A Complete List of All (arXiv) Adversarial Example Papers
by Nicholas Carlini 2019-06-15
It can be hard to stay up-to-date on the published papers in the field of adversarial examples, where we have seen massive growth in the number of papers written each year. I have been somewhat religiously keeping track of these papers for the last few years, and realized it may be helpful for others to release this list.
The only requirement I used for selecting papers for this list is that it is primarily a paper about adversarial examples, or extensively uses adversarial examples. Due to the sheer quantity of papers, I can't guarantee that I actually have found all of them.
But I did try.
I also may have included papers that don't match these criteria (and are about something different instead), or made inconsistent judgement calls as to whether or not any given paper is mainly an adversarial example paper. Send me an email if something is wrong and I'll correct it.
As a result, this list is completely un-filtered. Everything that mainly presents itself as an adversarial example paper is listed here; I pass no judgement of quality. For a curated list of papers that I think are excellent and worth reading, see the Adversarial Machine Learning Reading List.
One final note about the data. This list automatically updates with new papers, even before I get a chance to manually filter through them. I do this filtering roughly twice a week, and it's then that I'll remove the ones that aren't related to adversarial examples. As a result, there may be some false positives on the most recent few entries. The new un-verified entries will have a probability indicated that my simplistic (but reasonably well calibrated) bag-of-words classifier believes the given paper is actually about adversarial examples.
The full paper list appears below. I've also released a TXT file (and a TXT file with abstracts) and a JSON file with the same data. If you do anything interesting with this data I'd be happy to hear from you what it was.
Paper List
2020-01-21
Generate High-Resolution Adversarial Samples by Identifying Effective Features. (93%)
FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidence. (33%)
SAUNet: Shape Attentive U-Net for Interpretable Medical Image Segmentation. (1%)
2020-01-17
Cyber Attack Detection thanks to Machine Learning Algorithms. (1%)
2020-01-16
Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet. (99%)
A Little Fog for a Large Turn. (93%)
Code-Bridged Classifier (CBC): A Low or Negative Overhead Defense for Making a CNN Classifier Robust Against Adversarial Attacks. (92%)
Increasing the robustness of DNNs against image corruptions by playing the Game of Noise. (56%)
The gap between theory and practice in function approximation with deep neural networks. (1%)
2020-01-14
Noisy Machines: Understanding Noisy Neural Networks and Enhancing Robustness to Analog Hardware Errors Using Distillation. (1%)
2020-01-13
Advbox: a toolbox to generate adversarial examples that fool neural networks. (99%)
2020-01-12
Fast is better than free: Revisiting adversarial training. (99%)
An Adversarial Approach for the Robust Classification of Pneumonia from Chest Radiographs. (2%)
Membership Inference Attacks Against Object Detection Models. (1%)
2020-01-11
Sparse Black-box Video Attack with Reinforcement Learning. (99%)
Exploring and Improving Robustness of Multi Task Deep Neural Networks via Domain Agnostic Defenses. (76%)
2020-01-10
Guess First to Enable Better Compression and Adversarial Robustness. (80%)
ReluDiff: Differential Verification of Deep Neural Networks. (76%)
2020-01-09
Backdoor Attacks against Transfer Learning with Pre-trained Deep Learning Models. (69%)
A Collaborative Learning Framework via Federated Meta-Learning. (1%)
Campfire: Compressible, Regularization-Free, Structured Sparse Training for Hardware Accelerators. (1%)
2020-01-08
To Transfer or Not to Transfer: Misclassification Attacks Against Transfer Learned Text Classifiers. (99%)
Cloud-based Image Classification Service Is Not Robust To Adversarial Examples: A Forgotten Battlefield. (99%)
MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius. (86%)
2020-01-07
Robust Facial Landmark Detection via Aggregation on Geometrically Manipulated Faces. (16%)
Softmax-based Classification is k-means Clustering: Formal Proof, Consequences for Adversarial Attacks, and Improvement through Centroid Based Tailoring. (10%)
2020-01-06
Generating Semantic Adversarial Examples via Feature Manipulation. (99%)
Deceiving Image-to-Image Translation Networks for Autonomous Driving with Adversarial Perturbations. (99%)
2020-01-05
The Human Visual System and Adversarial AI. (56%)
Deep Face Representations for Differential Morphing Attack Detection. (1%)
2020-01-02
Reject Illegal Inputs with Generative Classifier Derived from Any Discriminative Classifier.
2020-01-01
Ensembles of Many Diverse Weak Defenses can be Strong: Defending Deep Neural Networks Against Adversarial Attacks.
Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient. (84%)
2019-12-31
Automated Testing for Deep Learning Systems with Differential Behavior Criteria.
Protecting GANs against privacy attacks by preventing overfitting.
Erase and Restore: Simple, Accurate and Resilient Detection of $L_2$ Adversarial Examples.
Quantum Adversarial Machine Learning.
2019-12-30
Defending from adversarial examples with a two-stream architecture.
Adversarial Example Generation using Evolutionary Multi-objective Optimization. (84%)
2019-12-28
Detecting Out-of-Distribution Examples with In-distribution Examples and Gram Matrices.
Search Based Repair of Deep Neural Networks.
2019-12-26
Benchmarking Adversarial Robustness.
Efficient Adversarial Training with Transferable Adversarial Examples.
2019-12-24
Attack-Resistant Federated Learning with Residual-based Reweighting.
Analysis of Moving Target Defense Against False Data Injection Attacks on Power Grid.
Cronus: Robust and Heterogeneous Collaborative Learning with Black-Box Knowledge Transfer.
Characterizing the Decision Boundary of Deep Neural Networks.
2019-12-23
White Noise Analysis of Neural Networks.
Adversarial AutoAugment.
Geometry-aware Generation of Adversarial and Cooperative Point Clouds.
2019-12-21
AdvCodec: Towards A Unified Framework for Adversarial Text Generation.
2019-12-20
Measuring Dataset Granularity.
Jacobian Adversarially Regularized Networks for Robustness.
Explainability and Adversarial Robustness for RNNs.
Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing.
secml: A Python Library for Secure and Explainable Machine Learning.
Adversarial symmetric GANs: bridging adversarial samples and adversarial networks.
2019-12-19
Does Symbolic Knowledge Prevent Adversarial Fooling?.
A New Ensemble Method for Concessively Targeted Multi-model Attack.
Towards Verifying Robustness of Neural Networks Against Semantic Perturbations.
Mitigating large adversarial perturbations on X-MAS (X minus Moving Averaged Samples).
Adversarial Perturbations on the Perceptual Ball.
Optimization-Guided Binary Diversification to Mislead Neural Networks for Malware Detection.
$n$-ML: Mitigating Adversarial Examples via Ensembles of Topologically Manipulated Classifiers.
2019-12-18
Identifying Adversarial Sentences by Analyzing Text Complexity.
An Adversarial Perturbation Oriented Domain Adaptation Approach for Semantic Segmentation.
Adversarial VC-dimension and Sample Complexity of Neural Networks.
SIGMA : Strengthening IDS with GAN and Metaheuristics Attacks.
Detecting Adversarial Attacks On Audio-Visual Speech Recognition.
2019-12-17
APRICOT: A Dataset of Physical Adversarial Attacks on Object Detection.
2019-12-16
MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking.
CAG: A Real-time Low-cost Enhanced-robustness High-transferability Content-aware Adversarial Attack Generator.
On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration.
Constructing a provably adversarially-robust classifier from a high accuracy one.
2019-12-15
DAmageNet: A Universal Adversarial Dataset.
2019-12-14
What Else Can Fool Deep Learning? Addressing Color Constancy Errors on Deep Neural Network Performance.
Towards Robust Toxic Content Classification.
2019-12-13
Potential adversarial samples for white-box attacks.
2019-12-11
Learning to Model Aspects of Hearing Perception Using Neural Loss Functions.
What it Thinks is Important is Important: Robustness Transfers through Input Gradients.
An Efficient Approach for Using Expectation Maximization Algorithm in Capsule Networks.
Detecting and Correcting Adversarial Images Using Image Processing Operations and Convolutional Neural Networks.
2019-12-10
Towards a Robust Classifier: An MDL-Based Method for Generating Adversarial Examples.
Appending Adversarial Frames for Universal Video Attack.
2019-12-09
Feature Losses for Adversarial Robustness.
2019-12-08
Hardening Random Forest Cyber Detectors Against Adversarial Attacks.
Amora: Black-box Adversarial Morphing Attack.
2019-12-07
Exploring the Back Alleys: Analysing The Robustness of Alternative Neural Network Architectures against Adversarial Attacks.
2019-12-06
Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations.
Principal Component Properties of Adversarial Samples.
Does Interpretability of Neural Networks Imply Adversarial Robustness?.
2019-12-05
Detection of Face Recognition Adversarial Attacks.
The Search for Sparse, Robust Neural Networks.
Region-Wise Attack: On Efficient Generation of Robust Physical Adversarial Examples.
2019-12-04
Learning with Multiplicative Perturbations.
A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks.
Walking on the Edge: Fast, Low-Distortion Adversarial Examples.
Towards Robust Image Classification Using Sequential Attention Models.
Scratch that! An Evolution-based Adversarial Attack against Neural Networks.
2019-12-03
FANNet: Formal Analysis of Noise Tolerance, Training Bias and Input Sensitivity in Neural Networks.
A Study of Black Box Adversarial Attacks in Computer Vision.
2019-12-02
Universal Adversarial Perturbations for CNN Classifiers in EEG-Based BCIs.
Training Robust Tree Ensembles for Security.
Deep Neural Network Fingerprinting by Conferrable Adversarial Examples.
2019-12-01
Adversary A3C for Robust Reinforcement Learning.
A Method for Computing Class-wise Universal Adversarial Perturbations.
AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds.
2019-11-30
Design and Interpretation of Universal Adversarial Patches in Face Detection.
Error-Correcting Neural Network.
2019-11-29
Square Attack: a query-efficient black-box adversarial attack via random search.
2019-11-28
Towards Privacy and Security of Deep Learning Systems: A Survey.
2019-11-26
Survey of Attacks and Defenses on Edge-Deployed Neural Networks.
An Adaptive View of Adversarial Robustness from Test-time Smoothing Defense.
Can Attention Masks Improve Adversarial Robustness?.
Defending Against Adversarial Machine Learning.
Using Depth for Pixel-Wise Detection of Adversarial Attacks in Crowd Counting.
2019-11-25
Playing it Safe: Adversarial Robustness with an Abstain Option.
ColorFool: Semantic Adversarial Colorization.
Adversarial Attack with Pattern Replacement.
One Man's Trash is Another Man's Treasure: Resisting Adversarial Examples by Adversarial Examples.
2019-11-24
When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks.
Time-aware Gradient Attack on Dynamic Network Link Prediction.
2019-11-23
Universal Adversarial Perturbations to Understand Robustness of Texture vs. Shape-biased Training.
Robustness Metrics for Real-World Adversarial Examples.
2019-11-22
Bounding Singular Values of Convolution Layers.
Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction.
Universal adversarial examples in speech command classification.
Attack Agnostic Statistical Method for Adversarial Detection.
Invert and Defend: Model-based Approximate Inversion of Generative Adversarial Networks for Secure Inference.
2019-11-21
Adversarial Examples Improve Image Recognition.
Heuristic Black-box Adversarial Attacks on Video Recognition Models.
2019-11-20
Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation.
Analysis of Deep Networks for Monocular Depth Estimation Through Adversarial Attacks with Proposal of a Defense Method.
Fine-grained Synthesis of Unrestricted Adversarial Examples.
Deep Minimax Probability Machine.
2019-11-19
Logic-inspired Deep Neural Networks.
Where is the Bottleneck of Adversarial Learning with Unlabeled Data?.
Adversarial Robustness of Flow-Based Generative Models.
Defective Convolutional Layers Learn Robust CNNs.
Generate (non-software) Bugs to Fool Classifiers.
2019-11-18
A New Ensemble Adversarial Attack Powered by Long-term Gradient Memories.
A novel method for identifying the deep neural network model with the Serial Number.
Adversarial Attacks on Grid Events Classification: An Adversarial Machine Learning Approach.
WITCHcraft: Efficient PGD attacks with random step size.
Deep Detector Health Management under Adversarial Campaigns.
2019-11-17
Deep Verifier Networks: Verification of Deep Discriminative Models with Deep Generative Models.
Countering Inconsistent Labelling by Google's Vision API for Rotated Images.
Smoothed Inference for Adversarially-Trained Models.
2019-11-16
SMART: Skeletal Motion Action Recognition aTtack.
Suspicion-Free Adversarial Attacks on Clustering Algorithms.
Black-Box Adversarial Attack with Transferable Model-based Embedding.
Defensive Few-shot Adversarial Learning.
2019-11-15
On Model Robustness Against Adversarial Examples.
Learning To Characterize Adversarial Subspaces.
Simple iterative method for generating targeted universal adversarial perturbations.
AdvKnn: Adversarial Attacks On K-Nearest Neighbor Classifiers With Approximate Gradients.
2019-11-14
Self-supervised Adversarial Training.
Adversarial Embedding: A robust and elusive Steganography and Watermarking technique.
DomainGAN: Generating Adversarial Examples to Attack Domain Generation Algorithm Classifiers.
CAGFuzz: Coverage-Guided Adversarial Generative Fuzzing Testing of Deep Learning Systems.
2019-11-13
There is Limited Correlation between Coverage and Robustness for Deep Neural Networks.
Adversarial Margin Maximization Networks.
2019-11-12
Improving Robustness of Task Oriented Dialog Systems.
On Robustness to Adversarial Examples and Polynomial Optimization.
Adversarial Examples in Modern Machine Learning: A Review.
2019-11-11
RNN-Test: Adversarial Testing Framework for Recurrent Neural Network Systems.
Few-Features Attack to Fool Machine Learning Models through Mask-Based GAN.
CALPA-NET: Channel-pruning-assisted Deep Residual Network for Steganalysis of Digital Images.
Learning From Brains How to Regularize Machines.
Robust Design of Deep Neural Networks against Adversarial Attacks based on Lyapunov Theory.
GraphDefense: Towards Robust Graph Convolutional Networks.
2019-11-09
A Reinforced Generation of Adversarial Samples for Neural Machine Translation.
Improving Machine Reading Comprehension via Adversarial Training.
Adaptive versus Standard Descent Methods and Robustness Against Adversarial Examples.
Minimalistic Attacks: How Little it Takes to Fool a Deep Reinforcement Learning Policy.
2019-11-08
Intrusion Detection for Industrial Control Systems: Evaluation Analysis and Adversarial Attacks.
Patch augmentation: Towards efficient decision boundaries for neural networks.
Domain Robustness in Neural Machine Translation.
Adversarial Attacks on GMM i-vector based Speaker Verification Systems.
Imperceptible Adversarial Attacks on Tabular Data.
2019-11-07
White-Box Target Attack for EEG-Based BCI Regression Problems.
Active Learning for Black-Box Adversarial Attacks in EEG-Based Brain-Computer Interfaces.
2019-11-06
How can we fool LIME and SHAP? Adversarial Attacks on Post hoc Explanation Methods.
Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distance.
The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.
Reversible Adversarial Example based on Reversible Image Transformation.
2019-11-05
Adversarial Enhancement for Community Detection in Complex Networks.
Test Metrics for Recurrent Neural Networks.
Intriguing Properties of Adversarial ML Attacks in the Problem Space.
DLA: Dense-Layer-Analysis for Adversarial Example Detection.
2019-11-04
The Tale of Evil Twins: Adversarial Inputs versus Backdoored Models.
Persistency of Excitation for Robustness of Neural Networks.
Fast-UAP: An Algorithm for Speeding up Universal Adversarial Perturbation Generation with Orientation of Perturbation Vectors.
2019-11-03
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems.
Improved Detection of Adversarial Attacks via Penetration Distortion Maximization.
2019-11-02
Security of Facial Forensics Models Against Adversarial Attacks.
2019-10-31
Enhancing Certifiable Robustness via a Deep Model Ensemble.
Certifiable Robustness to Graph Perturbations.
Adversarial Music: Real World Audio Adversary Against Wake-word Detection System.
2019-10-30
Universal Adversarial Perturbations Against Person Re-Identification.
Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization.
2019-10-29
Adversarial Example in Remote Sensing Image Recognition.
2019-10-28
Active Subspace of Neural Networks: Structural Analysis and Universal Attacks.
Certified Adversarial Robustness for Deep Reinforcement Learning.
2019-10-27
Open the Boxes of Words: Incorporating Sememes into Textual Adversarial Attack.
EdgeFool: An Adversarial Image Enhancement Filter.
Spot Evasion Attacks: Adversarial Examples for License Plate Recognition Systems with Convolutional Neural Networks.
2019-10-26
Adversarial Defense Via Local Flatness Regularization.
Detection of Adversarial Attacks and Characterization of Adversarial Subspace.
Understanding and Quantifying Adversarial Examples Existence in Linear Classification.
2019-10-25
Effectiveness of random deep feature selection for securing image manipulation detectors against adversarial examples.
MediaEval 2019: Concealed FGSM Perturbations for Privacy Preservation.
Label Smoothing and Logit Squeezing: A Replacement for Adversarial Training?.
2019-10-24
ATZSL: Defensive Zero-Shot Recognition in the Presence of Adversaries.
2019-10-23
A Useful Taxonomy for Adversarial Robustness of Neural Networks.
Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks.
2019-10-22
Attacking Optical Flow.
Cross-Representation Transferability of Adversarial Perturbations: From Spectrograms to Audio Waveforms.
Adversarial Example Detection by Classification for Deep Speech Recognition.
Structure Matters: Towards Generating Transferable Adversarial Images.
2019-10-21
Recovering Localized Adversarial Attacks.
Learning to Learn by Zeroth-Order Oracle.
An Alternative Surrogate Loss for PGD-based Adversarial Testing.
2019-10-20
Enhancing Recurrent Neural Networks with Sememes.
2019-10-19
Adversarial Attacks on Spoofing Countermeasures of automatic speaker verification.
2019-10-18
Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?.
A Saddle-Point Dynamical System Approach for Robust Deep Learning.
Spatial-aware Online Adversarial Perturbations Against Visual Object Tracking.
2019-10-17
Evading Real-Time Person Detectors by Adversarial T-shirt.
Instance adaptive adversarial training: Improved accuracy tradeoffs in neural nets.
Enforcing Linearity in DNN succours Robustness and Adversarial Image Generation.
LanCe: A Comprehensive and Lightweight CNN Defense Methodology against Physical Adversarial Attacks on Embedded Multimedia Applications.
2019-10-16
A New Defense Against Adversarial Images: Turning a Weakness into a Strength.
2019-10-15
Improving Robustness of time series classifier with Neural ODE guided gradient based data augmentation.
Understanding Misclassifications by Attributes.
Adversarial Examples for Models of Code.
On adversarial patches: real-world attack on ArcFace-100 face recognition system.
2019-10-14
Real-world attack on MTCNN face detection system.
DeepSearch: Simple and Effective Blackbox Fuzzing of Deep Neural Networks.
Confidence-Calibrated Adversarial Training and Detection: More Robust Models Generalizing Beyond the Attack Used During Training.
ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimization.
Man-in-the-Middle Attacks against Machine Learning Classifiers via Malicious Generative Models.
2019-10-12
On Robustness of Neural Ordinary Differential Equations.
2019-10-11
Hear "No Evil", See "Kenansville": Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification Systems.
Verification of Neural Networks: Specifying Global Robustness using Generative Models.
2019-10-10
Information Robust Dirichlet Networks for Predictive Uncertainty Estimation.
Universal Adversarial Perturbation for Text Classification.
2019-10-09
Learning deep forest with multi-scale Local Binary Pattern features for face anti-spoofing.
Adversarial Learning of Deepfakes in Accounting.
Deep Latent Defence.
Adversarial Training: embedding adversarial perturbations into the parameter space of a neural network to build a robust system.
2019-10-08
Directional Adversarial Training for Cost Sensitive Deep Learning Classification Applications.
SmoothFool: An Efficient Framework for Computing Smooth Adversarial Perturbations.
2019-10-07
Interpretable Disentanglement of Neural Networks by Extracting Class-Specific Subnetwork.
2019-10-05
Unrestricted Adversarial Attacks for Semantic Segmentation.
Yet another but more efficient black-box adversarial attack: tiling and evolution strategies.
2019-10-04
Requirements for Developing Robust Neural Networks.
Adversarial Examples for Cost-Sensitive Classifiers.
2019-10-03
Verification of Neural Network Behaviour: Formal Guarantees for Power System Applications.
Perturbations are not Enough: Generating Adversarial Examples with Spatial Distortions.
BUZz: BUffer Zones for defending adversarial examples in image classification.
2019-10-02
Attacking Vision-based Perception in End-to-End Autonomous Driving Models.
Adversarially Robust Few-Shot Learning: A Meta-Learning Approach.
2019-10-01
Boosting Image Recognition with Non-differentiable Constraints.
Generating Semantic Adversarial Examples with Differentiable Rendering.
Attacking CNN-based anti-spoofing face authentication in the physical domain.
An Efficient and Margin-Approaching Zero-Confidence Adversarial Attack.
Deep Neural Rejection against Adversarial Examples.
Cross-Layer Strategic Ensemble Defense Against Adversarial Examples.
2019-09-30
Min-Max Optimization without Gradients: Convergence and Applications to Adversarial ML.
Adversarial Patches Exploiting Contextual Reasoning in Object Detection.
Black-box Adversarial Attacks with Bayesian Optimization.
2019-09-29
Techniques for Adversarial Examples Threatening the Safety of Artificial Intelligence Based Systems.
2019-09-27
Maximal adversarial perturbations for obfuscation: Hiding certain attributes while preserving rest.
Impact of Low-bitwidth Quantization on the Adversarial Robustness for Embedded Neural Networks.
2019-09-26
Towards Understanding the Transferability of Deep Representations.
Towards neural networks that provably know when they don't know.
Adversarial Machine Learning Attack on Modulation Classification.
Adversarial ML Attack on Self Organizing Cellular Networks.
Lower Bounds on Adversarial Robustness from Optimal Transport.
2019-09-25
Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection.
Mixup Inference: Better Exploiting Mixup to Defend Adversarial Attacks.
FreeLB: Enhanced Adversarial Training for Language Understanding.
2019-09-24
A Visual Analytics Framework for Adversarial Text Generation.
Intelligent image synthesis to attack a segmentation CNN using adversarial learning.
Sign-OPT: A Query-Efficient Hard-label Adversarial Attack.
2019-09-23
Adversarial Examples for Deep Learning Cyber Security Analytics.
Robust Local Features for Improving the Generalization of Adversarial Training.
MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples.
2019-09-22
HAWKEYE: Adversarial Example Detector for Deep Neural Networks.
2019-09-20
Adversarial Learning with Margin-based Triplet Embedding Regularization.
Defending Against Physically Realizable Attacks on Image Classification.
COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection.
2019-09-19
Propagated Perturbation of Adversarial Attack for well-known CNNs: Empirical Study and its Explanation.
Adversarial Vulnerability Bounds for Gaussian Process Classification.
Absum: Simple Regularization Method for Reducing Structural Sensitivity of Convolutional Neural Networks.
Training Robust Deep Neural Networks via Adversarial Noise Propagation.
Toward Robust Image Classification.
2019-09-17
Adversarial Attacks and Defenses in Images, Graphs and Text: A Review.
Generating Black-Box Adversarial Examples for Text Classifiers Using a Deep Reinforced Model.
Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges.
2019-09-16
HAD-GAN: A Human-perception Auxiliary Defense GAN model to Defend Adversarial Examples.
They Might NOT Be Giants: Crafting Black-Box Adversarial Examples with Fewer Queries Using Particle Swarm Optimization.
Towards Quality Assurance of Software Product Lines with Adversarial Configurations.
Interpreting and Improving Adversarial Robustness with Neuron Sensitivity.
2019-09-15
An Empirical Study towards Characterizing Deep Learning Development and Deployment across Different Frameworks and Platforms.
Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors.
2019-09-14
Natural Language Adversarial Attacks and Defenses in Word Level.
2019-09-13
Adversarial Attack on Skeleton-based Human Action Recognition.
Say What I Want: Towards the Dark Side of Neural Dialogue Models.
White-Box Adversarial Defense via Self-Supervised Data Estimation.
Defending Against Adversarial Attacks by Suppressing the Largest Eigenvalue of Fisher Information Matrix.
2019-09-12
Inspecting adversarial examples using the Fisher information.
An Empirical Investigation of Randomized Defenses against Adversarial Attacks.
Transferable Adversarial Robustness using Adversarially Trained Autoencoders.
2019-09-11
Feedback Learning for Improving the Robustness of Neural Networks.
Sparse and Imperceivable Adversarial Attacks.
2019-09-10
Localized Adversarial Training for Increased Accuracy and Robustness in Image Classification.
Identifying and Resisting Adversarial Videos Using Temporal Consistency.
Effectiveness of Adversarial Examples and Defenses for Malware Classification.
Towards Noise-Robust Neural Networks via Progressive Adversarial Training.
UPC: Learning Universal Physical Camouflage Attacks on Object Detectors.
FDA: Feature Disruptive Attack.
Learning to Disentangle Robust and Vulnerable Features for Adversarial Detection.
Toward Finding The Global Optimal of Adversarial Examples.
2019-09-09
Adversarial Robustness Against the Union of Multiple Perturbation Models.
2019-09-08
STA: Adversarial Attacks on Siamese Trackers.
When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures.
2019-09-06
Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification.
Natural Adversarial Sentence Generation with Gradient-based Perturbation.
Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information.
2019-09-05
Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agents.
Adversarial Examples with Difficult Common Words for Paraphrase Identification.
2019-09-04
Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?.
2019-09-03
Certified Robustness to Adversarial Word Substitutions.
Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation.
2019-09-02
Metric Learning for Adversarial Robustness.
2019-08-29
Adversarial Training Methods for Network Embedding.
Deep Neural Network Ensembles against Deception: Ensemble Diversity, Accuracy and Robustness.
Defending Against Misclassification Attacks in Transfer Learning.
Universal, transferable and targeted adversarial attacks.
2019-08-26
A Statistical Defense Approach for Detecting Adversarial Examples.
Gated Convolutional Networks with Hybrid Connectivity for Image Classification.
2019-08-25
Adversarial Edit Attacks for Tree Data.
advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns.
2019-08-24
Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower.
2019-08-23
Improving Adversarial Robustness via Attention and Adversarial Logit Pairing.
AdvHat: Real-world adversarial attack on ArcFace Face ID system.
2019-08-22
Saliency Methods for Explaining Adversarial Attacks.
2019-08-21
Testing Robustness Against Unforeseen Adversaries.
Evaluating Defensive Distillation For Defending Text Processing Neural Networks Against Adversarial Examples.
2019-08-20
Robust Graph Neural Network Against Poisoning Attacks via Transfer Learning.
Denoising and Verification Cross-Layer Ensemble Against Black-box Adversarial Attacks.
2019-08-19
Universal Adversarial Triggers for NLP.
Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses.
Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries.
2019-08-18
On the Robustness of Human Pose Estimation.
Adversarial Defense by Suppressing High-frequency Components.
2019-08-17
Verification of Neural Network Control Policy Under Persistent Adversarial Perturbation.
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks.
2019-08-16
Adversarial point perturbations on 3D objects.
2019-08-14
DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation.
Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once.
AdvFaces: Adversarial Face Synthesis.
2019-08-12
On Defending Against Label Flipping Attacks on Malware Detection Systems.
Adversarial Neural Pruning with Latent Vulnerability Suppression.
2019-08-09
On the Adversarial Robustness of Neural Networks without Weight Transport.
2019-08-08
Defending Against Adversarial Iris Examples Using Wavelet Decomposition.
Universal Adversarial Audio Perturbations.
2019-08-07
Improved Adversarial Robustness by Reducing Open Space Risk via Tent Activations.
Investigating Decision Boundaries of Trained Neural Networks.
2019-08-06
Explaining Deep Neural Networks Using Spectrum-Based Fault Localization.
MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks.
BlurNet: Defense by Filtering the Feature Maps.
2019-08-05
Random Directional Attack for Fooling Deep Neural Networks.
Adversarial Self-Defense for Cycle-Consistent GANs.
Automated Detection System for Adversarial Examples with High-Frequency Noises Sieve.
A principled approach for generating adversarial images under non-smooth dissimilarity metrics.
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems.
2019-08-04
A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Models.
2019-08-03
Exploring the Robustness of NMT Systems to Nonsensical Inputs.
2019-08-02
AdvGAN++ : Harnessing latent layers for adversary generation.
2019-08-01
Black-box Adversarial ML Attack on Modulation Classification.
Robustifying deep networks for image segmentation.
2019-07-31
Adversarial Robustness Curves.
Optimal Attacks on Reinforcement Learning Policies.
2019-07-30
Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation.
Not All Adversarial Examples Require a Complex Defense: Identifying Over-optimized Adversarial Examples with IQR-based Logit Thresholding.
2019-07-28
Are Odds Really Odd? Bypassing Statistical Detection of Adversarial Examples.
2019-07-27
Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment.
2019-07-26
Understanding Adversarial Robustness: The Trade-off between Minimum and Average Margin.
On the Design of Black-box Adversarial Examples by Leveraging Gradient-free Optimization and Operator Splitting Method.
2019-07-24
Towards Adversarially Robust Object Detection.
Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems.
Joint Adversarial Training: Incorporating both Spatial and Pixel Attacks.
Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training.
Weakly Supervised Localization using Min-Max Entropy: an Interpretable Framework.
2019-07-23
Enhancing Adversarial Example Transferability with an Intermediate Level Attack.
2019-07-21
Characterizing Attacks on Deep Reinforcement Learning.
2019-07-17
Connecting Lyapunov Control Theory to Adversarial Attacks.
Real-time Evasion Attacks with Physical Constraints on Deep Learning-based Anomaly Detectors in Industrial Control Systems.
Robustness properties of Facebook's ResNeXt WSL models.
2019-07-16
Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods.
Natural Adversarial Examples.
Latent Adversarial Defence with Boundary-guided Generation.
Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving.
Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analytics.
2019-07-15
Graph Interpolating Activation Improves Both Natural and Robust Accuracies in Data-Efficient Deep Learning.
Recovery Guarantees for Compressible Signals with Adversarial Noise.
2019-07-14
Measuring the Transferability of Adversarial Examples.
2019-07-12
Unsupervised Adversarial Attacks on Deep Feature-based Retrieval with GAN.
Stateful Detection of Black-Box Adversarial Attacks.
Generative Modeling by Estimating Gradients of the Data Distribution.
2019-07-11
Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn.
Adversarial Objects Against LiDAR-Based Autonomous Driving Systems.
2019-07-10
Metamorphic Detection of Adversarial Examples in Deep Learning Models With Affine Transformations.
2019-07-09
Generating Adversarial Fragments with Adversarial Networks for Physical-world Implementation.
2019-07-06
Affine Disentangled GAN for Interpretable and Robust AV Perception.
2019-07-05
Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructions.
2019-07-04
Adversarial Robustness through Local Linearization.
Adversarial Attacks in Sound Event Classification.
2019-07-03
Robust Synthesis of Adversarial Visual Examples Using a Deep Image Prior.
Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack.
2019-07-02
Efficient Cyber Attacks Detection in Industrial Control Systems Using Lightweight Neural Networks and PCA.
Treant: Training Evasion-Aware Decision Trees.
2019-07-01
Comment on "Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network".
Diminishing the Effect of Adversarial Perturbations via Refining Feature Representation.
Accurate, reliable and fast robustness evaluation.
2019-06-30
Fooling a Real Car with Adversarial Traffic Signs.
2019-06-28
Using Self-Supervised Learning Can Improve Model Robustness and Uncertainty.
Certifiable Robustness and Robust Training for Graph Convolutional Networks.
Learning to Cope with Adversarial Attacks.
Robustness Guarantees for Deep Neural Networks on Videos.
2019-06-27
Using Intuition from Empirical Properties to Simplify Adversarial Training Defense.
Evolving Robust Neural Architectures to Defend from Adversarial Attacks.
Adversarial Robustness via Label-Smoothing.
2019-06-26
The Adversarial Robustness of Sampling.
Defending Adversarial Attacks by Correcting logits.
2019-06-25
Quantitative Verification of Neural Networks And its Security Applications.
Are Adversarial Perturbations a Showstopper for ML-Based CAD? A Case Study on CNN-Based Lithographic Hotspot Detection.
2019-06-24
Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signals.
2019-06-22
Defending Against Adversarial Examples with K-Nearest Neighbor.
2019-06-21
Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations.
A Fourier Perspective on Model Robustness in Computer Vision.
Evolution Attack On Neural Networks.
Adversarial Examples to Fool Iris Recognition Systems.
2019-06-20
On Physical Adversarial Patches for Object Detection.
2019-06-19
Catfish Effect Between Internal and External Attackers:Being Semi-honest is Helpful.
Improving the robustness of ImageNet classifiers using elements of human visual cognition.
A unified view on differential privacy and robustness to adversarial examples.
Convergence of Adversarial Training in Overparametrized Networks.
Global Adversarial Attacks for Assessing Deep Learning Robustness.
Cloud-based Image Classification Service Is Not Robust To Simple Transformations: A Forgotten Battlefield.
SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing.
2019-06-17
Adversarial attacks on Copyright Detection Systems.
Improving Black-box Adversarial Attacks with a Transfer-based Prior.
The Attack Generator: A Systematic Approach Towards Constructing Adversarial Attacks.
2019-06-16
Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Accuracy.
Defending Against Adversarial Attacks Using Random Forests.
2019-06-15
Uncovering Why Deep Neural Networks Lack Robustness: Representation Metrics that Link to Adversarial Attacks.
2019-06-14
Adversarial Training Can Hurt Generalization.
Towards Compact and Robust Deep Neural Networks.
Perceptual Based Adversarial Audio Attacks.
Copy and Paste: A Simple But Effective Initialization Method for Black-Box Adversarial Attacks.
Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks.
Towards Stable and Efficient Training of Verifiably Robust Neural Networks.
Model Agnostic Dual Quality Assessment for Adversarial Machine Learning and an Analysis of Current Neural Networks and Defenses.
2019-06-13
A Computationally Efficient Method for Defending Adversarial Deep Learning Attacks.
Lower Bounds for Adversarially Robust PAC Learning.
2019-06-12
Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers.
2019-06-11
Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks.
Mimic and Fool: A Task Agnostic Adversarial Attack.
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks.
2019-06-10
E-LPIPS: Robust Perceptual Image Similarity via Random Transformation Ensembles.
Evaluating the Robustness of Nearest Neighbor Classifiers: A Primal-Dual Perspective.
Robustness Verification of Tree-based Models.
Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective.
2019-06-09
On the Vulnerability of Capsule Networks to Adversarial Attacks.
Intriguing properties of adversarial training.
Improved Adversarial Robustness via Logit Regularization Methods.
Attacking Graph Convolutional Networks via Rewiring.
Towards A Unified Min-Max Framework for Adversarial Exploration and Robustness.
Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers.
2019-06-08
Strategies to architect AI Safety: Defense to guard AI from Adversaries.
Making targeted black-box evasion attacks effective and efficient.
Sensitivity of Deep Convolutional Networks to Gabor Noise.
ML-LOO: Detecting Adversarial Examples with Feature Attribution.
Provably Robust Boosted Decision Stumps and Trees against Adversarial Attacks.
Defending Against Universal Attacks Through Selective Feature Regeneration.
2019-06-07
A cryptographic approach to black box adversarial machine learning.
Using learned optimizers to make models robust to input noise.
Adversarial Examples for Non-Parametric Methods: Attacks, Defenses and Large Sample Limits.
Efficient Project Gradient Descent for Ensemble Adversarial Attack.
Inductive Bias of Gradient Descent based Adversarial Training on Separable Data.
Adversarial Explanations for Understanding Image Classification Decisions and Improved Neural Network Robustness.
2019-06-06
Robust Attacks against Multiple Classifiers.
Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation.
Understanding Adversarial Behavior of DNNs by Disentangling Non-Robust and Robust Components in Performance Metric.
Should Adversarial Attacks Use Pixel p-Norm?.
Image Synthesis with a Single (Robust) Classifier.
2019-06-05
Query-efficient Meta Attack to Deep Neural Networks.
MNIST-C: A Robustness Benchmark for Computer Vision.
Enhancing Gradient-based Attacks with Symbolic Intervals.
Multi-way Encoding for Robustness.
2019-06-04
Adversarial Training Generalizes Data-dependent Spectral Norm Regularization.
2019-06-03
Conditional Generative Models are not Robust.
Adversarial Exploitation of Policy Imitation.
RL-Based Method for Benchmarking the Adversarial Resilience and Robustness of Deep Reinforcement Learning Policies.
Adversarial Risk Bounds for Neural Networks through Sparsity based Compression.
The Adversarial Machine Learning Conundrum: Can The Insecurity of ML Become The Achilles' Heel of Cognitive Networks?.
Adversarial Robustness as a Prior for Learned Representations.
Achieving Generalizable Robustness of Deep Neural Networks by Stability Training.
A Surprising Density of Illusionable Natural Speech.
Fast and Stable Interval Bounds Propagation for Training Verifiably Robust Models.
2019-06-02
Adversarially Robust Generalization Just Requires More Unlabeled Data.
2019-06-01
Adversarial Examples for Edge Detection: They Exist, and They Transfer.
Enhancing Transformation-based Defenses using a Distribution Classifier.
Perceptual Evaluation of Adversarial Attacks for CNN-based Image Classification.
2019-05-31
Unlabeled Data Improves Adversarial Robustness.
Reverse KL-Divergence Training of Prior Networks: Improved Uncertainty and Adversarial Robustness.
Are Labels Required for Improving Adversarial Robustness?.
2019-05-30
Real-Time Adversarial Attacks.
Residual Networks as Nonlinear Systems: Stability Analysis using Linearization.
Identifying Classes Susceptible to Adversarial Attacks.
Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness.
Interpretable Adversarial Training for Text.
2019-05-29
Bandlimiting Neural Networks Against Adversarial Attacks.
Securing Connected & Autonomous Vehicles: Challenges Posed by Adversarial Machine Learning and The Way Forward.
Misleading Authorship Attribution of Source Code using Adversarial Learning.
CopyCAT: Taking Control of Neural Policies with Constant Attacks.
Functional Adversarial Attacks.
2019-05-28
ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation.
Adversarial Attacks on Remote User Authentication Using Behavioural Mouse Dynamics.
Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss.
High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks.
Snooping Attacks on Deep Reinforcement Learning.
Probabilistically True and Tight Bounds for Robust Deep Neural Network Training.
Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness.
Cross-Domain Transferability of Adversarial Perturbations.
Certifiably Robust Interpretation in Deep Learning.
2019-05-27
Brain-inspired reverse adversarial examples.
Label Universal Targeted Attack.
Divide-and-Conquer Adversarial Detection.
Provable robustness against all adversarial $l_p$-perturbations for $p\geq 1$.
Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking.
Scaleable input gradient regularization for adversarial robustness.
Combating Adversarial Misspellings with Robust Word Recognition.
Analyzing the Interpretability Robustness of Self-Explaining Models.
Adversarially Robust Learning Could Leverage Computational Hardness.
Unsupervised Euclidean Distance Attack on Network Embedding.
2019-05-26
State-Reification Networks: Improving Generalization by Modeling the Distribution of Hidden Representations.
Non-Determinism in Neural Networks for Adversarial Robustness.
Purifying Adversarial Perturbation with Adversarially Trained Auto-encoders.
Rearchitecting Classification Frameworks For Increased Robustness.
Robust Classification using Robust Feature Augmentation.
Generalizable Adversarial Attacks Using Generative Models.
2019-05-25
Trust but Verify: An Information-Theoretic Explanation for the Adversarial Fragility of Machine Learning Systems, and a General Defense against Adversarial Attacks.
Adversarial Distillation for Ordered Top-k Attacks.
Adversarial Policies: Attacking Deep Reinforcement Learning.
Rethinking Softmax Cross-Entropy Loss for Adversarial Robustness.
2019-05-24
Robustness to Adversarial Perturbations in Learning from Incomplete Data.
Power up! Robust Graph Convolutional Network against Evasion Attacks based on Graph Powering.
Enhancing Adversarial Defense by k-Winners-Take-All.
2019-05-23
A Direct Approach to Robust Deep Learning Using Adversarial Networks.
PHom-GeM: Persistent Homology for Generative Models.
Thwarting finite difference adversarial attacks with output randomization.
Interpreting Adversarially Trained Convolutional Neural Networks.
Adversarially Robust Distillation.
2019-05-22
Convergence and Margin of Adversarial Training on Separable Data.
Detecting Adversarial Examples and Other Misclassifications in Neural Networks by Introspection.
2019-05-21
DoPa: A Fast and Comprehensive CNN Defense Methodology against Physical Adversarial Attacks.
2019-05-20
Adversarially robust transfer learning.
2019-05-19
Testing Deep Neural Network based Image Classifiers.
2019-05-18
What Do Adversarially Robust Models Look At?.
Taking Care of The Discretization Problem:A Black-Box Adversarial Image Attack in Discrete Integer Domain.
2019-05-17
POPQORN: Quantifying Robustness of Recurrent Neural Networks.
A critique of the DeepSec Platform for Security Analysis of Deep Learning Models.
Simple Black-box Adversarial Attacks.
2019-05-16
Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization.
2019-05-15
On Norm-Agnostic Robustness of Adversarial Training.
An Efficient Pre-processing Method to Eliminate Adversarial Effects.
2019-05-14
Robustification of deep net classifiers by key based diversified aggregation with pre-filtering.
2019-05-13
Adversarial Examples for Electrocardiograms.
Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networks.
Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models.
2019-05-11
Moving Target Defense for Deep Visual Sensing against Adversarial Examples.
2019-05-10
Interpreting and Evaluating Neural Network Robustness.
On the Connection Between Adversarial Robustness and Saliency Map Interpretability.
Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables.
2019-05-09
Adversarial Defense Framework for Graph Neural Network.
Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain.
Exploring the Hyperparameter Landscape of Adversarial Robustness.
Learning Interpretable Features via Adversarially Robust Optimization.
Universal Adversarial Perturbations for Speech Recognition Systems.
2019-05-08
ROSA: Robust Salient Object Detection against Adversarial Attacks.
Adversarial Image Translation: Unrestricted Adversarial Examples in Face Recognition Systems.
Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction.
2019-05-07
A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks.
Representation of White- and Black-Box Adversarial Examples in Deep Neural Networks and Humans: A Functional Magnetic Resonance Imaging Study.
An Empirical Evaluation of Adversarial Robustness under Transfer Learning.
Adaptive Generation of Unrestricted Adversarial Inputs.
2019-05-06
Batch Normalization is a Cause of Adversarial Vulnerability.
Adversarial Examples Are Not Bugs, They Are Features.
2019-05-05
Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples.
2019-05-03
Transfer of Adversarial Robustness Between Perturbation Types.
2019-05-02
Adversarial Training with Voronoi Constraints.
Weight Map Layer for Noise and Adversarial Attack Robustness.
You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle.
2019-05-01
POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm.
Dropping Pixels for Adversarial Robustness.
NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks.
2019-04-30
Test Selection for Deep Learning Systems.
Detecting Adversarial Examples through Nonlinear Dimensionality Reduction.
An Argumentation-Based Reasoner to Assist Digital Investigation and Attribution of Cyber-Attacks. (1%)
2019-04-29
Adversarial Training for Free!.
Adversarial Training and Robustness for Multiple Perturbations.
2019-04-27
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks.
2019-04-26
Robustness Verification of Support Vector Machines.
2019-04-24
A Robust Approach for Securing Audio Classification Against Adversarial Attacks.
Physical Adversarial Textures that Fool Visual Object Tracking.
2019-04-23
Minimizing Perceived Image Quality Loss Through Adversarial Attack Scoping.
2019-04-22
blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness.
Using Videos to Evaluate Image Model Robustness.
2019-04-21
Beyond Explainability: Leveraging Interpretability for Improved Adversarial Learning.
2019-04-20
Can Machine Learning Model with Static Features be Fooled: an Adversarial Machine Learning Approach.
2019-04-19
Salient Object Detection in the Deep Learning Era: An In-Depth Survey.
2019-04-18
Fooling automated surveillance cameras: adversarial patches to attack person detection.
2019-04-17
ZK-GanDef: A GAN based Zero Knowledge Adversarial Training Defense for Neural Networks.
Defensive Quantization: When Efficiency Meets Robustness.
Interpreting Adversarial Examples with Attributes.
Adversarial Defense Through Network Profiling Based Path Extraction.
Gotta Catch 'Em All: Using Concealed Trapdoors to Detect Adversarial Attacks on Neural Networks.
Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers.
2019-04-16
Reducing Adversarial Example Transferability Using Gradient Regularization.
AT-GAN: A Generative Attack Model for Adversarial Transferring on Generative Adversarial Nets.
2019-04-15
Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction.
Influence of Control Parameters and the Size of Biomedical Image Datasets on the Success of Adversarial Attacks.
2019-04-13
Exploiting Vulnerabilities of Load Forecasting Through Adversarial Attacks.
2019-04-12
Big but Imperceptible Adversarial Perturbations via Semantic Manipulation.
Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense.
Generating Minimal Adversarial Perturbations with Integrated Adaptive Gradients.
Evaluating Robustness of Deep Image Super-Resolution against Adversarial Attacks.
Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks.
2019-04-11
Black-Box Decision based Adversarial Attack with Symmetric $\alpha$-stable Distribution.
2019-04-10
Learning to Generate Synthetic Data via Compositing.
Black-box Adversarial Attacks on Video Recognition Models.
2019-04-09
Generation & Evaluation of Adversarial Examples for Malware Obfuscation.
2019-04-08
Efficient Decision-based Black-box Adversarial Attacks on Face Recognition.
A Target-Agnostic Attack on Deep Models: Exploiting Security Vulnerabilities of Transfer Learning.
2019-04-07
JumpReLU: A Retrofit Defense Strategy for Adversarial Attacks.
Malware Evasion Attack and Defense.
2019-04-06
On Training Robust PDF Malware Classifiers.
2019-04-05
Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks.
2019-04-04
Minimum Uncertainty Based Detection of Adversaries in Deep Neural Networks.
White-to-Black: Efficient Distillation of Black-Box Adversarial Attacks.
2019-04-03
Understanding the efficacy, reliability and resiliency of computer vision techniques for malware detection and future research directions.
Interpreting Adversarial Examples by Activation Promotion and Suppression.
HopSkipJumpAttack: A Query-Efficient Decision-Based Attack.
Summit: Scaling Deep Learning Interpretability by Visualizing Activation and Attribution Summarizations.
2019-04-02
Adversarial Attacks against Deep Saliency Models.
2019-04-01
Curls & Whey: Boosting Black-Box Adversarial Attacks.
Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses.
Robustness of 3D Deep Learning in an Adversarial Setting.
Defending against adversarial attacks by randomized diversification.
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks.
2019-03-31
On the Vulnerability of CNN Classifiers in EEG-Based BCIs.
2019-03-29
Adversarial Robustness vs Model Compression, or Both?.
2019-03-28
Benchmarking Neural Network Robustness to Common Corruptions and Perturbations.
Smooth Adversarial Examples.
2019-03-27
Rallying Adversarial Techniques against Deep Learning for Network Security.
Bridging Adversarial Robustness and Gradient Interpretability.
Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems.
Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks.
2019-03-26
On the Adversarial Robustness of Multivariate Robust Estimation.
A geometry-inspired decision-based attack.
2019-03-25
Defending against Whitebox Adversarial Attacks via Randomized Discretization.
Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness.
The LogBarrier adversarial attack: making effective use of decision boundary information.
Robust Neural Networks using Randomized Adversarial Training.
2019-03-24
A Formalization of Robustness for Deep Neural Networks.
Variational Inference with Latent Space Quantization for Adversarial Resilience.
2019-03-23
Improving Adversarial Robustness via Guided Complement Entropy.
2019-03-22
Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition.
2019-03-21
Adversarial camera stickers: A physical camera-based attack on deep learning systems.
2019-03-20
Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes.
2019-03-19
On the Robustness of Deep K-Nearest Neighbors.
2019-03-18
Generating Adversarial Examples With Conditional Generative Adversarial Net.
Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems.
2019-03-17
Adversarial Attacks on Deep Neural Networks for Time Series Classification.
2019-03-15
On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models.
On Certifying Non-uniform Bound against Adversarial Attacks.
2019-03-14
A Research Agenda: Dynamic Models to Defend Against Correlated Attacks.
Attribution-driven Causal Analysis for Detection of Adversarial Examples.
2019-03-13
Adversarial attacks against Fact Extraction and VERification.
2019-03-12
Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models.
2019-03-11
Can Adversarial Network Attack be Defended?.
2019-03-10
Uncertainty Propagation in Deep Neural Network Using Active Subspace. (61%)
2019-03-09
Manifold Preserving Adversarial Learning.
2019-03-07
Attack Type Agnostic Perceptual Enhancement of Adversarial Images.
Out-domain examples for generative models.
2019-03-06
GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier.
2019-03-05
Statistical Guarantees for the Robustness of Bayesian Neural Networks.
L 1-norm double backpropagation adversarial defense.
2019-03-04
Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search.
The Vulnerabilities of Graph Convolutional Networks: Stronger Attacks and Defensive Techniques.
Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming.
Complement Objective Training.
2019-03-03
A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations.
2019-03-01
Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications.
PuVAE: A Variational Autoencoder to Purify Adversarial Examples.
Attacking Graph-based Classification via Manipulating the Graph Structure.
2019-02-28
On the Effectiveness of Low Frequency Perturbations.
Enhancing the Robustness of Deep Neural Networks by Boundary Conditional GAN.
Towards Understanding Adversarial Examples Systematically: Exploring Data Size, Task and Model Factors.
Adversarial Attack and Defense on Point Sets.
2019-02-27
Stochastically Rank-Regularized Tensor Regression Networks.
Adversarial Attacks on Time Series.
Communication without Interception: Defense against Deep-Learning-based Modulation Detection.
Robust Decision Trees Against Adversarial Examples.
2019-02-26
Disentangled Deep Autoencoding Regularization for Robust Image Classification.
Analyzing Deep Neural Networks with Symbolic Propagation: Towards Higher Precision and Faster Verification.
2019-02-25
Verification of Non-Linear Specifications for Neural Networks.
Adversarial attacks hidden in plain sight.
2019-02-24
MaskDGA: A Black-box Evasion Technique Against DGA Classifiers and Adversarial Defenses.
Adversarial Reinforcement Learning under Partial Observability in Software-Defined Networking.
2019-02-23
Re-evaluating ADEM: A Deeper Look at Scoring Dialogue Responses.
A Deep, Information-theoretic Framework for Robust Biometric Recognition.
2019-02-22
Adversarial Attacks on Graph Neural Networks via Meta Learning.
Physical Adversarial Attacks Against End-to-End Autoencoder Communication Systems.
A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks.
2019-02-21
On the Sensitivity of Adversarial Robustness to Input Data Distributions.
Quantifying Perceptual Distortion of Adversarial Examples.
Wasserstein Adversarial Examples via Projected Sinkhorn Iterations.
2019-02-20
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch.
Perceptual Quality-preserving Black-Box Attack against Deep Learning Image Classifiers.
Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure.
2019-02-19
There are No Bit Parts for Sign Bits in Black-Box Attacks.
2019-02-18
On Evaluating Adversarial Robustness.
AuxBlocks: Defense Adversarial Example via Auxiliary Blocks.
Mockingbird: Defending Against Deep-Learning-Based Website Fingerprinting Attacks with Adversarial Traces.
2019-02-16
Mitigation of Adversarial Examples in RF Deep Classifiers Utilizing AutoEncoder Pre-training.
Adversarial Examples in RF Deep Learning: Detection of the Attack and its Physical Robustness.
2019-02-15
DeepFault: Fault Localization for Deep Neural Networks.
2019-02-14
Can Intelligent Hyperparameter Selection Improve Resistance to Adversarial Examples?.
2019-02-13
The Odds are Odd: A Statistical Test for Detecting Adversarial Examples.
2019-02-12
Examining Adversarial Learning against Graph-based IoT Malware Detection Systems.
2019-02-11
Adversarial Samples on Android Malware Detection Systems for IoT Systems.
A Survey: Towards a Robust Deep Neural Network in Text Domain.
2019-02-09
Model Compression with Adversarial Robustness: A Unified Optimization Framework.
When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networks.
2019-02-08
Minimal Images in Deep Neural Networks: Fragile Object Recognition in Natural Images.
Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis.
Discretization based Solutions for Secure Machine Learning against Adversarial Attacks.
2019-02-07
Robustness Of Saak Transform Against Adversarial Attacks.
Certified Adversarial Robustness via Randomized Smoothing.
2019-02-06
Fooling Neural Network Interpretations via Adversarial Model Manipulation.
Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples.
2019-02-05
Fatal Brain Damage.
2019-02-04
SNN under Attack: are Spiking Deep Belief Networks vulnerable to Adversarial Examples?.
Theoretical evidence for adversarial robustness through randomization.
Predictive Uncertainty Quantification with Compound Density Networks.
2019-02-01
Robustness Certificates Against Adversarial Examples for ReLU Networks.
Natural and Adversarial Error Detection using Invariance to Image Transformations.
Adaptive Gradient for Adversarial Perturbations Generation.
Robustness of Generalized Learning Vector Quantization Models against Adversarial Attacks.
The Efficacy of SHIELD under Different Threat Models.
2019-01-31
A New Family of Neural Networks Provably Resistant to Adversarial Attacks.
Training Artificial Neural Networks by Generalized Likelihood Ratio Method: Exploring Brain-like Learning to Improve Robustness.
2019-01-30
A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance.
Augmenting Model Robustness with Transformation-Invariant Attacks.
2019-01-29
Metric Attack and Defense for Person Re-identification.
Adversarial Examples Are a Natural Consequence of Test Error in Noise.
On the Effect of Low-Rank Weights on Adversarial Robustness of Neural Networks.
RED-Attack: Resource Efficient Decision based Attack for Machine Learning.
Reliable Smart Road Signs.
2019-01-28
Improving Adversarial Robustness of Ensembles with Diversity Training.
CapsAttacks: Robust and Imperceptible Adversarial Attacks on Capsule Networks.
Defense Methods Against Adversarial Examples for Recurrent Neural Networks.
Using Pre-Training Can Improve Model Robustness and Uncertainty.
2019-01-27
An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers.
Characterizing the Shape of Activation Space in Deep Neural Networks.
Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models.
2019-01-26
A Black-box Attack on Neural Networks Based on Swarm Evolutionary Algorithm.
Towards Weighted-Sampling Audio Adversarial Example Attack.
2019-01-25
Generative Adversarial Networks for Black-Box API Attacks with Limited Training Data.
Improving Adversarial Robustness via Promoting Ensemble Diversity.
2019-01-24
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples.
Theoretically Principled Trade-off between Robustness and Accuracy.
2019-01-23
SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systems.
Sitatapatra: Blocking the Transfer of Adversarial Samples.
2019-01-21
Universal Rules for Fooling Deep Neural Networks based Text Classification.
Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey.
Sensitivity Analysis of Deep Neural Networks.
Perception-in-the-Loop Adversarial Examples.
2019-01-17
Easy to Fool? Testing the Anti-evasion Capabilities of PDF Malware Scanners.
2019-01-15
The Limitations of Adversarial Training and the Blind-Spot Attack.
2019-01-13
Generating Adversarial Perturbation with Root Mean Square Gradient.
2019-01-12
ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System.
2019-01-11
Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries.
2019-01-10
Characterizing and evaluating adversarial examples for Offline Handwritten Signature Verification.
Image Transformation can make Neural Networks more robust against Adversarial Examples.
2019-01-09
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers.
2019-01-08
Interpretable BoW Networks for Adversarial Example Detection.
2019-01-07
Image Super-Resolution as a Defense Against Adversarial Attacks.
2019-01-05
Fake News Detection via NLP is Vulnerable to Adversarial Attacks.
2019-01-04
Adversarial Examples Versus Cloud-based Detectors: A Black-box Empirical Study.
2019-01-02
Multi-Label Adversarial Perturbations.
Adversarial Robustness May Be at Odds With Simplicity.
2019-01-01
A Noise-Sensitivity-Analysis-Based Test Prioritization Technique for Deep Neural Networks.
2018-12-27
DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems.
2018-12-26
Adversarial Attack and Defense on Graph Data: A Survey.
2018-12-25
A Data-driven Adversarial Examples Recognition Framework via Adversarial Feature Genome.
Noise Flooding for Detecting Audio Adversarial Examples Against Automatic Speech Recognition.
PPD: Permutation Phase Defense Against Adversarial Examples in Deep Learning.
A Multiversion Programming Inspired Approach to Detecting Audio Adversarial Examples.
Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors.
2018-12-24
DUP-Net: Denoiser and Upsampler Network for 3D Adversarial Point Clouds Defense.
2018-12-23
Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks.
Markov Game Modeling of Moving Target Defense for Strategic Detection of Threats in Cloud Networks.
2018-12-22
Exploiting the Inherent Limitation of L0 Adversarial Examples.
2018-12-21
Dissociable neural representations of adversarially perturbed images in deep neural networks and the human brain.
2018-12-19
Enhancing Robustness of Deep Neural Networks Against Adversarial Malware Samples: Principles, Framework, and AICS'2019 Challenge.
2018-12-18
PROVEN: Certifying Robustness of Neural Networks with a Probabilistic Approach.
2018-12-17
Spartan Networks: Self-Feature-Squeezing Neural Networks for increased robustness in adversarial settings.
Designing Adversarially Resilient Classifiers using Resilient Feature Engineering.
A Survey of Safety and Trustworthiness of Deep Neural Networks.
2018-12-16
Defense-VAE: A Fast and Accurate Defense against Adversarial Attacks.
2018-12-15
Perturbation Analysis of Learning Algorithms: A Unifying Perspective on Generation of Adversarial Examples.
Trust Region Based Adversarial Attack on Neural Networks.
2018-12-14
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing.
2018-12-13
TextBugger: Generating Adversarial Text Against Real-world Applications.
Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem.
2018-12-12
Thwarting Adversarial Examples: An $L_0$-RobustSparse Fourier Transform.
2018-12-11
Mix'n'Squeeze: Thwarting Adaptive Adversarial Samples Using Randomized Squeezing.
Adversarial Framing for Image and Video Classification.
2018-12-10
Defending Against Universal Perturbations With Shared Adversarial Training.
2018-12-08
Feature Denoising for Improving Adversarial Robustness.
AutoGAN: Robust Classifier Against Adversarial Attacks.
Detecting Adversarial Examples in Convolutional Neural Networks.
Learning Transferable Adversarial Examples via Ghost Networks.
2018-12-07
Deep-RBF Networks Revisited: Robust Classification with Rejection.
Combatting Adversarial Attacks through Denoising and Dimensionality Reduction: A Cascaded Autoencoder Approach.
2018-12-06
Adversarial Defense of Image Classification Using a Variational Auto-Encoder.
Adversarial Attacks, Regression, and Numerical Stability Regularization.
Prior Networks for Detection of Adversarial Attacks.
Towards Leveraging the Information of Gradients in Optimization-based Adversarial Attack.
Fooling Network Interpretation in Image Classification.
The Limitations of Model Uncertainty in Adversarial Settings.
Max-Margin Adversarial (MMA) Training: Direct Input Space Margin Maximization through Adversarial Training.
2018-12-05
On Configurable Defense against Adversarial Example Attacks.
Regularized Ensembles and Transferability in Adversarial Learning.
SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications.
2018-12-04
Rigorous Agent Evaluation: An Adversarial Approach to Uncover Catastrophic Failures.
Random Spiking and Systematic Evaluation of Defenses Against Adversarial Examples.
2018-12-03
Disentangling Adversarial Robustness and Generalization.
Interpretable Deep Learning under Fire.
Adversarial Example Decomposition.
2018-12-02
Model-Reuse Attacks on Deep Learning Systems.
Universal Perturbation Attack Against Image Retrieval.
2018-12-01
FineFool: Fine Object Contour Attack via Attention.
SentiNet: Detecting Physical Attacks Against Deep Learning Systems.
Building robust classifiers through generation of confident out of distribution examples.
Effects of Loss Functions And Target Representations on Adversarial Robustness.
Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classification.
2018-11-30
Transferable Adversarial Attacks for Image and Video Object Detection.
ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples.
Adversarial Defense by Stratified Convolutional Sparse Coding.
2018-11-29
CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks.
Bayesian Adversarial Spheres: Bayesian Inference and Adversarial Examples in a Noiseless Setting.
Adversarial Examples as an Input-Fault Tolerance Problem.
Analyzing Federated Learning through an Adversarial Lens.
Functional Analysis Attacks on Logic Locking. (1%)
2018-11-28
Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers.
Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects.
A randomized gradient-free attack on ReLU networks.
Adversarial Machine Learning And Speech Emotion Recognition: Utilizing Generative Adversarial Networks For Robustness.
2018-11-27
Robust Classification of Financial Risk.
Using Attribution to Decode Dataset Bias in Neural Network Models for Chemistry.
Universal Adversarial Training.
A Frank-Wolfe Framework for Efficient and Effective Adversarial Attacks.
2018-11-26
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies.
Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks.
2018-11-25
Is Data Clustering in Adversarial Settings Secure?.
2018-11-24
Attention, Please! Adversarial Defense via Attention Rectification and Preservation.
2018-11-23
Robustness via curvature regularization, and vice versa.
Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses.
2018-11-22
Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack.
Strength in Numbers: Trading-off Robustness and Computation via Adversarially-Trained Ensembles.
Detecting Adversarial Perturbations Through Spatial Behavior in Activation Spaces.
2018-11-21
Task-generalizable Adversarial Attack based on Perceptual Metric.
Towards Robust Neural Networks with Lipschitz Continuity.
2018-11-20
How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples.
MimicGAN: Corruption-Mimicking for Blind Image Recovery & Adversarial Defense.
Intermediate Level Adversarial Attack for Enhanced Transferability.
Lightweight Lipschitz Margin Training for Certified Defense against Adversarial Examples.
Convolutional Neural Networks with Transformed Input based on Robust Tensor Network Decomposition.
2018-11-19
Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding.
2018-11-18
Generalizable Adversarial Training via Spectral Normalization.
Regularized adversarial examples for model interpretability.
The Taboo Trap: Behavioural Detection of Adversarial Samples.
2018-11-17
DeepConsensus: using the consensus of features from multiple layers to attain robust image classification.
Classifiers Based on Deep Sparse Coding Architectures are Robust to Deep Learning Transferable Examples.
Boosting the Robustness Verification of DNN by Identifying the Achilles's Heel.
2018-11-16
Protecting Voice Controlled Systems Using Sound Source Identification Based on Acoustic Cues.
DARCCC: Detecting Adversaries by Reconstruction from Class Conditional Capsules.
2018-11-15
A Spectral View of Adversarially Robust Features.
A note on hyperparameters in black-box adversarial examples.
Mathematical Analysis of Adversarial Attacks.
Adversarial Examples from Cryptographic Pseudo-Random Generators.
2018-11-14
Verification of Recurrent Neural Networks Through Rule Extraction.
Robustness of spectral methods for community detection.
2018-11-13
Deep Q learning for fooling neural networks.
2018-11-08
Universal Decision-Based Black-Box Perturbations: Breaking Security-Through-Obscurity Defenses.
New CleverHans Feature: Better Adversarial Robustness Evaluations with Attack Bundling.
A Geometric Perspective on the Transferability of Adversarial Directions.
2018-11-07
CAAD 2018: Iterative Ensemble Adversarial Attack.
AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning.
2018-11-06
MixTrain: Scalable Training of Verifiably Robust Neural Networks.
SparseFool: a few pixels make a big difference.
2018-11-05
Active Deep Learning Attacks under Strict Rate Limitations for Online API Calls.
FUNN: Flexible Unsupervised Neural Network.
On the Transferability of Adversarial Examples Against CNN-Based Image Forensics.
2018-11-04
FAdeML: Understanding the Impact of Pre-Processing Noise Filtering on Adversarial Machine Learning.
SSCNets: A Selective Sobel Convolution-based Technique to Enhance the Robustness of Deep Neural Networks against Security Attacks.
QuSecNets: Quantization-based Defense Mechanism for Securing Deep Neural Network against Adversarial Attacks.
2018-11-03
Adversarial Gain.
CAAD 2018: Powerful None-Access Black-Box Attack Based on Adversarial Transformation Network.
Adversarial Black-Box Attacks on Automatic Speech Recognition Systems using Multi-Objective Evolutionary Optimization.
Learning to Defense by Learning to Attack.
2018-11-02
A Marauder's Map of Security and Privacy in Machine Learning.
Semidefinite relaxations for certifying robustness to adversarial examples.
TrISec: Training Data-Unaware Imperceptible Security Attacks on Deep Neural Networks.
Efficient Neural Network Robustness Certification with General Activation Functions.
Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks.
2018-11-01
Improving Adversarial Robustness by Encouraging Discriminative Features.
On the Geometry of Adversarial Examples.
Excessive Invariance Causes Adversarial Vulnerability.
2018-10-31
When Not to Classify: Detection of Reverse Engineering Attacks on DNN Image Classifiers.
Reversible Adversarial Examples.
2018-10-30
Improved Network Robustness with Adversary Critic.
On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models.
2018-10-29
Adversarial Risk and Robustness: General Definitions and Implications for the Uniform Distribution.
Logit Pairing Methods Can Fool Gradient-Based Attacks.
2018-10-28
Rademacher Complexity for Adversarially Robust Generalization.
RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applications.
Robust Audio Adversarial Example for a Physical Attack.
2018-10-27
Towards Robust Deep Neural Networks.
Regularization Effect of Fast Gradient Sign Method and its Generalization.
2018-10-26
Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples.
2018-10-25
Law and Adversarial Machine Learning.
Attack Graph Convolutional Networks by Adding Fake Nodes.
Evading classifiers in discrete domains with provable optimality guarantees.
2018-10-24
Robust Adversarial Learning via Sparsifying Front Ends.
2018-10-23
Stochastic Substitute Training: A Gray-box Approach to Craft Adversarial Examples Against Gradient Obfuscation Defenses.
One Bit Matters: Understanding Adversarial Examples as the Abuse of Redundancy.
Et Tu Alexa? When Commodity WiFi Devices Turn into Adversarial Motion Sensors.
2018-10-22
Adversarial Risk Bounds via Function Transformation.
Cost-Sensitive Robustness against Adversarial Examples.
Sparse DNNs with Improved Adversarial Robustness.
2018-10-19
On Extensions of CLEVER: A Neural Network Robustness Evaluation Algorithm.
2018-10-18
Exploring Adversarial Examples in Malware Detection.
A Training-based Identification Approach to VIN Adversarial Examples.
2018-10-17
Provable Robustness of ReLU networks via Maximization of Linear Regions.
2018-10-16
Projecting Trouble: Light Based Adversarial Attacks on Deep Learning Classifiers.
Security Matters: A Survey on Adversarial Machine Learning.
2018-10-15
Concise Explanations for Neural Networks using Adversarial Training.
2018-10-11
Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation.
MeshAdv: Adversarial Meshes for Visual Recognition.
2018-10-09
Is PGD-Adversarial Training Necessary? Alternative Training via a Soft-Quantization Network with Noisy-Natural Samples Only.
Analyzing the Noise Robustness of Deep Neural Networks.
The Adversarial Attack and Detection under the Fisher Information Metric.
2018-10-08
Limitations of adversarial robustness: strong No Free Lunch Theorem.
Average Margin Regularization for Classifiers.
Efficient Two-Step Adversarial Defense for Deep Neural Networks.
Combinatorial Attacks on Binarized Neural Networks.
2018-10-04
Improved Generalization Bounds for Robust Learning.
Feature Prioritization and Regularization Improve Standard Accuracy and Adversarial Robustness.
2018-10-02
Can Adversarially Robust Learning Leverage Computational Hardness?.
Adversarial Examples - A Complete Characterisation of the Phenomenon.
Link Prediction Adversarial Attack.
2018-10-01
Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network.
Improving the Generalization of Adversarial Training with Domain Adaptation.
Large batch size training of neural networks with adversarial training and second-order information.
Improved robustness to adversarial examples using Lipschitz regularization of the loss.
2018-09-30
Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Convolutional Networks.
2018-09-29
CAAD 2018: Generating Transferable Adversarial Examples.
To compress or not to compress: Understanding the Interactions between Adversarial Attacks and Neural Network Compression.
Interpreting Adversarial Robustness: A View from Decision Surface in Input Space.
2018-09-28
Characterizing Audio Adversarial Examples Using Temporal Dependency.
Adversarial Attacks and Defences: A Survey.
Explainable Black-Box Attacks Against Model-based Authentication.
2018-09-26
Adversarial Attacks on Cognitive Self-Organizing Networks: The Challenge and the Way Forward.
2018-09-24
Neural Networks with Structural Resistance to Adversarial Attacks.
Fast Geometrically-Perturbed Adversarial Faces.
On The Utility of Conditional Generation Based Mutual Information for Characterizing Adversarial Subspaces.
Low Frequency Adversarial Perturbation.
2018-09-23
Is Ordered Weighted $\ell_1$ Regularized Regression Robust to Adversarial Perturbation? A Case Study on OSCAR.
2018-09-22
Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization.
2018-09-21
Unrestricted Adversarial Examples.
Adversarial Binaries for Authorship Identification.
2018-09-20
Playing the Game of Universal Adversarial Perturbations.
2018-09-19
Efficient Formal Safety Analysis of Neural Networks.
Adversarial Training Towards Robust Multimedia Recommender System.
Generating 3D Adversarial Point Clouds.
2018-09-17
HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware Samples.
Robustness Guarantees for Bayesian Inference with Gaussian Processes.
2018-09-16
Exploring the Vulnerability of Single Shot Module in Object Detectors via Imperceptible Background Patches.
Robust Adversarial Perturbation on Deep Proposal-based Models.
2018-09-13
Defensive Dropout for Hardening Deep Neural Networks under Adversarial Attacks.
Query-Efficient Black-Box Attack by Active Learning.
Adversarial Examples: Opportunities and Challenges.
2018-09-11
On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions.
Isolated and Ensemble Audio Preprocessing Methods for Detecting Adversarial Examples against Automatic Speech Recognition.
Humans can decipher adversarial images.
2018-09-09
The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure.
Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability.
Certified Adversarial Robustness with Additive Noise.
2018-09-08
Towards Query Efficient Black-box Attacks: An Input-free Perspective.
Fast Gradient Attack on Network Embedding.
Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples.
Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks.
2018-09-07
Open Set Adversarial Examples.
A Deeper Look at 3D Shape Classifiers.
Metamorphic Relation Based Adversarial Attacks on Differentiable Neural Computer.
Trick Me If You Can: Human-in-the-loop Generation of Adversarial Examples for Question Answering.
2018-09-06
Are adversarial examples inevitable?.
Adversarial Over-Sensitivity and Over-Stability Strategies for Dialogue Models.
IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection.
Adversarial Reprogramming of Text Classification Neural Networks.
2018-09-05
Bridging machine learning and cryptography in defence against adversarial attacks.
2018-09-04
Adversarial Attacks on Node Embeddings.
2018-09-03
HASP: A High-Performance Adaptive Mobile Security Enhancement Against Malicious Speech Recognition.
Adversarial Attack Type I: Cheat Classifiers by Significant Changes.
2018-08-31
MULDEF: Multi-model-based Defense Against Adversarial Examples for Neural Networks.
2018-08-28
DLFuzz: Differential Fuzzing Testing of Deep Learning Systems.
All You Need is "Love": Evading Hate-speech Detection.
Lipschitz regularized Deep Neural Networks generalize and are adversarially robust.
2018-08-27
Targeted Nonlinear Adversarial Perturbations in Images and Videos.
Generalisation in humans and deep neural networks.
2018-08-26
Adversarially Regularising Neural NLI Models to Integrate Logical Background Knowledge.
2018-08-25
Guiding Deep Learning System Testing using Surprise Adequacy.
Analysis of adversarial attacks against CNN-based image forgery detectors.
2018-08-24
Is Machine Learning in Power Systems Vulnerable?.
2018-08-23
Maximal Jacobian-based Saliency Map Attack.
Adversarial Attacks on Deep-Learning Based Radio Signal Classification.
2018-08-20
Controlling Over-generalization and its Effect on Adversarial Examples Generation and Detection.
Stochastic Combinatorial Ensembles for Defending Against Adversarial Examples.
2018-08-17
Reinforcement Learning for Autonomous Defence in Software-Defined Networking.
2018-08-16
Mitigation of Adversarial Attacks through Embedded Feature Selection.
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding.
Distributionally Adversarial Attack.
2018-08-10
Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection.
Using Randomness to Improve Robustness of Machine-Learning Models Against Evasion Attacks.
2018-08-08
Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically Differentiable Renderer.
2018-08-07
Data augmentation using synthetic data for time series classification with deep residual networks.
2018-08-06
Adversarial Vision Challenge.
Defense Against Adversarial Attacks with Saak Transform.
Gray-box Adversarial Training.
2018-08-05
Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models.
Structured Adversarial Attack: Towards General Implementation and Better Interpretability.
2018-08-04
Traits & Transferability of Adversarial Examples against Instance Segmentation & Object Detection.
ATMPA: Attacking Machine Learning-based Malware Visualization Detection Methods via Adversarial Examples.
2018-08-03
DeepCloak: Adversarial Crafting As a Defensive Measure to Cloak Processes.
Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressions.
2018-07-31
EagleEye: Attack-Agnostic Defense against Adversarial Inputs (Technical Report).
2018-07-27
Rob-GAN: Generator, Discriminator, and Adversarial Attacker.
2018-07-26
A general metric for identifying adversarial images.
Evaluating and Understanding the Robustness of Adversarial Logit Pairing.
2018-07-25
HiDDeN: Hiding Data With Deep Networks.
Limitations of the Lipschitz constant as a defense against adversarial examples.
Unbounded Output Networks for Classification.
2018-07-24
Learning Discriminative Video Representations Using Adversarial Perturbations.
2018-07-21
Simultaneous Adversarial Training - Learn from Others Mistakes.
2018-07-20
Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors.
Physical Adversarial Examples for Object Detectors.
2018-07-18
Harmonic Adversarial Attack Method.
2018-07-17
Gradient Band-based Adversarial Training for Generalized Attack Immunity of A3C Path Finding.
Motivating the Rules of the Game for Adversarial Example Research.
Defend Deep Neural Networks Against Adversarial Examples via Fixed and Dynamic Quantized Activation Functions.
2018-07-16
Online Robust Policy Learning in the Presence of Unknown Adversaries.
Manifold Adversarial Learning.
2018-07-12
Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach.
2018-07-11
With Friends Like These, Who Needs Adversaries?.
2018-07-10
A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks.
A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees.
Attack and defence in cellular decision-making: lessons from machine learning.
2018-07-09
Adaptive Adversarial Attack on Scene Text Recognition.
2018-07-08
Vulnerability Analysis of Chest X-Ray Image Classification Against Adversarial Attacks.
2018-07-05
Implicit Generative Modeling of Random Noise during Training for Adversarial Robustness.
2018-07-04
Benchmarking Neural Network Robustness to Common Corruptions and Surface Variations.
2018-07-03
Local Gradients Smoothing: Defense against localized adversarial attacks.
Adversarial Robustness Toolbox v1.0.0.
2018-07-02
Adversarial Perturbations Against Real-Time Video Classification Systems.
2018-07-01
Towards Adversarial Training with Moderate Performance Improvement for Neural Network Classification.
2018-06-29
Adversarial Examples in Deep Learning: Characterization and Divergence.
2018-06-28
Adversarial Reprogramming of Neural Networks.
2018-06-27
Gradient Similarity: An Explainable Approach to Detect Adversarial Attacks against Deep Learning.
Customizing an Adversarial Example Generator with Class-Conditional GANs.
2018-06-25
Exploring Adversarial Examples: Patterns of One-Pixel Attacks.
2018-06-23
Defending Malware Classification Networks Against Adversarial Perturbations with Non-Negative Weight Restrictions.
On Adversarial Examples for Character-Level Neural Machine Translation.
Evaluation of Momentum Diverse Input Iterative Fast Gradient Sign Method (M-DI2-FGSM) Based Attack Method on MCS 2018 Adversarial Attacks on Black Box Face Recognition System.
2018-06-21
Detection based Defense against Adversarial Examples from the Steganalysis Point of View.
2018-06-20
Gradient Adversarial Training of Neural Networks.
Combinatorial Testing for Deep Learning Systems.
2018-06-19
On the Learning of Deep Local Features for Robust Face Spoofing Detection.
Built-in Vulnerabilities to Imperceptible Adversarial Perturbations.
2018-06-15
Non-Negative Networks Against Adversarial Attacks.
2018-06-14
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data.
2018-06-13
Hierarchical interpretations for neural network predictions.
Manifold Mixup: Better Representations by Interpolating Hidden States.
2018-06-12
Adversarial Attacks on Variational Autoencoders.
Ranking Robustness Under Adversarial Document Manipulations.
2018-06-11
Defense Against the Dark Arts: An overview of adversarial example security research and future research directions.
2018-06-08
Monge blunts Bayes: Hardness Results for Adversarial Training.
2018-06-07
Revisiting Adversarial Risk.
Training Augmentation with Adversarial Examples for Robust Speech Recognition.
2018-06-06
Adversarial Attack on Graph Structured Data.
Adversarial Regression with Multiple Learners.
Killing Four Birds with one Gaussian Process: Analyzing Test-Time Attack Vectors on Classification.
2018-06-05
DPatch: An Adversarial Patch Attack on Object Detectors.
2018-06-04
Mitigation of Policy Manipulation Attacks on Deep Q-Networks with Parameter-Space Noise.
An Explainable Adversarial Robustness Metric for Deep Learning Neural Networks.
PAC-learning in the presence of evasion adversaries.
2018-06-02
Sufficient Conditions for Idealised Models to Have No Adversarial Examples: a Theoretical and Empirical Study with Bayesian Neural Networks.
Detecting Adversarial Examples via Key-based Network.
2018-05-31
PeerNets: Exploiting Peer Wisdom Against Adversarial Attacks.
Resisting Adversarial Attacks using Gaussian Mixture Variational Autoencoders.
Scaling provable adversarial defenses.
Sequential Attacks on Agents for Long-Term Adversarial Goals.
Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Data.
2018-05-30
Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization.
ADAGIO: Interactive Experimentation with Adversarial Attack and Defense for Audio.
Robustifying Models Against Adversarial Attacks by Langevin Dynamics.
Robustness May Be at Odds with Accuracy.
2018-05-29
AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks.
Adversarial Noise Attacks of Deep Learning Architectures -- Stability Analysis via Sparse Modeled Signals.
Why Botnets Work: Distributed Brute-Force Attacks Need No Synchronization.
2018-05-28
Adversarial Examples in Remote Sensing.
GenAttack: Practical Black-box Attacks with Gradient-Free Optimization.
2018-05-27
Defending Against Adversarial Attacks by Leveraging an Entire GAN.
2018-05-25
Training verified learners with learned verifiers.
Adversarial examples from computational constraints.
2018-05-24
Laplacian Networks: Bounding Indicator Function Smoothness for Neural Network Robustness.
2018-05-23
Anonymizing k-Facial Attributes via Adversarial Perturbations.
Towards Robust Training of Neural Networks by Regularizing Adversarial Gradients.
Towards the first adversarially robust neural network model on MNIST.
2018-05-22
Adversarially Robust Training through Structured Gradient Regularization.
2018-05-21
Adversarial Noise Layer: Regularize Neural Network By Adding Noise.
Adversarial Attacks on Neural Networks for Graph Data.
Constructing Unrestricted Adversarial Examples with Generative Models.
Bidirectional Learning for Robust Neural Networks.
2018-05-20
Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference.
Towards Understanding Limitations of Pixel Discretization Against Adversarial Attacks.
Targeted Adversarial Examples for Black Box Audio Systems.
2018-05-17
Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models.
2018-05-16
Towards Robust Neural Machine Translation.
2018-05-14
Detecting Adversarial Samples for Deep Neural Networks through Mutation Testing.
2018-05-12
AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning.
Curriculum Adversarial Training.
2018-05-11
Breaking Transferability of Adversarial Samples with Randomness.
2018-05-09
On Visual Hallmarks of Robustness to Adversarial Malware.
Robust Classification with Convolutional Prototype Learning.
2018-05-08
Interpretable Adversarial Perturbation in Input Embedding Space for Text.
2018-05-05
A Counter-Forensic Method for CNN-Based Camera Model Identification.
2018-05-03
Siamese networks for generating adversarial examples.
2018-04-30
Concolic Testing for Deep Neural Networks.
How Robust are Deep Neural Networks?.
Adversarially Robust Generalization Requires More Data.
2018-04-29
Adversarial Regression for Detecting Attacks in Cyber-Physical Systems.
2018-04-28
Formal Security Analysis of Neural Networks using Symbolic Intervals.
2018-04-25
Towards Fast Computation of Certified Robustness for ReLU Networks.
2018-04-23
Towards Dependable Deep Convolutional Neural Networks (CNNs) with Out-distribution Learning.
Siamese Generative Adversarial Privatizer for Biometric Data.
Black-box Adversarial Attacks with Limited Queries and Information.
VectorDefense: Vectorization as a Defense to Adversarial Examples.
Query-Efficient Black-Box Attack Against Sequence-Based Malware Classifiers.
2018-04-21
Generating Natural Language Adversarial Examples.
2018-04-20
Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size.
Learning More Robust Features with Adversarial Training.
ADef: an Iterative Algorithm to Construct Adversarial Deformations.
2018-04-19
Attacking Convolutional Neural Network using Differential Evolution.
Semantic Adversarial Deep Learning.
2018-04-18
Simulation-based Adversarial Test Generation for Autonomous Vehicles with Machine Learning Components.
Neural Automated Essay Scoring and Coherence Modeling for Adversarially Crafted Input.
2018-04-17
Robust Machine Comprehension Models via Adversarial Training.
Adversarial Example Generation with Syntactically Controlled Paraphrase Networks.
2018-04-16
Global Robustness Evaluation of Deep Neural Networks with Provable Guarantees for the $L_0$ Norm.
ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector.
2018-04-14
On the Limitation of MagNet Defense against $L_1$-based Adversarial Examples.
Adversarial Attacks Against Medical Deep Learning Systems.
2018-04-11
Detecting Malicious PowerShell Commands using Deep Neural Networks.
2018-04-10
On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses.
2018-04-09
Adversarial Training Versus Weight Decay.
An ADMM-Based Universal Framework for Adversarial Attacks on Deep Neural Networks.
2018-04-08
Adaptive Spatial Steganography Based on Probability-Controlled Adversarial Examples.
2018-04-06
Fortified Networks: Improving the Robustness of Deep Networks by Modeling the Manifold of Hidden Representations.
2018-04-04
Unifying Bilateral Filtering and Adversarial Training for Robust Neural Networks.
2018-03-30
Adversarial Attacks and Defences Competition.
2018-03-29
Security Consideration For Deep Learning-Based Image Forensics.
2018-03-28
Defending against Adversarial Images using Basis Functions Transformations.
The Effects of JPEG and JPEG2000 Compression on Attacks using Adversarial Examples.
2018-03-26
Bypassing Feature Squeezing by Increasing Adversary Strength.
On the Limitation of Local Intrinsic Dimensionality for Characterizing the Subspaces of Adversarial Examples.
Clipping free attacks against artificial neural networks.
2018-03-24
Security Theater: On the Vulnerability of Classifiers to Exploratory Attacks.
A Dynamic-Adversarial Mining Approach to the Security of Machine Learning.
An Overview of Vulnerabilities of Voice Controlled Systems.
2018-03-23
Generalizability vs. Robustness: Adversarial Examples for Medical Imaging.
CNN Based Adversarial Embedding with Minimum Alteration for Image Steganography.
Detecting Adversarial Perturbations with Saliency.
Improving DNN Robustness to Adversarial Attacks using Jacobian Regularization.
2018-03-22
Understanding Measures of Uncertainty for Adversarial Example Detection.
2018-03-21
Adversarial Defense based on Structure-to-Signal Autoencoders.
Task-specific Deep LDA pruning of neural networks.
2018-03-20
DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems.
2018-03-19
Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks.
Improving Transferability of Adversarial Examples with Input Diversity.
2018-03-17
A Dual Approach to Scalable Verification of Deep Networks.
2018-03-16
Adversarial Logit Pairing.
Semantic Adversarial Examples.
2018-03-15
Large Margin Deep Networks for Classification.
2018-03-13
Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples.
Defending against Adversarial Attack towards Deep Neural Networks via Collaborative Multi-task Training.
Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning.
Invisible Mask: Practical Attacks on Face Recognition with Infrared.
2018-03-12
Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables.
2018-03-10
Combating Adversarial Attacks Using Sparse Representations.
Detecting Adversarial Examples via Neural Fingerprinting.
2018-03-09
Detecting Adversarial Examples - A Lesson from Multimedia Forensics.
On Generation of Adversarial Examples using Convex Programming.
Explaining Black-box Android Malware Detection.
2018-03-08
Rethinking Feature Distribution for Loss Functions in Image Classification.
2018-03-07
Sparse Adversarial Perturbations for Videos.
2018-03-04
Stochastic Activation Pruning for Robust Adversarial Defense.
2018-03-03
Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples.
2018-03-02
Protecting JPEG Images Against Adversarial Attacks.
2018-02-26
Understanding and Enhancing the Transferability of Adversarial Examples.
On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples.
Retrieval-Augmented Convolutional Neural Networks for Improved Robustness against Adversarial Examples.
Max-Mahalanobis Linear Discriminant Analysis Networks.
2018-02-23
Deep Defense: Training DNNs with Improved Adversarial Robustness.
Sensitivity and Generalization in Neural Networks: an Empirical Study.
Adversarial vulnerability for any classifier.
Verifying Controllers Against Adversarial Examples with Bayesian Optimization.
2018-02-22
Unravelling Robustness of Deep Learning based Face Recognition Against Adversarial Attacks.
Hessian-based Analysis of Large Batch Training and Robustness to Adversaries.
Adversarial Examples that Fool both Computer Vision and Time-Limited Humans.
2018-02-21
Adversarial Training for Probabilistic Spiking Neural Networks.
L2-Nonexpansive Neural Networks.
Generalizable Adversarial Examples Detection Based on Bi-model Decision Mismatch.
2018-02-20
Attack Strength vs. Detectability Dilemma in Adversarial Machine Learning.
Out-distribution training confers robustness to deep neural networks.
2018-02-19
On Lyapunov exponents and adversarial perturbation.
Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression.
Divide, Denoise, and Defend against Adversarial Attacks.
Robustness of Rotation-Equivariant Networks to Adversarial Perturbations.
Are Generative Classifiers More Robust to Adversarial Attacks?.
2018-02-18
DARTS: Deceiving Autonomous Cars with Toxic Signs.
2018-02-15
ASP:A Fast Adversarial Attack Example Generation Framework based on Adversarial Saliency Prediction.
Adversarial Risk and the Dangers of Evaluating Against Weak Attacks.
2018-02-14
Fooling OCR Systems with Adversarial Text Images.
Security Analysis and Enhancement of Model Compressed Deep Learning Systems under Adversarial Attacks.
2018-02-13
Query-Free Attacks on Industry-Grade Face Recognition Systems under Resource Constraints.
Identify Susceptible Locations in Medical Records via Adversarial Attacks on Deep Predictive Models.
Deceiving End-to-End Deep Learning Malware Detectors using Adversarial Examples.
2018-02-12
Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks.
Predicting Adversarial Examples with High Confidence.
2018-02-09
Certified Robustness to Adversarial Examples with Differential Privacy.
2018-02-08
Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection.
2018-02-05
Blind Pre-Processing: A Robust Defense Method Against Adversarial Examples.
First-order Adversarial Vulnerability of Neural Networks and Input Dimension.
2018-02-02
Secure Detection of Image Manipulation by means of Random Feature Selection.
Hardening Deep Neural Networks via Adversarial Model Cascades.
2018-02-01
Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples.
2018-01-31
Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach.
2018-01-29
Robustness of classification ability of spiking neural networks.
2018-01-28
Certified Defenses against Adversarial Examples.
2018-01-27
Towards an Understanding of Neural Networks in Natural-Image Spaces.
2018-01-26
Deflecting Adversarial Attacks with Pixel Deflection.
Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning.
2018-01-24
CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition.
Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations.
2018-01-22
Adversarial Texts with Gradient Methods.
2018-01-15
A Comparative Study of Rule Extraction for Recurrent Neural Networks.
Sparsity-based Defense against Adversarial Attacks on Linear Classifiers.
Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networks.
2018-01-12
Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers.
2018-01-11
A3T: Adversarially Augmented Adversarial Training.
2018-01-10
Fooling End-to-end Speaker Verification by Adversarial Examples.
2018-01-09
Adversarial Deep Learning for Robust Detection of Binary Encoded Malware.
Less is More: Culling the Training Set to Improve Robustness of Deep Neural Networks.
2018-01-08
Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos.
Adversarial Spheres.
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality.
Spatially Transformed Adversarial Examples.
Generating Adversarial Examples with Adversarial Networks.
LaVAN: Localized and Visible Adversarial Noise.
Attacking Speaker Recognition With Deep Generative Models.
HeNet: A Deep Learning Approach on Intel$^\circledR$ Processor Trace for Effective Exploit Detection.
2018-01-07
Denoising Dictionary Learning Against Adversarial Perturbations.
2018-01-05
Adversarial Perturbation Intensity Achieving Chosen Intra-Technique Transferability Level for Logistic Regression.
Audio Adversarial Examples: Targeted Attacks on Speech-to-Text.
Shielding Google's language toxicity model against adversarial attacks.
2018-01-03
Facial Attributes: Accuracy and Adversarial Robustness.
Neural Networks in Adversarial Setting and Ill-Conditioned Weight Space.
2018-01-02
High Dimensional Spaces, Deep Learning and Adversarial Examples.
Did you hear that? Adversarial Examples Against Automatic Speech Recognition.
Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey.
2017-12-31
A General Framework for Adversarial Examples with Objectives.
2017-12-28
Gradient Regularization Improves Accuracy of Discriminative Models.
2017-12-27
Adversarial Patch.
2017-12-26
Exploring the Space of Black-box Attacks on Deep Neural Networks.
Building Robust Deep Neural Networks for Road Sign Detection.
The Robust Manifold Defense: Adversarial Training using Generative Models.
2017-12-24
Android Malware Detection using Deep Learning on API Method Sequences.
2017-12-23
Whatever Does Not Kill Deep Reinforcement Learning, Makes It Stronger.
2017-12-22
Query-limited Black-box Attacks to Classifiers.
2017-12-21
Using LIP to Gloss Over Faces in Single-Stage Face Detection Networks.
ReabsNet: Detecting and Revising Adversarial Examples.
Note on Attacking Object Detectors with Adversarial Stickers.
Wolf in Sheep's Clothing - The Downscaling Attack Against Deep Learning Applications.
2017-12-19
Query-Efficient Black-box Adversarial Examples (superceded).
Adversarial Examples: Attacks and Defenses for Deep Learning.
2017-12-18
HotFlip: White-Box Adversarial Examples for Text Classification.
When Not to Classify: Anomaly Detection of Attacks (ADA) on DNN Classifiers at Test Time.
2017-12-17
Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Study.
Super-sparse Learning in Similarity Spaces.
2017-12-16
Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models.
2017-12-14
DANCin SEQ2SEQ: Fooling Text Classifiers with Adversarial Text Example Generation.
2017-12-12
Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models.
2017-12-11
Training Ensembles to Detect Adversarial Examples.
2017-12-10
Robust Deep Reinforcement Learning with Adversarial Attacks.
2017-12-09
NAG: Network for Adversary Generation.
2017-12-08
Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning.
Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser.
2017-12-07
Adversarial Examples that Fool Detectors.
Exploring the Landscape of Spatial Robustness.
2017-12-06
Generative Adversarial Perturbations.
Attacking Visual Language Grounding with Adversarial Examples: A Case Study on Neural Image Captioning.
2017-12-05
Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems.
2017-12-02
Improving Network Robustness against Adversarial Attacks with Compact Convolution.
Towards Robust Neural Networks via Random Self-ensemble.
Where Classification Fails, Interpretation Rises.
2017-11-30
Measuring the tendency of CNNs to Learn Surface Statistical Regularities.
2017-11-27
Adversary Detection in Neural Networks via Persistent Homology.
On the Robustness of Semantic Segmentation Models to Adversarial Attacks.
Butterfly Effect: Bidirectional Control of Classification Performance by Small Additive Perturbation.
2017-11-26
Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients.
2017-11-24
Geometric robustness of deep networks: analysis and improvement.
2017-11-22
Safer Classification by Synthesis.
MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.
Adversarial Phenomenon in the Eyes of Bayesian Deep Learning.
2017-11-21
Reinforcing Adversarial Robustness using Model Confidence Induced by Adversarial Training.
2017-11-20
Evaluating Robustness of Neural Networks with Mixed Integer Programming.
Adversarial Attacks Beyond the Image Space.
2017-11-17
How Wrong Am I? - Studying Adversarial Examples and their Impact on Uncertainty in Gaussian Process Machine Learning Models.
2017-11-16
Enhanced Attacks on Defensively Distilled Deep Neural Networks.
Defense against Universal Adversarial Perturbations.
2017-11-15
The best defense is a good offense: Countering black box attacks by predicting slightly wrong labels.
2017-11-12
Machine vs Machine: Minimax-Optimal Defense Against Adversarial Examples.
2017-11-09
Crafting Adversarial Examples For Speech Paralinguistics Applications.
2017-11-08
Intriguing Properties of Adversarial Examples.
2017-11-06
Mitigating Adversarial Effects Through Randomization.
HyperNetworks with statistical filtering for defending adversarial examples.
Towards Reverse-Engineering Black-Box Neural Networks.
2017-11-02
The (Un)reliability of saliency methods.
Provable defenses against adversarial examples via the convex outer adversarial polytope.
2017-11-01
Attacking Binarized Neural Networks.
2017-10-31
Countering Adversarial Images using Input Transformations.
Conditional Variance Penalties and Domain Shift Robustness.
Generating Natural Adversarial Examples.
2017-10-30
PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples.
2017-10-29
Attacking the Madry Defense Model with $L_1$-based Adversarial Examples.
Certifying Some Distributional Robustness with Principled Adversarial Training.
2017-10-28
Interpretation of Neural Networks is Fragile.
2017-10-27
Adversarial Detection of Flash Malware: Limitations and Open Issues.
2017-10-25
mixup: Beyond Empirical Risk Minimization.
2017-10-24
One pixel attack for fooling deep neural networks.
2017-10-21
Feature-Guided Black-Box Safety Testing of Deep Neural Networks.
2017-10-17
Boosting Adversarial Attacks with Momentum.
2017-10-12
Game-Theoretic Design of Secure and Resilient Distributed Support Vector Machines with Adversaries.
2017-10-09
Standard detectors aren't (currently) fooled by physical adversarial stop signs.
Verification of Binarized Neural Networks via Inter-Neuron Factoring.
2017-10-02
Detecting Adversarial Attacks on Neural Network Policies with Visual Foresight.
DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural Networks.
2017-09-28
Provably Minimally-Distorted Adversarial Examples.
DR.SGX: Hardening SGX Enclaves against Cache Attacks with Data Location Randomization.
2017-09-26
Output Range Analysis for Deep Neural Networks.
2017-09-25
Fooling Vision and Language Models Despite Localization and Attention Mechanism.
2017-09-19
Verifying Properties of Binarized Deep Neural Networks.
2017-09-16
Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification.
2017-09-13
A Learning and Masking Approach to Secure Learning.
Models and Framework for Adversarial Attacks on Complex Adaptive Systems.
2017-09-12
EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples.
2017-09-11
Art of singular vectors and universal adversarial perturbations.
Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks.
2017-09-08
Towards Proving the Adversarial Robustness of Deep Neural Networks.
DeepFense: Online Accelerated Defense Against Adversarial Deep Learning.
2017-09-02
Security Evaluation of Pattern Classifiers under Attack.
2017-08-31
On Security and Sparsity of Linear Classifiers for Adversarial Settings.
Be Selfish and Avoid Dilemmas: Fork After Withholding (FAW) Attacks on Bitcoin.
2017-08-29
Practical Attacks Against Graph-based Clustering.
2017-08-28
DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars.
Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features.
2017-08-23
Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid.
2017-08-22
CNN Fixations: An unraveling approach to visualize the discriminative image regions.
2017-08-21
Evasion Attacks against Machine Learning at Test Time.
2017-08-17
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Learning Universal Adversarial Perturbations with Generative Models.
2017-08-14
Attacking Automatic Video Analysis Algorithms: A Case Study of Google Cloud Video Intelligence API.
2017-08-13
ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models.
2017-08-08
Cascade Adversarial Machine Learning Regularized with a Unified Embedding.
2017-08-04
Adversarial Robustness: Softmax versus Openmax.
2017-08-01
Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning.
2017-07-27
Robust Physical-World Attacks on Deep Learning Models.
2017-07-24
Synthesizing Robust Adversarial Examples.
2017-07-23
Adversarial Examples for Evaluating Reading Comprehension Systems.
2017-07-21
Confidence estimation in Deep Neural networks via density modelling.
2017-07-20
Efficient Defenses Against Adversarial Attacks.
2017-07-19
Generic Black-Box End-to-End Attack Against State of the Art API Call Based Malware Classifiers.
2017-07-18
Fast Feature Fool: A data independent approach to universal adversarial perturbations.
APE-GAN: Adversarial Perturbation Elimination with GAN.
2017-07-17
Houdini: Fooling Deep Structured Prediction Models.
2017-07-13
Foolbox: A Python toolbox to benchmark the robustness of machine learning models.
2017-07-11
NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles.
A Survey on Resilient Machine Learning.
2017-07-10
Towards Crafting Text Adversarial Samples.
2017-07-04
UPSET and ANGRI : Breaking High Performance Image Classifiers.
2017-06-21
Comparing deep neural networks against humans: object recognition when the signal gets weaker.
2017-06-19
Towards Deep Learning Models Resistant to Adversarial Attacks.
2017-06-14
Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong.
2017-06-13
Analyzing the Robustness of Nearest Neighbors to Adversarial Examples.
2017-06-06
Adversarial-Playground: A Visualization Suite for Adversarial Sample Generation.
2017-06-02
Towards Robust Detection of Adversarial Examples.
2017-05-30
Feature Squeezing Mitigates and Detects Carlini/Wagner Adversarial Examples.
2017-05-27
MAT: A Multi-strength Adversarial Training Method to Mitigate Adversarial Attacks.
2017-05-26
Analysis of universal adversarial perturbations.
Classification regions of deep neural networks.
2017-05-25
MagNet: a Two-Pronged Defense against Adversarial Examples.
2017-05-23
Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation.
Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reduction.
Black-Box Attacks against RNN based Malware Detection Algorithms.
2017-05-22
Regularizing deep networks using efficient layerwise adversarial training.
2017-05-21
Evading Classifiers by Morphing in the Dark.
2017-05-20
Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods.
2017-05-19
Ensemble Adversarial Training: Attacks and Defenses.
MTDeep: Boosting the Security of Deep Neural Nets Against Adversarial Attacks with Moving Target Defense.
2017-05-18
DeepXplore: Automated Whitebox Testing of Deep Learning Systems.
Delving into adversarial attacks on deep policies.
2017-05-15
Extending Defensive Distillation.
2017-05-09
Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN.
2017-05-08
Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression.
2017-05-05
Detecting Adversarial Samples Using Density Ratio Estimates.
2017-04-28
Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection.
Parseval Networks: Improving Robustness to Adversarial Examples.
2017-04-26
Deep Text Classification Can be Fooled.
2017-04-19
Universal Adversarial Perturbations Against Semantic Image Segmentation.
2017-04-17
Adversarial and Clean Data Are Not Twins.
2017-04-16
Google's Cloud Vision API Is Not Robust To Noise.
2017-04-11
The Space of Transferable Adversarial Examples.
2017-04-09
Enhancing Robustness of Machine Learning Systems via Data Transformations.
2017-04-06
Adequacy of the Gradient-Descent Method for Classifier Evasion Attacks.
2017-04-05
Comment on "Biologically inspired protection of deep networks from adversarial attacks".
2017-04-04
Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks.
2017-03-31
SafetyNet: Detecting and Rejecting Adversarial Examples Robustly.
2017-03-27
Adversarial Transformation Networks: Learning to Generate Adversarial Examples.
Biologically inspired protection of deep networks from adversarial attacks.
2017-03-26
Deceiving Google's Cloud Video Intelligence API Built for Summarizing Videos.
2017-03-24
Adversarial Examples for Semantic Segmentation and Object Detection.
2017-03-23
Self corrective Perturbations for Semantic Segmentation and Classification.
2017-03-22
Data Driven Exploratory Attacks on Black Box Classifiers in Adversarial Domains.
2017-03-20
On the Limitation of Convolutional Neural Networks in Recognizing Negative Images.
2017-03-16
Fraternal Twins: Unifying Attacks on Machine Learning and Digital Watermarking.
2017-03-13
Blocking Transferability of Adversarial Examples in Black-Box Learning Systems.
2017-03-07
Tactics of Adversarial Attack on Deep Reinforcement Learning Agents.
2017-03-03
Adversarial Examples for Semantic Image Segmentation.
2017-03-02
Compositional Falsification of Cyber-Physical Systems with Machine Learning Components.
2017-03-01
Detecting Adversarial Samples from Artifacts.
2017-02-26
Deceiving Google's Perspective API Built for Detecting Toxic Comments.
2017-02-22
Robustness to Adversarial Examples through an Ensemble of Specialists.
Adversarial examples for generative models.
DeepCloak: Masking Deep Neural Network Models for Robustness Against Adversarial Samples.
2017-02-21
On the (Statistical) Detection of Adversarial Examples.
2017-02-20
Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN.
2017-02-14
On Detecting Adversarial Perturbations.
2017-02-07
Adversarial Attacks on Neural Network Policies.
2017-02-03
Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks.
2017-01-15
Vulnerability of Deep Reinforcement Learning to Policy Induction Attacks.
2017-01-04
Dense Associative Memory is Robust to Adversarial Inputs.
2016-12-22
Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics.
2016-12-19
Simple Black-Box Adversarial Perturbations for Deep Networks.
2016-12-05
Learning Adversary-Resistant Deep Neural Networks.
2016-12-01
A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial Examples.
Adversarial Images for Variational Autoencoders.
Deep Variational Information Bottleneck.
2016-11-30
Towards Robust Deep Neural Networks with BANG.
2016-11-18
LOTS about Attacking Deep Features.
2016-11-15
AdversariaLib: An Open-source Library for the Security Evaluation of Machine Learning Algorithms Under Attack.
2016-11-11
Towards the Science of Security and Privacy in Machine Learning.
2016-11-08
Delving into Transferable Adversarial Examples and Black-box Attacks.
2016-11-03
Adversarial Machine Learning at Scale.
2016-10-26
Universal adversarial perturbations.
2016-10-21
Safety Verification of Deep Neural Networks.
2016-10-14
Are Accuracy and Robustness Correlated?.
2016-10-13
Assessing Threat of Adversarial Examples on Deep Neural Networks.
2016-10-06
Using Non-invertible Data Transformations to Build Adversarial-Robust Neural Networks.
2016-10-04
Adversary Resistant Deep Neural Networks with an Application to Malware Detection.
2016-10-03
Technical Report on the CleverHans v2.1.0 Adversarial Examples Library.
2016-09-06
Statistical Meta-Analysis of Presentation Attacks for Secure Multibiometric Systems.
2016-09-03
Randomized Prediction Games for Adversarial Machine Learning.
2016-08-31
Robustness of classifiers: from adversarial to random noise.
2016-08-27
A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples.
2016-08-16
Towards Evaluating the Robustness of Neural Networks.
2016-08-02
A study of the effect of JPG compression on adversarial images.
2016-08-01
Early Methods for Detecting Adversarial Images.
2016-07-18
On the Effectiveness of Defensive Distillation.
2016-07-14
Defensive Distillation is Not Robust to Adversarial Examples.
2016-07-08
Adversarial examples in the physical world.
2016-06-14
Adversarial Perturbations Against Deep Neural Networks for Malware Classification.
2016-05-23
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples.
Measuring Neural Net Robustness with Constraints.
2016-05-17
Are Facial Attributes Adversarially Robust?.
2016-05-05
Adversarial Diversity and Hard Positive Generation.
2016-04-27
Crafting Adversarial Input Sequences for Recurrent Neural Networks.
2016-04-14
Improving the Robustness of Deep Neural Networks via Stability Training.
2016-04-09
A General Retraining Framework for Scalable Adversarial Classification.
2016-03-16
Suppressing the Unusual: towards Robust CNNs using Symmetric Activation Functions.
2016-02-08
Practical Black-Box Attacks against Machine Learning.
2016-02-07
Ensemble Robustness and Generalization of Stochastic Deep Learning Algorithms.
2016-01-26
Unifying Adversarial Training Algorithms with Flexible Deep Data Gradient Regularization.
2015-11-23
The Limitations of Deep Learning in Adversarial Settings.
2015-11-19
A Unified Gradient Regularization Family for Adversarial Examples.
Manifold Regularized Deep Neural Networks using Adversarial Examples.
Robust Convolutional Neural Networks under Adversarial Noise.
Foveation-based Mechanisms Alleviate Adversarial Examples.
Towards Open Set Deep Networks.
2015-11-17
Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization.
2015-11-16
Adversarial Manipulation of Deep Representations.
2015-11-14
DeepFool: a simple and accurate method to fool deep neural networks.
2015-11-13
Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks.
2015-11-10
Learning with a Strong Adversary.
2015-10-18
Exploring the Space of Adversarial Images.
2015-10-14
Improving Back-Propagation by Adding an Adversarial Gradient.
2015-07-16
Deep Learning and Music Adversaries.
2015-02-09
Analysis of classifiers' robustness to adversarial perturbations.
2014-12-19
Explaining and Harnessing Adversarial Examples.
2014-12-11
Towards Deep Neural Network Architectures Robust to Adversarial Examples.
2014-12-05
Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images.
2014-01-29
Security Evaluation of Support Vector Machines in Adversarial Environments.
2013-12-20
Intriguing properties of neural networks.