarial Learnable Filters.
Adversarial Training and Provable Robustness: A Tale of Two Objectives.
2020-08-12
Learning to Learn from Mistakes: Robust Optimization for Adversarial Noise.
Defending Adversarial Examples via DNN Bottleneck Reinforcement.
Feature Binding with Category-Dependant MixUp for Semantic Segmentation and Adversarial Robustness.
Semantics-preserving adversarial attacks in NLP.
2020-08-11
Revisiting Adversarially Learned Injection Attacks Against Recommender Systems.
2020-08-10
Informative Dropout for Robust Representation Learning: A Shape-bias Perspective.
FireBERT: Hardening BERT-based classifiers against adversarial attack.
2020-08-09
Enhancing Robustness Against Adversarial Examples in Network Intrusion Detection Systems.
Adversarial Training with Fast Gradient Projection Method against Synonym Substitution based Text Attacks.
2020-08-08
Enhance CNN Robustness Against Noises for Classification of 12-Lead ECG with Variable Length.
2020-08-07
Visual Attack and Defense on Text.
Optimizing Information Loss Towards Robust Neural Networks.
Adversarial Examples on Object Recognition: A Comprehensive Survey.
2020-08-06
Improve Generalization and Robustness of Neural Networks via Weight Scale Shifting Invariant Regularizations.
Stronger and Faster Wasserstein Adversarial Attacks.
2020-08-05
One word at a time: adversarial attacks on retrieval models.
Robust Deep Reinforcement Learning through Adversarial Loss.
2020-08-04
Adv-watermark: A Novel Watermark Perturbation for Adversarial Examples.
TREND: Transferability based Robust ENsemble Design.
Can Adversarial Weight Perturbations Inject Neural Backdoors?
Entropy Guided Adversarial Model for Weakly Supervised Object Localization.
2020-08-03
Hardware Accelerator for Adversarial Attacks on Deep Learning Neural Networks.
Anti-Bandit Neural Architecture Search for Model Defense.
2020-08-01
Efficient Adversarial Attacks for Visual Object Tracking.
Trojaning Language Models for Fun and Profit.
2020-07-31
Vulnerability Under Adversarial Machine Learning: Bias or Variance?
Physical Adversarial Attack on Vehicle Detector in the Carla Simulator.
Adversarial Attacks with Multiple Antennas Against Deep Learning-Based Modulation Classifiers.
TEAM: We Need More Powerful Adversarial Examples for DNNs.
2020-07-30
Black-box Adversarial Sample Generation Based on Differential Evolution.
A Data Augmentation-based Defense Method Against Adversarial Attacks in Neural Networks.
2020-07-29
End-to-End Adversarial White Box Attacks on Music Instrument Classification.
Adversarial Robustness for Machine Learning Cyber Defenses Using Log Data.
Stylized Adversarial Defense.
Generative Classifiers as a Basis for Trustworthy Computer Vision.
Detecting Anomalous Inputs to DNN Classifiers By Joint Statistical Testing at the Layers.
2020-07-28
Cassandra: Detecting Trojaned Networks from Adversarial Perturbations.
Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning.
Reachable Sets of Classifiers and Regression Models: (Non-)Robustness Analysis and Robust Training.
Label-Only Membership Inference Attacks.
2020-07-27
Attacking and Defending Machine Learning Applications of Public Cloud.
KOVIS: Keypoint-based Visual Servoing with Zero-Shot Sim-to-Real Transfer for Robotics Manipulation.
From Sound Representation to Model Robustness.
Towards Accuracy-Fairness Paradox: Adversarial Example-based Data Augmentation for Visual Debiasing.
2020-07-26
RANDOM MASK: Towards Robust Convolutional Neural Networks.
Robust Collective Classification against Structural Attacks.
Train Like a (Var)Pro: Efficient Training of Neural Networks with Variable Projection. (1%)
2020-07-25
MirrorNet: Bio-Inspired Adversarial Attack for Camouflaged Object Segmentation.
Adversarial Privacy-preserving Filter.
MP3 Compression To Diminish Adversarial Noise in End-to-End Speech Recognition.
2020-07-24
Deep Co-Training with Task Decomposition for Semi-Supervised Domain Adaptation. (1%)
2020-07-23
Scalable Inference of Symbolic Adversarial Examples.
2020-07-22
SOCRATES: Towards a Unified Platform for Neural Network Verification.
Adversarial Training Reduces Information and Improves Transferability.
Robust Machine Learning via Privacy/Rate-Distortion Theory.
Threat of Adversarial Attacks on Face Recognition: A Comprehensive Survey.
2020-07-21
Audio Adversarial Examples for Robust Hybrid CTC/Attention Speech Recognition.
Towards Visual Distortion in Black-Box Attacks.
2020-07-20
DeepNNK: Explaining deep models and their generalization using polytope interpolation.
AdvFoolGen: Creating Persistent Troubles for Deep Classifiers.
Evaluating a Simple Retraining Strategy as a Defense Against Adversarial Attacks.
Robust Tracking against Adversarial Attacks.
Scaling Polyhedral Neural Network Verification on GPUs.
2020-07-19
Semantic Equivalent Adversarial Data Augmentation for Visual Question Answering.
Exploiting vulnerabilities of deep neural networks for privacy protection.
Connecting the Dots: Detecting Adversarial Perturbations Using Context Inconsistency.
Adversarial Immunization for Improving Certifiable Robustness on Graphs.
2020-07-18
DDR-ID: Dual Deep Reconstruction Networks Based Image Decomposition for Anomaly Detection.
Towards Quantum-Secure Authentication and Key Agreement via Abstract Multi-Agent Interaction. (1%)
2020-07-17
Anomaly Detection in Unsupervised Surveillance Setting Using Ensemble of Multimodal Data with Adversarial Defense.
Neural Networks with Recurrent Generative Feedback.
2020-07-16
Understanding and Diagnosing Vulnerability under Adversarial Attacks.
Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resources.
Accelerated Stochastic Gradient-free and Projection-free Methods.
Provable Worst Case Guarantees for the Detection of Out-of-Distribution Data.
An Empirical Study on the Robustness of NAS based Architectures.
Do Adversarially Robust ImageNet Models Transfer Better?
Learning perturbation sets for robust machine learning.
On Robustness and Transferability of Convolutional Neural Networks. (1%)
Less is More: A privacy-respecting Android malware classifier using Federated Learning. (1%)
2020-07-15
A Survey of Privacy Attacks in Machine Learning.
Accelerating Robustness Verification of Deep Neural Networks Guided by Target Labels.
A Survey on Security Attacks and Defense Techniques for Connected and Autonomous Vehicles.
2020-07-14
Towards robust sensing for Autonomous Vehicles: An adversarial perspective.
Robustifying Reinforcement Learning Agents via Action Space Adversarial Training.
Bounding The Number of Linear Regions in Local Area for Neural Networks with ReLU Activations.
Multitask Learning Strengthens Adversarial Robustness.
Adversarial Examples and Metrics.
AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows.
Pasadena: Perceptually Aware and Stealthy Adversarial Denoise Attack.
Adversarial Attacks against Neural Networks in Audio Domain: Exploiting Principal Components.
Towards a Theoretical Understanding of the Robustness of Variational Autoencoders.
2020-07-13
A simple defense against adversarial attacks on heatmap explanations.
Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations.
Adversarial robustness via robust low rank representations.
Security and Machine Learning in the Real World.
Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes.
Calling Out Bluff: Attacking the Robustness of Automatic Scoring Systems with Simple Adversarial Testing.
SoK: The Faults in our ASRs: An Overview of Attacks against Automatic Speech Recognition and Speaker Identification Systems.
Patch-wise Attack for Fooling Deep Neural Network.
2020-07-12
Adversarial jamming attacks and defense strategies via adaptive deep reinforcement learning.
Generating Fluent Adversarial Examples for Natural Languages.
Probabilistic Jacobian-based Saliency Maps Attacks.
2020-07-11
Understanding Object Detection Through An Adversarial Lens.
ManiGen: A Manifold Aided Black-box Generator of Adversarial Examples.
Adversarially-Trained Deep Nets Transfer Better: Illustration on Image Classification. (15%)
2020-07-10
Improved Detection of Adversarial Images Using Deep Neural Networks.
Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection.
Generating Adversarial Inputs Using A Black-box Differential Technique.
2020-07-09
Improving Adversarial Robustness by Enforcing Local and Global Compactness.
Boundary thickness and robustness in learning models.
Node Copying for Protection Against Graph Neural Network Topology Attacks.
Efficient detection of adversarial images.
2020-07-08
How benign is benign overfitting?
SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations.
RobFR: Benchmarking Adversarial Robustness on Face Recognition.
A Critical Evaluation of Open-World Machine Learning.
On the relationship between class selectivity, dimensionality, and robustness.
Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSs.
2020-07-07
Robust Learning with Frequency Domain Regularization.
Regional Image Perturbation Reduces $L_p$ Norms of Adversarial Examples While Maintaining Model-to-model Transferability.
Fast Training of Deep Neural Networks Robust to Adversarial Perturbations.
Making Adversarial Examples More Transferable and Indistinguishable.
Detection as Regression: Certified Object Detection by Median Smoothing.
2020-07-06
Certifying Decision Trees Against Evasion Attacks by Program Analysis.
On Data Augmentation and Adversarial Risk: An Empirical Analysis.
Understanding and Improving Fast Adversarial Training.
Black-box Adversarial Example Generation with Normalizing Flows.
2020-07-05
Adversarial Learning in the Cyber Security Domain.
2020-07-04
On Connections between Regularizations for Improving DNN Robustness.
Relationship between manifold smoothness and adversarial vulnerability in deep learning with local errors.
Deep Active Learning via Open Set Recognition. (1%)
2020-07-03
Towards Robust Deep Learning with Ensemble Networks and Noisy Layers.
2020-07-02
Efficient Proximal Mapping of the 1-path-norm of Shallow Networks.
Deep Learning Defenses Against Adversarial Examples for Dynamic Risk Assessment.
Decoder-free Robustness Disentanglement without (Additional) Supervision.
Increasing Trustworthiness of Deep Neural Networks via Accuracy Monitoring.
Trace-Norm Adversarial Examples.
Generating Adversarial Examples withControllable Non-transferability.
2020-07-01
Unifying Model Explainability and Robustness via Machine-Checkable Concepts.
Measuring Robustness to Natural Distribution Shifts in Image Classification.
Determining Sequence of Image Processing Technique (IPT) to Detect Adversarial Attacks.
Query-Free Adversarial Transfer via Undertrained Surrogates.
Adversarial Example Games.
Robustness against Relational Adversary.
A Le Cam Type Bound for Adversarial Learning and Applications.
Opportunities and Challenges in Deep Learning Adversarial Robustness: A Survey.
2020-06-30
Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures.
Black-box Certification and Learning under Adversarial Perturbations.
Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection.
Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specifications.
Generating Adversarial Examples with an Optimized Quality.
2020-06-29
Harnessing Adversarial Distances to Discover High-Confidence Errors.
Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification.
Legal Risks of Adversarial Machine Learning Research.
Biologically Inspired Mechanisms for Adversarial Robustness.
Improving Uncertainty Estimates through the Relationship with Adversarial Robustness.
2020-06-28
FDA3 : Federated Defense Against Adversarial Attacks for Cloud-Based IIoT Applications.
Geometry-Inspired Top-k Adversarial Perturbations.
2020-06-26
Orthogonal Deep Models As Defense Against Black-Box Attacks.
A Unified Framework for Analyzing and Detecting Malicious Examples of DNN Models.
Informative Outlier Matters: Robustifying Out-of-distribution Detection Using Outlier Mining.
Diverse Knowledge Distillation (DKD): A Solution for Improving The Robustness of Ensemble Models Against Adversarial Attacks.
2020-06-25
Smooth Adversarial Training.
Proper Network Interpretability Helps Adversarial Robustness in Classification.
Uncovering the Connections Between Adversarial Transferability and Knowledge Transferability.
Can 3D Adversarial Logos Cloak Humans?
2020-06-24
Blacklight: Defending Black-Box Adversarial Attacks on Deep Neural Networks.
Defending against adversarial attacks on medical imaging AI system, classification or detection?
Compositional Explanations of Neurons.
Imbalanced Gradients: A Subtle Cause of Overestimated Adversarial Robustness.
2020-06-23
Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks.
RayS: A Ray Searching Method for Hard-label Adversarial Attack.
Adversarial Robustness of Deep Sensor Fusion Models.
2020-06-22
Learning to Generate Noise for Multi-Attack Robustness.
Perceptual Adversarial Robustness: Defense Against Unseen Threat Models.
2020-06-21
Network Moments: Extensions and Sparse-Smooth Attacks.
2020-06-20
How do SGD hyperparameters in natural training affect adversarial robustness?
Defense against Adversarial Attacks in NLP via Dirichlet Neighborhood Ensemble.
Stochastic Shortest Path with Adversarially Changing Costs. (1%)
2020-06-19
Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examples.
A general framework for defining and optimizing robustness.
Analyzing the Real-World Applicability of DGA Classifiers.
Towards an Adversarially Robust Normalization Approach.
Differentiable Language Model Adversarial Attacks on Categorical Sequence Classifiers.
Adversarial Attacks for Multi-view Deep Models.
2020-06-18
Local Competition and Uncertainty for Adversarial Robustness in Deep Learning.
Dissecting Deep Networks into an Ensemble of Generative Classifiers for Robust Predictions.
The Dilemma Between Dimensionality Reduction and Adversarial Robustness.
Beware the Black-Box: on the Robustness of Recent Defenses to Adversarial Examples.
2020-06-17
Noise or Signal: The Role of Image Backgrounds in Object Recognition.
Adversarial Examples Detection and Analysis with Layer-wise Autoencoders.
Adversarial Defense by Latent Style Transformations.
Disrupting Deepfakes with an Adversarial Attack that Survives Training.
Universal Lower-Bounds on Classification Error under Adversarial Attacks and Random Corruption.
Fairness Through Robustness: Investigating Robustness Disparity in Deep Learning.
2020-06-16
Calibrating Deep Neural Network Classifiers on Out-of-Distribution Datasets.
SPLASH: Learnable Activation Functions for Improving Accuracy and Adversarial Robustness.
Debona: Decoupled Boundary Network Analysis for Tighter Bounds and Faster Adversarial Robustness Proofs.
On sparse connectivity, adversarial robustness, and a novel model of the artificial neuron.
AdvMind: Inferring Adversary Intent of Black-Box Attacks.
The shape and simplicity biases of adversarially robust ImageNet-trained CNNs.
2020-06-15
Total Deep Variation: A Stable Regularizer for Inverse Problems.
DefenseVGAE: Defending against Adversarial Attacks on Graph Data via a Variational Graph Autoencoder.
Improving Adversarial Robustness via Unlabeled Out-of-Domain Data.
Fast & Accurate Method for Bounding the Singular Values of Convolutional Layers with Application to Lipschitz Regularization.
GNNGuard: Defending Graph Neural Networks against Adversarial Attacks.
CG-ATTACK: Modeling the Conditional Distribution of Adversarial Perturbations to Boost Black-Box Attack.
Multiscale Deep Equilibrium Models.
2020-06-14
GradAug: A New Regularization Method for Deep Neural Networks.
PatchUp: A Regularization Technique for Convolutional Neural Networks.
On Saliency Maps and Adversarial Robustness.
On the transferability of adversarial examples between convex and 01 loss models.
Adversarial Attacks and Detection on Reinforcement Learning-Based Interactive Recommender Systems.
Sparsity Turns Adversarial: Energy and Latency Attacks on Deep Neural Networks.
Duplicity Games for Deception Design with an Application to Insider Threat Mitigation. (11%)
2020-06-13
The Pitfalls of Simplicity Bias in Neural Networks.
Adversarial Self-Supervised Contrastive Learning.
Rethinking Clustering for Robustness.
Defensive Approximation: Securing CNNs using Approximate Computing.
2020-06-12
Provably Robust Metric Learning.
Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces.
D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack.
Targeted Adversarial Perturbations for Monocular Depth Prediction.
2020-06-11
Large-Scale Adversarial Training for Vision-and-Language Representation Learning.
Smoothed Geometry for Robust Attribution.
Protecting Against Image Translation Deepfakes by Leaking Universal Perturbations from Black-Box Neural Networks.
Investigating Robustness of Adversarial Samples Detection for Automatic Speaker Verification.
Robustness to Adversarial Attacks in Learning-Enabled Controllers.
On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples.
Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors.
Achieving robustness in classification using optimal transport with hinge regularization.
Backdoor Smoothing: Demystifying Backdoor Attacks on Deep Neural Networks. (96%)
2020-06-10
Evaluating Graph Vulnerability and Robustness using TIGER.
Towards Robust Fine-grained Recognition by Maximal Separation of Discriminative Features.
Deterministic Gaussian Averaged Neural Networks.
Interpolation between Residual and Non-Residual Networks.
Towards Certified Robustness of Metric Learning.
2020-06-09
Towards an Intrinsic Definition of Robustness for a Classifier.
Black-Box Adversarial Attacks on Graph Neural Networks with Limited Node Access.
GAP++: Learning to generate target-conditioned adversarial examples.
Adversarial Attacks on Brain-Inspired Hyperdimensional Computing-Based Classifiers.
Provable tradeoffs in adversarially robust classification.
2020-06-08
Calibrated neighborhood aware confidence measure for deep metric learning.
A Self-supervised Approach for Adversarial Robustness.
Distributional Robustness with IPMs and links to Regularization and GANs.
On Universalized Adversarial and Invariant Perturbations.
Tricking Adversarial Attacks To Fail.
Global Robustness Verification Networks.
Provable trade-offs between private & robust machine learning.
Adversarial Feature Desensitization.
2020-06-07
Extensions and limitations of randomized smoothing for robustness guarantees.
Uncertainty-Aware Deep Classifiers using Generative Models.
2020-06-06
Unique properties of adversarially trained linear classifiers on Gaussian data.
Can Domain Knowledge Alleviate Adversarial Attacks in Multi-Label Classifiers?
2020-06-05
Adversarial Image Generation and Training for Deep Convolutional Neural Networks.
Lipschitz Bounds and Provably Robust Training by Laplacian Smoothing.
Sponge Examples: Energy-Latency Attacks on Neural Networks.
2020-06-04
Characterizing the Weight Space for Different Learning Models.
Towards Understanding Fast Adversarial Training.
Defense for Black-box Attacks on Anti-spoofing Models by Self-Supervised Learning.
Pick-Object-Attack: Type-Specific Adversarial Attack for Object Detection.
2020-06-02
SaliencyMix: A Saliency Guided Data Augmentation Strategy for Better Regularization.
Exploring the role of Input and Output Layers of a Deep Neural Network in Adversarial Defense.
Perturbation Analysis of Gradient-based Adversarial Attacks.
Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start.
Detecting Audio Attacks on ASR Systems with Dropout Uncertainty.
2020-06-01
Second-Order Provable Defenses against Adversarial Attacks.
Adversarial Attacks on Reinforcement Learning based Energy Management Systems of Extended Range Electric Delivery Vehicles.
Adversarial Attacks on Classifiers for Eye-based User Modelling.
Rethinking Empirical Evaluation of Adversarial Robustness Using First-Order Attack Methods.
2020-05-31
Evaluations and Methods for Explanation through Robustness Analysis.
Estimating Principal Components under Adversarial Perturbations.
2020-05-30
Exploring Model Robustness with Adaptive Networks and Improved Adversarial Training.
2020-05-29
SAFER: A Structure-free Approach for Certified Robustness to Adversarial Word Substitutions.
2020-05-28
Monocular Depth Estimators: Vulnerabilities and Attacks.
QEBA: Query-Efficient Boundary-Based Blackbox Attack.
Adversarial Attacks and Defense on Texts: A Survey.
Adversarial Robustness of Deep Convolutional Candlestick Learner.
2020-05-27
Enhancing Resilience of Deep Learning Networks by Means of Transferable Adversaries.
Mitigating Advanced Adversarial Attacks with More Advanced Gradient Obfuscation Techniques.
Stochastic Security: Adversarial Defense Using Long-Run Dynamics of Energy-Based Models.
Calibrated Surrogate Losses for Adversarially Robust Classification.
2020-05-26
Effects of Forward Error Correction on Communications Aware Evasion Attacks.
Investigating a Spectral Deception Loss Metric for Training Machine Learning-based Evasion Attacks.
Generating Semantically Valid Adversarial Questions for TableQA.
2020-05-25
Adversarial Feature Selection against Evasion Attacks.
2020-05-24
Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantification.
SoK: Arms Race in Adversarial Malware Detection.
Adaptive Adversarial Logits Pairing.
2020-05-23
ShapeAdv: Generating Shape-Aware Adversarial 3D Point Clouds.
Adversarial Attack on Hierarchical Graph Pooling Neural Networks.
Frontal Attack: Leaking Control-Flow in SGX via the CPU Frontend. (1%)
2020-05-22
Vulnerability of deep neural networks for detecting COVID-19 cases from chest X-ray images to universal adversarial attacks.
2020-05-21
Revisiting Role of Autoencoders in Adversarial Settings.
Robust Ensemble Model Training via Random Layer Sampling Against Adversarial Attack.
Inaudible Adversarial Perturbations for Targeted Attack in Speaker Recognition.
Investigating Vulnerability to Adversarial Examples on Multimodal Data Fusion in Deep Learning.
2020-05-20
Graph Structure Learning for Robust Graph Neural Networks.
Model-Based Robust Deep Learning: Generalizing to Natural, Out-of-Distribution Data.
An Adversarial Approach for Explaining the Predictions of Deep Neural Networks.
A survey on Adversarial Recommender Systems: from Attack/Defense strategies to Generative Adversarial Networks.
Feature Purification: How Adversarial Training Performs Robust Deep Learning.
2020-05-19
Synthesizing Unrestricted False Positive Adversarial Objects Using Generative Models.
Bias-based Universal Adversarial Patch Attack for Automatic Check-out.
2020-05-18
An Evasion Attack against ML-based Phishing URL Detectors.
Universalization of any adversarial attack using very few test examples.
On Intrinsic Dataset Properties for Adversarial Machine Learning.
Defending Your Voice: Adversarial Attack on Voice Conversion.
Improve robustness of DNN for ECG signal classification:a noise-to-signal ratio perspective.
Increasing-Margin Adversarial (IMA) Training to Improve Adversarial Robustness of Neural Networks.
Spatiotemporal Attacks for Embodied Agents.
2020-05-17
Toward Adversarial Robustness by Diversity in an Ensemble of Specialized Deep Neural Networks.
2020-05-16
Universal Adversarial Perturbations: A Survey.
Encryption Inspired Adversarial Defense for Visual Classification.
PatchGuard: Provable Defense against Adversarial Patches Using Masks on Small Receptive Fields.
2020-05-15
How to Make 5G Communications "Invisible": Adversarial Machine Learning for Wireless Privacy.
Practical Traffic-space Adversarial Attacks on Learning-based NIDSs.
Initializing Perturbations in Multiple Directions for Fast Adversarial Training.
2020-05-14
Stealthy and Efficient Adversarial Attacks against Deep Reinforcement Learning.
Towards Assessment of Randomized Mechanisms for Certifying Adversarial Robustness.
A Deep Learning-based Fine-grained Hierarchical Learning Approach for Robust Malware Classification.
2020-05-13
DeepRobust: A PyTorch Library for Adversarial Attacks and Defenses.
2020-05-12
Effective and Robust Detection of Adversarial Examples via Benford-Fourier Coefficients.
Evaluating Ensemble Robustness Against Adversarial Attacks.
Increased-confidence adversarial examples for improved transferability of Counter-Forensic attacks.
Adversarial examples are useful too!
2020-05-11
Channel-Aware Adversarial Attacks Against Deep Learning-Based Wireless Signal Classifiers.
Spanning Attack: Reinforce Black-box Attacks with Unlabeled Data.
2020-05-09
It's Morphin' Time! Combating Linguistic Discrimination with Inflectional Perturbations.
Class-Aware Domain Adaptation for Improving Adversarial Robustness.
2020-05-08
Towards Robustness against Unsuspicious Adversarial Examples.
2020-05-07
Efficient Exact Verification of Binarized Neural Networks.
Projection & Probability-Driven Black-Box Attack.
Defending Hardware-based Malware Detectors against Adversarial Attacks.
2020-05-06
GraCIAS: Grassmannian of Corrupted Images for Adversarial Security.
Training robust neural networks using Lipschitz bounds.
2020-05-05
Enhancing Intrinsic Adversarial Robustness via Feature Pyramid Decoder.
Hacking the Waveform: Generalized Wireless Adversarial Deep Learning.
Adversarial Training against Location-Optimized Adversarial Patches.
Measuring Adversarial Robustness using a Voronoi-Epsilon Adversary.
2020-05-04
On the Benefits of Models with Perceptually-Aligned Gradients.
Do Gradient-based Explanations Tell Anything About Adversarial Robustness to Android Malware?
2020-05-03
Robust Encodings: A Framework for Combating Adversarial Typos.
2020-05-01
Jacks of All Trades, Masters Of None: Addressing Distributional Shift and Obtrusiveness via Transparent Patch Attacks.
Birds have four legs?! NumerSense: Probing Numerical Commonsense Knowledge of Pre-trained Language Models.
Robust Deep Learning as Optimal Control: Insights and Convergence Guarantees.
Defense of Word-level Adversarial Attacks via Random Substitution Encoding.
2020-04-30
Evaluating Neural Machine Comprehension Model Robustness to Noisy Inputs and Adversarial Attacks.
Imitation Attacks and Defenses for Black-box Machine Translation Systems.
Universal Adversarial Attacks with Natural Triggers for Text Classification.
Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness.
2020-04-29
Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability.
TAVAT: Token-Aware Virtual Adversarial Training for Language Understanding.
TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLP.
2020-04-28
Adversarial Learning Guarantees for Linear Hypotheses and Neural Networks.
Minority Reports Defense: Defending Against Adversarial Patches.
2020-04-27
DeSePtion: Dual Sequence Prediction and Adversarial Examples for Improved Fact-Checking.
Adversarial Fooling Beyond "Flipping the Label".
"Call me sexist, but...": Revisiting Sexism Detection Using Psychological Scales and Adversarial Samples. (81%)
2020-04-26
Improved Image Wasserstein Attacks and Defenses.
Transferable Perturbations of Deep Feature Distributions.
Towards Feature Space Adversarial Attack.
Printing and Scanning Attack for Image Counter Forensics.
2020-04-25
Improved Adversarial Training via Learned Optimizer.
Enabling Fast and Universal Audio Adversarial Attack Using Generative Model.
Harnessing adversarial examples with a surprisingly simple defense.
2020-04-24
Towards Characterizing Adversarial Defects of Deep Learning Software from the Lens of Uncertainty.
A Black-box Adversarial Attack Strategy with Adjustable Sparsity and Generalizability for Deep Image Classifiers.
Reevaluating Adversarial Examples in Natural Language.
2020-04-23
Adversarial Machine Learning in Network Intrusion Detection Systems.
Adversarial Attacks and Defenses: An Interpretation Perspective.
Evaluating Adversarial Robustness for Deep Neural Network Interpretability using fMRI Decoding.
On Adversarial Examples for Biomedical NLP Tasks.
Ensemble Generative Cleaning with Feedback Loops for Defending Adversarial Attacks.
Improved Noise and Attack Robustness for Semantic Segmentation by Using Multi-Task Training with Self-Supervised Depth Estimation.
RAIN: A Simple Approach for Robust and Accurate Image Classification Networks.
2020-04-22
CodNN -- Robust Neural Networks From Coded Classification.
Provably robust deep generative models.
QUANOS- Adversarial Noise Sensitivity Driven Hybrid Quantization of Neural Networks.
Adversarial examples and where to find them.
2020-04-21
Scalable Attack on Graph Data by Injecting Vicious Nodes.
Certifying Joint Adversarial Robustness for Model Ensembles.
Probabilistic Safety for Bayesian Neural Networks.
BERT-ATTACK: Adversarial Attack Against BERT Using BERT.
EMPIR: Ensembles of Mixed Precision Deep Networks for Increased Robustness against Adversarial Attacks.
2020-04-20
GraN: An Efficient Gradient-Norm Based Detector for Adversarial and Misclassified Examples.
2020-04-19
Dynamic Knowledge Graph-based Dialogue Generation with Improved Adversarial Meta-Learning.
Adversarial Training for Large Neural Language Models.
Headless Horseman: Adversarial Attacks on Transfer Learning Models.
2020-04-18
Protecting Classifiers From Attacks. A Bayesian Approach.
Single-step Adversarial training with Dropout Scheduling.
2020-04-17
Adversarial Attack on Deep Learning-Based Splice Localization.
2020-04-16
Shortcut Learning in Deep Neural Networks.
2020-04-15
Targeted Attack for Deep Hashing based Retrieval.
A Framework for Enhancing Deep Neural Networks Against Adversarial Malware.
Advanced Evasion Attacks and Mitigations on Practical ML-Based Phishing Website Classifiers.
2020-04-14
On the Optimal Interaction Range for Multi-Agent Systems Under Adversarial Attack.
Extending Adversarial Attacks to Produce Adversarial Class Probability Distributions.
2020-04-13
Adversarial Robustness Guarantees for Random Deep Neural Networks.
Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples.
Adversarial Weight Perturbation Helps Robust Generalization.
Adversarial Augmentation Policy Search for Domain and Cross-Lingual Generalization in Reading Comprehension.
Towards Robust Classification with Image Quality Assessment.
Towards Transferable Adversarial Attack against Deep Face Recognition.
2020-04-12
PatchAttack: A Black-box Texture-based Attack with Reinforcement Learning.
2020-04-11
Domain Adaptive Transfer Attack (DATA)-based Segmentation Networks for Building Extraction from Aerial Images.
Certified Adversarial Robustness for Deep Reinforcement Learning.
Robust Large-Margin Learning in Hyperbolic Space.
Verification of Deep Convolutional Neural Networks Using ImageStars.
2020-04-10
Adversarial Attacks on Machine Learning Cybersecurity Defences in Industrial Control Systems.
Luring of transferable adversarial perturbations in the black-box paradigm.
2020-04-09
Blind Adversarial Training: Balance Accuracy and Robustness.
Blind Adversarial Pruning: Balance Accuracy, Efficiency and Robustness.
On Adversarial Examples and Stealth Attacks in Artificial Intelligence Systems.
2020-04-08
Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Ranking.
2020-04-07
Towards Evaluating the Robustness of Chinese BERT Classifiers.
Feature Partitioning for Robust Tree Ensembles and their Certification in Adversarial Scenarios.
Learning to fool the speaker recognition.
Universal Adversarial Perturbations Generative Network for Speaker Recognition.
2020-04-05
Approximate Manifold Defense Against Multiple Adversarial Perturbations.
2020-04-04
Understanding (Non-)Robust Feature Disentanglement and the Relationship Between Low- and High-Dimensional Adversarial Attacks.
BAE: BERT-based Adversarial Examples for Text Classification.
2020-04-03
Adversarial Robustness through Regularization: A Second-Order Approach.
2020-04-01
Evading Deepfake-Image Detectors with White- and Black-Box Attacks.
Towards Achieving Adversarial Robustness by Enforcing Feature Consistency Across Bit Planes.
Physically Realizable Adversarial Examples for LiDAR Object Detection.
2020-03-31
A Thorough Comparison Study on Adversarial Attacks and Defenses for Common Thorax Disease Classification in Chest X-rays.
2020-03-30
Characterizing Speech Adversarial Examples Using Self-Attention U-Net Enhancement.
Adversarial Attacks on Multivariate Time Series.
Improved Gradient based Adversarial Attacks for Quantized Networks.
Towards Deep Learning Models Resistant to Large Perturbations.
Efficient Black-box Optimization of Adversarial Windows Malware with Constrained Manipulations.
2020-03-28
Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning.
DaST: Data-free Substitute Training for Adversarial Attacks.
Adversarial Imitation Attack.
2020-03-26
Do Deep Minds Think Alike? Selective Adversarial Attacks for Fine-Grained Manipulation of Multiple Deep Neural Networks.
Challenging the adversarial robustness of DNNs based on error-correcting output codes.
2020-03-25
Plausible Counterfactuals: Auditing Deep Learning Classifiers with Realistic Adversarial Examples.
2020-03-24
Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study.
2020-03-23
Defense Through Diverse Directions.
Adversarial Attacks on Monocular Depth Estimation.
Inherent Adversarial Robustness of Deep Spiking Neural Networks: Effects of Discrete Input Encoding and Non-Linear Activations.
Adversarial Perturbations Fool Deepfake Detectors.
2020-03-22
Understanding the robustness of deep neural network classifiers for breast cancer screening.
Architectural Resilience to Foreground-and-Background Adversarial Noise.
2020-03-21
Detecting Adversarial Examples in Learning-Enabled Cyber-Physical Systems using Variational Autoencoder for Regression.
Robust Out-of-distribution Detection in Neural Networks.
Cooling-Shrinking Attack: Blinding the Tracker with Imperceptible Noises.
2020-03-20
Adversarial Examples and the Deeper Riddle of Induction: The Need for a Theory of Artifacts in Deep Learning.
Investigating Image Applications Based on Spatial-Frequency Transform and Deep Learning Techniques.
Quantum noise protects quantum classifiers against adversaries.
One Neuron to Fool Them All.
Adversarial Robustness on In- and Out-Distribution Improves Explainability.
2020-03-19
Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates.
Face-Off: Adversarial Face Obfuscation.
Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observations.
Overinterpretation reveals image classification model pathologies. (81%)
2020-03-18
Vulnerabilities of Connectionist AI Applications: Evaluation and Defence.
Generating Socially Acceptable Perturbations for Efficient Evaluation of Autonomous Vehicles.
Solving Non-Convex Non-Differentiable Min-Max Games using Proximal Gradient Method.
SAT: Improving Adversarial Training via Curriculum-Based Loss Smoothing.
2020-03-17
Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior.
Heat and Blur: An Effective and Fast Defense Against Adversarial Examples.
Adversarial Transferability in Wearable Sensor Systems.
2020-03-15
Output Diversified Initialization for Adversarial Attacks.
Anomalous Example Detection in Deep Learning: A Survey.
Towards Face Encryption by Generating Adversarial Identity Masks.
Toward Adversarial Robustness via Semi-supervised Robust Training.
2020-03-14
Minimum-Norm Adversarial Examples on KNN and KNN-Based Models.
Certified Defenses for Adversarial Patches.
Dynamic Divide-and-Conquer Adversarial Training for Robust Semantic Segmentation.
On the benefits of defining vicinal distributions in latent space.
2020-03-13
Towards a Resilient Machine Learning Classifier -- a Case Study of Ransomware Detection.
GeoDA: a geometric framework for black-box adversarial attacks.
When are Non-Parametric Methods Robust?
2020-03-12
Topological Effects on Attacks Against Vertex Classification.
Inline Detection of DGA Domains Using Side Information.
ARAE: Adversarially Robust Training of Autoencoders Improves Novelty Detection.
ConAML: Constrained Adversarial Machine Learning for Cyber-Physical Systems.
2020-03-11
Frequency-Tuned Universal Adversarial Attacks.
2020-03-10
SAD: Saliency-based Defenses Against Adversarial Examples.
Using an ensemble color space model to tackle adversarial examples.
Cryptanalytic Extraction of Neural Network Models.
A Survey of Adversarial Learning on Graphs.
2020-03-09
Domain Adaptation with Conditional Distribution Matching and Generalized Label Shift.
Towards Probabilistic Verification of Machine Unlearning.
Manifold Regularization for Locally Stable Deep Neural Networks.
Generating Natural Language Adversarial Examples on a Large Scale with Generative Models.
Gradient-based adversarial attacks on categorical sequence models via traversing an embedded world.
2020-03-08
Security of Distributed Machine Learning: A Game-Theoretic Approach to Design Secure DSVM.
An Empirical Evaluation on Robustness and Uncertainty of Regularization Methods.
On the Robustness of Cooperative Multi-Agent Reinforcement Learning.
Adversarial Attacks on Probabilistic Autoregressive Forecasting Models.
Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles.
No Surprises: Training Robust Lung Nodule Detection for Low-Dose CT Scans by Augmenting with Adversarial Attacks.
2020-03-07
Dynamic Backdoor Attacks Against Machine Learning Models.
2020-03-06
Triple Memory Networks: a Brain-Inspired Method for Continual Learning.
Defense against adversarial attacks on spoofing countermeasures of ASV.
MAB-Malware: A Reinforcement Learning Framework for Attacking Static Malware Classifiers.
2020-03-05
Towards Practical Lottery Ticket Hypothesis for Adversarial Training.
Exploiting Verified Neural Networks via Floating Point Numerical Error.
Detection and Recovery of Adversarial Attacks with Injected Attractors.
Adversarial Robustness Through Local Lipschitzness.
Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization.
Search Space of Adversarial Perturbations against Image Filters.
2020-03-04
Real-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems.
Colored Noise Injection for Training Adversarially Robust Neural Networks.
Double Backpropagation for Training Autoencoders against Adversarial Attack.
Black-box Smoothing: A Provable Defense for Pretrained Classifiers.
Metrics and methods for robustness evaluation of neural networks with generative models.
2020-03-03
Discriminative Multi-level Reconstruction under Compact Latent Space for One-Class Novelty Detection.
Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks.
Analyzing Accuracy Loss in Randomized Smoothing Defenses.
Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack.
Type I Attack for Generative Models.
2020-03-02
Data-Free Adversarial Perturbations for Practical Black-Box Attack.
Learn2Perturb: an End-to-end Feature Perturbation Learning to Improve Adversarial Robustness.
Disrupting Deepfakes: Adversarial Attacks Against Conditional Image Translation Networks and Facial Manipulation Systems.
Hidden Cost of Randomized Smoothing.
Adversarial Network Traffic: Towards Evaluating the Robustness of Deep Learning-Based Network Traffic Classification.
2020-03-01
Adversarial Attacks and Defenses on Graphs: A Review, A Tool and Empirical Studies.
2020-02-29
Understanding the Intrinsic Robustness of Image Distributions using Conditional Generative Models.
Why is the Mahalanobis Distance Effective for Anomaly Detection?
2020-02-28
End-to-end Robustness for Sensing-Reasoning Machine Learning Pipelines.
Applying Tensor Decomposition to image for Robustness against Adversarial Attack.
2020-02-27
Adv-BERT: BERT is not robust on misspellings! Generating nature adversarial samples on BERT.
Detecting Patch Adversarial Attacks with Image Residuals.
Certified Defense to Image Transformations via Randomized Smoothing.
Are L2 adversarial examples intrinsically different?
Utilizing Network Properties to Detect Erroneous Inputs.
TSS: Transformation-Specific Smoothing for Robustness Certification.
On Isometry Robustness of Deep 3D Point Cloud Models under Adversarial Attacks.
FMix: Enhancing Mixed Sample Data Augmentation. (22%)
2020-02-26
Revisiting Ensembles in an Adversarial Context: Improving Natural Accuracy.
Invariance vs. Robustness of Neural Networks.
Overfitting in adversarially robust deep learning.
MGA: Momentum Gradient Attack on Network.
Improving Robustness of Deep-Learning-Based Image Reconstruction.
Defense-PointNet: Protecting PointNet Against Adversarial Attacks.
Adversarial Attack on Deep Product Quantization Network for Image Retrieval.
Randomization matters. How to defend against strong adversarial attacks.
Learning Adversarially Robust Representations via Worst-Case Mutual Information Maximization.
2020-02-25
Understanding and Mitigating the Tradeoff Between Robustness and Accuracy.
The Curious Case of Adversarially Robust Models: More Data Can Help, Double Descend, or Hurt Generalization.
G\"odel's Sentence Is An Adversarial Example But Unsolvable.
Towards an Efficient and General Framework of Robust Training for Graph Neural Networks.
(De)Randomized Smoothing for Certifiable Defense against Patch Attacks.
Attacks Which Do Not Kill Training Make Adversarial Learning Stronger.
Adversarial Ranking Attack and Defense.
2020-02-24
A Model-Based Derivative-Free Approach to Black-Box Adversarial Examples: BOBYQA.
Utilizing a null class to restrict decision spaces and defend against neural network adversarial attacks.
Adversarial Perturbations Prevail in the Y-Channel of the YCbCr Color Space.
Towards Rapid and Robust Adversarial Training with One-Step Attacks.
Precise Tradeoffs in Adversarial Training for Linear Regression.
HYDRA: Pruning Adversarially Robust Neural Networks.
2020-02-23
Adversarial Attack on DL-based Massive MIMO CSI Feedback.
Triple Wins: Boosting Accuracy, Robustness and Efficiency Together by Enabling Input-Adaptive Inference.
2020-02-22
VisionGuard: Runtime Detection of Adversarial Inputs to Perception Systems.
Non-Intrusive Detection of Adversarial Deep Learning Attacks via Observer Networks.
Temporal Sparse Adversarial Attack on Sequence-based Gait Recognition.
Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples.
2020-02-21
Polarizing Front Ends for Robust CNNs.
Robustness from Simple Classifiers.
Adversarial Detection and Correction by Matching Prediction Distributions.
UnMask: Adversarial Detection and Defense Through Robust Feature Alignment.
Robustness to Programmable String Transformations via Augmented Abstract Training.
Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework.
Adversarial Attacks on Machine Learning Systems for High-Frequency Trading.
2020-02-20
Enhanced Adversarial Strategically-Timed Attacks against Deep Reinforcement Learning.
On the Decision Boundaries of Deep Neural Networks: A Tropical Geometry Perspective.
A Bayes-Optimal View on Adversarial Examples.
Towards Certifiable Adversarial Sample Detection.
Boosting Adversarial Training with Hypersphere Embedding.
Byzantine-resilient Decentralized Stochastic Gradient Descent. (5%)
2020-02-19
Bayes-TrEx: Model Transparency by Example.
AdvMS: A Multi-source Multi-cost Defense Against Adversarial Attacks.
NAttack! Adversarial Attacks to bypass a GAN based classifier trained to detect Network intrusion.
On Adaptive Attacks to Adversarial Example Defenses.
Indirect Adversarial Attacks via Poisoning Neighbors for Graph Convolutional Networks.
Randomized Smoothing of All Shapes and Sizes.
2020-02-18
Action-Manipulation Attacks Against Stochastic Bandits: Attacks and Defense.
Deflecting Adversarial Attacks.
Block Switching: A Stochastic Approach for Deep Learning Security.
Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent.
2020-02-17
TensorShield: Tensor-based Defense Against Adversarial Attacks on Images.
On the Similarity of Deep Learning Representations Across Didactic and Adversarial Examples.
Scalable Quantitative Verification For Deep Neural Networks.
CAT: Customized Adversarial Training for Improved Robustness.
On the Matrix-Free Generation of Adversarial Perturbations for Black-Box Attacks.
Robust Stochastic Bandit Algorithms under Probabilistic Unbounded Adversarial Attack.
Regularized Training and Tight Certification for Randomized Smoothed Classifier with Provable Robustness.
GRAPHITE: A Practical Framework for Generating Automatic Physical Adversarial Machine Learning Attacks.
2020-02-16
Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality.
2020-02-15
Undersensitivity in Neural Reading Comprehension.
Hold me tight! Influence of discriminative features on deep network boundaries.
Blind Adversarial Network Perturbations.
2020-02-14
Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets.
Adversarial Distributional Training for Robust Deep Learning.
2020-02-13
Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks.
The Conditional Entropy Bottleneck.
Identifying Audio Adversarial Examples via Anomalous Pattern Detection.
2020-02-12
Stabilizing Differentiable Architecture Search via Perturbation-based Regularization.
Over-the-Air Adversarial Flickering Attacks against Video Recognition Networks.
2020-02-11
Adversarial Robustness for Code.
Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations.
Robustness of Bayesian Neural Networks to Gradient-Based Attacks.
Improving the affordability of robustness training for DNNs.
Fast Geometric Projections for Local Robustness Certification.
Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models.
More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models.
2020-02-10
Playing to Learn Better: Repeated Games for Adversarial Learning with Multiple Classifiers.
Adversarial Data Encryption.
Generalised Lipschitz Regularisation Equals Distributional Robustness.
2020-02-09
MDEA: Malware Detection with Evolutionary Adversarial Learning.
Input Validation for Neural Networks via Runtime Local Robustness Verification.
Robust binary classification with the 01 loss.
Watch out! Motion is Blurring the Vision of Your Deep Neural Networks.
Feature-level Malware Obfuscation in Deep Learning.
Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples.
Category-wise Attack: Transferable Adversarial Examples for Anchor Free Object Detection.
Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing.
Random Smoothing Might be Unable to Certify $\ell_\infty$ Robustness for High-Dimensional Images.
2020-02-08
Attacking Optical Character Recognition (OCR) Systems with Adversarial Watermarks.
Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness.
2020-02-07
Renofeation: A Simple Transfer Learning Method for Improved Adversarial Robustness.
Semantic Robustness of Models of Source Code.
Analysis of Random Perturbations for Robust Convolutional Neural Networks.
RAID: Randomized Adversarial-Input Detection for Neural Networks.
Assessing the Adversarial Robustness of Monte Carlo and Distillation Methods for Deep Bayesian Neural Network Classification.
2020-02-06
Reliability Validation of Learning Enabled Vehicle Tracking.
An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models.
AI-GAN: Attack-Inspired Generation of Adversarial Examples.
2020-02-05
Over-the-Air Adversarial Attacks on Deep Learning Based Modulation Classifier over Wireless Channels.
Understanding the Decision Boundary of Deep Neural Networks: An Empirical Study.
2020-02-04
Adversarially Robust Frame Sampling with Bounded Irregularities.
Adversarial Attacks to Scale-Free Networks: Testing the Robustness of Physical Criteria.
Minimax Defense against Gradient-based Adversarial Attacks.
2020-02-03
A Differentiable Color Filter for Generating Unrestricted Adversarial Images.
Regularizers for Single-step Adversarial Training.
Defending Adversarial Attacks via Semantic Feature Manipulation.
2020-02-02
Robust saliency maps with decoy-enhanced saliency score.
2020-02-01
Towards Sharper First-Order Adversary with Quantized Gradients.
AdvJND: Generating Adversarial Examples with Just Noticeable Difference.
2020-01-31
Additive Tree Ensembles: Reasoning About Potential Instances.
Politics of Adversarial Machine Learning.
FastWordBug: A Fast Method To Generate Adversarial Text Against NLP Applications.
2020-01-30
Tiny Noise Can Make an EEG-Based Brain-Computer Interface Speller Output Anything.
2020-01-29
A4 : Evading Learning-based Adblockers.
D2M: Dynamic Defense and Modeling of Adversarial Movement in Networks.
Just Noticeable Difference for Machines to Generate Adversarial Images.
Semantic Adversarial Perturbations using Learnt Representations.
Adversarial Attacks on Convolutional Neural Networks in Facial Recognition Domain.
2020-01-28
Modelling and Quantifying Membership Information Leakage in Machine Learning.
2020-01-27
Interpreting Machine Learning Malware Detectors Which Leverage N-gram Analysis.
Generating Natural Adversarial Hyperspectral examples with a modified Wasserstein GAN.
FakeLocator: Robust Localization of GAN-Based Face Manipulations via Semantic Segmentation Networks with Bells and Whistles.
Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learning.
Practical Fast Gradient Sign Attack against Mammographic Image Classifier.
2020-01-26
Ensemble Noise Simulation to Handle Uncertainty about Gradient-based Adversarial Attacks.
2020-01-25
Weighted Average Precision: Adversarial Example Detection in the Visual Perception of Autonomous Vehicles.
AI-Powered GUI Attack and Its Defensive Methods.
Analyzing the Noise Robustness of Deep Neural Networks.
2020-01-24
When Wireless Security Meets Machine Learning: Motivation, Challenges, and Research Directions.
2020-01-23
Privacy for All: Demystify Vulnerability Disparity of Differential Privacy against Membership Inference Attack.
Towards Robust DNNs: An Taylor Expansion-Based Method for Generating Powerful Adversarial Examples.
On the human evaluation of audio adversarial examples.
2020-01-22
Adversarial Attack on Community Detection by Hiding Individuals.
2020-01-21
SAUNet: Shape Attentive U-Net for Interpretable Medical Image Segmentation.
Secure and Robust Machine Learning for Healthcare: A Survey.
FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidence.
GhostImage: Perception Domain Attacks against Vision-based Object Classification Systems.
Generate High-Resolution Adversarial Samples by Identifying Effective Features.
Massif: Interactive Interpretation of Adversarial Attacks on Deep Learning.
Elephant in the Room: An Evaluation Framework for Assessing Adversarial Examples in NLP.
2020-01-17
Cyber Attack Detection thanks to Machine Learning Algorithms.
2020-01-16
Code-Bridged Classifier (CBC): A Low or Negative Overhead Defense for Making a CNN Classifier Robust Against Adversarial Attacks.
A Little Fog for a Large Turn.
The gap between theory and practice in function approximation with deep neural networks.
Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet.
Increasing the robustness of DNNs against image corruptions by playing the Game of Noise.
2020-01-14
Noisy Machines: Understanding Noisy Neural Networks and Enhancing Robustness to Analog Hardware Errors Using Distillation.
2020-01-13
Advbox: a toolbox to generate adversarial examples that fool neural networks.
2020-01-12
Membership Inference Attacks Against Object Detection Models.
An Adversarial Approach for the Robust Classification of Pneumonia from Chest Radiographs.
Fast is better than free: Revisiting adversarial training.
2020-01-11
Exploring and Improving Robustness of Multi Task Deep Neural Networks via Domain Agnostic Defenses.
Sparse Black-box Video Attack with Reinforcement Learning.
2020-01-10
ReluDiff: Differential Verification of Deep Neural Networks.
Guess First to Enable Better Compression and Adversarial Robustness.
2020-01-08
To Transfer or Not to Transfer: Misclassification Attacks Against Transfer Learned Text Classifiers.
MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius.
Transferability of Adversarial Examples to Attack Cloud-based Image Classifier Service.
2020-01-07
Softmax-based Classification is k-means Clustering: Formal Proof, Consequences for Adversarial Attacks, and Improvement through Centroid Based Tailoring.
2020-01-06
Generating Semantic Adversarial Examples via Feature Manipulation.
Deceiving Image-to-Image Translation Networks for Autonomous Driving with Adversarial Perturbations.
2020-01-05
The Human Visual System and Adversarial AI.
2020-01-02
Reject Illegal Inputs with Generative Classifier Derived from Any Discriminative Classifier.
2020-01-01
Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient.
Ensembles of Many Diverse Weak Defenses can be Strong: Defending Deep Neural Networks Against Adversarial Attacks.
2019-12-31
Automated Testing for Deep Learning Systems with Differential Behavior Criteria.
Protecting GANs against privacy attacks by preventing overfitting.
Erase and Restore: Simple, Accurate and Resilient Detection of $L_2$ Adversarial Examples.
Quantum Adversarial Machine Learning.
2019-12-30
Adversarial Example Generation using Evolutionary Multi-objective Optimization.
Defending from adversarial examples with a two-stream architecture.
2019-12-28
Detecting Out-of-Distribution Examples with In-distribution Examples and Gram Matrices.
Search Based Repair of Deep Neural Networks.
2019-12-26
Benchmarking Adversarial Robustness.
Efficient Adversarial Training with Transferable Adversarial Examples.
2019-12-24
Attack-Resistant Federated Learning with Residual-based Reweighting.
Analysis of Moving Target Defense Against False Data Injection Attacks on Power Grid.
Cronus: Robust and Heterogeneous Collaborative Learning with Black-Box Knowledge Transfer.
Characterizing the Decision Boundary of Deep Neural Networks.
2019-12-23
White Noise Analysis of Neural Networks.
Adversarial AutoAugment.
Geometry-aware Generation of Adversarial and Cooperative Point Clouds.
2019-12-21
T3: Tree-Autoencoder Constrained Adversarial Text Generation for Targeted Attack.
2019-12-20
Measuring Dataset Granularity.
Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing.
secml: A Python Library for Secure and Explainable Machine Learning.
Jacobian Adversarially Regularized Networks for Robustness.
Explainability and Adversarial Robustness for RNNs.
Adversarial symmetric GANs: bridging adversarial samples and adversarial networks.
2019-12-19
Does Symbolic Knowledge Prevent Adversarial Fooling?
A New Ensemble Method for Concessively Targeted Multi-model Attack.
Mitigating large adversarial perturbations on X-MAS (X minus Moving Averaged Samples).
Optimization-Guided Binary Diversification to Mislead Neural Networks for Malware Detection.
$n$-ML: Mitigating Adversarial Examples via Ensembles of Topologically Manipulated Classifiers.
Towards Verifying Robustness of Neural Networks Against Semantic Perturbations.
Perturbations on the Perceptual Ball.
2019-12-18
Identifying Adversarial Sentences by Analyzing Text Complexity.
An Adversarial Perturbation Oriented Domain Adaptation Approach for Semantic Segmentation.
Adversarial VC-dimension and Sample Complexity of Neural Networks.
SIGMA : Strengthening IDS with GAN and Metaheuristics Attacks.
Detecting Adversarial Attacks On Audio-Visual Speech Recognition.
2019-12-17
APRICOT: A Dataset of Physical Adversarial Attacks on Object Detection.
2019-12-16
CAG: A Real-time Low-cost Enhanced-robustness High-transferability Content-aware Adversarial Attack Generator.
MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking.
On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration.
Constructing a provably adversarially-robust classifier from a high accuracy one.
2019-12-15
DAmageNet: A Universal Adversarial Dataset.
2019-12-14
What Else Can Fool Deep Learning? Addressing Color Constancy Errors on Deep Neural Network Performance.
Towards Robust Toxic Content Classification.
2019-12-13
Potential adversarial samples for white-box attacks.
2019-12-11
Learning to Model Aspects of Hearing Perception Using Neural Loss Functions.
Gabor Layers Enhance Network Robustness.
An Efficient Approach for Using Expectation Maximization Algorithm in Capsule Networks.
Detecting and Correcting Adversarial Images Using Image Processing Operations and Convolutional Neural Networks.
What it Thinks is Important is Important: Robustness Transfers through Input Gradients.
2019-12-10
Towards a Robust Classifier: An MDL-Based Method for Generating Adversarial Examples.
Appending Adversarial Frames for Universal Video Attack.
Training Provably Robust Models by Polyhedral Envelope Regularization.
Statistically Robust Neural Network Classification. (22%)
2019-12-09
Feature Losses for Adversarial Robustness.
2019-12-08
Hardening Random Forest Cyber Detectors Against Adversarial Attacks.
Amora: Black-box Adversarial Morphing Attack.
2019-12-07
Exploring the Back Alleys: Analysing The Robustness of Alternative Neural Network Architectures against Adversarial Attacks.
2019-12-06
Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations.
Principal Component Properties of Adversarial Samples.
Training Deep Neural Networks for Interpretability and Adversarial Robustness.
2019-12-05
Detection of Face Recognition Adversarial Attacks.
The Search for Sparse, Robust Neural Networks.
Region-Wise Attack: On Efficient Generation of Robust Physical Adversarial Examples.
2019-12-04
Learning with Multiplicative Perturbations.
A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks.
Walking on the Edge: Fast, Low-Distortion Adversarial Examples.
Towards Robust Image Classification Using Sequential Attention Models.
Scratch that! An Evolution-based Adversarial Attack against Neural Networks.
2019-12-03
A Survey of Black-Box Adversarial Attacks on Computer Vision Models.
FANNet: Formal Analysis of Noise Tolerance, Training Bias and Input Sensitivity in Neural Networks.
2019-12-02
Cost-Aware Robust Tree Ensembles for Security Applications.
Deep Neural Network Fingerprinting by Conferrable Adversarial Examples.
Universal Adversarial Perturbations for CNN Classifiers in EEG-Based BCIs.
2019-12-01
Adversary A3C for Robust Reinforcement Learning.
A Method for Computing Class-wise Universal Adversarial Perturbations.
AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds.
2019-11-30
Design and Interpretation of Universal Adversarial Patches in Face Detection.
Error-Correcting Neural Network.
2019-11-29
Square Attack: a query-efficient black-box adversarial attack via random search.
2019-11-28
Towards Privacy and Security of Deep Learning Systems: A Survey.
2019-11-26
Survey of Attacks and Defenses on Edge-Deployed Neural Networks.
An Adaptive View of Adversarial Robustness from Test-time Smoothing Defense.
Can Attention Masks Improve Adversarial Robustness?
Defending Against Adversarial Machine Learning.
Using Depth for Pixel-Wise Detection of Adversarial Attacks in Crowd Counting.
2019-11-25
Playing it Safe: Adversarial Robustness with an Abstain Option.
ColorFool: Semantic Adversarial Colorization.
Adversarial Attack with Pattern Replacement.
One Man's Trash is Another Man's Treasure: Resisting Adversarial Examples by Adversarial Examples.
2019-11-24
When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks.
Time-aware Gradient Attack on Dynamic Network Link Prediction.
2019-11-23
Robust Assessment of Real-World Adversarial Examples.
Universal Adversarial Robustness of Texture and Shape-Biased Models.
2019-11-22
Bounding Singular Values of Convolution Layers.
Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction.
Attack Agnostic Statistical Method for Adversarial Detection.
Universal adversarial examples in speech command classification.
Invert and Defend: Model-based Approximate Inversion of Generative Adversarial Networks for Secure Inference.
2019-11-21
Heuristic Black-box Adversarial Attacks on Video Recognition Models.
Adversarial Examples Improve Image Recognition.
2019-11-20
Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation.
Analysis of Deep Networks for Monocular Depth Estimation Through Adversarial Attacks with Proposal of a Defense Method.
Fine-grained Synthesis of Unrestricted Adversarial Examples.
Deep Minimax Probability Machine.
2019-11-19
Logic-inspired Deep Neural Networks.
Where is the Bottleneck of Adversarial Learning with Unlabeled Data?
Adversarial Robustness of Flow-Based Generative Models.
Defective Convolutional Layers Learn Robust CNNs.
Generate (non-software) Bugs to Fool Classifiers.
2019-11-18
A New Ensemble Adversarial Attack Powered by Long-term Gradient Memories.
A novel method for identifying the deep neural network model with the Serial Number.
Adversarial Attacks on Grid Events Classification: An Adversarial Machine Learning Approach.
WITCHcraft: Efficient PGD attacks with random step size.
Deep Detector Health Management under Adversarial Campaigns.
2019-11-17
Countering Inconsistent Labelling by Google's Vision API for Rotated Images.
Deep Verifier Networks: Verification of Deep Discriminative Models with Deep Generative Models.
Smoothed Inference for Adversarially-Trained Models.
2019-11-16
SMART: Skeletal Motion Action Recognition aTtack.
Suspicion-Free Adversarial Attacks on Clustering Algorithms.
Black-Box Adversarial Attack with Transferable Model-based Embedding.
Defensive Few-shot Adversarial Learning.
2019-11-15
Learning To Characterize Adversarial Subspaces.
On Model Robustness Against Adversarial Examples.
Simple iterative method for generating targeted universal adversarial perturbations.
AdvKnn: Adversarial Attacks On K-Nearest Neighbor Classifiers With Approximate Gradients.
2019-11-14
Adversarial Embedding: A robust and elusive Steganography and Watermarking technique.
Self-supervised Adversarial Training.
DomainGAN: Generating Adversarial Examples to Attack Domain Generation Algorithm Classifiers.
CAGFuzz: Coverage-Guided Adversarial Generative Fuzzing Testing of Deep Learning Systems.
2019-11-13
There is Limited Correlation between Coverage and Robustness for Deep Neural Networks.
Adversarial Margin Maximization Networks.
2019-11-12
Improving Robustness of Task Oriented Dialog Systems.
On Robustness to Adversarial Examples and Polynomial Optimization.
Adversarial Examples in Modern Machine Learning: A Review.
2019-11-11
Few-Features Attack to Fool Machine Learning Models through Mask-Based GAN.
RNN-Test: Towards Adversarial Testing for Recurrent Neural Network Systems.
Learning From Brains How to Regularize Machines.
Robust Design of Deep Neural Networks against Adversarial Attacks based on Lyapunov Theory.
CALPA-NET: Channel-pruning-assisted Deep Residual Network for Steganalysis of Digital Images.
GraphDefense: Towards Robust Graph Convolutional Networks.
2019-11-09
A Reinforced Generation of Adversarial Samples for Neural Machine Translation.
Improving Machine Reading Comprehension via Adversarial Training.
Adaptive versus Standard Descent Methods and Robustness Against Adversarial Examples.
Minimalistic Attacks: How Little it Takes to Fool a Deep Reinforcement Learning Policy.
2019-11-08
Adversarial Attacks on Time-Series Intrusion Detection for Industrial Control Systems.
Patch augmentation: Towards efficient decision boundaries for neural networks.
Domain Robustness in Neural Machine Translation.
Adversarial Attacks on GMM i-vector based Speaker Verification Systems.
Imperceptible Adversarial Attacks on Tabular Data.
2019-11-07
White-Box Target Attack for EEG-Based BCI Regression Problems.
Active Learning for Black-Box Adversarial Attacks in EEG-Based Brain-Computer Interfaces.
2019-11-06
Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distance.
Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methods.
The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.
Reversible Adversarial Example based on Reversible Image Transformation.
2019-11-05
Adversarial Enhancement for Community Detection in Complex Networks.
DLA: Dense-Layer-Analysis for Adversarial Example Detection.
Intriguing Properties of Adversarial ML Attacks in the Problem Space.
Coverage Guided Testing for Recurrent Neural Networks.
2019-11-04
Persistency of Excitation for Robustness of Neural Networks.
Fast-UAP: An Algorithm for Speeding up Universal Adversarial Perturbation Generation with Orientation of Perturbation Vectors.
A Tale of Evil Twins: Adversarial Inputs versus Poisoned Models.
2019-11-03
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems.
MadNet: Using a MAD Optimization for Defending Against Adversarial Attacks.
2019-11-02
Automatic Detection of Generated Text is Easiest when Humans are Fooled.
Security of Facial Forensics Models Against Adversarial Attacks.
2019-10-31
Enhancing Certifiable Robustness via a Deep Model Ensemble.
Certifiable Robustness to Graph Perturbations.
Adversarial Music: Real World Audio Adversary Against Wake-word Detection System.
2019-10-30
Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization.
Beyond Universal Person Re-ID Attack.
2019-10-29
Adversarial Example in Remote Sensing Image Recognition.
2019-10-28
Active Subspace of Neural Networks: Structural Analysis and Universal Attacks.
Certified Adversarial Robustness for Deep Reinforcement Learning.
2019-10-27
Word-level Textual Adversarial Attacking as Combinatorial Optimization.
EdgeFool: An Adversarial Image Enhancement Filter.
Spot Evasion Attacks: Adversarial Examples for License Plate Recognition Systems with Convolutional Neural Networks.
2019-10-26
Detection of Adversarial Attacks and Characterization of Adversarial Subspace.
Understanding and Quantifying Adversarial Examples Existence in Linear Classification.
Adversarial Defense Via Local Flatness Regularization.
2019-10-25
Effectiveness of random deep feature selection for securing image manipulation detectors against adversarial examples.
MediaEval 2019: Concealed FGSM Perturbations for Privacy Preservation.
Label Smoothing and Logit Squeezing: A Replacement for Adversarial Training?
2019-10-24
ATZSL: Defensive Zero-Shot Recognition in the Presence of Adversaries.
2019-10-23
A Useful Taxonomy for Adversarial Robustness of Neural Networks.
Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks.
2019-10-22
Attacking Optical Flow.
Adversarial Example Detection by Classification for Deep Speech Recognition.
Cross-Representation Transferability of Adversarial Attacks: From Spectrograms to Audio Waveforms.
Structure Matters: Towards Generating Transferable Adversarial Images.
2019-10-21
Recovering Localized Adversarial Attacks.
Learning to Learn by Zeroth-Order Oracle.
An Alternative Surrogate Loss for PGD-based Adversarial Testing.
2019-10-20
Enhancing Recurrent Neural Networks with Sememes.
2019-10-19
Adversarial Attacks on Spoofing Countermeasures of automatic speaker verification.
2019-10-18
Toward Metrics for Differentiating Out-of-Distribution Sets.
Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?
Spatial-aware Online Adversarial Perturbations Against Visual Object Tracking.
A Fast Saddle-Point Dynamical System Approach to Robust Deep Learning.
2019-10-17
Instance adaptive adversarial training: Improved accuracy tradeoffs in neural nets.
Enforcing Linearity in DNN succours Robustness and Adversarial Image Generation.
LanCe: A Comprehensive and Lightweight CNN Defense Methodology against Physical Adversarial Attacks on Embedded Multimedia Applications.
Adversarial T-shirt! Evading Person Detectors in A Physical World.
2019-10-16
A New Defense Against Adversarial Images: Turning a Weakness into a Strength.
2019-10-15
Improving Robustness of time series classifier with Neural ODE guided gradient based data augmentation.
Understanding Misclassifications by Attributes.
Adversarial Examples for Models of Code.
On adversarial patches: real-world attack on ArcFace-100 face recognition system.
2019-10-14
DeepSearch: Simple and Effective Blackbox Fuzzing of Deep Neural Networks.
Confidence-Calibrated Adversarial Training: Generalizing to Unseen Attacks.
ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimization.
Man-in-the-Middle Attacks against Machine Learning Classifiers via Malicious Generative Models.
Real-world adversarial attack on MTCNN face detection system.
2019-10-12
On Robustness of Neural Ordinary Differential Equations.
2019-10-11
Hear "No Evil", See "Kenansville": Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification Systems.
Verification of Neural Networks: Specifying Global Robustness using Generative Models.
2019-10-10
Universal Adversarial Perturbation for Text Classification.
Information Aware Max-Norm Dirichlet Networks for Predictive Uncertainty Estimation.
2019-10-09
Learning deep forest with multi-scale Local Binary Pattern features for face anti-spoofing.
Adversarial Learning of Deepfakes in Accounting.
Deep Latent Defence.
Adversarial Training: embedding adversarial perturbations into the parameter space of a neural network to build a robust system.
2019-10-08
Directional Adversarial Training for Cost Sensitive Deep Learning Classification Applications.
SmoothFool: An Efficient Framework for Computing Smooth Adversarial Perturbations.
2019-10-07
Interpretable Disentanglement of Neural Networks by Extracting Class-Specific Subnetwork.
2019-10-05
Unrestricted Adversarial Attacks for Semantic Segmentation.
Yet another but more efficient black-box adversarial attack: tiling and evolution strategies.
2019-10-04
Requirements for Developing Robust Neural Networks.
Adversarial Examples for Cost-Sensitive Classifiers.
2019-10-03
Perturbations are not Enough: Generating Adversarial Examples with Spatial Distortions.
BUZz: BUffer Zones for defending adversarial examples in image classification.
Verification of Neural Network Behaviour: Formal Guarantees for Power System Applications.
2019-10-02
Attacking Vision-based Perception in End-to-End Autonomous Driving Models.
Adversarially Robust Few-Shot Learning: A Meta-Learning Approach.
2019-10-01
Boosting Image Recognition with Non-differentiable Constraints.
Generating Semantic Adversarial Examples with Differentiable Rendering.
Attacking CNN-based anti-spoofing face authentication in the physical domain.
An Efficient and Margin-Approaching Zero-Confidence Adversarial Attack.
Cross-Layer Strategic Ensemble Defense Against Adversarial Examples.
Deep Neural Rejection against Adversarial Examples.
2019-09-30
Black-box Adversarial Attacks with Bayesian Optimization.
Min-Max Optimization without Gradients: Convergence and Applications to Adversarial ML.
Role of Spatial Context in Adversarial Robustness for Object Detection.
2019-09-29
Techniques for Adversarial Examples Threatening the Safety of Artificial Intelligence Based Systems.
2019-09-27
Maximal adversarial perturbations for obfuscation: Hiding certain attributes while preserving rest.
Impact of Low-bitwidth Quantization on the Adversarial Robustness for Embedded Neural Networks.
2019-09-26
Towards Understanding the Transferability of Deep Representations.
Adversarial Machine Learning Attack on Modulation Classification.
Adversarial ML Attack on Self Organizing Cellular Networks.
Towards neural networks that provably know when they don't know.
Lower Bounds on Adversarial Robustness from Optimal Transport.
2019-09-25
Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection.
Mixup Inference: Better Exploiting Mixup to Defend Adversarial Attacks.
FreeLB: Enhanced Adversarial Training for Natural Language Understanding.
2019-09-24
A Visual Analytics Framework for Adversarial Text Generation.
Intelligent image synthesis to attack a segmentation CNN using adversarial learning.
Sign-OPT: A Query-Efficient Hard-label Adversarial Attack.
Matrix Sketching for Secure Collaborative Machine Learning. (1%)
2019-09-23
MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples.
Robust Local Features for Improving the Generalization of Adversarial Training.
FENCE: Feasible Evasion Attacks on Neural Networks in Constrained Environments.
2019-09-22
HAWKEYE: Adversarial Example Detector for Deep Neural Networks.
Towards Interpreting Recurrent Neural Networks through Probabilistic Abstraction.
2019-09-20
Adversarial Learning with Margin-based Triplet Embedding Regularization.
COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection.
Defending Against Physically Realizable Attacks on Image Classification.
2019-09-19
Propagated Perturbation of Adversarial Attack for well-known CNNs: Empirical Study and its Explanation.
Adversarial Vulnerability Bounds for Gaussian Process Classification.
Absum: Simple Regularization Method for Reducing Structural Sensitivity of Convolutional Neural Networks.
Toward Robust Image Classification.
Training Robust Deep Neural Networks via Adversarial Noise Propagation.
2019-09-17
Adversarial Attacks and Defenses in Images, Graphs and Text: A Review.
Generating Black-Box Adversarial Examples for Text Classifiers Using a Deep Reinforced Model.
Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges.
2019-09-16
They Might NOT Be Giants: Crafting Black-Box Adversarial Examples with Fewer Queries Using Particle Swarm Optimization.
HAD-GAN: A Human-perception Auxiliary Defense GAN to Defend Adversarial Examples.
Towards Quality Assurance of Software Product Lines with Adversarial Configurations.
Interpreting and Improving Adversarial Robustness with Neuron Sensitivity.
2019-09-15
An Empirical Study towards Characterizing Deep Learning Development and Deployment across Different Frameworks and Platforms.
Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors.
2019-09-14
Natural Language Adversarial Attacks and Defenses in Word Level.
2019-09-13
Adversarial Attack on Skeleton-based Human Action Recognition.
Say What I Want: Towards the Dark Side of Neural Dialogue Models.
White-Box Adversarial Defense via Self-Supervised Data Estimation.
Defending Against Adversarial Attacks by Suppressing the Largest Eigenvalue of Fisher Information Matrix.
2019-09-12
Inspecting adversarial examples using the Fisher information.
An Empirical Investigation of Randomized Defenses against Adversarial Attacks.
Transferable Adversarial Robustness using Adversarially Trained Autoencoders.
2019-09-11
Feedback Learning for Improving the Robustness of Neural Networks.
Sparse and Imperceivable Adversarial Attacks.
2019-09-10
Localized Adversarial Training for Increased Accuracy and Robustness in Image Classification.
Identifying and Resisting Adversarial Videos Using Temporal Consistency.
Effectiveness of Adversarial Examples and Defenses for Malware Classification.
Towards Noise-Robust Neural Networks via Progressive Adversarial Training.
UPC: Learning Universal Physical Camouflage Attacks on Object Detectors.
FDA: Feature Disruptive Attack.
Learning to Disentangle Robust and Vulnerable Features for Adversarial Detection.
Toward Finding The Global Optimal of Adversarial Examples.
2019-09-09
Adversarial Robustness Against the Union of Multiple Perturbation Models.
DeepObfuscator: Obfuscating Intermediate Representations with Privacy-Preserving Adversarial Learning on Smartphones. (1%)
2019-09-08
STA: Adversarial Attacks on Siamese Trackers.
When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures.
2019-09-06
Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification.
Natural Adversarial Sentence Generation with Gradient-based Perturbation.
Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information.
2019-09-05
Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agents.
Adversarial Examples with Difficult Common Words for Paraphrase Identification.
2019-09-04
Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?
2019-09-03
Certified Robustness to Adversarial Word Substitutions.
Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation.
2019-09-02
Metric Learning for Adversarial Robustness.
2019-08-29
Adversarial Training Methods for Network Embedding.
Deep Neural Network Ensembles against Deception: Ensemble Diversity, Accuracy and Robustness.
Defending Against Misclassification Attacks in Transfer Learning.
Universal, transferable and targeted adversarial attacks.
2019-08-26
A Statistical Defense Approach for Detecting Adversarial Examples.
Gated Convolutional Networks with Hybrid Connectivity for Image Classification.
2019-08-25
Adversarial Edit Attacks for Tree Data.
advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns.
2019-08-24
Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower.
2019-08-23
Improving Adversarial Robustness via Attention and Adversarial Logit Pairing.
AdvHat: Real-world adversarial attack on ArcFace Face ID system.
2019-08-22
Saliency Methods for Explaining Adversarial Attacks.
2019-08-21
Testing Robustness Against Unforeseen Adversaries.
Evaluating Defensive Distillation For Defending Text Processing Neural Networks Against Adversarial Examples.
2019-08-20
Denoising and Verification Cross-Layer Ensemble Against Black-box Adversarial Attacks.
Transferring Robustness for Graph Neural Network Against Poisoning Attacks.
2019-08-19
Universal Adversarial Triggers for NLP.
Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses.
Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries.
2019-08-18
On the Robustness of Human Pose Estimation.
Adversarial Defense by Suppressing High-frequency Components.
2019-08-17
Verification of Neural Network Control Policy Under Persistent Adversarial Perturbation.
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks.
2019-08-16
Adversarial point perturbations on 3D objects.
2019-08-14
Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once.
AdvFaces: Adversarial Face Synthesis.
DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation.
2019-08-12
On Defending Against Label Flipping Attacks on Malware Detection Systems.
Adversarial Neural Pruning with Latent Vulnerability Suppression.
2019-08-09
On the Adversarial Robustness of Neural Networks without Weight Transport.
2019-08-08
Defending Against Adversarial Iris Examples Using Wavelet Decomposition.
Universal Adversarial Audio Perturbations.
2019-08-07
Improved Adversarial Robustness by Reducing Open Space Risk via Tent Activations.
Investigating Decision Boundaries of Trained Neural Networks.
2019-08-06
Explaining Deep Neural Networks Using Spectrum-Based Fault Localization.
MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks.
BlurNet: Defense by Filtering the Feature Maps.
2019-08-05
Random Directional Attack for Fooling Deep Neural Networks.
Adversarial Self-Defense for Cycle-Consistent GANs.
Automated Detection System for Adversarial Examples with High-Frequency Noises Sieve.
A principled approach for generating adversarial images under non-smooth dissimilarity metrics.
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems.
2019-08-04
A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Models.
2019-08-03
Exploring the Robustness of NMT Systems to Nonsensical Inputs.
2019-08-02
AdvGAN++ : Harnessing latent layers for adversary generation.
2019-08-01
Black-box Adversarial ML Attack on Modulation Classification.
Robustifying deep networks for image segmentation.
2019-07-31
Adversarial Robustness Curves.
Optimal Attacks on Reinforcement Learning Policies.
2019-07-30
Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation.
Not All Adversarial Examples Require a Complex Defense: Identifying Over-optimized Adversarial Examples with IQR-based Logit Thresholding.
2019-07-28
Are Odds Really Odd? Bypassing Statistical Detection of Adversarial Examples.
2019-07-27
Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment.
2019-07-26
Understanding Adversarial Robustness: The Trade-off between Minimum and Average Margin.
On the Design of Black-box Adversarial Examples by Leveraging Gradient-free Optimization and Operator Splitting Method.
2019-07-24
Towards Adversarially Robust Object Detection.
Joint Adversarial Training: Incorporating both Spatial and Pixel Attacks.
Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training.
Weakly Supervised Localization using Min-Max Entropy: an Interpretable Framework.
Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems.
2019-07-23
Enhancing Adversarial Example Transferability with an Intermediate Level Attack.
2019-07-21
Characterizing Attacks on Deep Reinforcement Learning.
2019-07-17
Connecting Lyapunov Control Theory to Adversarial Attacks.
Robustness properties of Facebook's ResNeXt WSL models.
Constrained Concealment Attacks against Reconstruction-based Anomaly Detectors in Industrial Control Systems.
2019-07-16
Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods.
Latent Adversarial Defence with Boundary-guided Generation.
Natural Adversarial Examples.
Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving.
Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analytics.
2019-07-15
Graph Interpolating Activation Improves Both Natural and Robust Accuracies in Data-Efficient Deep Learning.
Recovery Guarantees for Compressible Signals with Adversarial Noise.
2019-07-14
Measuring the Transferability of Adversarial Examples.
2019-07-12
Unsupervised Adversarial Attacks on Deep Feature-based Retrieval with GAN.
Stateful Detection of Black-Box Adversarial Attacks.
Generative Modeling by Estimating Gradients of the Data Distribution.
2019-07-11
Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn.
Adversarial Objects Against LiDAR-Based Autonomous Driving Systems.
2019-07-10
Metamorphic Detection of Adversarial Examples in Deep Learning Models With Affine Transformations.
2019-07-09
PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving.
2019-07-06
Affine Disentangled GAN for Interpretable and Robust AV Perception.
2019-07-05
Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructions.
2019-07-04
Adversarial Robustness through Local Linearization.
Adversarial Attacks in Sound Event Classification.
2019-07-03
Robust Synthesis of Adversarial Visual Examples Using a Deep Image Prior.
Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack.
2019-07-02
Efficient Cyber Attacks Detection in Industrial Control Systems Using Lightweight Neural Networks and PCA.
Treant: Training Evasion-Aware Decision Trees.
2019-07-01
Comment on "Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network".
Diminishing the Effect of Adversarial Perturbations via Refining Feature Representation.
Accurate, reliable and fast robustness evaluation.
2019-06-30
Fooling a Real Car with Adversarial Traffic Signs.
2019-06-28
Using Self-Supervised Learning Can Improve Model Robustness and Uncertainty.
Certifiable Robustness and Robust Training for Graph Convolutional Networks.
Learning to Cope with Adversarial Attacks.
Robustness Guarantees for Deep Neural Networks on Videos.
2019-06-27
Using Intuition from Empirical Properties to Simplify Adversarial Training Defense.
Adversarial Robustness via Label-Smoothing.
Evolving Robust Neural Architectures to Defend from Adversarial Attacks.
2019-06-26
The Adversarial Robustness of Sampling.
Defending Adversarial Attacks by Correcting logits.
2019-06-25
Quantitative Verification of Neural Networks And its Security Applications.
Are Adversarial Perturbations a Showstopper for ML-Based CAD? A Case Study on CNN-Based Lithographic Hotspot Detection.
2019-06-24
Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signals.
2019-06-22
Defending Against Adversarial Examples with K-Nearest Neighbor.
2019-06-21
Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations.
A Fourier Perspective on Model Robustness in Computer Vision.
Evolution Attack On Neural Networks.
Adversarial Examples to Fool Iris Recognition Systems.
A Cyclically-Trained Adversarial Network for Invariant Representation Learning.
2019-06-20
On Physical Adversarial Patches for Object Detection.
2019-06-19
Catfish Effect Between Internal and External Attackers:Being Semi-honest is Helpful.
Improving the robustness of ImageNet classifiers using elements of human visual cognition.
A unified view on differential privacy and robustness to adversarial examples.
Convergence of Adversarial Training in Overparametrized Networks.
Global Adversarial Attacks for Assessing Deep Learning Robustness.
Cloud-based Image Classification Service Is Not Robust To Simple Transformations: A Forgotten Battlefield.
SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing.
2019-06-17
Adversarial attacks on Copyright Detection Systems.
Improving Black-box Adversarial Attacks with a Transfer-based Prior.
The Attack Generator: A Systematic Approach Towards Constructing Adversarial Attacks.
2019-06-16
Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Accuracy.
Defending Against Adversarial Attacks Using Random Forests.
2019-06-15
Representation Quality Of Neural Networks Links To Adversarial Attacks and Defences.
2019-06-14
Adversarial Training Can Hurt Generalization.
Towards Compact and Robust Deep Neural Networks.
Perceptual Based Adversarial Audio Attacks.
Copy and Paste: A Simple But Effective Initialization Method for Black-Box Adversarial Attacks.
Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks.
Towards Stable and Efficient Training of Verifiably Robust Neural Networks.
Adversarial Robustness Assessment: Why both $L_0$ and $L_\infty$ Attacks Are Necessary.
2019-06-13
A Computationally Efficient Method for Defending Adversarial Deep Learning Attacks.
Lower Bounds for Adversarially Robust PAC Learning.
2019-06-12
Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers.
2019-06-11
Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks.
Mimic and Fool: A Task Agnostic Adversarial Attack.
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks.
2019-06-10
E-LPIPS: Robust Perceptual Image Similarity via Random Transformation Ensembles.
Evaluating the Robustness of Nearest Neighbor Classifiers: A Primal-Dual Perspective.
Robustness Verification of Tree-based Models.
Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective.
2019-06-09
On the Vulnerability of Capsule Networks to Adversarial Attacks.
Intriguing properties of adversarial training.
Improved Adversarial Robustness via Logit Regularization Methods.
Attacking Graph Convolutional Networks via Rewiring.
Towards A Unified Min-Max Framework for Adversarial Exploration and Robustness.
Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers.
2019-06-08
Strategies to architect AI Safety: Defense to guard AI from Adversaries.
Sensitivity of Deep Convolutional Networks to Gabor Noise.
ML-LOO: Detecting Adversarial Examples with Feature Attribution.
Provably Robust Boosted Decision Stumps and Trees against Adversarial Attacks.
Making targeted black-box evasion attacks effective and efficient.
Defending Against Universal Attacks Through Selective Feature Regeneration.
2019-06-07
A cryptographic approach to black box adversarial machine learning.
Using learned optimizers to make models robust to input noise.
Efficient Project Gradient Descent for Ensemble Adversarial Attack.
Inductive Bias of Gradient Descent based Adversarial Training on Separable Data.
Adversarial Explanations for Understanding Image Classification Decisions and Improved Neural Network Robustness.
Robustness for Non-Parametric Classification: A Generic Attack and Defense.
2019-06-06
Robust Attacks against Multiple Classifiers.
Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation.
Understanding Adversarial Behavior of DNNs by Disentangling Non-Robust and Robust Components in Performance Metric.
Should Adversarial Attacks Use Pixel p-Norm?
Image Synthesis with a Single (Robust) Classifier.
2019-06-05
MNIST-C: A Robustness Benchmark for Computer Vision.
Enhancing Gradient-based Attacks with Symbolic Intervals.
Query-efficient Meta Attack to Deep Neural Networks.
c-Eval: A Unified Metric to Evaluate Feature-based Explanations via Perturbation.
Multi-way Encoding for Robustness.
2019-06-04
Adversarial Training is a Form of Data-dependent Operator Norm Regularization.
2019-06-03
Adversarial Exploitation of Policy Imitation.
RL-Based Method for Benchmarking the Adversarial Resilience and Robustness of Deep Reinforcement Learning Policies.
Adversarial Risk Bounds for Neural Networks through Sparsity based Compression.
The Adversarial Machine Learning Conundrum: Can The Insecurity of ML Become The Achilles' Heel of Cognitive Networks?
Adversarial Robustness as a Prior for Learned Representations.
Achieving Generalizable Robustness of Deep Neural Networks by Stability Training.
A Surprising Density of Illusionable Natural Speech.
Fast and Stable Interval Bounds Propagation for Training Verifiably Robust Models.
Understanding the Limitations of Conditional Generative Models.
2019-06-02
Adversarially Robust Generalization Just Requires More Unlabeled Data.
2019-06-01
Adversarial Examples for Edge Detection: They Exist, and They Transfer.
Perceptual Evaluation of Adversarial Attacks for CNN-based Image Classification.
Enhancing Transformation-based Defenses using a Distribution Classifier.
2019-05-31
Unlabeled Data Improves Adversarial Robustness.
Reverse KL-Divergence Training of Prior Networks: Improved Uncertainty and Adversarial Robustness.
Are Labels Required for Improving Adversarial Robustness?
2019-05-30
Real-Time Adversarial Attacks.
Residual Networks as Nonlinear Systems: Stability Analysis using Linearization.
Identifying Classes Susceptible to Adversarial Attacks.
Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness.
Interpretable Adversarial Training for Text.
2019-05-29
Bandlimiting Neural Networks Against Adversarial Attacks.
Misleading Authorship Attribution of Source Code using Adversarial Learning.
Securing Connected & Autonomous Vehicles: Challenges Posed by Adversarial Machine Learning and The Way Forward.
Functional Adversarial Attacks.
CopyCAT: Taking Control of Neural Policies with Constant Attacks.
2019-05-28
ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation.
Adversarial Attacks on Remote User Authentication Using Behavioural Mouse Dynamics.
Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss.
Snooping Attacks on Deep Reinforcement Learning.
High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks.
Expected Tight Bounds for Robust Training.
Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness.
Cross-Domain Transferability of Adversarial Perturbations.
Certifiably Robust Interpretation in Deep Learning.
2019-05-27
Brain-inspired reverse adversarial examples.
Label Universal Targeted Attack.
Divide-and-Conquer Adversarial Detection.
Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking.
Provable robustness against all adversarial $l_p$-perturbations for $p\geq 1$.
Scaleable input gradient regularization for adversarial robustness.
Combating Adversarial Misspellings with Robust Word Recognition.
Analyzing the Interpretability Robustness of Self-Explaining Models.
Adversarially Robust Learning Could Leverage Computational Hardness.
Unsupervised Euclidean Distance Attack on Network Embedding.
2019-05-26
State-Reification Networks: Improving Generalization by Modeling the Distribution of Hidden Representations.
Non-Determinism in Neural Networks for Adversarial Robustness.
Purifying Adversarial Perturbation with Adversarially Trained Auto-encoders.
Rearchitecting Classification Frameworks For Increased Robustness.
Robust Classification using Robust Feature Augmentation.
Generalizable Adversarial Attacks Using Generative Models.
2019-05-25
Trust but Verify: An Information-Theoretic Explanation for the Adversarial Fragility of Machine Learning Systems, and a General Defense against Adversarial Attacks.
Adversarial Distillation for Ordered Top-k Attacks.
Adversarial Policies: Attacking Deep Reinforcement Learning.
Rethinking Softmax Cross-Entropy Loss for Adversarial Robustness.
2019-05-24
Robustness to Adversarial Perturbations in Learning from Incomplete Data.
Enhancing Adversarial Defense by k-Winners-Take-All.
Power up! Robust Graph Convolutional Network via Graph Powering.
2019-05-23
A Direct Approach to Robust Deep Learning Using Adversarial Networks.
PHom-GeM: Persistent Homology for Generative Models.
Thwarting finite difference adversarial attacks with output randomization.
Interpreting Adversarially Trained Convolutional Neural Networks.
Adversarially Robust Distillation.
2019-05-22
Convergence and Margin of Adversarial Training on Separable Data.
Detecting Adversarial Examples and Other Misclassifications in Neural Networks by Introspection.
2019-05-21
DoPa: A Fast and Comprehensive CNN Defense Methodology against Physical Adversarial Attacks.
2019-05-20
Adversarially robust transfer learning.
2019-05-19
Testing DNN Image Classifiers for Confusion & Bias Errors.
2019-05-18
What Do Adversarially Robust Models Look At?
Taking Care of The Discretization Problem:A Black-Box Adversarial Image Attack in Discrete Integer Domain.
2019-05-17
POPQORN: Quantifying Robustness of Recurrent Neural Networks.
A critique of the DeepSec Platform for Security Analysis of Deep Learning Models.
Simple Black-box Adversarial Attacks.
2019-05-16
Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization.
2019-05-15
On Norm-Agnostic Robustness of Adversarial Training.
An Efficient Pre-processing Method to Eliminate Adversarial Effects.
2019-05-14
Robustification of deep net classifiers by key based diversified aggregation with pre-filtering.
2019-05-13
Adversarial Examples for Electrocardiograms.
Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networks.
Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models.
2019-05-11
Moving Target Defense for Deep Visual Sensing against Adversarial Examples.
2019-05-10
Interpreting and Evaluating Neural Network Robustness.
On the Connection Between Adversarial Robustness and Saliency Map Interpretability.
Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables.
2019-05-09
Adversarial Defense Framework for Graph Neural Network.
Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain.
Exploring the Hyperparameter Landscape of Adversarial Robustness.
Learning Interpretable Features via Adversarially Robust Optimization.
Universal Adversarial Perturbations for Speech Recognition Systems.
2019-05-08
ROSA: Robust Salient Object Detection against Adversarial Attacks.
Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction.
Adversarial Image Translation: Unrestricted Adversarial Examples in Face Recognition Systems.
2019-05-07
A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks.
Representation of White- and Black-Box Adversarial Examples in Deep Neural Networks and Humans: A Functional Magnetic Resonance Imaging Study.
An Empirical Evaluation of Adversarial Robustness under Transfer Learning.
Adaptive Generation of Unrestricted Adversarial Inputs.
2019-05-06
Batch Normalization is a Cause of Adversarial Vulnerability.
Adversarial Examples Are Not Bugs, They Are Features.
2019-05-05
Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples.
2019-05-03
Transfer of Adversarial Robustness Between Perturbation Types.
2019-05-02
Adversarial Training with Voronoi Constraints.
Weight Map Layer for Noise and Adversarial Attack Robustness.
You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle.
2019-05-01
POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm.
Dropping Pixels for Adversarial Robustness.
NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks.
2019-04-30
Test Selection for Deep Learning Systems.
Detecting Adversarial Examples through Nonlinear Dimensionality Reduction.
2019-04-29
Adversarial Training for Free!
Adversarial Training and Robustness for Multiple Perturbations.
2019-04-27
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks.
2019-04-26
Robustness Verification of Support Vector Machines.
2019-04-24
A Robust Approach for Securing Audio Classification Against Adversarial Attacks.
Physical Adversarial Textures that Fool Visual Object Tracking.
2019-04-23
Minimizing Perceived Image Quality Loss Through Adversarial Attack Scoping.
2019-04-22
blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness.
Using Videos to Evaluate Image Model Robustness.
2019-04-21
Beyond Explainability: Leveraging Interpretability for Improved Adversarial Learning.
2019-04-20
Can Machine Learning Model with Static Features be Fooled: an Adversarial Machine Learning Approach.
2019-04-19
Salient Object Detection in the Deep Learning Era: An In-Depth Survey.
2019-04-18
Fooling automated surveillance cameras: adversarial patches to attack person detection.
2019-04-17
ZK-GanDef: A GAN based Zero Knowledge Adversarial Training Defense for Neural Networks.
Defensive Quantization: When Efficiency Meets Robustness.
Interpreting Adversarial Examples with Attributes.
Adversarial Defense Through Network Profiling Based Path Extraction.
Gotta Catch 'Em All: Using Concealed Trapdoors to Detect Adversarial Attacks on Neural Networks.
Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers.
2019-04-16
Reducing Adversarial Example Transferability Using Gradient Regularization.
AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples.
2019-04-15
Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction.
Influence of Control Parameters and the Size of Biomedical Image Datasets on the Success of Adversarial Attacks.
2019-04-13
Exploiting Vulnerabilities of Load Forecasting Through Adversarial Attacks.
2019-04-12
Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense.
Generating Minimal Adversarial Perturbations with Integrated Adaptive Gradients.
Evaluating Robustness of Deep Image Super-Resolution against Adversarial Attacks.
Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks.
Unrestricted Adversarial Examples via Semantic Manipulation.
2019-04-11
Black-Box Decision based Adversarial Attack with Symmetric $\alpha$-stable Distribution.
2019-04-10
Learning to Generate Synthetic Data via Compositing.
Black-box Adversarial Attacks on Video Recognition Models.
2019-04-09
Generation & Evaluation of Adversarial Examples for Malware Obfuscation.
2019-04-08
Efficient Decision-based Black-box Adversarial Attacks on Face Recognition.
A Target-Agnostic Attack on Deep Models: Exploiting Security Vulnerabilities of Transfer Learning.
2019-04-07
JumpReLU: A Retrofit Defense Strategy for Adversarial Attacks.
Malware Evasion Attack and Defense.
2019-04-06
On Training Robust PDF Malware Classifiers.
2019-04-05
Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks.
2019-04-04
White-to-Black: Efficient Distillation of Black-Box Adversarial Attacks.
Minimum Uncertainty Based Detection of Adversaries in Deep Neural Networks.
2019-04-03
Understanding the efficacy, reliability and resiliency of computer vision techniques for malware detection and future research directions.
Interpreting Adversarial Examples by Activation Promotion and Suppression.
HopSkipJumpAttack: A Query-Efficient Decision-Based Attack.
Summit: Scaling Deep Learning Interpretability by Visualizing Activation and Attribution Summarizations.
2019-04-02
Adversarial Attacks against Deep Saliency Models.
2019-04-01
Curls & Whey: Boosting Black-Box Adversarial Attacks.
Robustness of 3D Deep Learning in an Adversarial Setting.
Defending against adversarial attacks by randomized diversification.
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks.
Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses.
2019-03-31
On the Vulnerability of CNN Classifiers in EEG-Based BCIs.
2019-03-29
Adversarial Robustness vs Model Compression, or Both?
2019-03-28
Benchmarking Neural Network Robustness to Common Corruptions and Perturbations.
Smooth Adversarial Examples.
2019-03-27
Bridging Adversarial Robustness and Gradient Interpretability.
Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks.
Rallying Adversarial Techniques against Deep Learning for Network Security.
Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems.
2019-03-26
On the Adversarial Robustness of Multivariate Robust Estimation.
A geometry-inspired decision-based attack.
2019-03-25
Defending against Whitebox Adversarial Attacks via Randomized Discretization.
Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness.
The LogBarrier adversarial attack: making effective use of decision boundary information.
Robust Neural Networks using Randomized Adversarial Training.
2019-03-24
A Formalization of Robustness for Deep Neural Networks.
Variational Inference with Latent Space Quantization for Adversarial Resilience.
2019-03-23
Improving Adversarial Robustness via Guided Complement Entropy.
2019-03-22
Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition.
Fast Bayesian Uncertainty Estimation and Reduction of Batch Normalized Single Image Super-Resolution Network. (45%)
2019-03-21
Adversarial camera stickers: A physical camera-based attack on deep learning systems.
2019-03-20
Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes.
2019-03-19
On the Robustness of Deep K-Nearest Neighbors.
2019-03-18
Generating Adversarial Examples With Conditional Generative Adversarial Net.
Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems.
2019-03-17
Adversarial Attacks on Deep Neural Networks for Time Series Classification.
2019-03-15
On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models.
On Certifying Non-uniform Bound against Adversarial Attacks.
2019-03-14
A Research Agenda: Dynamic Models to Defend Against Correlated Attacks.
Attribution-driven Causal Analysis for Detection of Adversarial Examples.
2019-03-13
Adversarial attacks against Fact Extraction and VERification.
2019-03-12
Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models.
2019-03-11
Can Adversarial Network Attack be Defended?
2019-03-09
Manifold Preserving Adversarial Learning.
2019-03-07
Attack Type Agnostic Perceptual Enhancement of Adversarial Images.
Out-domain examples for generative models.
2019-03-06
GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier.
2019-03-05
Statistical Guarantees for the Robustness of Bayesian Neural Networks.
L 1-norm double backpropagation adversarial defense.
2019-03-04
Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search.
The Vulnerabilities of Graph Convolutional Networks: Stronger Attacks and Defensive Techniques.
Complement Objective Training.
Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming.
2019-03-03
A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations.
2019-03-01
Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications.
PuVAE: A Variational Autoencoder to Purify Adversarial Examples.
Attacking Graph-based Classification via Manipulating the Graph Structure.
2019-02-28
On the Effectiveness of Low Frequency Perturbations.
Enhancing the Robustness of Deep Neural Networks by Boundary Conditional GAN.
Towards Understanding Adversarial Examples Systematically: Exploring Data Size, Task and Model Factors.
Adversarial Attack and Defense on Point Sets.
2019-02-27
Adversarial Attacks on Time Series.
Robust Decision Trees Against Adversarial Examples.
Tensor Dropout for Robust Learning.
The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection.
A Distributionally Robust Optimization Method for Adversarial Multiple Kernel Learning. (76%)
AutoGAN-based Dimension Reduction for Privacy Preservation. (1%)
2019-02-26
Disentangled Deep Autoencoding Regularization for Robust Image Classification.
Analyzing Deep Neural Networks with Symbolic Propagation: Towards Higher Precision and Faster Verification.
2019-02-25
Verification of Non-Linear Specifications for Neural Networks.
Adversarial attacks hidden in plain sight.
2019-02-24
MaskDGA: A Black-box Evasion Technique Against DGA Classifiers and Adversarial Defenses.
Adversarial Reinforcement Learning under Partial Observability in Software-Defined Networking.
2019-02-23
Re-evaluating ADEM: A Deeper Look at Scoring Dialogue Responses.
A Deep, Information-theoretic Framework for Robust Biometric Recognition.
2019-02-22
Adversarial Attacks on Graph Neural Networks via Meta Learning.
Physical Adversarial Attacks Against End-to-End Autoencoder Communication Systems.
A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks.
2019-02-21
On the Sensitivity of Adversarial Robustness to Input Data Distributions.
Quantifying Perceptual Distortion of Adversarial Examples.
Wasserstein Adversarial Examples via Projected Sinkhorn Iterations.
2019-02-20
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch.
Perceptual Quality-preserving Black-Box Attack against Deep Learning Image Classifiers.
Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure.
2019-02-19
There are No Bit Parts for Sign Bits in Black-Box Attacks.
2019-02-18
On Evaluating Adversarial Robustness.
AuxBlocks: Defense Adversarial Example via Auxiliary Blocks.
Mockingbird: Defending Against Deep-Learning-Based Website Fingerprinting Attacks with Adversarial Traces.
2019-02-16
Mitigation of Adversarial Examples in RF Deep Classifiers Utilizing AutoEncoder Pre-training.
Adversarial Examples in RF Deep Learning: Detection of the Attack and its Physical Robustness.
2019-02-15
DeepFault: Fault Localization for Deep Neural Networks.
2019-02-14
Can Intelligent Hyperparameter Selection Improve Resistance to Adversarial Examples?
2019-02-13
The Odds are Odd: A Statistical Test for Detecting Adversarial Examples.
2019-02-12
Examining Adversarial Learning against Graph-based IoT Malware Detection Systems.
2019-02-11
Adversarial Samples on Android Malware Detection Systems for IoT Systems.
A Survey: Towards a Robust Deep Neural Network in Text Domain.
2019-02-09
Model Compression with Adversarial Robustness: A Unified Optimization Framework.
When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networks.
2019-02-08
Minimal Images in Deep Neural Networks: Fragile Object Recognition in Natural Images.
Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis.
Discretization based Solutions for Secure Machine Learning against Adversarial Attacks.
2019-02-07
Robustness Of Saak Transform Against Adversarial Attacks.
Certified Adversarial Robustness via Randomized Smoothing.
2019-02-06
Fooling Neural Network Interpretations via Adversarial Model Manipulation.
Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples.
2019-02-05
Fatal Brain Damage.
2019-02-04
Theoretical evidence for adversarial robustness through randomization.
Predictive Uncertainty Quantification with Compound Density Networks.
Is Spiking Secure? A Comparative Study on the Security Vulnerabilities of Spiking and Deep Neural Networks.
2019-02-01
Robustness Certificates Against Adversarial Examples for ReLU Networks.
Natural and Adversarial Error Detection using Invariance to Image Transformations.
Adaptive Gradient for Adversarial Perturbations Generation.
Robustness of Generalized Learning Vector Quantization Models against Adversarial Attacks.
The Efficacy of SHIELD under Different Threat Models.
2019-01-31
A New Family of Neural Networks Provably Resistant to Adversarial Attacks.
Training Artificial Neural Networks by Generalized Likelihood Ratio Method: Exploring Brain-like Learning to Improve Robustness.
2019-01-30
A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance.
Augmenting Model Robustness with Transformation-Invariant Attacks.
2019-01-29
Adversarial Examples Are a Natural Consequence of Test Error in Noise.
RED-Attack: Resource Efficient Decision based Attack for Machine Learning.
Reliable Smart Road Signs.
On the Effect of Low-Rank Weights on Adversarial Robustness of Neural Networks.
Adversarial Metric Attack and Defense for Person Re-identification.
2019-01-28
Improving Adversarial Robustness of Ensembles with Diversity Training.
CapsAttacks: Robust and Imperceptible Adversarial Attacks on Capsule Networks.
Defense Methods Against Adversarial Examples for Recurrent Neural Networks.
Using Pre-Training Can Improve Model Robustness and Uncertainty.
2019-01-27
An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers.
Characterizing the Shape of Activation Space in Deep Neural Networks.
Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models.
2019-01-26
A Black-box Attack on Neural Networks Based on Swarm Evolutionary Algorithm.
Weighted-Sampling Audio Adversarial Example Attack.
2019-01-25
Generative Adversarial Networks for Black-Box API Attacks with Limited Training Data.
Improving Adversarial Robustness via Promoting Ensemble Diversity.
2019-01-24
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples.
Theoretically Principled Trade-off between Robustness and Accuracy.
2019-01-23
SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systems.
Sitatapatra: Blocking the Transfer of Adversarial Samples.
2019-01-21
Universal Rules for Fooling Deep Neural Networks based Text Classification.
Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey.
Sensitivity Analysis of Deep Neural Networks.
Perception-in-the-Loop Adversarial Examples.
2019-01-17
Easy to Fool? Testing the Anti-evasion Capabilities of PDF Malware Scanners.
2019-01-15
The Limitations of Adversarial Training and the Blind-Spot Attack.
2019-01-13
Generating Adversarial Perturbation with Root Mean Square Gradient.
2019-01-12