A Complete List of All (arXiv) Adversarial Example Papers
by Nicholas Carlini 2019-06-15
It can be hard to stay up-to-date on the published papers in the field of adversarial examples, where we have seen massive growth in the number of papers written each year. I have been somewhat religiously keeping track of these papers for the last few years, and realized it may be helpful for others to release this list.
The only requirement I used for selecting papers for this list is that it is primarily a paper about adversarial examples, or extensively uses adversarial examples. Due to the sheer quantity of papers, I can't guarantee that I actually have found all of them.
But I did try.
I also may have included papers that don't match these criteria (and are about something different instead), or made inconsistent judgement calls as to whether or not any given paper is mainly an adversarial example paper. Send me an email if something is wrong and I'll correct it.
As a result, this list is completely un-filtered. Everything that mainly presents itself as an adversarial example paper is listed here; I pass no judgement of quality. For a curated list of papers that I think are excellent and worth reading, see the Adversarial Machine Learning Reading List.
One final note about the data. This list automatically updates with new papers, even before I get a chance to manually filter through them. I do this filtering roughly twice a week, and it's then that I'll remove the ones that aren't related to adversarial examples. As a result, there may be some false positives on the most recent few entries. The new un-verified entries will have a probability indicated that my simplistic (but reasonably well calibrated) bag-of-words classifier believes the given paper is actually about adversarial examples.
The full paper list appears below. I've also released a TXT file (and a TXT file with abstracts) and a JSON file with the same data. If you do anything interesting with this data I'd be happy to hear from you what it was.
Paper List
2019-07-17
Robustness properties of Facebook's ResNeXt WSL models. (92%)
Real-time Evasion Attacks with Physical Constraints on Deep Learning-based Anomaly Detectors in Industrial Control Systems. (87%)
Connecting Lyapunov Control Theory to Adversarial Attacks. (16%)
2019-07-16
Latent Adversarial Defence with Boundary-guided Generation. (99%)
Natural Adversarial Examples. (81%)
Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. (76%)
Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analytics. (64%)
Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods. (8%)
A General Framework for Uncertainty Estimation in Deep Learning. (3%)
2019-07-15
Recovery Guarantees for Compressible Signals with Adversarial Noise. (99%)
Graph Interpolating Activation Improves Both Natural and Robust Accuracies in Data-Efficient Deep Learning. (96%)
2019-07-14
Measuring the Transferability of Adversarial Examples. (99%)
2019-07-12
Stateful Detection of Black-Box Adversarial Attacks. (99%)
Unsupervised Adversarial Attacks on Deep Feature-based Retrieval with GAN. (96%)
Generative Modeling by Estimating Gradients of the Data Distribution. (10%)
2019-07-11
Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn. (99%)
Adversarial Objects Against LiDAR-Based Autonomous Driving Systems. (99%)
Computational Concentration of Measure: Optimal Bounds, Reductions, and More. (3%)
2019-07-10
Metamorphic Detection of Adversarial Examples in Deep Learning Models With Affine Transformations.
2019-07-09
Generating Adversarial Fragments with Adversarial Networks for Physical-world Implementation.
2019-07-06
Affine Disentangled GAN for Interpretable and Robust AV Perception. (92%)
2019-07-05
Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructions.
2019-07-04
Adversarial Robustness through Local Linearization.
Adversarial Attacks in Sound Event Classification.
2019-07-03
Robust Synthesis of Adversarial Visual Examples Using a Deep Image Prior.
Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack.
2019-07-02
Treant: Training Evasion-Aware Decision Trees.
2019-07-01
Comment on "Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network".
Diminishing the Effect of Adversarial Perturbations via Refining Feature Representation.
Accurate, reliable and fast robustness evaluation.
2019-06-30
Fooling a Real Car with Adversarial Traffic Signs.
2019-06-28
Using Self-Supervised Learning Can Improve Model Robustness and Uncertainty.
Certifiable Robustness and Robust Training for Graph Convolutional Networks.
Learning to Cope with Adversarial Attacks.
Robustness Guarantees for Deep Neural Networks on Videos.
2019-06-27
Adversarial Robustness via Adversarial Label-Smoothing.
Using Intuition from Empirical Properties to Simplify Adversarial Training Defense.
Evolving Robust Neural Architectures to Defend from Adversarial Attacks.
2019-06-26
The Adversarial Robustness of Sampling.
Defending Adversarial Attacks by Correcting logits.
2019-06-25
Quantitative Verification of Neural Networks And its Security Applications.
Are Adversarial Perturbations a Showstopper for ML-Based CAD? A Case Study on CNN-Based Lithographic Hotspot Detection.
2019-06-24
Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signals.
2019-06-22
Defending Against Adversarial Examples with K-Nearest Neighbor.
2019-06-21
Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations.
Adversarial Examples to Fool Iris Recognition Systems.
A Fourier Perspective on Model Robustness in Computer Vision.
Evolution Attack On Neural Networks.
2019-06-20
On Physical Adversarial Patches for Object Detection.
2019-06-19
Catfish Effect Between Internal and External Attackers:Being Semi-honest is Helpful.
Improving the robustness of ImageNet classifiers using elements of human visual cognition.
A unified view on differential privacy and robustness to adversarial examples.
Convergence of Adversarial Training in Overparametrized Networks.
Global Adversarial Attacks for Assessing Deep Learning Robustness.
Cloud-based Image Classification Service Is Not Robust To Simple Transformations: A Forgotten Battlefield.
SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing.
2019-06-17
Adversarial attacks on Copyright Detection Systems.
Improving Black-box Adversarial Attacks with a Transfer-based Prior.
The Attack Generator: A Systematic Approach Towards Constructing Adversarial Attacks.
2019-06-16
Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Accuracy.
Defending Against Adversarial Attacks Using Random Forests.
2019-06-15
Uncovering Why Deep Neural Networks Lack Robustness: Representation Metrics that Link to Adversarial Attacks.
2019-06-14
Adversarial Training Can Hurt Generalization.
Towards Compact and Robust Deep Neural Networks.
Perceptual Based Adversarial Audio Attacks.
Copy and Paste: A Simple But Effective Initialization Method for Black-Box Adversarial Attacks.
Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks.
Towards Stable and Efficient Training of Verifiably Robust Neural Networks.
Model Agnostic Dual Quality Assessment for Adversarial Machine Learning and an Analysis of Current Neural Networks and Defenses.
2019-06-13
A Computationally Efficient Method for Defending Adversarial Deep Learning Attacks.
Lower Bounds for Adversarially Robust PAC Learning.
2019-06-11
Mimic and Fool: A Task Agnostic Adversarial Attack.
Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks.
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks.
2019-06-10
Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective.
E-LPIPS: Robust Perceptual Image Similarity via Random Transformation Ensembles.
Evaluating the Robustness of Nearest Neighbor Classifiers: A Primal-Dual Perspective.
Robustness Verification of Tree-based Models.
2019-06-09
Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers.
Intriguing properties of adversarial training.
Attacking Graph Convolutional Networks via Rewiring.
Improved Adversarial Robustness via Logit Regularization Methods.
On the Vulnerability of Capsule Networks to Adversarial Attacks.
Beyond Adversarial Training: Min-Max Optimization in Adversarial Attack and Defense.
2019-06-08
Provably Robust Boosted Decision Stumps and Trees against Adversarial Attacks.
ML-LOO: Detecting Adversarial Examples with Feature Attribution.
Strategies to architect AI Safety: Defense to guard AI from Adversaries.
Sensitivity of Deep Convolutional Networks to Gabor Noise.
Defending against Adversarial Attacks through Resilient Feature Regeneration.
Making targeted black-box evasion attacks effective and efficient.
2019-06-07
Using learned optimizers to make models robust to input noise.
Efficient Project Gradient Descent for Ensemble Adversarial Attack.
Adversarial Examples for Non-Parametric Methods: Attacks, Defenses and Large Sample Limits.
A cryptographic approach to black box adversarial machine learning.
Inductive Bias of Gradient Descent based Adversarial Training on Separable Data.
Reliable Classification Explanations via Adversarial Attacks on Robust Networks.
2019-06-06
Computer Vision with a Single (Robust) Classifier.
Robust Attacks against Multiple Classifiers.
Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation.
Understanding Adversarial Behavior of DNNs by Disentangling Non-Robust and Robust Components in Performance Metric.
Should Adversarial Attacks Use Pixel p-Norm?.
2019-06-05
Query-efficient Meta Attack to Deep Neural Networks.
MNIST-C: A Robustness Benchmark for Computer Vision.
Enhancing Gradient-based Attacks with Symbolic Intervals.
Multi-way Encoding for Robustness.
2019-06-04
Adversarial Training Generalizes Data-dependent Spectral Norm Regularization.
2019-06-03
Conditional Generative Models are not Robust.
Adversarial Exploitation of Policy Imitation.
RL-Based Method for Benchmarking the Adversarial Resilience and Robustness of Deep Reinforcement Learning Policies.
A Surprising Density of Illusionable Natural Speech.
Learning Perceptually-Aligned Representations via Adversarial Robustness.
Achieving Generalizable Robustness of Deep Neural Networks by Stability Training.
Adversarial Risk Bounds for Neural Networks through Sparsity based Compression.
The Adversarial Machine Learning Conundrum: Can The Insecurity of ML Become The Achilles' Heel of Cognitive Networks?.
Fast and Stable Interval Bounds Propagation for Training Verifiably Robust Models.
2019-06-02
Adversarially Robust Generalization Just Requires More Unlabeled Data.
2019-06-01
Adversarial Examples for Edge Detection: They Exist, and They Transfer.
Enhancing Transformation-based Defenses using a Distribution Classifier.
Perceptual Evaluation of Adversarial Attacks for CNN-based Image Classification.
2019-05-31
Unlabeled Data Improves Adversarial Robustness.
Reverse KL-Divergence Training of Prior Networks: Improved Uncertainty and Adversarial Robustness.
Are Labels Required for Improving Adversarial Robustness?.
2019-05-30
Real-Time Adversarial Attacks.
Residual Networks as Nonlinear Systems: Stability Analysis using Linearization.
Identifying Classes Susceptible to Adversarial Attacks.
Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness.
Interpretable Adversarial Training for Text.
2019-05-29
Functional Adversarial Attacks.
Bandlimiting Neural Networks Against Adversarial Attacks.
Securing Connected & Autonomous Vehicles: Challenges Posed by Adversarial Machine Learning and The Way Forward.
Misleading Authorship Attribution of Source Code using Adversarial Learning.
Targeted Attacks on Deep Reinforcement Learning Agents through Adversarial Observations.
2019-05-28
High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks.
Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness.
Certifiably Robust Interpretation in Deep Learning.
ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation.
Snooping Attacks on Deep Reinforcement Learning.
Adversarial Attacks on Remote User Authentication Using Behavioural Mouse Dynamics.
Cross-Domain Transferability of Adversarial Perturbations.
Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss.
Probabilistically True and Tight Bounds for Robust Deep Neural Network Training.
2019-05-27
Brain-inspired reverse adversarial examples.
Adversarially Robust Learning Could Leverage Computational Hardness.
Label Universal Targeted Attack.
Divide-and-Conquer Adversarial Detection.
Scaleable input gradient regularization for adversarial robustness.
Combating Adversarial Misspellings with Robust Word Recognition.
Provable robustness against all adversarial $l_p$-perturbations for $p\geq 1$.
Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking.
Unsupervised Euclidean Distance Attack on Network Embedding.
Analyzing the Interpretability Robustness of Self-Explaining Models.
2019-05-26
State-Reification Networks: Improving Generalization by Modeling the Distribution of Hidden Representations.
Non-Determinism in Neural Networks for Adversarial Robustness.
Robust Classification using Robust Feature Augmentation.
Enhancing ML Robustness Using Physical-World Constraints.
Purifying Adversarial Perturbation with Adversarially Trained Auto-encoders.
Generalizable Adversarial Attacks Using Generative Models.
2019-05-25
Trust but Verify: An Information-Theoretic Explanation for the Adversarial Fragility of Machine Learning Systems, and a General Defense against Adversarial Attacks.
Adversarial Distillation for Ordered Top-k Attacks.
Rethinking Softmax Cross-Entropy Loss for Adversarial Robustness.
Adversarial Policies: Attacking Deep Reinforcement Learning.
2019-05-24
Robustness to Adversarial Perturbations in Learning from Incomplete Data.
Resisting Adversarial Attacks by $k$-Winners-Take-All.
Power up! Robust Graph Convolutional Network against Evasion Attacks based on Graph Powering.
2019-05-23
A Direct Approach to Robust Deep Learning Using Adversarial Networks.
PHom-GeM: Persistent Homology for Generative Models.
Thwarting finite difference adversarial attacks with output randomization.
Interpreting Adversarially Trained Convolutional Neural Networks.
Adversarially Robust Distillation.
2019-05-22
Convergence and Margin of Adversarial Training on Separable Data.
Detecting Adversarial Examples and Other Misclassifications in Neural Networks by Introspection.
2019-05-21
DoPa: A Fast and Comprehensive CNN Defense Methodology against Physical Adversarial Attacks.
2019-05-20
Adversarially robust transfer learning.
2019-05-19
Testing Deep Neural Network based Image Classifiers.
2019-05-18
Things You May Not Know About Adversarial Example: A Black-box Adversarial Image Attack.
What Do Adversarially Robust Models Look At?.
2019-05-17
POPQORN: Quantifying Robustness of Recurrent Neural Networks.
Simple Black-box Adversarial Attacks.
A critique of the DeepSec Platform for Security Analysis of Deep Learning Models.
2019-05-16
Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization.
2019-05-15
War: Detecting adversarial examples by pre-processing input data.
On Norm-Agnostic Robustness of Adversarial Training.
2019-05-14
Robustification of deep net classifiers by key based diversified aggregation with pre-filtering.
2019-05-13
Adversarial Examples for Electrocardiograms.
Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networks.
Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models.
2019-05-11
Moving Target Defense for Deep Visual Sensing against Adversarial Examples.
2019-05-10
Interpreting and Evaluating Neural Network Robustness.
On the Connection Between Adversarial Robustness and Saliency Map Interpretability.
Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables.
2019-05-09
Universal Adversarial Perturbations for Speech Recognition Systems.
Learning Interpretable Features via Adversarially Robust Optimization.
Adversarial Defense Framework for Graph Neural Network.
Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain.
Exploring the Hyperparameter Landscape of Adversarial Robustness.
2019-05-08
ROSA: Robust Salient Object Detection against Adversarial Attacks.
Adversarial Image Translation: Unrestricted Adversarial Examples in Face Recognition Systems.
Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction.
2019-05-07
A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks.
An Empirical Evaluation of Adversarial Robustness under Transfer Learning.
Generating Realistic Unrestricted Adversarial Inputs using Dual-Objective GAN Training.
Representation of White- and Black-Box Adversarial Examples in Deep Neural Networks and Humans: A Functional Magnetic Resonance Imaging Study.
2019-05-06
Batch Normalization is a Cause of Adversarial Vulnerability.
Adversarial Examples Are Not Bugs, They Are Features.
2019-05-05
Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples.
2019-05-03
Transfer of Adversarial Robustness Between Perturbation Types.
2019-05-02
Adversarial Training with Voronoi Constraints.
Weight Map Layer for Noise and Adversarial Attack Robustness.
You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle.
2019-05-01
POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm.
NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks.
Dropping Pixels for Adversarial Robustness.
2019-04-30
Test Selection for Deep Learning Systems.
Detecting Adversarial Examples through Nonlinear Dimensionality Reduction.
2019-04-29
Adversarial Training and Robustness for Multiple Perturbations.
Adversarial Training for Free!.
2019-04-27
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks.
2019-04-26
Robustness Verification of Support Vector Machines.
2019-04-24
Physical Adversarial Textures that Fool Visual Object Tracking.
A Robust Approach for Securing Audio Classification Against Adversarial Attacks.
2019-04-23
Minimizing Perceived Image Quality Loss Through Adversarial Attack Scoping.
2019-04-22
Using Videos to Evaluate Image Model Robustness.
blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness.
2019-04-21
Beyond Explainability: Leveraging Interpretability for Improved Adversarial Learning.
2019-04-20
Can Machine Learning Model with Static Features be Fooled: an Adversarial Machine Learning Approach.
2019-04-19
Salient Object Detection in the Deep Learning Era: An In-Depth Survey.
2019-04-18
Fooling automated surveillance cameras: adversarial patches to attack person detection.
2019-04-17
Gotta Catch 'Em All: Using Concealed Trapdoors to Detect Adversarial Attacks on Neural Networks.
ZK-GanDef: A GAN based Zero Knowledge Adversarial Training Defense for Neural Networks.
Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers.
Defensive Quantization: When Efficiency Meets Robustness.
Interpreting Adversarial Examples with Attributes.
Adversarial Defense Through Network Profiling Based Path Extraction.
2019-04-16
Reducing Adversarial Example Transferability Using Gradient Regularization.
AT-GAN: A Generative Attack Model for Adversarial Transferring on Generative Adversarial Nets.
2019-04-15
Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction.
Influence of Control Parameters and the Size of Biomedical Image Datasets on the Success of Adversarial Attacks.
2019-04-13
Exploiting Vulnerabilities of Load Forecasting Through Adversarial Attacks.
2019-04-12
Big but Imperceptible Adversarial Perturbations via Semantic Manipulation.
Evaluating Robustness of Deep Image Super-Resolution against Adversarial Attacks.
Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense.
Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks.
Generating Minimal Adversarial Perturbations with Integrated Adaptive Gradients.
2019-04-11
Black-Box Decision based Adversarial Attack with Symmetric $\alpha$-stable Distribution.
2019-04-10
Learning to Generate Synthetic Data via Compositing.
Black-box Adversarial Attacks on Video Recognition Models.
2019-04-09
Short Paper: Creating Adversarial Malware Examples using Code Insertion.
2019-04-08
Efficient Decision-based Black-box Adversarial Attacks on Face Recognition.
A Target-Agnostic Attack on Deep Models: Exploiting Security Vulnerabilities of Transfer Learning.
2019-04-07
JumpReLU: A Retrofit Defense Strategy for Adversarial Attacks.
Malware Evasion Attack and Defense.
2019-04-06
On Training Robust PDF Malware Classifiers.
2019-04-05
Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks.
2019-04-04
Minimum Uncertainty Based Detection of Adversaries in Deep Neural Networks.
White-to-Black: Efficient Distillation of Black-Box Adversarial Attacks.
2019-04-03
Interpreting Adversarial Examples by Activation Promotion and Suppression.
Understanding the efficacy, reliability and resiliency of computer vision techniques for malware detection and future research directions.
HopSkipJumpAttack: A Query-Efficient Decision-Based Attack.
2019-04-02
Adversarial Attacks against Deep Saliency Models.
2019-04-01
Curls & Whey: Boosting Black-Box Adversarial Attacks.
Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses.
Robustness of 3D Deep Learning in an Adversarial Setting.
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks.
Defending against adversarial attacks by randomized diversification.
2019-03-31
On the Vulnerability of CNN Classifiers in EEG-Based BCIs.
2019-03-29
Second Rethinking of Network Pruning in the Adversarial Setting.
2019-03-28
Benchmarking Neural Network Robustness to Common Corruptions and Perturbations.
Smooth Adversarial Examples.
2019-03-27
Rallying Adversarial Techniques against Deep Learning for Network Security.
Bridging Adversarial Robustness and Gradient Interpretability.
Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems.
Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks.
2019-03-26
On the Adversarial Robustness of Multivariate Robust Estimation.
A geometry-inspired decision-based attack.
2019-03-25
Defending against Whitebox Adversarial Attacks via Randomized Discretization.
Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness.
The LogBarrier adversarial attack: making effective use of decision boundary information.
Robust Neural Networks using Randomized Adversarial Training.
2019-03-24
A Formalization of Robustness for Deep Neural Networks.
Variational Inference with Latent Space Quantization for Adversarial Resilience.
2019-03-23
Improving Adversarial Robustness via Guided Complement Entropy.
2019-03-22
Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition.
2019-03-21
Adversarial camera stickers: A physical camera-based attack on deep learning systems.
2019-03-20
Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes.
2019-03-19
On the Robustness of Deep K-Nearest Neighbors.
2019-03-18
Generating Adversarial Examples With Conditional Generative Adversarial Net.
Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems.
2019-03-17
Adversarial Attacks on Deep Neural Networks for Time Series Classification.
2019-03-15
On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models.
On Certifying Non-uniform Bound against Adversarial Attacks.
2019-03-14
A Research Agenda: Dynamic Models to Defend Against Correlated Attacks.
Attribution-driven Causal Analysis for Detection of Adversarial Examples.
2019-03-13
Adversarial attacks against Fact Extraction and VERification.
2019-03-12
Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models.
2019-03-11
Can Adversarial Network Attack be Defended?.
2019-03-09
Manifold Preserving Adversarial Learning.
2019-03-07
Attack Type Agnostic Perceptual Enhancement of Adversarial Images.
Out-domain examples for generative models.
2019-03-06
GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier.
2019-03-05
Statistical Guarantees for the Robustness of Bayesian Neural Networks.
L 1-norm double backpropagation adversarial defense.
2019-03-04
Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search.
The Vulnerabilities of Graph Convolutional Networks: Stronger Attacks and Defensive Techniques.
Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming.
Complement Objective Training.
2019-03-03
A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations.
2019-03-01
Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications.
PuVAE: A Variational Autoencoder to Purify Adversarial Examples.
Attacking Graph-based Classification via Manipulating the Graph Structure.
2019-02-28
On the Effectiveness of Low Frequency Perturbations.
Enhancing the Robustness of Deep Neural Networks by Boundary Conditional GAN.
Towards Understanding Adversarial Examples Systematically: Exploring Data Size, Task and Model Factors.
Adversarial Attack and Defense on Point Sets.
2019-02-27
Stochastically Rank-Regularized Tensor Regression Networks.
Adversarial Attacks on Time Series.
Communication without Interception: Defense against Deep-Learning-based Modulation Detection.
Robust Decision Trees Against Adversarial Examples.
2019-02-26
Disentangled Deep Autoencoding Regularization for Robust Image Classification.
Analyzing Deep Neural Networks with Symbolic Propagation: Towards Higher Precision and Faster Verification.
2019-02-25
Verification of Non-Linear Specifications for Neural Networks.
Adversarial attacks hidden in plain sight.
2019-02-24
MaskDGA: A Black-box Evasion Technique Against DGA Classifiers and Adversarial Defenses.
Adversarial Reinforcement Learning under Partial Observability in Software-Defined Networking.
2019-02-23
Re-evaluating ADEM: A Deeper Look at Scoring Dialogue Responses.
A Deep, Information-theoretic Framework for Robust Biometric Recognition.
2019-02-22
Adversarial Attacks on Graph Neural Networks via Meta Learning.
Physical Adversarial Attacks Against End-to-End Autoencoder Communication Systems.
A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks.
2019-02-21
On the Sensitivity of Adversarial Robustness to Input Data Distributions.
Quantifying Perceptual Distortion of Adversarial Examples.
Wasserstein Adversarial Examples via Projected Sinkhorn Iterations.
2019-02-20
Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure.
Perceptual Quality-preserving Black-Box Attack against Deep Learning Image Classifiers.
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch.
2019-02-19
There are No Bit Parts for Sign Bits in Black-Box Attacks.
2019-02-18
On Evaluating Adversarial Robustness.
AuxBlocks: Defense Adversarial Example via Auxiliary Blocks.
Mockingbird: Defending Against Deep-Learning-Based Website Fingerprinting Attacks with Adversarial Traces.
2019-02-16
Mitigation of Adversarial Examples in RF Deep Classifiers Utilizing AutoEncoder Pre-training.
Adversarial Examples in RF Deep Learning: Detection of the Attack and its Physical Robustness.
2019-02-15
DeepFault: Fault Localization for Deep Neural Networks.
2019-02-14
Can Intelligent Hyperparameter Selection Improve Resistance to Adversarial Examples?.
2019-02-13
The Odds are Odd: A Statistical Test for Detecting Adversarial Examples.
2019-02-12
Examining Adversarial Learning against Graph-based IoT Malware Detection Systems.
2019-02-11
Towards a Robust Deep Neural Network in Text Domain A Survey.
Adversarial Samples on Android Malware Detection Systems for IoT Systems.
2019-02-09
Adversarially Trained Model Compression: When Robustness Meets Efficiency.
When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networks.
2019-02-08
Minimal Images in Deep Neural Networks: Fragile Object Recognition in Natural Images.
Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis.
Discretization based Solutions for Secure Machine Learning against Adversarial Attacks.
2019-02-07
Robustness Of Saak Transform Against Adversarial Attacks.
Certified Adversarial Robustness via Randomized Smoothing.
2019-02-06
Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples.
Fooling Neural Network Interpretations via Adversarial Model Manipulation.
2019-02-05
Fatal Brain Damage.
2019-02-04
SNN under Attack: are Spiking Deep Belief Networks vulnerable to Adversarial Examples?.
Theoretical evidence for adversarial robustness through randomization.
2019-02-01
Robustness Certificates Against Adversarial Examples for ReLU Networks.
The Efficacy of SHIELD under Different Threat Models.
Natural and Adversarial Error Detection using Invariance to Image Transformations.
Adaptive Gradient for Adversarial Perturbations Generation.
Robustness of Generalized Learning Vector Quantization Models against Adversarial Attacks.
2019-01-31
A New Family of Neural Networks Provably Resistant to Adversarial Attacks.
Training Artificial Neural Networks by Generalized Likelihood Ratio Method: Exploring Brain-like Learning to Improve Robustness.
2019-01-30
A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance.
Augmenting Model Robustness with Transformation-Invariant Attacks.
2019-01-29
Metric Attack and Defense for Person Re-identification.
Adversarial Examples Are a Natural Consequence of Test Error in Noise.
On the Effect of Low-Rank Weights on Adversarial Robustness of Neural Networks.
RED-Attack: Resource Efficient Decision based Attack for Machine Learning.
Reliable Smart Road Signs.
2019-01-28
Improving Adversarial Robustness of Ensembles with Diversity Training.
CapsAttacks: Robust and Imperceptible Adversarial Attacks on Capsule Networks.
Defense Methods Against Adversarial Examples for Recurrent Neural Networks.
Using Pre-Training Can Improve Model Robustness and Uncertainty.
2019-01-27
An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers.
Characterizing the Shape of Activation Space in Deep Neural Networks.
Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models.
2019-01-26
A Black-box Attack on Neural Networks Based on Swarm Evolutionary Algorithm.
Towards Weighted-Sampling Audio Adversarial Example Attack.
2019-01-25
Generative Adversarial Networks for Black-Box API Attacks with Limited Training Data.
Improving Adversarial Robustness via Promoting Ensemble Diversity.
2019-01-24
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples.
Theoretically Principled Trade-off between Robustness and Accuracy.
2019-01-23
Sitatapatra: Blocking the Transfer of Adversarial Samples.
SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systems.
2019-01-21
Sensitivity Analysis of Deep Neural Networks.
Universal Rules for Fooling Deep Neural Networks based Text Classification.
Perception-in-the-Loop Adversarial Examples.
Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey.
2019-01-17
Easy to Fool? Testing the Anti-evasion Capabilities of PDF Malware Scanners.
2019-01-15
The Limitations of Adversarial Training and the Blind-Spot Attack.
2019-01-13
Generating Adversarial Perturbation with Root Mean Square Gradient.
2019-01-12
ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System.
2019-01-11
Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries.
2019-01-10
Characterizing and evaluating adversarial examples for Offline Handwritten Signature Verification.
Image Transformation can make Neural Networks more robust against Adversarial Examples.
2019-01-09
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers.
2019-01-08
Interpretable BoW Networks for Adversarial Example Detection.
2019-01-07
Image Super-Resolution as a Defense Against Adversarial Attacks.
2019-01-05
Fake News Detection via NLP is Vulnerable to Adversarial Attacks.
2019-01-04
Adversarial Examples Versus Cloud-based Detectors: A Black-box Empirical Study.
2019-01-02
Multi-Label Adversarial Perturbations.
Adversarial Robustness May Be at Odds With Simplicity.
2019-01-01
A Noise-Sensitivity-Analysis-Based Test Prioritization Technique for Deep Neural Networks.
2018-12-27
DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems.
2018-12-26
Adversarial Attack and Defense on Graph Data: A Survey.
2018-12-25
Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors.
A Multiversion Programming Inspired Approach to Detecting Audio Adversarial Examples.
A Data-driven Adversarial Examples Recognition Framework via Adversarial Feature Genome.
Noise Flooding for Detecting Audio Adversarial Examples Against Automatic Speech Recognition.
PPD: Permutation Phase Defense Against Adversarial Examples in Deep Learning.
2018-12-24
Deflecting 3D Adversarial Point Clouds Through Outlier-Guided Removal.
2018-12-23
Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks.
Markov Game Modeling of Moving Target Defense for Strategic Detection of Threats in Cloud Networks.
2018-12-22
AEPecker: L0 Adversarial Examples are not Strong Enough.
2018-12-21
Dissociable neural representations of adversarially perturbed images in deep neural networks and the human brain.
2018-12-19
Enhancing Robustness of Deep Neural Networks Against Adversarial Malware Samples: Principles, Framework, and AICS'2019 Challenge.
2018-12-18
PROVEN: Certifying Robustness of Neural Networks with a Probabilistic Approach.
2018-12-17
Safety and Trustworthiness of Deep Neural Networks: A Survey.
Spartan Networks: Self-Feature-Squeezing Neural Networks for increased robustness in adversarial settings.
Designing Adversarially Resilient Classifiers using Resilient Feature Engineering.
2018-12-16
Defense-VAE: A Fast and Accurate Defense against Adversarial Attacks.
2018-12-15
Perturbation Analysis of Learning Algorithms: A Unifying Perspective on Generation of Adversarial Examples.
Trust Region Based Adversarial Attack on Neural Networks.
2018-12-14
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing.
2018-12-13
TextBugger: Generating Adversarial Text Against Real-world Applications.
Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem.
2018-12-12
Thwarting Adversarial Examples: An $L_0$-RobustSparse Fourier Transform.
2018-12-11
Adversarial Framing for Image and Video Classification.
Mix'n'Squeeze: Thwarting Adaptive Adversarial Samples Using Randomized Squeezing.
2018-12-10
Defending against Universal Perturbations with Shared Adversarial Training.
2018-12-08
Learning Transferable Adversarial Examples via Ghost Networks.
Feature Denoising for Improving Adversarial Robustness.
AutoGAN: Robust Classifier Against Adversarial Attacks.
Detecting Adversarial Examples in Convolutional Neural Networks.
2018-12-07
Deep-RBF Networks Revisited: Robust Classification with Rejection.
Combatting Adversarial Attacks through Denoising and Dimensionality Reduction: A Cascaded Autoencoder Approach.
2018-12-06
Adversarial Defense of Image Classification Using a Variational Auto-Encoder.
Adversarial Attacks, Regression, and Numerical Stability Regularization.
Towards Hiding Adversarial Examples from Network Interpretation.
The Limitations of Model Uncertainty in Adversarial Settings.
Prior Networks for Detection of Adversarial Attacks.
Towards Leveraging the Information of Gradients in Optimization-based Adversarial Attack.
Max-Margin Adversarial (MMA) Training: Direct Input Space Margin Maximization through Adversarial Training.
2018-12-05
On Configurable Defense against Adversarial Example Attacks.
SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications.
Regularized Ensembles and Transferability in Adversarial Learning.
2018-12-04
Random Spiking and Systematic Evaluation of Defenses Against Adversarial Examples.
Rigorous Agent Evaluation: An Adversarial Approach to Uncover Catastrophic Failures.
2018-12-03
Disentangling Adversarial Robustness and Generalization.
Interpretable Deep Learning under Fire.
Adversarial Example Decomposition.
2018-12-02
Universal Perturbation Attack Against Image Retrieval.
Model-Reuse Attacks on Deep Learning Systems.
2018-12-01
FineFool: Fine Object Contour Attack via Attention.
SentiNet: Detecting Physical Attacks Against Deep Learning Systems.
Building robust classifiers through generation of confident out of distribution examples.
Effects of Loss Functions And Target Representations on Adversarial Robustness.
Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classification.
2018-11-30
Transferable Adversarial Attacks for Image and Video Object Detection.
ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples.
Adversarial Defense by Stratified Convolutional Sparse Coding.
2018-11-29
CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks.
Bayesian Adversarial Spheres: Bayesian Inference and Adversarial Examples in a Noiseless Setting.
Adversarial Examples as an Input-Fault Tolerance Problem.
Analyzing Federated Learning through an Adversarial Lens.
2018-11-28
Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers.
Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects.
A randomized gradient-free attack on ReLU networks.
Adversarial Machine Learning And Speech Emotion Recognition: Utilizing Generative Adversarial Networks For Robustness.
2018-11-27
Universal Adversarial Training.
Robust Classification of Financial Risk.
A Frank-Wolfe Framework for Efficient and Effective Adversarial Attacks.
Using Attribution to Decode Dataset Bias in Neural Network Models for Chemistry.
2018-11-26
Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks.
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies.
2018-11-25
Is Data Clustering in Adversarial Settings Secure?.
2018-11-24
Attention, Please! Adversarial Defense via Attention Rectification and Preservation.
2018-11-23
Robustness via curvature regularization, and vice versa.
Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses.
2018-11-22
Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack.
Strength in Numbers: Trading-off Robustness and Computation via Adversarially-Trained Ensembles.
Detecting Adversarial Perturbations Through Spatial Behavior in Activation Spaces.
2018-11-21
Task-generalizable Adversarial Attack based on Perceptual Metric.
Towards Robust Neural Networks with Lipschitz Continuity.
2018-11-20
How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples.
MimicGAN: Corruption-Mimicking for Blind Image Recovery & Adversarial Defense.
Intermediate Level Adversarial Attack for Enhanced Transferability.
Lightweight Lipschitz Margin Training for Certified Defense against Adversarial Examples.
Convolutional Neural Networks with Transformed Input based on Robust Tensor Network Decomposition.
2018-11-19
Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding.
2018-11-18
Generalizable Adversarial Training via Spectral Normalization.
The Taboo Trap: Behavioural Detection of Adversarial Samples.
Regularized adversarial examples for model interpretability.
2018-11-17
DeepConsensus: using the consensus of features from multiple layers to attain robust image classification.
Classifiers Based on Deep Sparse Coding Architectures are Robust to Deep Learning Transferable Examples.
Boosting the Robustness Verification of DNN by Identifying the Achilles's Heel.
2018-11-16
Protecting Voice Controlled Systems Using Sound Source Identification Based on Acoustic Cues.
DARCCC: Detecting Adversaries by Reconstruction from Class Conditional Capsules.
2018-11-15
A Spectral View of Adversarially Robust Features.
A note on hyperparameters in black-box adversarial examples.
Mathematical Analysis of Adversarial Attacks.
Adversarial Examples from Cryptographic Pseudo-Random Generators.
2018-11-14
Verification of Recurrent Neural Networks Through Rule Extraction.
Robustness of spectral methods for community detection.
2018-11-13
Deep Q learning for fooling neural networks.
2018-11-08
Universal Decision-Based Black-Box Perturbations: Breaking Security-Through-Obscurity Defenses.
New CleverHans Feature: Better Adversarial Robustness Evaluations with Attack Bundling.
A Geometric Perspective on the Transferability of Adversarial Directions.
2018-11-07
CAAD 2018: Iterative Ensemble Adversarial Attack.
Ad-versarial: Perceptual Ad-Blocking meets Adversarial Machine Learning.
2018-11-06
MixTrain: Scalable Training of Verifiably Robust Neural Networks.
SparseFool: a few pixels make a big difference.
2018-11-05
Active Deep Learning Attacks under Strict Rate Limitations for Online API Calls.
FUNN: Flexible Unsupervised Neural Network.
On the Transferability of Adversarial Examples Against CNN-Based Image Forensics.
2018-11-04
FAdeML: Understanding the Impact of Pre-Processing Noise Filtering on Adversarial Machine Learning.
SSCNets: A Selective Sobel Convolution-based Technique to Enhance the Robustness of Deep Neural Networks against Security Attacks.
QuSecNets: Quantization-based Defense Mechanism for Securing Deep Neural Network against Adversarial Attacks.
2018-11-03
Adversarial Gain.
CAAD 2018: Powerful None-Access Black-Box Attack Based on Adversarial Transformation Network.
Learning to Defense by Learning to Attack.
Adversarial Black-Box Attacks on Automatic Speech Recognition Systems using Multi-Objective Evolutionary Optimization.
2018-11-02
A Marauder's Map of Security and Privacy in Machine Learning.
Semidefinite relaxations for certifying robustness to adversarial examples.
TrISec: Training Data-Unaware Imperceptible Security Attacks on Deep Neural Networks.
Efficient Neural Network Robustness Certification with General Activation Functions.
Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks.
2018-11-01
Improving Adversarial Robustness by Encouraging Discriminative Features.
On the Geometry of Adversarial Examples.
Excessive Invariance Causes Adversarial Vulnerability.
2018-10-31
When Not to Classify: Detection of Reverse Engineering Attacks on DNN Image Classifiers.
Reversible Adversarial Examples.
2018-10-30
On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models.
Improved Network Robustness with Adversary Critic.
2018-10-29
Adversarial Risk and Robustness: General Definitions and Implications for the Uniform Distribution.
Logit Pairing Methods Can Fool Gradient-Based Attacks.
2018-10-28
Rademacher Complexity for Adversarially Robust Generalization.
Robust Audio Adversarial Example for a Physical Attack.
RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applications.
2018-10-27
Towards Robust Deep Neural Networks.
Regularization Effect of Fast Gradient Sign Method and its Generalization.
2018-10-26
Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples.
2018-10-25
Attack Graph Convolutional Networks by Adding Fake Nodes.
Law and Adversarial Machine Learning.
Evading classifiers in discrete domains with provable optimality guarantees.
2018-10-24
Robust Adversarial Learning via Sparsifying Front Ends.
2018-10-23
Stochastic Substitute Training: A Gray-box Approach to Craft Adversarial Examples Against Gradient Obfuscation Defenses.
One Bit Matters: Understanding Adversarial Examples as the Abuse of Redundancy.
2018-10-22
Sparse DNNs with Improved Adversarial Robustness.
Adversarial Risk Bounds via Function Transformation.
Cost-Sensitive Robustness against Adversarial Examples.
2018-10-19
On Extensions of CLEVER: A Neural Network Robustness Evaluation Algorithm.
2018-10-18
Exploring Adversarial Examples in Malware Detection.
A Training-based Identification Approach to VIN Adversarial Examples.
2018-10-17
Provable Robustness of ReLU networks via Maximization of Linear Regions.
2018-10-16
Projecting Trouble: Light Based Adversarial Attacks on Deep Learning Classifiers.
Security Matters: A Survey on Adversarial Machine Learning.
2018-10-15
Adversarial Learning and Explainability in Structured Datasets.
2018-10-11
Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation.
MeshAdv: Adversarial Meshes for Visual Recognition.
2018-10-09
Is PGD-Adversarial Training Necessary? Alternative Training via a Soft-Quantization Network with Noisy-Natural Samples Only.
Analyzing the Noise Robustness of Deep Neural Networks.
The Adversarial Attack and Detection under the Fisher Information Metric.
2018-10-08
Limitations of adversarial robustness: strong No Free Lunch Theorem.
Average Margin Regularization for Classifiers.
Efficient Two-Step Adversarial Defense for Deep Neural Networks.
Combinatorial Attacks on Binarized Neural Networks.
2018-10-04
Feature prioritization and regularization improve standard accuracy and adversarial robustness.
Improved Generalization Bounds for Robust Learning.
2018-10-02
Can Adversarially Robust Learning Leverage Computational Hardness?.
Adversarial Examples - A Complete Characterisation of the Phenomenon.
Link Prediction Adversarial Attack.
2018-10-01
Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network.
Large batch size training of neural networks with adversarial training and second-order information.
Improved robustness to adversarial examples using Lipschitz regularization of the loss.
Improving the Generalization of Adversarial Training with Domain Adaptation.
2018-09-30
Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Neural Networks.
2018-09-29
CAAD 2018: Generating Transferable Adversarial Examples.
To compress or not to compress: Understanding the Interactions between Adversarial Attacks and Neural Network Compression.
Interpreting Adversarial Robustness: A View from Decision Surface in Input Space.
2018-09-28
Characterizing Audio Adversarial Examples Using Temporal Dependency.
Adversarial Attacks and Defences: A Survey.
Explainable Black-Box Attacks Against Model-based Authentication.
2018-09-26
Adversarial Attacks on Cognitive Self-Organizing Networks: The Challenge and the Way Forward.
2018-09-24
Neural Networks with Structural Resistance to Adversarial Attacks.
Fast Geometrically-Perturbed Adversarial Faces.
On The Utility of Conditional Generation Based Mutual Information for Characterizing Adversarial Subspaces.
Low Frequency Adversarial Perturbation.
2018-09-23
Is Ordered Weighted $\ell_1$ Regularized Regression Robust to Adversarial Perturbation? A Case Study on OSCAR.
2018-09-22
Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization.
2018-09-21
Unrestricted Adversarial Examples.
Adversarial Binaries for Authorship Identification.
2018-09-20
Playing the Game of Universal Adversarial Perturbations.
2018-09-19
Efficient Formal Safety Analysis of Neural Networks.
Adversarial Training Towards Robust Multimedia Recommender System.
Generating 3D Adversarial Point Clouds.
2018-09-17
HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware Samples.
Robustness Guarantees for Bayesian Inference with Gaussian Processes.
2018-09-16
Robust Adversarial Perturbation on Deep Proposal-based Models.
Exploring the Vulnerability of Single Shot Module in Object Detectors via Imperceptible Background Patches.
2018-09-13
Defensive Dropout for Hardening Deep Neural Networks under Adversarial Attacks.
Query-Efficient Black-Box Attack by Active Learning.
Adversarial Examples: Opportunities and Challenges.
2018-09-11
On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions.
Isolated and Ensemble Audio Preprocessing Methods for Detecting Adversarial Examples against Automatic Speech Recognition.
Humans can decipher adversarial images.
2018-09-09
Second-Order Adversarial Attack and Certifiable Robustness.
The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure.
Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability.
2018-09-08
Towards Query Efficient Black-box Attacks: An Input-free Perspective.
Fast Gradient Attack on Network Embedding.
Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples.
Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks.
2018-09-07
Open Set Adversarial Examples.
A Deeper Look at 3D Shape Classifiers.
Metamorphic Relation Based Adversarial Attacks on Differentiable Neural Computer.
Trick Me If You Can: Human-in-the-loop Generation of Adversarial Examples for Question Answering.
2018-09-06
Are adversarial examples inevitable?.
Adversarial Over-Sensitivity and Over-Stability Strategies for Dialogue Models.
Adversarial Reprogramming of Sequence Classification Neural Networks.
IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection.
2018-09-05
Bridging machine learning and cryptography in defence against adversarial attacks.
2018-09-04
Adversarial Attacks on Node Embeddings.
2018-09-03
Adversarial Attack Type I: Generating False Positives.
HASP: A High-Performance Adaptive Mobile Security Enhancement Against Malicious Speech Recognition.
2018-08-31
MULDEF: Multi-model-based Defense Against Adversarial Examples for Neural Networks.
2018-08-28
DLFuzz: Differential Fuzzing Testing of Deep Learning Systems.
All You Need is "Love": Evading Hate-speech Detection.
2018-08-27
Targeted Nonlinear Adversarial Perturbations in Images and Videos.
Generalisation in humans and deep neural networks.
2018-08-26
Adversarially Regularising Neural NLI Models to Integrate Logical Background Knowledge.
2018-08-25
Guiding Deep Learning System Testing using Surprise Adequacy.
Analysis of adversarial attacks against CNN-based image forgery detectors.
2018-08-24
Is Machine Learning in Power Systems Vulnerable?.
2018-08-23
Maximal Jacobian-based Saliency Map Attack.
Adversarial Attacks on Deep-Learning Based Radio Signal Classification.
2018-08-20
Controlling Over-generalization and its Effect on Adversarial Examples Generation and Detection.
Stochastic Combinatorial Ensembles for Defending Against Adversarial Examples.
2018-08-17
Reinforcement Learning for Autonomous Defence in Software-Defined Networking.
2018-08-16
Mitigation of Adversarial Attacks through Embedded Feature Selection.
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding.
Distributionally Adversarial Attack.
2018-08-10
Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection.
Using Randomness to Improve Robustness of Machine-Learning Models Against Evasion Attacks.
2018-08-08
Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically Differentiable Renderer.
2018-08-07
Data augmentation using synthetic data for time series classification with deep residual networks.
2018-08-06
Adversarial Vision Challenge.
Defense Against Adversarial Attacks with Saak Transform.
Gray-box Adversarial Training.
2018-08-05
Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models.
Structured Adversarial Attack: Towards General Implementation and Better Interpretability.
2018-08-04
Adversarial Examples: Attacks on Machine Learning-based Malware Visualization Detection Methods.
Traits & Transferability of Adversarial Examples against Instance Segmentation & Object Detection.
2018-08-03
DeepCloak: Adversarial Crafting As a Defensive Measure to Cloak Processes.
Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressions.
2018-07-31
EagleEye: Attack-Agnostic Defense against Adversarial Inputs (Technical Report).
2018-07-27
Rob-GAN: Generator, Discriminator, and Adversarial Attacker.
2018-07-26
A general metric for identifying adversarial images.
Evaluating and Understanding the Robustness of Adversarial Logit Pairing.
2018-07-25
HiDDeN: Hiding Data With Deep Networks.
Limitations of the Lipschitz constant as a defense against adversarial examples.
Unbounded Output Networks for Classification.
2018-07-24
Learning Discriminative Video Representations Using Adversarial Perturbations.
2018-07-21
Simultaneous Adversarial Training - Learn from Others Mistakes.
2018-07-20
Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors.
Physical Adversarial Examples for Object Detectors.
2018-07-18
Harmonic Adversarial Attack Method.
2018-07-17
Gradient Band-based Adversarial Training for Generalized Attack Immunity of A3C Path Finding.
Motivating the Rules of the Game for Adversarial Example Research.
Defend Deep Neural Networks Against Adversarial Examples via Fixed andDynamic Quantized Activation Functions.
2018-07-16
Online Robust Policy Learning in the Presence of Unknown Adversaries.
Manifold Adversarial Learning.
2018-07-15
NEUZZ: Efficient Fuzzing with Neural Program Smoothing. (11%)
2018-07-12
Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach.
2018-07-11
With Friends Like These, Who Needs Adversaries?.
2018-07-10
A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks.
A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees.
Attack and defence in cellular decision-making: lessons from machine learning.
2018-07-09
Adaptive Adversarial Attack on Scene Text Recognition.
2018-07-08
Vulnerability Analysis of Chest X-Ray Image Classification Against Adversarial Attacks.
2018-07-05
Implicit Generative Modeling of Random Noise during Training for Adversarial Robustness.
2018-07-04
Benchmarking Neural Network Robustness to Common Corruptions and Surface Variations.
2018-07-03
Local Gradients Smoothing: Defense against localized adversarial attacks.
Adversarial Robustness Toolbox v0.4.0.
2018-07-02
Adversarial Perturbations Against Real-Time Video Classification Systems.
2018-07-01
Towards Adversarial Training with Moderate Performance Improvement for Neural Network Classification.
2018-06-29
Adversarial Examples in Deep Learning: Characterization and Divergence.
2018-06-28
Adversarial Reprogramming of Neural Networks.
2018-06-27
Gradient Similarity: An Explainable Approach to Detect Adversarial Attacks against Deep Learning.
Customizing an Adversarial Example Generator with Class-Conditional GANs.
2018-06-25
Exploring Adversarial Examples: Patterns of One-Pixel Attacks.
2018-06-23
Defending Malware Classification Networks Against Adversarial Perturbations with Non-Negative Weight Restrictions.
On Adversarial Examples for Character-Level Neural Machine Translation.
Evaluation of Momentum Diverse Input Iterative Fast Gradient Sign Method (M-DI2-FGSM) Based Attack Method on MCS 2018 Adversarial Attacks on Black Box Face Recognition System.
2018-06-21
Detection based Defense against Adversarial Examples from the Steganalysis Point of View.
2018-06-20
Gradient Adversarial Training of Neural Networks.
Combinatorial Testing for Deep Learning Systems.
2018-06-19
On the Learning of Deep Local Features for Robust Face Spoofing Detection.
Built-in Vulnerabilities to Imperceptible Adversarial Perturbations.
2018-06-15
Non-Negative Networks Against Adversarial Attacks.
2018-06-14
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data.
2018-06-13
Hierarchical interpretations for neural network predictions.
Manifold Mixup: Better Representations by Interpolating Hidden States.
2018-06-12
Adversarial Attacks on Variational Autoencoders.
Ranking Robustness Under Adversarial Document Manipulations.
2018-06-11
Defense Against the Dark Arts: An overview of adversarial example security research and future research directions.
2018-06-08
Monge blunts Bayes: Hardness Results for Adversarial Training.
2018-06-07
Revisiting Adversarial Risk.
Training Augmentation with Adversarial Examples for Robust Speech Recognition.
2018-06-06
Adversarial Attack on Graph Structured Data.
Adversarial Regression with Multiple Learners.
Killing Four Birds with one Gaussian Process: Analyzing Test-Time Attack Vectors on Classification.
2018-06-05
DPatch: An Adversarial Patch Attack on Object Detectors.
2018-06-04
Mitigation of Policy Manipulation Attacks on Deep Q-Networks with Parameter-Space Noise.
An Explainable Adversarial Robustness Metric for Deep Learning Neural Networks.
PAC-learning in the presence of evasion adversaries.
2018-06-02
Sufficient Conditions for Idealised Models to Have No Adversarial Examples: a Theoretical and Empirical Study with Bayesian Neural Networks.
Detecting Adversarial Examples via Key-based Network.
2018-05-31
PeerNets: Exploiting Peer Wisdom Against Adversarial Attacks.
Resisting Adversarial Attacks using Gaussian Mixture Variational Autoencoders.
Scaling provable adversarial defenses.
Sequential Attacks on Agents for Long-Term Adversarial Goals.
Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Data.
2018-05-30
Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization.
Robustness May Be at Odds with Accuracy.
ADAGIO: Interactive Experimentation with Adversarial Attack and Defense for Audio.
Robustifying Models Against Adversarial Attacks by Langevin Dynamics.
2018-05-29
AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks.
Adversarial Noise Attacks of Deep Learning Architectures - Stability Analysis via Sparse Modeled Signals.
Why Botnets Work: Distributed Brute-Force Attacks Need No Synchronization.
2018-05-28
Adversarial Examples in Remote Sensing.
GenAttack: Practical Black-box Attacks with Gradient-Free Optimization.
2018-05-27
Defending Against Adversarial Attacks by Leveraging an Entire GAN.
2018-05-25
Training verified learners with learned verifiers.
Adversarial examples from computational constraints.
2018-05-24
Laplacian Networks: Bounding Indicator Function Smoothness for Neural Network Robustness.
2018-05-23
Anonymizing k-Facial Attributes via Adversarial Perturbations.
Towards Robust Training of Neural Networks by Regularizing Adversarial Gradients.
Towards the first adversarially robust neural network model on MNIST.
2018-05-22
Adversarially Robust Training through Structured Gradient Regularization.
2018-05-21
Bidirectional Learning for Robust Neural Networks.
Adversarial Noise Layer: Regularize Neural Network By Adding Noise.
Adversarial Attacks on Neural Networks for Graph Data.
Constructing Unrestricted Adversarial Examples with Generative Models.
2018-05-20
Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference.
Targeted Adversarial Examples for Black Box Audio Systems.
Towards Understanding Limitations of Pixel Discretization Against Adversarial Attacks.
2018-05-17
Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models.
2018-05-16
Towards Robust Neural Machine Translation.
2018-05-14
Detecting Adversarial Samples for Deep Neural Networks through Mutation Testing.
2018-05-12
AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning.
Curriculum Adversarial Training.
2018-05-11
Breaking Transferability of Adversarial Samples with Randomness.
2018-05-09
On Visual Hallmarks of Robustness to Adversarial Malware.
Robust Classification with Convolutional Prototype Learning.
2018-05-08
Interpretable Adversarial Perturbation in Input Embedding Space for Text.
2018-05-05
A Counter-Forensic Method for CNN-Based Camera Model Identification.
2018-05-03
Siamese networks for generating adversarial examples.
2018-04-30
Concolic Testing for Deep Neural Networks.
How Robust are Deep Neural Networks?.
Adversarially Robust Generalization Requires More Data.
2018-04-29
Adversarial Regression for Detecting Attacks in Cyber-Physical Systems.
2018-04-28
Formal Security Analysis of Neural Networks using Symbolic Intervals.
2018-04-25
Towards Fast Computation of Certified Robustness for ReLU Networks.
2018-04-23
Towards Dependable Deep Convolutional Neural Networks (CNNs) with Out-distribution Learning.
Siamese Generative Adversarial Privatizer for Biometric Data.
Black-box Adversarial Attacks with Limited Queries and Information.
VectorDefense: Vectorization as a Defense to Adversarial Examples.
Query-Efficient GAN Based Black-Box Attack Against Sequence Based Classifiers.
2018-04-21
Generating Natural Language Adversarial Examples.
2018-04-20
Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size.
Learning More Robust Features with Adversarial Training.
ADef: an Iterative Algorithm to Construct Adversarial Deformations.
2018-04-19
Attacking Convolutional Neural Network using Differential Evolution.
Semantic Adversarial Deep Learning.
2018-04-18
Simulation-based Adversarial Test Generation for Autonomous Vehicles with Machine Learning Components.
Neural Automated Essay Scoring and Coherence Modeling for Adversarially Crafted Input.
2018-04-17
Robust Machine Comprehension Models via Adversarial Training.
Adversarial Example Generation with Syntactically Controlled Paraphrase Networks.
2018-04-16
Global Robustness Evaluation of Deep Neural Networks with Provable Guarantees for the $L_0$ Norm.
ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector.
2018-04-14
On the Limitation of MagNet Defense against $L_1$-based Adversarial Examples.
Adversarial Attacks Against Medical Deep Learning Systems.
2018-04-11
Detecting Malicious PowerShell Commands using Deep Neural Networks.
2018-04-10
On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses.
2018-04-09
Adversarial Training Versus Weight Decay.
An ADMM-Based Universal Framework for Adversarial Attacks on Deep Neural Networks.
2018-04-08
Adaptive Spatial Steganography Based on Probability-Controlled Adversarial Examples.
2018-04-06
Fortified Networks: Improving the Robustness of Deep Networks by Modeling the Manifold of Hidden Representations.
2018-04-04
Unifying Bilateral Filtering and Adversarial Training for Robust Neural Networks.
2018-03-30
Adversarial Attacks and Defences Competition.
2018-03-29
Security Consideration For Deep Learning-Based Image Forensics.
2018-03-28
Defending against Adversarial Images using Basis Functions Transformations.
The Effects of JPEG and JPEG2000 Compression on Attacks using Adversarial Examples.
2018-03-26
Bypassing Feature Squeezing by Increasing Adversary Strength.
On the Limitation of Local Intrinsic Dimensionality for Characterizing the Subspaces of Adversarial Examples.
Clipping free attacks against artificial neural networks.
2018-03-24
Security Theater: On the Vulnerability of Classifiers to Exploratory Attacks.
A Dynamic-Adversarial Mining Approach to the Security of Machine Learning.
An Overview of Vulnerabilities of Voice Controlled Systems.
2018-03-23
Generalizability vs. Robustness: Adversarial Examples for Medical Imaging.
CNN Based Adversarial Embedding with Minimum Alteration for Image Steganography.
Detecting Adversarial Perturbations with Saliency.
Improving DNN Robustness to Adversarial Attacks using Jacobian Regularization.
2018-03-22
Understanding Measures of Uncertainty for Adversarial Example Detection.
2018-03-21
Adversarial Defense based on Structure-to-Signal Autoencoders.
2018-03-20
DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems.
2018-03-19
Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks.
Improving Transferability of Adversarial Examples with Input Diversity.
2018-03-17
A Dual Approach to Scalable Verification of Deep Networks.
2018-03-16
Adversarial Logit Pairing.
Semantic Adversarial Examples.
2018-03-15
Large Margin Deep Networks for Classification.
2018-03-13
Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples.
Defending against Adversarial Attack towards Deep Neural Networks via Collaborative Multi-task Training.
Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning.
Invisible Mask: Practical Attacks on Face Recognition with Infrared.
2018-03-12
Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables.
2018-03-10
Combating Adversarial Attacks Using Sparse Representations.
Detecting Adversarial Examples via Neural Fingerprinting.
2018-03-09
Detecting Adversarial Examples - A Lesson from Multimedia Forensics.
On Generation of Adversarial Examples using Convex Programming.
Explaining Black-box Android Malware Detection.
2018-03-08
Rethinking Feature Distribution for Loss Functions in Image Classification.
2018-03-07
Sparse Adversarial Perturbations for Videos.
2018-03-04
Stochastic Activation Pruning for Robust Adversarial Defense.
2018-03-03
Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples.
2018-03-02
Protecting JPEG Images Against Adversarial Attacks.
2018-02-26
Understanding and Enhancing the Transferability of Adversarial Examples.
On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples.
Retrieval-Augmented Convolutional Neural Networks for Improved Robustness against Adversarial Examples.
Max-Mahalanobis Linear Discriminant Analysis Networks.
2018-02-23
Deep Defense: Training DNNs with Improved Adversarial Robustness.
Sensitivity and Generalization in Neural Networks: an Empirical Study.
Adversarial vulnerability for any classifier.
Verifying Controllers Against Adversarial Examples with Bayesian Optimization.
2018-02-22
Unravelling Robustness of Deep Learning based Face Recognition Against Adversarial Attacks.
Hessian-based Analysis of Large Batch Training and Robustness to Adversaries.
Adversarial Examples that Fool both Computer Vision and Time-Limited Humans.
2018-02-21
Adversarial Training for Probabilistic Spiking Neural Networks.
L2-Nonexpansive Neural Networks.
Generalizable Adversarial Examples Detection Based on Bi-model Decision Mismatch.
2018-02-20
Attack Strength vs. Detectability Dilemma in Adversarial Machine Learning.
Out-distribution training confers robustness to deep neural networks.
2018-02-19
On Lyapunov exponents and adversarial perturbation.
Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression.
Divide, Denoise, and Defend against Adversarial Attacks.
Robustness of Rotation-Equivariant Networks to Adversarial Perturbations.
Are Generative Classifiers More Robust to Adversarial Attacks?.
2018-02-18
DARTS: Deceiving Autonomous Cars with Toxic Signs.
2018-02-15
ASP:A Fast Adversarial Attack Example Generation Framework based on Adversarial Saliency Prediction.
Adversarial Risk and the Dangers of Evaluating Against Weak Attacks.
2018-02-14
Fooling OCR Systems with Adversarial Text Images.
Security Analysis and Enhancement of Model Compressed Deep Learning Systems under Adversarial Attacks.
2018-02-13
Query-Free Attacks on Industry-Grade Face Recognition Systems under Resource Constraints.
Identify Susceptible Locations in Medical Records via Adversarial Attacks on Deep Predictive Models.
Deceiving End-to-End Deep Learning Malware Detectors using Adversarial Examples.
2018-02-12
Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks.
Predicting Adversarial Examples with High Confidence.
2018-02-09
Certified Robustness to Adversarial Examples with Differential Privacy.
2018-02-08
Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection.
2018-02-05
Blind Pre-Processing: A Robust Defense Method Against Adversarial Examples.
First-order Adversarial Vulnerability of Neural Networks and Input Dimension.
2018-02-02
Secure Detection of Image Manipulation by means of Random Feature Selection.
Hardening Deep Neural Networks via Adversarial Model Cascades.
2018-02-01
Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples.
2018-01-31
Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach.
2018-01-29
Robustness of classification ability of spiking neural networks.
2018-01-28
Certified Defenses against Adversarial Examples.
2018-01-27
Towards an Understanding of Neural Networks in Natural-Image Spaces.
2018-01-26
Deflecting Adversarial Attacks with Pixel Deflection.
Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning.
2018-01-24
CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition.
Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations.
2018-01-22
Adversarial Texts with Gradient Methods.
2018-01-15
A Comparative Study of Rule Extraction for Recurrent Neural Networks.
Sparsity-based Defense against Adversarial Attacks on Linear Classifiers.
Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networks.
2018-01-12
Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers.
2018-01-11
A3T: Adversarially Augmented Adversarial Training.
2018-01-10
Fooling End-to-end Speaker Verification by Adversarial Examples.
2018-01-09
Adversarial Deep Learning for Robust Detection of Binary Encoded Malware.
Less is More: Culling the Training Set to Improve Robustness of Deep Neural Networks.
2018-01-08
Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos.
Adversarial Spheres.
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality.
Spatially Transformed Adversarial Examples.
Generating Adversarial Examples with Adversarial Networks.
LaVAN: Localized and Visible Adversarial Noise.
Attacking Speaker Recognition With Deep Generative Models.
HeNet: A Deep Learning Approach on Intel$^\circledR$ Processor Trace for Effective Exploit Detection.
2018-01-07
Denoising Dictionary Learning Against Adversarial Perturbations.
2018-01-05
Adversarial Perturbation Intensity Achieving Chosen Intra-Technique Transferability Level for Logistic Regression.
Audio Adversarial Examples: Targeted Attacks on Speech-to-Text.
Shielding Google's language toxicity model against adversarial attacks.
2018-01-03
Facial Attributes: Accuracy and Adversarial Robustness.
Neural Networks in Adversarial Setting and Ill-Conditioned Weight Space.
2018-01-02
High Dimensional Spaces, Deep Learning and Adversarial Examples.
Did you hear that? Adversarial Examples Against Automatic Speech Recognition.
Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey.
2017-12-31
A General Framework for Adversarial Examples with Objectives.
2017-12-28
Gradient Regularization Improves Accuracy of Discriminative Models.
2017-12-27
Adversarial Patch.
2017-12-26
Exploring the Space of Black-box Attacks on Deep Neural Networks.
Building Robust Deep Neural Networks for Road Sign Detection.
The Robust Manifold Defense: Adversarial Training using Generative Models.
2017-12-24
Android Malware Detection using Deep Learning on API Method Sequences.
2017-12-23
Whatever Does Not Kill Deep Reinforcement Learning, Makes It Stronger.
2017-12-22
Query-limited Black-box Attacks to Classifiers.
2017-12-21
Using LIP to Gloss Over Faces in Single-Stage Face Detection Networks.
ReabsNet: Detecting and Revising Adversarial Examples.
Note on Attacking Object Detectors with Adversarial Stickers.
Wolf in Sheep's Clothing - The Downscaling Attack Against Deep Learning Applications.
2017-12-19
Query-Efficient Black-box Adversarial Examples (superceded).
Adversarial Examples: Attacks and Defenses for Deep Learning.
2017-12-18
HotFlip: White-Box Adversarial Examples for Text Classification.
When Not to Classify: Anomaly Detection of Attacks (ADA) on DNN Classifiers at Test Time.
2017-12-17
Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Study.
Super-sparse Learning in Similarity Spaces.
2017-12-16
Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models.
2017-12-14
DANCin SEQ2SEQ: Fooling Text Classifiers with Adversarial Text Example Generation.
2017-12-12
Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models.
2017-12-11
Training Ensembles to Detect Adversarial Examples.
2017-12-10
Robust Deep Reinforcement Learning with Adversarial Attacks.
2017-12-09
NAG: Network for Adversary Generation.
2017-12-08
Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning.
Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser.
2017-12-07
A Rotation and a Translation Suffice: Fooling CNNs with Simple Transformations.
Adversarial Examples that Fool Detectors.
2017-12-06
Generative Adversarial Perturbations.
Attacking Visual Language Grounding with Adversarial Examples: A Case Study on Neural Image Captioning.
2017-12-05
Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems.
2017-12-02
Improving Network Robustness against Adversarial Attacks with Compact Convolution.
Towards Robust Neural Networks via Random Self-ensemble.
Where Classification Fails, Interpretation Rises.
2017-11-30
Measuring the tendency of CNNs to Learn Surface Statistical Regularities.
2017-11-27
Adversary Detection in Neural Networks via Persistent Homology.
On the Robustness of Semantic Segmentation Models to Adversarial Attacks.
Butterfly Effect: Bidirectional Control of Classification Performance by Small Additive Perturbation.
2017-11-26
Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients.
2017-11-24
Geometric robustness of deep networks: analysis and improvement.
2017-11-22
Safer Classification by Synthesis.
MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.
Adversarial Phenomenon in the Eyes of Bayesian Deep Learning.
2017-11-21
Reinforcing Adversarial Robustness using Model Confidence Induced by Adversarial Training.
2017-11-20
Evaluating Robustness of Neural Networks with Mixed Integer Programming.
Adversarial Attacks Beyond the Image Space.
2017-11-17
How Wrong Am I? - Studying Adversarial Examples and their Impact on Uncertainty in Gaussian Process Machine Learning Models.
2017-11-16
Enhanced Attacks on Defensively Distilled Deep Neural Networks.
Defense against Universal Adversarial Perturbations.
2017-11-15
The best defense is a good offense: Countering black box attacks by predicting slightly wrong labels.
2017-11-12
Machine vs Machine: Minimax-Optimal Defense Against Adversarial Examples.
2017-11-09
Crafting Adversarial Examples For Speech Paralinguistics Applications.
2017-11-08
Intriguing Properties of Adversarial Examples.
2017-11-06
Mitigating Adversarial Effects Through Randomization.
HyperNetworks with statistical filtering for defending adversarial examples.
Towards Reverse-Engineering Black-Box Neural Networks.
2017-11-02
The (Un)reliability of saliency methods.
Provable defenses against adversarial examples via the convex outer adversarial polytope.
2017-11-01
Attacking Binarized Neural Networks.
2017-10-31
Countering Adversarial Images using Input Transformations.
Conditional Variance Penalties and Domain Shift Robustness.
Generating Natural Adversarial Examples.
2017-10-30
PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples.
2017-10-29
Attacking the Madry Defense Model with $L_1$-based Adversarial Examples.
Certifying Some Distributional Robustness with Principled Adversarial Training.
2017-10-28
Interpretation of Neural Networks is Fragile.
2017-10-27
Adversarial Detection of Flash Malware: Limitations and Open Issues.
2017-10-25
mixup: Beyond Empirical Risk Minimization.
2017-10-24
One pixel attack for fooling deep neural networks.
2017-10-21
Feature-Guided Black-Box Safety Testing of Deep Neural Networks.
2017-10-17
Boosting Adversarial Attacks with Momentum.
2017-10-12
Game-Theoretic Design of Secure and Resilient Distributed Support Vector Machines with Adversaries.
2017-10-09
Standard detectors aren't (currently) fooled by physical adversarial stop signs.
Verification of Binarized Neural Networks via Inter-Neuron Factoring.
2017-10-02
Detecting Adversarial Attacks on Neural Network Policies with Visual Foresight.
DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural Networks.
2017-09-28
Provably Minimally-Distorted Adversarial Examples.
2017-09-26
Output Range Analysis for Deep Neural Networks.
2017-09-25
Fooling Vision and Language Models Despite Localization and Attention Mechanism.
2017-09-19
Verifying Properties of Binarized Deep Neural Networks.
2017-09-16
Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification.
2017-09-13
A Learning and Masking Approach to Secure Learning.
Models and Framework for Adversarial Attacks on Complex Adaptive Systems.
2017-09-12
EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples.
2017-09-11
Art of singular vectors and universal adversarial perturbations.
Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks.
2017-09-08
Towards Proving the Adversarial Robustness of Deep Neural Networks.
DeepFense: Online Accelerated Defense Against Adversarial Deep Learning.
2017-09-02
Security Evaluation of Pattern Classifiers under Attack.
2017-08-31
On Security and Sparsity of Linear Classifiers for Adversarial Settings.
2017-08-29
Practical Attacks Against Graph-based Clustering.
2017-08-28
DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars.
Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features.
2017-08-23
Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid.
2017-08-22
CNN Fixations: An unraveling approach to visualize the discriminative image regions.
2017-08-21
Evasion Attacks against Machine Learning at Test Time.
2017-08-17
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Learning Universal Adversarial Perturbations with Generative Models.
2017-08-14
Attacking Automatic Video Analysis Algorithms: A Case Study of Google Cloud Video Intelligence API.
2017-08-13
ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models.
2017-08-08
Cascade Adversarial Machine Learning Regularized with a Unified Embedding.
2017-08-04
Adversarial Robustness: Softmax versus Openmax.
2017-08-01
Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning.
2017-07-27
Robust Physical-World Attacks on Deep Learning Models.
2017-07-24
Synthesizing Robust Adversarial Examples.
2017-07-23
Adversarial Examples for Evaluating Reading Comprehension Systems.
2017-07-21
Confidence estimation in Deep Neural networks via density modelling.
2017-07-20
Efficient Defenses Against Adversarial Attacks.
2017-07-19
Generic Black-Box End-to-End Attack Against State of the Art API Call Based Malware Classifiers.
2017-07-18
Fast Feature Fool: A data independent approach to universal adversarial perturbations.
APE-GAN: Adversarial Perturbation Elimination with GAN.
2017-07-17
Houdini: Fooling Deep Structured Prediction Models.
2017-07-13
Foolbox: A Python toolbox to benchmark the robustness of machine learning models.
2017-07-11
NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles.
A Survey on Resilient Machine Learning.
2017-07-10
Towards Crafting Text Adversarial Samples.
2017-07-04
UPSET and ANGRI : Breaking High Performance Image Classifiers.
2017-06-21
Comparing deep neural networks against humans: object recognition when the signal gets weaker.
2017-06-19
Towards Deep Learning Models Resistant to Adversarial Attacks.
2017-06-14
Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong.
2017-06-13
Analyzing the Robustness of Nearest Neighbors to Adversarial Examples.
2017-06-06
Adversarial-Playground: A Visualization Suite for Adversarial Sample Generation.
2017-06-02
Towards Robust Detection of Adversarial Examples.
2017-05-30
Feature Squeezing Mitigates and Detects Carlini/Wagner Adversarial Examples.
2017-05-27
MAT: A Multi-strength Adversarial Training Method to Mitigate Adversarial Attacks.
2017-05-26
Analysis of universal adversarial perturbations.
Classification regions of deep neural networks.
2017-05-25
MagNet: a Two-Pronged Defense against Adversarial Examples.
2017-05-23
Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation.
Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reduction.
Black-Box Attacks against RNN based Malware Detection Algorithms.
2017-05-22
Regularizing deep networks using efficient layerwise adversarial training.
2017-05-21
Evading Classifiers by Morphing in the Dark.
2017-05-20
Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods.
2017-05-19
MTDeep: Boosting the Security of Deep Neural Nets Against Adversarial Attacks with Moving Target Defense.
Ensemble Adversarial Training: Attacks and Defenses.
2017-05-18
DeepXplore: Automated Whitebox Testing of Deep Learning Systems.
Delving into adversarial attacks on deep policies.
2017-05-15
Extending Defensive Distillation.
2017-05-09
Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN.
2017-05-08
Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression.
2017-05-05
Detecting Adversarial Samples Using Density Ratio Estimates.
2017-04-28
Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection.
Parseval Networks: Improving Robustness to Adversarial Examples.
2017-04-26
Deep Text Classification Can be Fooled.
2017-04-19
Universal Adversarial Perturbations Against Semantic Image Segmentation.
2017-04-17
Adversarial and Clean Data Are Not Twins.
2017-04-16
Google's Cloud Vision API Is Not Robust To Noise.
2017-04-11
The Space of Transferable Adversarial Examples.
2017-04-09
Enhancing Robustness of Machine Learning Systems via Data Transformations.
2017-04-06
Adequacy of the Gradient-Descent Method for Classifier Evasion Attacks.
2017-04-05
Comment on "Biologically inspired protection of deep networks from adversarial attacks".
2017-04-04
Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks.
2017-03-31
SafetyNet: Detecting and Rejecting Adversarial Examples Robustly.
2017-03-27
Adversarial Transformation Networks: Learning to Generate Adversarial Examples.
Biologically inspired protection of deep networks from adversarial attacks.
2017-03-26
Deceiving Google's Cloud Video Intelligence API Built for Summarizing Videos.
2017-03-24
Adversarial Examples for Semantic Segmentation and Object Detection.
2017-03-23
Self corrective Perturbations for Semantic Segmentation and Classification.
2017-03-22
Data Driven Exploratory Attacks on Black Box Classifiers in Adversarial Domains.
2017-03-20
On the Limitation of Convolutional Neural Networks in Recognizing Negative Images.
2017-03-16
Fraternal Twins: Unifying Attacks on Machine Learning and Digital Watermarking.
2017-03-13
Blocking Transferability of Adversarial Examples in Black-Box Learning Systems.
2017-03-07
Tactics of Adversarial Attack on Deep Reinforcement Learning Agents.
2017-03-03
Adversarial Examples for Semantic Image Segmentation.
2017-03-02
Compositional Falsification of Cyber-Physical Systems with Machine Learning Components.
2017-03-01
Detecting Adversarial Samples from Artifacts.
2017-02-26
Deceiving Google's Perspective API Built for Detecting Toxic Comments.
2017-02-22
Robustness to Adversarial Examples through an Ensemble of Specialists.
Adversarial examples for generative models.
DeepCloak: Masking Deep Neural Network Models for Robustness Against Adversarial Samples.
2017-02-21
On the (Statistical) Detection of Adversarial Examples.
2017-02-20
Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN.
2017-02-14
On Detecting Adversarial Perturbations.
2017-02-07
Adversarial Attacks on Neural Network Policies.
2017-02-03
Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks.
2017-01-15
Vulnerability of Deep Reinforcement Learning to Policy Induction Attacks.
2017-01-04
Dense Associative Memory is Robust to Adversarial Inputs.
2016-12-22
Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics.
2016-12-19
Simple Black-Box Adversarial Perturbations for Deep Networks.
2016-12-05
Learning Adversary-Resistant Deep Neural Networks.
2016-12-01
A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial Examples.
Adversarial Images for Variational Autoencoders.
Deep Variational Information Bottleneck.
2016-11-30
Towards Robust Deep Neural Networks with BANG.
2016-11-18
LOTS about Attacking Deep Features.
2016-11-15
AdversariaLib: An Open-source Library for the Security Evaluation of Machine Learning Algorithms Under Attack.
2016-11-11
Towards the Science of Security and Privacy in Machine Learning.
2016-11-08
Delving into Transferable Adversarial Examples and Black-box Attacks.
2016-11-03
Adversarial Machine Learning at Scale.
2016-10-26
Universal adversarial perturbations.
2016-10-21
Safety Verification of Deep Neural Networks.
2016-10-14
Are Accuracy and Robustness Correlated?.
2016-10-13
Assessing Threat of Adversarial Examples on Deep Neural Networks.
2016-10-06
Using Non-invertible Data Transformations to Build Adversarial-Robust Neural Networks.
2016-10-04
Adversary Resistant Deep Neural Networks with an Application to Malware Detection.
2016-10-03
Technical Report on the CleverHans v2.1.0 Adversarial Examples Library.
2016-09-06
Statistical Meta-Analysis of Presentation Attacks for Secure Multibiometric Systems.
2016-09-03
Randomized Prediction Games for Adversarial Machine Learning.
2016-08-31
Robustness of classifiers: from adversarial to random noise.
2016-08-27
A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples.
2016-08-16
Towards Evaluating the Robustness of Neural Networks.
2016-08-02
A study of the effect of JPG compression on adversarial images.
2016-08-01
Early Methods for Detecting Adversarial Images.
2016-07-18
On the Effectiveness of Defensive Distillation.
2016-07-14
Defensive Distillation is Not Robust to Adversarial Examples.
2016-07-08
Adversarial examples in the physical world.
2016-06-14
Adversarial Perturbations Against Deep Neural Networks for Malware Classification.
2016-05-23
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples.
Measuring Neural Net Robustness with Constraints.
2016-05-17
Are Facial Attributes Adversarially Robust?.
2016-05-05
Adversarial Diversity and Hard Positive Generation.
2016-04-27
Crafting Adversarial Input Sequences for Recurrent Neural Networks.
2016-04-14
Improving the Robustness of Deep Neural Networks via Stability Training.
2016-04-09
A General Retraining Framework for Scalable Adversarial Classification.
2016-03-16
Suppressing the Unusual: towards Robust CNNs using Symmetric Activation Functions.
2016-02-08
Practical Black-Box Attacks against Machine Learning.
2016-02-07
Ensemble Robustness and Generalization of Stochastic Deep Learning Algorithms.
2016-01-26
Unifying Adversarial Training Algorithms with Flexible Deep Data Gradient Regularization.
2015-11-23
The Limitations of Deep Learning in Adversarial Settings.
2015-11-19
A Unified Gradient Regularization Family for Adversarial Examples.
Manifold Regularized Deep Neural Networks using Adversarial Examples.
Robust Convolutional Neural Networks under Adversarial Noise.
Foveation-based Mechanisms Alleviate Adversarial Examples.
Towards Open Set Deep Networks.
2015-11-17
Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization.
2015-11-16
Adversarial Manipulation of Deep Representations.
2015-11-14
DeepFool: a simple and accurate method to fool deep neural networks.
2015-11-13
Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks.
2015-11-10
Learning with a Strong Adversary.
2015-10-18
Exploring the Space of Adversarial Images.
2015-10-14
Improving Back-Propagation by Adding an Adversarial Gradient.
2015-07-16
Deep Learning and Music Adversaries.
2015-02-09
Analysis of classifiers' robustness to adversarial perturbations.
2014-12-19
Explaining and Harnessing Adversarial Examples.
2014-12-11
Towards Deep Neural Network Architectures Robust to Adversarial Examples.
2014-12-05
Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images.
2014-01-29
Security Evaluation of Support Vector Machines in Adversarial Environments.
2013-12-20
Intriguing properties of neural networks.