A Complete List of All (arXiv) Adversarial Example Papers
by Nicholas Carlini 2019-06-15
It can be hard to stay up-to-date on the published papers in the field of adversarial examples, where we have seen massive growth in the number of papers written each year. I have been somewhat religiously keeping track of these papers for the last few years, and realized it may be helpful for others to release this list.
The only requirement I used for selecting papers for this list is that it is primarily a paper about adversarial examples, or extensively uses adversarial examples. Due to the sheer quantity of papers, I can't guarantee that I actually have found all of them.
But I did try.
I also may have included papers that don't match these criteria (and are about something different instead), or made inconsistent judgement calls as to whether or not any given paper is mainly an adversarial example paper. Send me an email if something is wrong and I'll correct it.
As a result, this list is completely un-filtered. Everything that mainly presents itself as an adversarial example paper is listed here; I pass no judgement of quality. For a curated list of papers that I think are excellent and worth reading, see the Adversarial Machine Learning Reading List.
One final note about the data. This list automatically updates with new papers, even before I get a chance to manually filter through them. I do this filtering roughly twice a week, and it's then that I'll remove the ones that aren't related to adversarial examples. As a result, there may be some false positives on the most recent few entries. The new un-verified entries will have a probability indicated that my simplistic (but reasonably well calibrated) bag-of-words classifier believes the given paper is actually about adversarial examples.
The full paper list appears below. I've also released a TXT file (and a TXT file with abstracts) and a JSON file with the same data. If you do anything interesting with this data I'd be happy to hear from you what it was.
Paper List
2020-08-03
Anti-Bandit Neural Architecture Search for Model Defense. (2%)
Adversarial Graph Representation Adaptation for Cross-Domain Facial Expression Recognition. (1%)
2020-08-02
On the Security of Networked Control Systems in Smart Vehicle and its Adaptive Cruise Control. (1%)
Removing Backdoor-Based Watermarks in Neural Networks with Limited Data. (1%)
2020-08-01
Efficient Adversarial Attacks for Visual Object Tracking. (99%)
Trojaning Language Models for Fun and Profit. (56%)
The Price of Tailoring the Index to Your Data: Poisoning Attacks on Learned Index Structures. (1%)
Eigen-CAM: Class Activation Map using Principal Components. (1%)
2020-07-31
Adversarial Attacks with Multiple Antennas Against Deep Learning-Based Modulation Classifiers. (99%)
TEAM: We Need More Powerful Adversarial Examples for DNNs. (99%)
Vulnerability Under Adversarial Machine Learning: Bias or Variance? (98%)
Physical Adversarial Attack on Vehicle Detector in the Carla Simulator. (98%)
Class-Oriented Poisoning Attack. (67%)
Noise-response Analysis for Rapid Detection of Backdoors in Deep Neural Networks. (50%)
2020-07-30
Black-box Adversarial Sample Generation Based on Differential Evolution. (99%)
A Data Augmentation-based Defense Method Against Adversarial Attacks in Neural Networks. (99%)
Label-Leaks: Membership Inference Attack with Label. (98%)
Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases. (88%)
DeepPeep: Exploiting Design Ramifications to Decipher the Architecture of Compact DNNs. (84%)
2020-07-29
Adversarial Robustness for Machine Learning Cyber Defenses Using Log Data. (99%)
Stylized Adversarial Defense. (99%)
Detecting Anomalous Inputs to DNN Classifiers By Joint Statistical Testing at the Layers. (97%)
End-to-End Adversarial White Box Attacks on Music Instrument Classification. (78%)
Dynamic Federated Learning Model for Identifying Adversarial Clients. (2%)
Generative Classifiers as a Basis for Trustworthy Computer Vision. (1%)
2020-07-28
Label-Only Membership Inference Attacks. (99%)
Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning. (99%)
Cassandra: Detecting Trojaned Networks from Adversarial Perturbations. (81%)
Reachable Sets of Classifiers & Regression Models: (Non-)Robustness Analysis and Robust Training. (12%)
Tempered Sigmoid Activations for Deep Learning with Differential Privacy. (1%)
2020-07-27
Towards Accuracy-Fairness Paradox: Adversarial Example-based Data Augmentation for Visual Debiasing. (99%)
From Sound Representation to Model Robustness. (97%)
KOVIS: Keypoint-based Visual Servoing with Zero-Shot Sim-to-Real Transfer for Robotics Manipulation. (38%)
2020-07-26
RANDOM MASK: Towards Robust Convolutional Neural Networks. (99%)
Robust Collective Classification against Structural Attacks. (41%)
Privacy-Preserving Resilience of Cyber-Physical Systems to Adversaries. (1%)
2020-07-25
Adversarial Privacy-preserving Filter. (96%)
MP3 Compression To Diminish Adversarial Noise in End-to-End Speech Recognition. (96%)
MirrorNet: Bio-Inspired Adversarial Attack for Camouflaged Object Segmentation. (33%)
Robust and Generalizable Visual Representation Learning via Random Convolutions. (13%)
2020-07-23
Scalable Inference of Symbolic Adversarial Examples.
T-BFA: Targeted Bit-Flip Adversarial Weight Attack. (99%)
2020-07-22
SOCRATES: Towards a Unified Platform for Neural Network Verification.
Adversarial Training Reduces Information and Improves Transferability.
Threat of Adversarial Attacks on Face Recognition: A Comprehensive Survey.
Robust Machine Learning via Privacy/Rate-Distortion Theory.
2020-07-21
Audio Adversarial Examples for Robust Hybrid CTC/Attention Speech Recognition.
Towards Visual Distortion in Black-Box Attacks.
2020-07-20
Neural Network Robustness Verification on GPUs.
DeepNNK: Explaining deep models and their generalization using polytope interpolation.
AdvFoolGen: Creating Persistent Troubles for Deep Classifiers.
Evaluating a Simple Retraining Strategy as a Defense Against Adversarial Attacks.
Robust Tracking against Adversarial Attacks.
2020-07-19
Adversarial Immunization for Improving Certifiable Robustness on Graphs.
Semantic Equivalent Adversarial Data Augmentation for Visual Question Answering.
Exploiting vulnerabilities of deep neural networks for privacy protection.
Connecting the Dots: Detecting Adversarial Perturbations Using Context Inconsistency.
2020-07-18
DDR-ID: Dual Deep Reconstruction Networks Based Image Decomposition for Anomaly Detection.
2020-07-17
Anomaly Detection in Unsupervised Surveillance Setting Using Ensemble of Multimodal Data with Adversarial Defense.
Neural Networks with Recurrent Generative Feedback.
2020-07-16
Understanding and Diagnosing Vulnerability under Adversarial Attacks.
Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resources.
Provable Worst Case Guarantees for the Detection of Out-of-Distribution Data.
An Empirical Study on the Robustness of NAS based Architectures.
Do Adversarially Robust ImageNet Models Transfer Better?
Learning perturbation sets for robust machine learning.
Accelerated Stochastic Gradient-free and Projection-free Methods. (61%)
2020-07-15
A Survey of Privacy Attacks in Machine Learning.
Accelerating Robustness Verification of Deep Neural Networks Guided by Target Labels.
A Survey on Security Attacks and Defense Techniques for Connected and Autonomous Vehicles.
2020-07-14
Towards robust sensing for Autonomous Vehicles: An adversarial perspective.
Towards a Theoretical Understanding of the Robustness of Variational Autoencoders.
Robustifying Reinforcement Learning Agents via Action Space Adversarial Training.
Bounding The Number of Linear Regions in Local Area for Neural Networks with ReLU Activations.
Pasadena: Perceptually Aware and Stealthy Adversarial Denoise Attack.
Multitask Learning Strengthens Adversarial Robustness.
Adversarial Examples and Metrics.
Adversarial Attacks against Neural Networks in Audio Domain: Exploiting Principal Components.
AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows.
Generating Visually Aligned Sound from Videos. (1%)
2020-07-13
A simple defense against adversarial attacks on heatmap explanations.
Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations.
Adversarial robustness via robust low rank representations.
Calling Out Bluff: Attacking the Robustness of Automatic Scoring Systems with Simple Adversarial Testing.
Security and Machine Learning in the Real World.
Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes.
SoK: The Faults in our ASRs: An Overview of Attacks against Automatic Speech Recognition and Speaker Identification Systems.
Patch-wise Attack for Fooling Deep Neural Network.
2020-07-12
Adversarial jamming attacks and defense strategies via adaptive deep reinforcement learning.
Generating Fluent Adversarial Examples for Natural Languages.
Probabilistic Jacobian-based Saliency Maps Attacks.
2020-07-11
Understanding Object Detection Through An Adversarial Lens.
ManiGen: A Manifold Aided Black-box Generator of Adversarial Examples.
2020-07-10
Improved Detection of Adversarial Images Using Deep Neural Networks.
Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection.
Generating Adversarial Inputs Using A Black-box Differential Technique.
2020-07-09
Boundary thickness and robustness in learning models.
Improving Adversarial Robustness by Enforcing Local and Global Compactness.
Node Copying for Protection Against Graph Neural Network Topology Attacks.
Efficient detection of adversarial images.
2020-07-08
How benign is benign overfitting?
SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations.
Delving into the Adversarial Robustness on Face Recognition.
A Critical Evaluation of Open-World Machine Learning.
On the relationship between class selectivity, dimensionality, and robustness.
Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSs.
2020-07-07
Robust Learning with Frequency Domain Regularization.
Regional Image Perturbation Reduces $L_p$ Norms of Adversarial Examples While Maintaining Model-to-model Transferability.
Detection as Regression: Certified Object Detection by Median Smoothing.
Fast Training of Deep Neural Networks Robust to Adversarial Perturbations.
Making Adversarial Examples More Transferable and Indistinguishable.
2020-07-06
Certifying Decision Trees Against Evasion Attacks by Program Analysis.
On Data Augmentation and Adversarial Risk: An Empirical Analysis.
Understanding and Improving Fast Adversarial Training.
Black-box Adversarial Example Generation with Normalizing Flows.
2020-07-05
Adversarial Learning in the Cyber Security Domain.
2020-07-04
On Connections between Regularizations for Improving DNN Robustness.
Relationship between manifold smoothness and adversarial vulnerability in deep learning with local errors.
2020-07-03
Towards Robust Deep Learning with Ensemble Networks and Noisy Layers.
2020-07-02
Efficient Proximal Mapping of the 1-path-norm of Shallow Networks.
Deep Learning Defenses Against Adversarial Examples for Dynamic Risk Assessment.
Decoder-free Robustness Disentanglement without (Additional) Supervision.
Increasing Trustworthiness of Deep Neural Networks via Accuracy Monitoring.
Trace-Norm Adversarial Examples.
Generating Adversarial Examples withControllable Non-transferability.
2020-07-01
Fundamental Limits of Adversarial Learning.
Unifying Model Explainability and Robustness via Machine-Checkable Concepts.
Measuring Robustness to Natural Distribution Shifts in Image Classification.
Robust Learning against Logical Adversaries.
Determining Sequence of Image Processing Technique (IPT) to Detect Adversarial Attacks.
Query-Free Adversarial Transfer via Undertrained Surrogates.
Adversarial Example Games.
Opportunities and Challenges in Deep Learning Adversarial Robustness: A Survey.
2020-06-30
Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures.
Black-box Certification and Learning under Adversarial Perturbations.
Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection.
Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specifications.
Generating Adversarial Examples with an Optimized Quality.
2020-06-29
Harnessing Adversarial Distances to Discover High-Confidence Errors.
Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification.
Legal Risks of Adversarial Machine Learning Research.
Biologically Inspired Mechanisms for Adversarial Robustness.
Improving Uncertainty Estimates through the Relationship with Adversarial Robustness.
2020-06-28
FDA3 : Federated Defense Against Adversarial Attacks for Cloud-Based IIoT Applications.
Geometry-Inspired Top-k Adversarial Perturbations.
2020-06-26
Orthogonal Deep Models As Defense Against Black-Box Attacks.
A Unified Framework for Analyzing and Detecting Malicious Examples of DNN Models.
Robust Out-of-distribution Detection via Informative Outlier Mining.
Learning Diverse Latent Representations for Improving the Resilience to Adversarial Attacks.
2020-06-25
Can 3D Adversarial Logos Cloak Humans?
Proper Network Interpretability Helps Adversarial Robustness in Classification.
Smooth Adversarial Training.
Does Adversarial Transferability Indicate Knowledge Transferability?
2020-06-24
Compositional Explanations of Neurons.
Blacklight: Defending Black-Box Adversarial Attacks on Deep Neural Networks.
Imbalanced Gradients: A New Cause of Overestimated Adversarial Robustness.
Defending against adversarial attacks on medical imaging AI system, classification or detection?
2020-06-23
Towards Robust Sensor Fusion in Visual Perception.
Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks.
RayS: A Ray Searching Method for Hard-label Adversarial Attack.
2020-06-22
Learning to Generate Noise for Robustness against Multiple Perturbations.
Perceptual Adversarial Robustness: Defense Against Unseen Threat Models.
2020-06-21
Network Moments: Extensions and Sparse-Smooth Attacks.
2020-06-20
How do SGD hyperparameters in natural training affect adversarial robustness?
Defense against Adversarial Attacks in NLP via Dirichlet Neighborhood Ensemble.
2020-06-19
Using Learning Dynamics to Explore the Role of Implicit Regularization in Adversarial Examples.
A general framework for defining and optimizing robustness.
Analyzing the Real-World Applicability of DGA Classifiers.
Towards an Adversarially Robust Normalization Approach.
Differentiable Language Model Adversarial Attacks on Categorical Sequence Classifiers.
Adversarial Attacks for Multi-view Deep Models.
2020-06-18
Local Competition and Uncertainty for Adversarial Robustness in Deep Learning.
Dissecting Deep Networks into an Ensemble of Generative Classifiers for Robust Predictions.
The Dilemma Between Dimensionality Reduction and Adversarial Robustness.
Beware the Black-Box: on the Robustness of Recent Defenses to Adversarial Examples.
2020-06-17
Noise or Signal: The Role of Image Backgrounds in Object Recognition.
Adversarial Examples Detection and Analysis with Layer-wise Autoencoders.
Adversarial Defense by Latent Style Transformations.
Disrupting Deepfakes with an Adversarial Attack that Survives Training.
Fairness Through Robustness: Investigating Robustness Disparity in Deep Learning.
Universal Lower-Bounds on Classification Error under Adversarial Attacks and Random Corruption.
2020-06-16
Calibrating Deep Neural Network Classifiers on Out-of-Distribution Datasets.
SPLASH: Learnable Activation Functions for Improving Accuracy and Adversarial Robustness.
Debona: Decoupled Boundary Network Analysis for Tighter Bounds and Faster Adversarial Robustness Proofs.
On sparse connectivity, adversarial robustness, and a novel model of the artificial neuron.
Intriguing generalization and simplicity of adversarially trained neural networks.
AdvMind: Inferring Adversary Intent of Black-Box Attacks.
2020-06-15
Total Deep Variation: A Stable Regularizer for Inverse Problems.
Multiscale Deep Equilibrium Models.
DefenseVGAE: Defending against Adversarial Attacks on Graph Data via a Variational Graph Autoencoder.
Improving Adversarial Robustness via Unlabeled Out-of-Domain Data.
Fast & Accurate Method for Bounding the Singular Values of Convolutional Layers with Application to Lipschitz Regularization.
GNNGuard: Defending Graph Neural Networks against Adversarial Attacks.
Efficient Black-Box Adversarial Attack Guided by the Distribution of Adversarial Perturbations.
2020-06-14
GradAug: A New Regularization Method for Deep Neural Networks.
PatchUp: A Regularization Technique for Convolutional Neural Networks.
On Saliency Maps and Adversarial Robustness.
On the transferability of adversarial examples between convex and 01 loss models.
Adversarial Attacks and Detection on Reinforcement Learning-Based Interactive Recommender Systems.
Adversarial Sparsity Attacks on Deep Neural Networks.
2020-06-13
ClustTR: Clustering Training for Robustness.
The Pitfalls of Simplicity Bias in Neural Networks.
Adversarial Self-Supervised Contrastive Learning.
Defensive Approximation: Enhancing CNNs Security through Approximate Computing.
2020-06-12
Targeted Adversarial Perturbations for Monocular Depth Prediction.
Provably Robust Metric Learning.
Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces.
D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack.
2020-06-11
Achieving robustness in classification using optimal transport with hinge regularization.
Large-Scale Adversarial Training for Vision-and-Language Representation Learning.
Smoothed Geometry for Robust Attribution.
Protecting Against Image Translation Deepfakes by Leaking Universal Perturbations from Black-Box Neural Networks.
Investigating Robustness of Adversarial Samples Detection for Automatic Speaker Verification.
Robustness to Adversarial Attacks in Learning-Enabled Controllers.
On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples.
Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors.
2020-06-10
Evaluating Graph Vulnerability and Robustness using TIGER.
Towards Robust Fine-grained Recognition by Maximal Separation of Discriminative Features.
Deterministic Gaussian Averaged Neural Networks.
Interpolation between Residual and Non-Residual Networks.
Towards Certified Robustness of Metric Learning.
2020-06-09
Towards an Intrinsic Definition of Robustness for a Classifier.
Black-Box Adversarial Attacks on Graph Neural Networks with Limited Node Access.
Provable tradeoffs in adversarially robust classification.
GAP++: Learning to generate target-conditioned adversarial examples.
Adversarial Attacks on Brain-Inspired Hyperdimensional Computing-Based Classifiers.
2020-06-08
Calibrated neighborhood aware confidence measure for deep metric learning.
A Self-supervised Approach for Adversarial Robustness.
Distributional Robustness with IPMs and links to Regularization and GANs.
On Universalized Adversarial and Invariant Perturbations.
Adversarial Feature Desensitization.
Tricking Adversarial Attacks To Fail.
Global Robustness Verification Networks.
Provable trade-offs between private & robust machine learning.
2020-06-07
Extensions and limitations of randomized smoothing for robustness guarantees.
Uncertainty-Aware Deep Classifiers using Generative Models.
2020-06-06
Unique properties of adversarially trained linear classifiers on Gaussian data.
Can Domain Knowledge Alleviate Adversarial Attacks in Multi-Label Classifiers?
2020-06-05
Sponge Examples: Energy-Latency Attacks on Neural Networks.
Adversarial Image Generation and Training for Deep Convolutional Neural Networks.
Lipschitz Bounds and Provably Robust Training by Laplacian Smoothing.
2020-06-04
Characterizing the Weight Space for Different Learning Models.
Towards Understanding Fast Adversarial Training.
Defense for Black-box Attacks on Anti-spoofing Models by Self-Supervised Learning.
Pick-Object-Attack: Type-Specific Adversarial Attack for Object Detection.
2020-06-02
SaliencyMix: A Saliency Guided Data Augmentation Strategy for Better Regularization.
Detecting Audio Attacks on ASR Systems with Dropout Uncertainty.
Exploring the role of Input and Output Layers of a Deep Neural Network in Adversarial Defense.
Perturbation Analysis of Gradient-based Adversarial Attacks.
Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start.
2020-06-01
Second-Order Provable Defenses against Adversarial Attacks.
Adversarial Attacks on Reinforcement Learning based Energy Management Systems of Extended Range Electric Delivery Vehicles.
Adversarial Attacks on Classifiers for Eye-based User Modelling.
Rethinking Empirical Evaluation of Adversarial Robustness Using First-Order Attack Methods.
2020-05-31
Evaluations and Methods for Explanation through Robustness Analysis.
Estimating Principal Components under Adversarial Perturbations.
2020-05-30
Exploring Model Robustness with Adaptive Networks and Improved Adversarial Training.
2020-05-29
SAFER: A Structure-free Approach for Certified Robustness to Adversarial Word Substitutions.
2020-05-28
Monocular Depth Estimators: Vulnerabilities and Attacks.
QEBA: Query-Efficient Boundary-Based Blackbox Attack.
Adversarial Attacks and Defense on Texts: A Survey.
Adversarial Robustness of Deep Convolutional Candlestick Learner.
2020-05-27
Enhancing Resilience of Deep Learning Networks by Means of Transferable Adversaries.
Stochastic Security: Adversarial Defense Using Long-Run Dynamics of Energy-Based Models.
Calibrated Surrogate Losses for Adversarially Robust Classification.
Mitigating Advanced Adversarial Attacks with More Advanced Gradient Obfuscation Techniques.
2020-05-26
Investigating a Spectral Deception Loss Metric for Training Machine Learning-based Evasion Attacks.
Effects of Forward Error Correction on Communications Aware Evasion Attacks.
Generating Semantically Valid Adversarial Questions for TableQA.
2020-05-25
Adversarial Feature Selection against Evasion Attacks.
2020-05-24
Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantification.
Adaptive Adversarial Logits Pairing.
SoK: Arms Race in Adversarial Malware Detection.
2020-05-23
ShapeAdv: Generating Shape-Aware Adversarial 3D Point Clouds.
Adversarial Attack on Hierarchical Graph Pooling Neural Networks.
2020-05-22
Vulnerability of deep neural networks for detecting COVID-19 cases from chest X-ray images to universal adversarial attacks.
2020-05-21
Revisiting Role of Autoencoders in Adversarial Settings.
Robust Ensemble Model Training via Random Layer Sampling Against Adversarial Attack.
Inaudible Adversarial Perturbations for Targeted Attack in Speaker Recognition.
Investigating Vulnerability to Adversarial Examples on Multimodal Data Fusion in Deep Learning.
2020-05-20
Model-Based Robust Deep Learning.
Adversarial Machine Learning in Recommender Systems: State of the art and Challenges.
Feature Purification: How Adversarial Training Performs Robust Deep Learning.
Graph Structure Learning for Robust Graph Neural Networks.
An Adversarial Approach for Explaining the Predictions of Deep Neural Networks.
2020-05-19
Synthesizing Unrestricted False Positive Adversarial Objects Using Generative Models.
Bias-based Universal Adversarial Patch Attack for Automatic Check-out.
2020-05-18
An Evasion Attack against ML-based Phishing URL Detectors.
Increasing-Margin Adversarial (IMA) Training to Improve Adversarial Robustness of Neural Networks.
Defending Your Voice: Adversarial Attack on Voice Conversion.
Improve robustness of DNN for ECG signal classification:a noise-to-signal ratio perspective.
Universalization of any adversarial attack using very few test examples.
On Intrinsic Dataset Properties for Adversarial Machine Learning.
Spatiotemporal Attacks for Embodied Agents.
2020-05-17
Toward Adversarial Robustness by Diversity in an Ensemble of Specialized Deep Neural Networks.
2020-05-16
Universal Adversarial Perturbations: A Survey.
Encryption Inspired Adversarial Defense for Visual Classification.
PatchGuard: Provable Defense against Adversarial Patches Using Masks on Small Receptive Fields.
2020-05-15
How to Make 5G Communications "Invisible": Adversarial Machine Learning for Wireless Privacy.
Practical Traffic-space Adversarial Attacks on Learning-based NIDSs.
Initializing Perturbations in Multiple Directions for Fast Adversarial Training.
2020-05-14
Stealthy and Efficient Adversarial Attacks against Deep Reinforcement Learning.
Towards Assessment of Randomized Mechanisms for Certifying Adversarial Robustness.
A Deep Learning-based Fine-grained Hierarchical Learning Approach for Robust Malware Classification.
2020-05-13
DeepRobust: A PyTorch Library for Adversarial Attacks and Defenses.
2020-05-12
Effective and Robust Detection of Adversarial Examples via Benford-Fourier Coefficients.
Evaluating Ensemble Robustness Against Adversarial Attacks.
Increased-confidence adversarial examples for improved transferability of Counter-Forensic attacks.
Adversarial examples are useful too!
2020-05-11
Spanning Attack: Reinforce Black-box Attacks with Unlabeled Data.
Channel-Aware Adversarial Attacks Against Deep Learning-Based Wireless Signal Classifiers.
2020-05-09
It's Morphin' Time! Combating Linguistic Discrimination with Inflectional Perturbations.
Class-Aware Domain Adaptation for Improving Adversarial Robustness.
2020-05-08
Towards Robustness against Unsuspicious Adversarial Examples.
2020-05-07
Efficient Exact Verification of Binarized Neural Networks.
Projection & Probability-Driven Black-Box Attack.
Defending Hardware-based Malware Detectors against Adversarial Attacks.
2020-05-06
Training robust neural networks using Lipschitz bounds.
GraCIAS: Grassmannian of Corrupted Images for Adversarial Security.
2020-05-05
Enhancing Intrinsic Adversarial Robustness via Feature Pyramid Decoder.
Proper measure for adversarial robustness.
Hacking the Waveform: Generalized Wireless Adversarial Deep Learning.
Adversarial Training against Location-Optimized Adversarial Patches.
2020-05-04
On the Benefits of Models with Perceptually-Aligned Gradients.
Do Gradient-based Explanations Tell Anything About Adversarial Robustness to Android Malware?
2020-05-03
Robust Encodings: A Framework for Combating Adversarial Typos.
2020-05-01
Jacks of All Trades, Masters Of None: Addressing Distributional Shift and Obtrusiveness via Transparent Patch Attacks.
Birds have four legs?! NumerSense: Probing Numerical Commonsense Knowledge of Pre-trained Language Models.
Robust Deep Learning as Optimal Control: Insights and Convergence Guarantees.
Defense of Word-level Adversarial Attacks via Random Substitution Encoding.
2020-04-30
Evaluating Neural Machine Comprehension Model Robustness to Noisy Inputs and Adversarial Attacks.
Universal Adversarial Attacks with Natural Triggers for Text Classification.
Imitation Attacks and Defenses for Black-box Machine Translation Systems.
Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness.
2020-04-29
TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLP.
Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability.
2020-04-28
Adversarial Learning Guarantees for Linear Hypotheses and Neural Networks.
Minority Reports Defense: Defending Against Adversarial Patches.
2020-04-27
DeSePtion: Dual Sequence Prediction and Adversarial Examples for Improved Fact-Checking.
Adversarial Fooling Beyond "Flipping the Label".
2020-04-26
Improved Image Wasserstein Attacks and Defenses.
Towards Feature Space Adversarial Attack.
Transferable Perturbations of Deep Feature Distributions.
Printing and Scanning Attack for Image Counter Forensics.
2020-04-25
Improved Adversarial Training via Learned Optimizer.
Enabling Fast and Universal Audio Adversarial Attack Using Generative Model.
Harnessing adversarial examples with a surprisingly simple defense.
2020-04-24
Towards Characterizing Adversarial Defects of Deep Learning Software from the Lens of Uncertainty.
Reevaluating Adversarial Examples in Natural Language.
One Sparse Perturbation to Fool them All, almost Always!
2020-04-23
Adversarial Machine Learning in Network Intrusion Detection Systems.
Adversarial Machine Learning: An Interpretation Perspective.
RAIN: A Simple Approach for Robust and Accurate Image Classification Networks.
Evaluating Adversarial Robustness for Deep Neural Network Interpretability using fMRI Decoding.
On Adversarial Examples for Biomedical NLP Tasks.
Ensemble Generative Cleaning with Feedback Loops for Defending Adversarial Attacks.
Improved Noise and Attack Robustness for Semantic Segmentation by Using Multi-Task Training with Self-Supervised Depth Estimation.
2020-04-22
CodNN -- Robust Neural Networks From Coded Classification.
Provably robust deep generative models.
QUANOS- Adversarial Noise Sensitivity Driven Hybrid Quantization of Neural Networks.
Adversarial examples and where to find them.
2020-04-21
Scalable Attack on Graph Data by Injecting Vicious Nodes.
Certifying Joint Adversarial Robustness for Model Ensembles.
Probabilistic Safety for Bayesian Neural Networks.
BERT-ATTACK: Adversarial Attack Against BERT Using BERT.
EMPIR: Ensembles of Mixed Precision Deep Networks for Increased Robustness against Adversarial Attacks.
2020-04-20
GraN: An Efficient Gradient-Norm Based Detector for Adversarial and Misclassified Examples.
2020-04-19
Dynamic Knowledge Graph-based Dialogue Generation with Improved Adversarial Meta-Learning.
Adversarial Training for Large Neural Language Models.
Headless Horseman: Adversarial Attacks on Transfer Learning Models.
2020-04-18
Protecting Classifiers From Attacks. A Bayesian Approach.
Single-step Adversarial training with Dropout Scheduling.
2020-04-17
Adversarial Attack on Deep Learning-Based Splice Localization.
2020-04-16
Shortcut Learning in Deep Neural Networks.
2020-04-15
Enhancing Deep Neural Networks Against Adversarial Malware Examples.
Targeted Attack for Deep Hashing based Retrieval.
Advanced Evasion Attacks and Mitigations on Practical ML-Based Phishing Website Classifiers.
2020-04-14
On the Optimal Interaction Range for Multi-Agent Systems Under Adversarial Attack.
Extending Adversarial Attacks to Produce Adversarial Class Probability Distributions.
2020-04-13
Adversarial robustness guarantees for random deep neural networks.
Revisiting Loss Landscape for Adversarial Robustness.
Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples.
Towards Transferable Adversarial Attack against Deep Face Recognition.
Adversarial Augmentation Policy Search for Domain and Cross-Lingual Generalization in Reading Comprehension.
Towards Robust Classification with Image Quality Assessment.
2020-04-12
PatchAttack: A Black-box Texture-based Attack with Reinforcement Learning.
2020-04-11
Robust Large-Margin Learning in Hyperbolic Space.
Domain Adaptive Transfer Attack (DATA)-based Segmentation Networks for Building Extraction from Aerial Images.
Certified Adversarial Robustness for Deep Reinforcement Learning.
Verification of Deep Convolutional Neural Networks Using ImageStars.
2020-04-10
Adversarial Attacks on Machine Learning Cybersecurity Defences in Industrial Control Systems.
Luring of Adversarial Perturbations.
2020-04-09
Blind Adversarial Training: Balance Accuracy and Robustness.
Blind Adversarial Pruning: Balance Accuracy, Efficiency and Robustness.
On Adversarial Examples and Stealth Attacks in Artificial Intelligence Systems.
2020-04-08
Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Ranking.
2020-04-07
Towards Evaluating the Robustness of Chinese BERT Classifiers.
Feature Partitioning for Robust Tree Ensembles and their Certification in Adversarial Scenarios.
Learning to fool the speaker recognition.
Universal Adversarial Perturbations Generative Network for Speaker Recognition.
2020-04-05
Approximate Manifold Defense Against Multiple Adversarial Perturbations.
2020-04-04
Understanding (Non-)Robust Feature Disentanglement and the Relationship Between Low- and High-Dimensional Adversarial Attacks.
BAE: BERT-based Adversarial Examples for Text Classification.
2020-04-03
Adversarial Robustness through Regularization: A Second-Order Approach.
2020-04-01
Evading Deepfake-Image Detectors with White- and Black-Box Attacks.
Towards Achieving Adversarial Robustness by Enforcing Feature Consistency Across Bit Planes.
Physically Realizable Adversarial Examples for LiDAR Object Detection.
2020-03-31
A Thorough Comparison Study on Adversarial Attacks and Defenses for Common Thorax Disease Classification in Chest X-rays.
2020-03-30
Characterizing Speech Adversarial Examples Using Self-Attention U-Net Enhancement.
Adversarial Attacks on Multivariate Time Series.
Improved Gradient based Adversarial Attacks for Quantized Networks.
Towards Deep Learning Models Resistant to Large Perturbations.
Efficient Black-box Optimization of Adversarial Windows Malware with Constrained Manipulations.
2020-03-28
Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning.
DaST: Data-free Substitute Training for Adversarial Attacks.
Adversarial Imitation Attack.
2020-03-26
Do Deep Minds Think Alike? Selective Adversarial Attacks for Fine-Grained Manipulation of Multiple Deep Neural Networks.
On the adversarial robustness of DNNs based on error correcting output codes.
2020-03-25
Plausible Counterfactuals: Auditing Deep Learning Classifiers with Realistic Adversarial Examples.
2020-03-24
Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study.
2020-03-23
Defense Through Diverse Directions.
Adversarial Attacks on Monocular Depth Estimation.
Inherent Adversarial Robustness of Deep Spiking Neural Networks: Effects of Discrete Input Encoding and Non-Linear Activations.
Adversarial Perturbations Fool Deepfake Detectors.
2020-03-22
Understanding the robustness of deep neural network classifiers for breast cancer screening.
Architectural Resilience to Foreground-and-Background Adversarial Noise.
2020-03-21
Detecting Adversarial Examples in Learning-Enabled Cyber-Physical Systems using Variational Autoencoder for Regression.
Robust Out-of-distribution Detection in Neural Networks.
Cooling-Shrinking Attack: Blinding the Tracker with Imperceptible Noises.
2020-03-20
Adversarial Examples and the Deeper Riddle of Induction: The Need for a Theory of Artifacts in Deep Learning.
Investigating Image Applications Based on Spatial-Frequency Transform and Deep Learning Techniques.
Quantum noise protects quantum classifiers against adversaries.
One Neuron to Fool Them All.
Adversarial Robustness on In- and Out-Distribution Improves Explainability.
2020-03-19
Face-Off: Adversarial Face Obfuscation.
Robust Deep Reinforcement Learning against Adversarial Perturbations on Observations.
Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates.
2020-03-18
Vulnerabilities of Connectionist AI Applications: Evaluation and Defence.
Improving Adversarial Robustness Through Progressive Hardening.
Generating Socially Acceptable Perturbations for Efficient Evaluation of Autonomous Vehicles.
Solving Non-Convex Non-Differentiable Min-Max Games using Proximal Gradient Method.
2020-03-17
Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior.
Heat and Blur: An Effective and Fast Defense Against Adversarial Examples.
Adversarial Transferability in Wearable Sensor Systems.
2020-03-15
Towards Privacy Protection by Generating Adversarial Identity Masks.
Anomalous Instance Detection in Deep Learning: A Survey.
Output Diversified Initialization for Adversarial Attacks.
Toward Adversarial Robustness via Semi-supervised Robust Training.
2020-03-14
Dynamic Divide-and-Conquer Adversarial Training for Robust Semantic Segmentation.
Certified Defenses for Adversarial Patches.
Minimum-Norm Adversarial Examples on KNN and KNN-Based Models.
VarMixup: Exploiting the Latent Space for Robust Training and Inference.
2020-03-13
Towards a Resilient Machine Learning Classifier -- a Case Study of Ransomware Detection.
GeoDA: a geometric framework for black-box adversarial attacks.
When are Non-Parametric Methods Robust?
2020-03-12
ARAE: Adversarially Robust Training of Autoencoders Improves Novelty Detection.
Topological Effects on Attacks Against Vertex Classification.
Inline Detection of DGA Domains Using Side Information.
ConAML: Constrained Adversarial Machine Learning for Cyber-Physical Systems.
2020-03-11
Frequency-Tuned Universal Adversarial Attacks.
2020-03-10
SAD: Saliency-based Defenses Against Adversarial Examples.
Using an ensemble color space model to tackle adversarial examples.
Cryptanalytic Extraction of Neural Network Models.
A Survey of Adversarial Learning on Graphs.
2020-03-09
Domain Adaptation with Conditional Distribution Matching and Generalized Label Shift.
Towards Probabilistic Verification of Machine Unlearning.
Manifold Regularization for Adversarial Robustness.
Gradient-based adversarial attacks on categorical sequence models via traversing an embedded world.
Generating Natural Language Adversarial Examples on a Large Scale with Generative Models.
2020-03-08
Security of Distributed Machine Learning: A Game-Theoretic Approach to Design Secure DSVM.
An Empirical Evaluation on Robustness and Uncertainty of Regularization Methods.
On the Robustness of Cooperative Multi-Agent Reinforcement Learning.
Adversarial Attacks on Probabilistic Autoregressive Forecasting Models.
No Surprises: Training Robust Lung Nodule Detection for Low-Dose CT Scans by Augmenting with Adversarial Attacks.
Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles.
2020-03-07
Dynamic Backdoor Attacks Against Machine Learning Models.
2020-03-06
Triple Memory Networks: a Brain-Inspired Method for Continual Learning.
Defense against adversarial attacks on spoofing countermeasures of ASV.
Automatic Generation of Adversarial Examples for Interpreting Malware Classifiers.
2020-03-05
Towards Practical Lottery Ticket Hypothesis for Adversarial Training.
Exploiting Verified Neural Networks via Floating Point Numerical Error.
Detection and Recovery of Adversarial Attacks with Injected Attractors.
Adversarial Robustness Through Local Lipschitzness.
Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization.
Search Space of Adversarial Perturbations against Image Filters.
2020-03-04
Real-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems.
Colored Noise Injection for Training Adversarially Robust Neural Networks.
Double Backpropagation for Training Autoencoders against Adversarial Attack.
Black-box Smoothing: A Provable Defense for Pretrained Classifiers.
Metrics and methods for robustness evaluation of neural networks with generative models.
2020-03-03
Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks.
Analyzing Accuracy Loss in Randomized Smoothing Defenses.
Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack.
Type I Attack for Generative Models.
2020-03-02
Rethinking Randomized Smoothing for Adversarial Robustness.
Data-Free Adversarial Perturbations for Practical Black-Box Attack.
Learn2Perturb: an End-to-end Feature Perturbation Learning to Improve Adversarial Robustness.
Disrupting Deepfakes: Adversarial Attacks Against Conditional Image Translation Networks and Facial Manipulation Systems.
Adversarial Network Traffic: Towards Evaluating the Robustness of Deep Learning-Based Network Traffic Classification.
2020-03-01
Adversarial Attacks and Defenses on Graphs: A Review and Empirical Study.
2020-02-29
Understanding the Intrinsic Robustness of Image Distributions using Conditional Generative Models.
Why is the Mahalanobis Distance Effective for Anomaly Detection?
2020-02-28
End-to-end Robustness for Sensing-Reasoning Machine Learning Pipelines.
Applying Tensor Decomposition to image for Robustness against Adversarial Attack.
2020-02-27
Adv-BERT: BERT is not robust on misspellings! Generating nature adversarial samples on BERT.
Utilizing Network Properties to Detect Erroneous Inputs.
Detecting Patch Adversarial Attacks with Image Residuals.
Detecting and Recovering Adversarial Examples: An Input Sensitivity Guided Method.
Provable Robust Learning Based on Transformation-Specific Smoothing.
On Isometry Robustness of Deep 3D Point Cloud Models under Adversarial Attacks.
2020-02-26
Revisiting Ensembles in an Adversarial Context: Improving Natural Accuracy.
Randomization matters. How to defend against strong adversarial attacks.
Invariance vs. Robustness of Neural Networks.
Overfitting in adversarially robust deep learning.
MGA: Momentum Gradient Attack on Network.
Improving Robustness of Deep-Learning-Based Image Reconstruction.
Defense-PointNet: Protecting PointNet Against Adversarial Attacks.
Adversarial Attack on Deep Product Quantization Network for Image Retrieval.
Learning Adversarially Robust Representations via Worst-Case Mutual Information Maximization.
2020-02-25
Understanding and Mitigating the Tradeoff Between Robustness and Accuracy.
The Curious Case of Adversarially Robust Models: More Data Can Help, Double Descend, or Hurt Generalization.
G\"odel's Sentence Is An Adversarial Example But Unsolvable.
(De)Randomized Smoothing for Certifiable Defense against Patch Attacks.
Towards an Efficient and General Framework of Robust Training for Graph Neural Networks.
Attacks Which Do Not Kill Training Make Adversarial Learning Stronger.
Adversarial Ranking Attack and Defense.
2020-02-24
A Model-Based Derivative-Free Approach to Black-Box Adversarial Examples: BOBYQA.
Utilizing a null class to restrict decision spaces and defend against neural network adversarial attacks.
Adversarial Perturbations Prevail in the Y-Channel of the YCbCr Color Space.
Towards Rapid and Robust Adversarial Training with One-Step Attacks.
Precise Tradeoffs in Adversarial Training for Linear Regression.
On Pruning Adversarially Robust Neural Networks.
2020-02-23
Adversarial Attack on DL-based Massive MIMO CSI Feedback.
Triple Wins: Boosting Accuracy, Robustness and Efficiency Together by Enabling Input-Adaptive Inference.
2020-02-22
VisionGuard: Runtime Detection of Adversarial Inputs to Perception Systems.
Non-Intrusive Detection of Adversarial Deep Learning Attacks via Observer Networks.
Temporal Sparse Adversarial Attack on Gait Recognition.
Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples.
2020-02-21
Polarizing Front Ends for Robust CNNs.
UnMask: Adversarial Detection and Defense Through Robust Feature Alignment.
Robustness to Programmable String Transformations via Augmented Abstract Training.
Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework.
Robustness from Simple Classifiers.
Adversarial Detection and Correction by Matching Prediction Distributions.
Adversarial Attacks on Machine Learning Systems for High-Frequency Trading.
2020-02-20
Enhanced Adversarial Strategically-Timed Attacks against Deep Reinforcement Learning.
On the Decision Boundaries of Deep Neural Networks: A Tropical Geometry Perspective.
A Bayes-Optimal View on Adversarial Examples.
Towards Certifiable Adversarial Sample Detection.
Boosting Adversarial Training with Hypersphere Embedding.
2020-02-19
Bayes-TrEx: Model Transparency by Example.
AdvMS: A Multi-source Multi-cost Defense Against Adversarial Attacks.
NAttack! Adversarial Attacks to bypass a GAN based classifier trained to detect Network intrusion.
Indirect Adversarial Attacks via Poisoning Neighbors for Graph Convolutional Networks.
On Adaptive Attacks to Adversarial Example Defenses.
Randomized Smoothing of All Shapes and Sizes.
2020-02-18
Action-Manipulation Attacks Against Stochastic Bandits: Attacks and Defense.
Deflecting Adversarial Attacks.
Block Switching: A Stochastic Approach for Deep Learning Security.
Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent.
2020-02-17
TensorShield: Tensor-based Defense Against Adversarial Attacks on Images.
On the Similarity of Deep Learning Representations Across Didactic and Adversarial Examples.
Scalable Quantitative Verification For Deep Neural Networks.
Query-Efficient Physical Hard-Label Attacks on Deep Learning Visual Classification.
CAT: Customized Adversarial Training for Improved Robustness.
On the Matrix-Free Generation of Adversarial Perturbations for Black-Box Attacks.
Robust Stochastic Bandit Algorithms under Probabilistic Unbounded Adversarial Attack.
Regularized Training and Tight Certification for Randomized Smoothed Classifier with Provable Robustness.
2020-02-16
Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality.
2020-02-15
Undersensitivity in Neural Reading Comprehension.
Hold me tight! Influence of discriminative features on deep network boundaries.
Blind Adversarial Network Perturbations.
2020-02-14
Adversarial Distributional Training for Robust Deep Learning.
Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets.
2020-02-13
Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks.
The Conditional Entropy Bottleneck.
Identifying Audio Adversarial Examples via Anomalous Pattern Detection.
2020-02-12
Stabilizing Differentiable Architecture Search via Perturbation-based Regularization.
Flickering Adversarial Attacks against Video Recognition Networks.
2020-02-11
Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models.
Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations.
Robustness of Bayesian Neural Networks to Gradient-Based Attacks.
Improving the affordability of robustness training for DNNs.
More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models.
2020-02-10
Playing to Learn Better: Repeated Games for Adversarial Learning with Multiple Classifiers.
Adversarial Data Encryption.
Generalised Lipschitz Regularisation Equals Distributional Robustness.
2020-02-09
Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing.
MDEA: Malware Detection with Evolutionary Adversarial Learning.
Input Validation for Neural Networks via Runtime Local Robustness Verification.
Robust binary classification with the 01 loss.
ABBA: Saliency-Regularized Motion-Based Adversarial Blur Attack.
Feature-level Malware Obfuscation in Deep Learning.
Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples.
Category-wise Attack: Transferable Adversarial Examples for Anchor Free Object Detection.
Random Smoothing Might be Unable to Certify $\ell_\infty$ Robustness for High-Dimensional Images.
2020-02-08
Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness.
Attacking Optical Character Recognition (OCR) Systems with Adversarial Watermarks.
2020-02-07
Improving the Adversarial Robustness of Transfer Learning via Noisy Feature Distillation.
Semantic Robustness of Models of Source Code.
Analysis of Random Perturbations for Robust Convolutional Neural Networks.
RAID: Randomized Adversarial-Input Detection for Neural Networks.
Assessing the Adversarial Robustness of Monte Carlo and Distillation Methods for Deep Bayesian Neural Network Classification.
2020-02-06
Reliability Validation of Learning Enabled Vehicle Tracking.
An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models.
AI-GAN: Attack-Inspired Generation of Adversarial Examples.
2020-02-05
Over-the-Air Adversarial Attacks on Deep Learning Based Modulation Classifier over Wireless Channels.
Understanding the Decision Boundary of Deep Neural Networks: An Empirical Study.
2020-02-04
Adversarially Robust Frame Sampling with Bounded Irregularities.
Adversarial Attacks to Scale-Free Networks: Testing the Robustness of Physical Criteria.
Minimax Defense against Gradient-based Adversarial Attacks.
2020-02-03
A Differentiable Color Filter for Generating Unrestricted Adversarial Images.
Regularizers for Single-step Adversarial Training.
Defending Adversarial Attacks via Semantic Feature Manipulation.
2020-02-02
Robust saliency maps with decoy-enhanced saliency score.
2020-02-01
Towards Sharper First-Order Adversary with Quantized Gradients.
AdvJND: Generating Adversarial Examples with Just Noticeable Difference.
2020-01-31
Additive Tree Ensembles: Reasoning About Potential Instances.
Politics of Adversarial Machine Learning.
FastWordBug: A Fast Method To Generate Adversarial Text Against NLP Applications.
2020-01-30
Tiny Noise Can Make an EEG-Based Brain-Computer Interface Speller Output Anything.
2020-01-29
A4 : Evading Learning-based Adblockers.
D2M: Dynamic Defense and Modeling of Adversarial Movement in Networks.
Just Noticeable Difference for Machines to Generate Adversarial Images.
Semantic Adversarial Perturbations using Learnt Representations.
Adversarial Attacks on Convolutional Neural Networks in Facial Recognition Domain.
2020-01-28
Modelling and Quantifying Membership Information Leakage in Machine Learning.
2020-01-27
Interpreting Machine Learning Malware Detectors Which Leverage N-gram Analysis.
Generating Natural Adversarial Hyperspectral examples with a modified Wasserstein GAN.
FakeLocator: Robust Localization of GAN-Based Face Manipulations via Semantic Segmentation Networks with Bells and Whistles.
Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learning.
Practical Fast Gradient Sign Attack against Mammographic Image Classifier.
2020-01-26
Ensemble Noise Simulation to Handle Uncertainty about Gradient-based Adversarial Attacks.
2020-01-25
Weighted Average Precision: Adversarial Example Detection in the Visual Perception of Autonomous Vehicles.
AI-Powered GUI Attack and Its Defensive Methods.
Analyzing the Noise Robustness of Deep Neural Networks.
2020-01-24
When Wireless Security Meets Machine Learning: Motivation, Challenges, and Research Directions.
2020-01-23
Privacy for All: Demystify Vulnerability Disparity of Differential Privacy against Membership Inference Attack.
Towards Robust DNNs: An Taylor Expansion-Based Method for Generating Powerful Adversarial Examples.
On the human evaluation of audio adversarial examples.
2020-01-22
Adversarial Attack on Community Detection by Hiding Individuals.
2020-01-21
SAUNet: Shape Attentive U-Net for Interpretable Medical Image Segmentation.
Secure and Robust Machine Learning for Healthcare: A Survey.
FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidence.
GhostImage: Perception Domain Attacks against Vision-based Object Classification Systems.
Generate High-Resolution Adversarial Samples by Identifying Effective Features.
Massif: Interactive Interpretation of Adversarial Attacks on Deep Learning.
Elephant in the Room: An Evaluation Framework for Assessing Adversarial Examples in NLP.
2020-01-17
Cyber Attack Detection thanks to Machine Learning Algorithms.
2020-01-16
Code-Bridged Classifier (CBC): A Low or Negative Overhead Defense for Making a CNN Classifier Robust Against Adversarial Attacks.
A Little Fog for a Large Turn.
Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet.
The gap between theory and practice in function approximation with deep neural networks.
Increasing the robustness of DNNs against image corruptions by playing the Game of Noise.
2020-01-14
Noisy Machines: Understanding Noisy Neural Networks and Enhancing Robustness to Analog Hardware Errors Using Distillation.
2020-01-13
Advbox: a toolbox to generate adversarial examples that fool neural networks.
2020-01-12
Membership Inference Attacks Against Object Detection Models.
An Adversarial Approach for the Robust Classification of Pneumonia from Chest Radiographs.
Fast is better than free: Revisiting adversarial training.
2020-01-11
Exploring and Improving Robustness of Multi Task Deep Neural Networks via Domain Agnostic Defenses.
Sparse Black-box Video Attack with Reinforcement Learning.
2020-01-10
ReluDiff: Differential Verification of Deep Neural Networks.
Guess First to Enable Better Compression and Adversarial Robustness.
2020-01-08
To Transfer or Not to Transfer: Misclassification Attacks Against Transfer Learned Text Classifiers.
MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius.
Transferability of Adversarial Examples to Attack Cloud-based Image Classifier Service.
2020-01-07
Softmax-based Classification is k-means Clustering: Formal Proof, Consequences for Adversarial Attacks, and Improvement through Centroid Based Tailoring.
2020-01-06
Generating Semantic Adversarial Examples via Feature Manipulation.
Deceiving Image-to-Image Translation Networks for Autonomous Driving with Adversarial Perturbations.
2020-01-05
The Human Visual System and Adversarial AI.
2020-01-02
Reject Illegal Inputs with Generative Classifier Derived from Any Discriminative Classifier.
2020-01-01
Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient.
Ensembles of Many Diverse Weak Defenses can be Strong: Defending Deep Neural Networks Against Adversarial Attacks.
2019-12-31
Automated Testing for Deep Learning Systems with Differential Behavior Criteria.
Protecting GANs against privacy attacks by preventing overfitting.
Erase and Restore: Simple, Accurate and Resilient Detection of $L_2$ Adversarial Examples.
Quantum Adversarial Machine Learning.
2019-12-30
Adversarial Example Generation using Evolutionary Multi-objective Optimization.
Defending from adversarial examples with a two-stream architecture.
2019-12-28
Detecting Out-of-Distribution Examples with In-distribution Examples and Gram Matrices.
Search Based Repair of Deep Neural Networks.
2019-12-26
Benchmarking Adversarial Robustness.
Efficient Adversarial Training with Transferable Adversarial Examples.
2019-12-24
Attack-Resistant Federated Learning with Residual-based Reweighting.
Analysis of Moving Target Defense Against False Data Injection Attacks on Power Grid.
Cronus: Robust and Heterogeneous Collaborative Learning with Black-Box Knowledge Transfer.
Characterizing the Decision Boundary of Deep Neural Networks.
2019-12-23
White Noise Analysis of Neural Networks.
Adversarial AutoAugment.
Geometry-aware Generation of Adversarial and Cooperative Point Clouds.
2019-12-21
AdvCodec: Towards A Unified Framework for Adversarial Text Generation.
2019-12-20
Measuring Dataset Granularity.
Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing.
secml: A Python Library for Secure and Explainable Machine Learning.
Jacobian Adversarially Regularized Networks for Robustness.
Explainability and Adversarial Robustness for RNNs.
Adversarial symmetric GANs: bridging adversarial samples and adversarial networks.
2019-12-19
Does Symbolic Knowledge Prevent Adversarial Fooling?
A New Ensemble Method for Concessively Targeted Multi-model Attack.
Mitigating large adversarial perturbations on X-MAS (X minus Moving Averaged Samples).
Optimization-Guided Binary Diversification to Mislead Neural Networks for Malware Detection.
$n$-ML: Mitigating Adversarial Examples via Ensembles of Topologically Manipulated Classifiers.
Towards Verifying Robustness of Neural Networks Against Semantic Perturbations.
Perturbations on the Perceptual Ball.
2019-12-18
Identifying Adversarial Sentences by Analyzing Text Complexity.
An Adversarial Perturbation Oriented Domain Adaptation Approach for Semantic Segmentation.
Adversarial VC-dimension and Sample Complexity of Neural Networks.
SIGMA : Strengthening IDS with GAN and Metaheuristics Attacks.
Detecting Adversarial Attacks On Audio-Visual Speech Recognition.
2019-12-17
APRICOT: A Dataset of Physical Adversarial Attacks on Object Detection.
2019-12-16
CAG: A Real-time Low-cost Enhanced-robustness High-transferability Content-aware Adversarial Attack Generator.
MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking.
On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration.
Constructing a provably adversarially-robust classifier from a high accuracy one.
2019-12-15
DAmageNet: A Universal Adversarial Dataset.
2019-12-14
What Else Can Fool Deep Learning? Addressing Color Constancy Errors on Deep Neural Network Performance.
Towards Robust Toxic Content Classification.
2019-12-13
Potential adversarial samples for white-box attacks.
2019-12-11
Learning to Model Aspects of Hearing Perception Using Neural Loss Functions.
Gabor Layers Enhance Network Robustness.
What it Thinks is Important is Important: Robustness Transfers through Input Gradients.
An Efficient Approach for Using Expectation Maximization Algorithm in Capsule Networks.
Detecting and Correcting Adversarial Images Using Image Processing Operations and Convolutional Neural Networks.
2019-12-10
Towards a Robust Classifier: An MDL-Based Method for Generating Adversarial Examples.
Training Provably Robust Models by Polyhedral Envelope Regularization.
Appending Adversarial Frames for Universal Video Attack.
2019-12-09
Feature Losses for Adversarial Robustness.
2019-12-08
Hardening Random Forest Cyber Detectors Against Adversarial Attacks.
Amora: Black-box Adversarial Morphing Attack.
2019-12-07
Exploring the Back Alleys: Analysing The Robustness of Alternative Neural Network Architectures against Adversarial Attacks.
2019-12-06
Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations.
Principal Component Properties of Adversarial Samples.
Does Interpretability of Neural Networks Imply Adversarial Robustness?
2019-12-05
Detection of Face Recognition Adversarial Attacks.
The Search for Sparse, Robust Neural Networks.
Region-Wise Attack: On Efficient Generation of Robust Physical Adversarial Examples.
2019-12-04
Learning with Multiplicative Perturbations.
A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks.
Walking on the Edge: Fast, Low-Distortion Adversarial Examples.
Towards Robust Image Classification Using Sequential Attention Models.
Scratch that! An Evolution-based Adversarial Attack against Neural Networks.
2019-12-03
A Survey of Black-Box Adversarial Attacks on Computer Vision Models.
FANNet: Formal Analysis of Noise Tolerance, Training Bias and Input Sensitivity in Neural Networks.
2019-12-02
Cost-Aware Robust Tree Ensembles for Security Applications.
Deep Neural Network Fingerprinting by Conferrable Adversarial Examples.
Universal Adversarial Perturbations for CNN Classifiers in EEG-Based BCIs.
2019-12-01
Adversary A3C for Robust Reinforcement Learning.
A Method for Computing Class-wise Universal Adversarial Perturbations.
AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds.
2019-11-30
Design and Interpretation of Universal Adversarial Patches in Face Detection.
Error-Correcting Neural Network.
2019-11-29
Square Attack: a query-efficient black-box adversarial attack via random search.
2019-11-28
Towards Privacy and Security of Deep Learning Systems: A Survey.
2019-11-26
Survey of Attacks and Defenses on Edge-Deployed Neural Networks.
An Adaptive View of Adversarial Robustness from Test-time Smoothing Defense.
Can Attention Masks Improve Adversarial Robustness?
Defending Against Adversarial Machine Learning.
Using Depth for Pixel-Wise Detection of Adversarial Attacks in Crowd Counting.
2019-11-25
Playing it Safe: Adversarial Robustness with an Abstain Option.
ColorFool: Semantic Adversarial Colorization.
Adversarial Attack with Pattern Replacement.
One Man's Trash is Another Man's Treasure: Resisting Adversarial Examples by Adversarial Examples.
2019-11-24
When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks.
Time-aware Gradient Attack on Dynamic Network Link Prediction.
2019-11-23
Universal Adversarial Perturbations to Understand Robustness of Texture vs. Shape-biased Training.
Robust Assessment of Real-World Adversarial Examples.
2019-11-22
Bounding Singular Values of Convolution Layers.
Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction.
Attack Agnostic Statistical Method for Adversarial Detection.
Universal adversarial examples in speech command classification.
Invert and Defend: Model-based Approximate Inversion of Generative Adversarial Networks for Secure Inference.
2019-11-21
Heuristic Black-box Adversarial Attacks on Video Recognition Models.
Adversarial Examples Improve Image Recognition.
2019-11-20
Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation.
Analysis of Deep Networks for Monocular Depth Estimation Through Adversarial Attacks with Proposal of a Defense Method.
Fine-grained Synthesis of Unrestricted Adversarial Examples.
Deep Minimax Probability Machine.
2019-11-19
Logic-inspired Deep Neural Networks.
Where is the Bottleneck of Adversarial Learning with Unlabeled Data?
Adversarial Robustness of Flow-Based Generative Models.
Defective Convolutional Layers Learn Robust CNNs.
Generate (non-software) Bugs to Fool Classifiers.
2019-11-18
A New Ensemble Adversarial Attack Powered by Long-term Gradient Memories.
A novel method for identifying the deep neural network model with the Serial Number.
Adversarial Attacks on Grid Events Classification: An Adversarial Machine Learning Approach.
WITCHcraft: Efficient PGD attacks with random step size.
Deep Detector Health Management under Adversarial Campaigns.
2019-11-17
Countering Inconsistent Labelling by Google's Vision API for Rotated Images.
Deep Verifier Networks: Verification of Deep Discriminative Models with Deep Generative Models.
Smoothed Inference for Adversarially-Trained Models.
2019-11-16
SMART: Skeletal Motion Action Recognition aTtack.
Suspicion-Free Adversarial Attacks on Clustering Algorithms.
Black-Box Adversarial Attack with Transferable Model-based Embedding.
Defensive Few-shot Adversarial Learning.
2019-11-15
Learning To Characterize Adversarial Subspaces.
On Model Robustness Against Adversarial Examples.
Simple iterative method for generating targeted universal adversarial perturbations.
AdvKnn: Adversarial Attacks On K-Nearest Neighbor Classifiers With Approximate Gradients.
2019-11-14
Adversarial Embedding: A robust and elusive Steganography and Watermarking technique.
Self-supervised Adversarial Training.
DomainGAN: Generating Adversarial Examples to Attack Domain Generation Algorithm Classifiers.
CAGFuzz: Coverage-Guided Adversarial Generative Fuzzing Testing of Deep Learning Systems.
2019-11-13
There is Limited Correlation between Coverage and Robustness for Deep Neural Networks.
Adversarial Margin Maximization Networks.
2019-11-12
Improving Robustness of Task Oriented Dialog Systems.
On Robustness to Adversarial Examples and Polynomial Optimization.
Adversarial Examples in Modern Machine Learning: A Review.
2019-11-11
RNN-Test: Adversarial Testing Framework for Recurrent Neural Network Systems.
Few-Features Attack to Fool Machine Learning Models through Mask-Based GAN.
Learning From Brains How to Regularize Machines.
Robust Design of Deep Neural Networks against Adversarial Attacks based on Lyapunov Theory.
CALPA-NET: Channel-pruning-assisted Deep Residual Network for Steganalysis of Digital Images.
GraphDefense: Towards Robust Graph Convolutional Networks.
2019-11-09
A Reinforced Generation of Adversarial Samples for Neural Machine Translation.
Improving Machine Reading Comprehension via Adversarial Training.
Adaptive versus Standard Descent Methods and Robustness Against Adversarial Examples.
Minimalistic Attacks: How Little it Takes to Fool a Deep Reinforcement Learning Policy.
2019-11-08
Intrusion Detection for Industrial Control Systems: Evaluation Analysis and Adversarial Attacks.
Patch augmentation: Towards efficient decision boundaries for neural networks.
Domain Robustness in Neural Machine Translation.
Adversarial Attacks on GMM i-vector based Speaker Verification Systems.
Imperceptible Adversarial Attacks on Tabular Data.
2019-11-07
White-Box Target Attack for EEG-Based BCI Regression Problems.
Active Learning for Black-Box Adversarial Attacks in EEG-Based Brain-Computer Interfaces.
2019-11-06
Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distance.
Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methods.
The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.
Reversible Adversarial Example based on Reversible Image Transformation.
2019-11-05
Adversarial Enhancement for Community Detection in Complex Networks.
Test Metrics for Recurrent Neural Networks.
DLA: Dense-Layer-Analysis for Adversarial Example Detection.
Intriguing Properties of Adversarial ML Attacks in the Problem Space.
2019-11-04
Persistency of Excitation for Robustness of Neural Networks.
A Tale of Evil Twins: Adversarial Inputs versus Poisoned Models.
Fast-UAP: An Algorithm for Speeding up Universal Adversarial Perturbation Generation with Orientation of Perturbation Vectors.
2019-11-03
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems.
MadNet: Using a MAD Optimization for Defending Against Adversarial Attacks.
2019-11-02
Automatic Detection of Generated Text is Easiest when Humans are Fooled.
Security of Facial Forensics Models Against Adversarial Attacks.
2019-10-31
Enhancing Certifiable Robustness via a Deep Model Ensemble.
Certifiable Robustness to Graph Perturbations.
Adversarial Music: Real World Audio Adversary Against Wake-word Detection System.
2019-10-30
Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization.
Beyond Universal Person Re-ID Attack.
2019-10-29
Adversarial Example in Remote Sensing Image Recognition.
2019-10-28
Active Subspace of Neural Networks: Structural Analysis and Universal Attacks.
Certified Adversarial Robustness for Deep Reinforcement Learning.
2019-10-27
Open the Boxes of Words: Incorporating Sememes into Textual Adversarial Attack.
EdgeFool: An Adversarial Image Enhancement Filter.
Spot Evasion Attacks: Adversarial Examples for License Plate Recognition Systems with Convolutional Neural Networks.
2019-10-26
Detection of Adversarial Attacks and Characterization of Adversarial Subspace.
Understanding and Quantifying Adversarial Examples Existence in Linear Classification.
Adversarial Defense Via Local Flatness Regularization.
2019-10-25
Effectiveness of random deep feature selection for securing image manipulation detectors against adversarial examples.
MediaEval 2019: Concealed FGSM Perturbations for Privacy Preservation.
Label Smoothing and Logit Squeezing: A Replacement for Adversarial Training?
2019-10-24
ATZSL: Defensive Zero-Shot Recognition in the Presence of Adversaries.
2019-10-23
A Useful Taxonomy for Adversarial Robustness of Neural Networks.
Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks.
2019-10-22
Attacking Optical Flow.
Adversarial Example Detection by Classification for Deep Speech Recognition.
Cross-Representation Transferability of Adversarial Attacks: From Spectrograms to Audio Waveforms.
Structure Matters: Towards Generating Transferable Adversarial Images.
2019-10-21
Recovering Localized Adversarial Attacks.
Learning to Learn by Zeroth-Order Oracle.
An Alternative Surrogate Loss for PGD-based Adversarial Testing.
2019-10-20
Enhancing Recurrent Neural Networks with Sememes.
2019-10-19
Adversarial Attacks on Spoofing Countermeasures of automatic speaker verification.
2019-10-18
Toward Metrics for Differentiating Out-of-Distribution Sets.
Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?
Spatial-aware Online Adversarial Perturbations Against Visual Object Tracking.
A Fast Saddle-Point Dynamical System Approach to Robust Deep Learning.
2019-10-17
Instance adaptive adversarial training: Improved accuracy tradeoffs in neural nets.
Enforcing Linearity in DNN succours Robustness and Adversarial Image Generation.
LanCe: A Comprehensive and Lightweight CNN Defense Methodology against Physical Adversarial Attacks on Embedded Multimedia Applications.
Adversarial T-shirt! Evading Person Detectors in A Physical World.
2019-10-16
A New Defense Against Adversarial Images: Turning a Weakness into a Strength.
2019-10-15
Improving Robustness of time series classifier with Neural ODE guided gradient based data augmentation.
Understanding Misclassifications by Attributes.
Adversarial Examples for Models of Code.
On adversarial patches: real-world attack on ArcFace-100 face recognition system.
2019-10-14
DeepSearch: Simple and Effective Blackbox Fuzzing of Deep Neural Networks.
Confidence-Calibrated Adversarial Training: Generalizing to Unseen Attacks.
ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimization.
Man-in-the-Middle Attacks against Machine Learning Classifiers via Malicious Generative Models.
Real-world adversarial attack on MTCNN face detection system.
2019-10-12
On Robustness of Neural Ordinary Differential Equations.
2019-10-11
Hear "No Evil", See "Kenansville": Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification Systems.
Verification of Neural Networks: Specifying Global Robustness using Generative Models.
2019-10-10
Universal Adversarial Perturbation for Text Classification.
Information Aware Max-Norm Dirichlet Networks for Predictive Uncertainty Estimation.
2019-10-09
Learning deep forest with multi-scale Local Binary Pattern features for face anti-spoofing.
Adversarial Learning of Deepfakes in Accounting.
Deep Latent Defence.
Adversarial Training: embedding adversarial perturbations into the parameter space of a neural network to build a robust system.
2019-10-08
Directional Adversarial Training for Cost Sensitive Deep Learning Classification Applications.
SmoothFool: An Efficient Framework for Computing Smooth Adversarial Perturbations.
2019-10-07
Interpretable Disentanglement of Neural Networks by Extracting Class-Specific Subnetwork.
2019-10-05
Unrestricted Adversarial Attacks for Semantic Segmentation.
Yet another but more efficient black-box adversarial attack: tiling and evolution strategies.
2019-10-04
Requirements for Developing Robust Neural Networks.
Adversarial Examples for Cost-Sensitive Classifiers.
2019-10-03
Perturbations are not Enough: Generating Adversarial Examples with Spatial Distortions.
BUZz: BUffer Zones for defending adversarial examples in image classification.
Verification of Neural Network Behaviour: Formal Guarantees for Power System Applications.
2019-10-02
Attacking Vision-based Perception in End-to-End Autonomous Driving Models.
Adversarially Robust Few-Shot Learning: A Meta-Learning Approach.
2019-10-01
Boosting Image Recognition with Non-differentiable Constraints.
Generating Semantic Adversarial Examples with Differentiable Rendering.
Attacking CNN-based anti-spoofing face authentication in the physical domain.
An Efficient and Margin-Approaching Zero-Confidence Adversarial Attack.
Cross-Layer Strategic Ensemble Defense Against Adversarial Examples.
Deep Neural Rejection against Adversarial Examples.
2019-09-30
Black-box Adversarial Attacks with Bayesian Optimization.
Min-Max Optimization without Gradients: Convergence and Applications to Adversarial ML.
Role of Spatial Context in Adversarial Robustness for Object Detection.
2019-09-29
Techniques for Adversarial Examples Threatening the Safety of Artificial Intelligence Based Systems.
2019-09-27
Maximal adversarial perturbations for obfuscation: Hiding certain attributes while preserving rest.
Impact of Low-bitwidth Quantization on the Adversarial Robustness for Embedded Neural Networks.
2019-09-26
Towards Understanding the Transferability of Deep Representations.
Adversarial Machine Learning Attack on Modulation Classification.
Adversarial ML Attack on Self Organizing Cellular Networks.
Towards neural networks that provably know when they don't know.
Lower Bounds on Adversarial Robustness from Optimal Transport.
2019-09-25
Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection.
Mixup Inference: Better Exploiting Mixup to Defend Adversarial Attacks.
FreeLB: Enhanced Adversarial Training for Natural Language Understanding.
2019-09-24
A Visual Analytics Framework for Adversarial Text Generation.
Intelligent image synthesis to attack a segmentation CNN using adversarial learning.
Sign-OPT: A Query-Efficient Hard-label Adversarial Attack.
2019-09-23
Adversarial Examples for Deep Learning Cyber Security Analytics.
MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples.
Robust Local Features for Improving the Generalization of Adversarial Training.
2019-09-22
HAWKEYE: Adversarial Example Detector for Deep Neural Networks.
2019-09-20
Adversarial Learning with Margin-based Triplet Embedding Regularization.
COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection.
Defending Against Physically Realizable Attacks on Image Classification.
2019-09-19
Propagated Perturbation of Adversarial Attack for well-known CNNs: Empirical Study and its Explanation.
Adversarial Vulnerability Bounds for Gaussian Process Classification.
Absum: Simple Regularization Method for Reducing Structural Sensitivity of Convolutional Neural Networks.
Training Robust Deep Neural Networks via Adversarial Noise Propagation.
Toward Robust Image Classification.
2019-09-17
Adversarial Attacks and Defenses in Images, Graphs and Text: A Review.
Generating Black-Box Adversarial Examples for Text Classifiers Using a Deep Reinforced Model.
Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges.
2019-09-16
They Might NOT Be Giants: Crafting Black-Box Adversarial Examples with Fewer Queries Using Particle Swarm Optimization.
HAD-GAN: A Human-perception Auxiliary Defense GAN to Defend Adversarial Examples.
Towards Quality Assurance of Software Product Lines with Adversarial Configurations.
Interpreting and Improving Adversarial Robustness with Neuron Sensitivity.
2019-09-15
An Empirical Study towards Characterizing Deep Learning Development and Deployment across Different Frameworks and Platforms.
Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors.
2019-09-14
Natural Language Adversarial Attacks and Defenses in Word Level.
2019-09-13
Adversarial Attack on Skeleton-based Human Action Recognition.
Say What I Want: Towards the Dark Side of Neural Dialogue Models.
White-Box Adversarial Defense via Self-Supervised Data Estimation.
Defending Against Adversarial Attacks by Suppressing the Largest Eigenvalue of Fisher Information Matrix.
2019-09-12
Inspecting adversarial examples using the Fisher information.
An Empirical Investigation of Randomized Defenses against Adversarial Attacks.
Transferable Adversarial Robustness using Adversarially Trained Autoencoders.
2019-09-11
Feedback Learning for Improving the Robustness of Neural Networks.
Sparse and Imperceivable Adversarial Attacks.
2019-09-10
Localized Adversarial Training for Increased Accuracy and Robustness in Image Classification.
Identifying and Resisting Adversarial Videos Using Temporal Consistency.
Effectiveness of Adversarial Examples and Defenses for Malware Classification.
Towards Noise-Robust Neural Networks via Progressive Adversarial Training.
UPC: Learning Universal Physical Camouflage Attacks on Object Detectors.
FDA: Feature Disruptive Attack.
Learning to Disentangle Robust and Vulnerable Features for Adversarial Detection.
Toward Finding The Global Optimal of Adversarial Examples.
2019-09-09
Adversarial Robustness Against the Union of Multiple Perturbation Models.
2019-09-08
STA: Adversarial Attacks on Siamese Trackers.
When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures.
2019-09-06
Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification.
Natural Adversarial Sentence Generation with Gradient-based Perturbation.
Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information.
2019-09-05
Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agents.
Adversarial Examples with Difficult Common Words for Paraphrase Identification.
2019-09-04
Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?
2019-09-03
Certified Robustness to Adversarial Word Substitutions.
Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation.
2019-09-02
Metric Learning for Adversarial Robustness.
2019-08-29
Adversarial Training Methods for Network Embedding.
Deep Neural Network Ensembles against Deception: Ensemble Diversity, Accuracy and Robustness.
Defending Against Misclassification Attacks in Transfer Learning.
Universal, transferable and targeted adversarial attacks.
2019-08-26
A Statistical Defense Approach for Detecting Adversarial Examples.
Gated Convolutional Networks with Hybrid Connectivity for Image Classification.
2019-08-25
Adversarial Edit Attacks for Tree Data.
advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns.
2019-08-24
Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower.
2019-08-23
Improving Adversarial Robustness via Attention and Adversarial Logit Pairing.
AdvHat: Real-world adversarial attack on ArcFace Face ID system.
2019-08-22
Saliency Methods for Explaining Adversarial Attacks.
2019-08-21
Testing Robustness Against Unforeseen Adversaries.
Evaluating Defensive Distillation For Defending Text Processing Neural Networks Against Adversarial Examples.
2019-08-20
Denoising and Verification Cross-Layer Ensemble Against Black-box Adversarial Attacks.
Transferring Robustness for Graph Neural Network Against Poisoning Attacks.
2019-08-19
Universal Adversarial Triggers for NLP.
Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses.
Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries.
2019-08-18
On the Robustness of Human Pose Estimation.
Adversarial Defense by Suppressing High-frequency Components.
2019-08-17
Verification of Neural Network Control Policy Under Persistent Adversarial Perturbation.
Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks.
2019-08-16
Adversarial point perturbations on 3D objects.
2019-08-14
Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once.
AdvFaces: Adversarial Face Synthesis.
DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation.
2019-08-12
On Defending Against Label Flipping Attacks on Malware Detection Systems.
Adversarial Neural Pruning with Latent Vulnerability Suppression.
2019-08-09
On the Adversarial Robustness of Neural Networks without Weight Transport.
2019-08-08
Defending Against Adversarial Iris Examples Using Wavelet Decomposition.
Universal Adversarial Audio Perturbations.
2019-08-07
Improved Adversarial Robustness by Reducing Open Space Risk via Tent Activations.
Investigating Decision Boundaries of Trained Neural Networks.
2019-08-06
Explaining Deep Neural Networks Using Spectrum-Based Fault Localization.
MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks.
BlurNet: Defense by Filtering the Feature Maps.
2019-08-05
Random Directional Attack for Fooling Deep Neural Networks.
Adversarial Self-Defense for Cycle-Consistent GANs.
Automated Detection System for Adversarial Examples with High-Frequency Noises Sieve.
A principled approach for generating adversarial images under non-smooth dissimilarity metrics.
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems.
2019-08-04
A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Models.
2019-08-03
Exploring the Robustness of NMT Systems to Nonsensical Inputs.
2019-08-02
AdvGAN++ : Harnessing latent layers for adversary generation.
2019-08-01
Black-box Adversarial ML Attack on Modulation Classification.
Robustifying deep networks for image segmentation.
2019-07-31
Adversarial Robustness Curves.
Optimal Attacks on Reinforcement Learning Policies.
2019-07-30
Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation.
Not All Adversarial Examples Require a Complex Defense: Identifying Over-optimized Adversarial Examples with IQR-based Logit Thresholding.
2019-07-28
Are Odds Really Odd? Bypassing Statistical Detection of Adversarial Examples.
2019-07-27
Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment.
2019-07-26
Understanding Adversarial Robustness: The Trade-off between Minimum and Average Margin.
On the Design of Black-box Adversarial Examples by Leveraging Gradient-free Optimization and Operator Splitting Method.
2019-07-24
Towards Adversarially Robust Object Detection.
Joint Adversarial Training: Incorporating both Spatial and Pixel Attacks.
Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training.
Weakly Supervised Localization using Min-Max Entropy: an Interpretable Framework.
Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems.
2019-07-23
Enhancing Adversarial Example Transferability with an Intermediate Level Attack.
2019-07-21
Characterizing Attacks on Deep Reinforcement Learning.
2019-07-17
Connecting Lyapunov Control Theory to Adversarial Attacks.
Real-time Evasion Attacks with Physical Constraints on Deep Learning-based Anomaly Detectors in Industrial Control Systems.
Robustness properties of Facebook's ResNeXt WSL models.
2019-07-16
Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods.
Natural Adversarial Examples.
Latent Adversarial Defence with Boundary-guided Generation.
Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving.
Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analytics.
2019-07-15
Graph Interpolating Activation Improves Both Natural and Robust Accuracies in Data-Efficient Deep Learning.
Recovery Guarantees for Compressible Signals with Adversarial Noise.
2019-07-14
Measuring the Transferability of Adversarial Examples.
2019-07-12
Unsupervised Adversarial Attacks on Deep Feature-based Retrieval with GAN.
Stateful Detection of Black-Box Adversarial Attacks.
Generative Modeling by Estimating Gradients of the Data Distribution.
2019-07-11
Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn.
Adversarial Objects Against LiDAR-Based Autonomous Driving Systems.
2019-07-10
Metamorphic Detection of Adversarial Examples in Deep Learning Models With Affine Transformations.
2019-07-09
Generating Adversarial Fragments with Adversarial Networks for Physical-world Implementation.
2019-07-06
Affine Disentangled GAN for Interpretable and Robust AV Perception.
2019-07-05
Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructions.
2019-07-04
Adversarial Robustness through Local Linearization.
Adversarial Attacks in Sound Event Classification.
2019-07-03
Robust Synthesis of Adversarial Visual Examples Using a Deep Image Prior.
Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack.
2019-07-02
Efficient Cyber Attacks Detection in Industrial Control Systems Using Lightweight Neural Networks and PCA.
Treant: Training Evasion-Aware Decision Trees.
2019-07-01
Comment on "Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network".
Diminishing the Effect of Adversarial Perturbations via Refining Feature Representation.
Accurate, reliable and fast robustness evaluation.
2019-06-30
Fooling a Real Car with Adversarial Traffic Signs.
2019-06-28
Using Self-Supervised Learning Can Improve Model Robustness and Uncertainty.
Certifiable Robustness and Robust Training for Graph Convolutional Networks.
Learning to Cope with Adversarial Attacks.
Robustness Guarantees for Deep Neural Networks on Videos.
2019-06-27
Using Intuition from Empirical Properties to Simplify Adversarial Training Defense.
Adversarial Robustness via Label-Smoothing.
Evolving Robust Neural Architectures to Defend from Adversarial Attacks.
2019-06-26
The Adversarial Robustness of Sampling.
Defending Adversarial Attacks by Correcting logits.
2019-06-25
Quantitative Verification of Neural Networks And its Security Applications.
Are Adversarial Perturbations a Showstopper for ML-Based CAD? A Case Study on CNN-Based Lithographic Hotspot Detection.
2019-06-24
Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signals.
2019-06-22
Defending Against Adversarial Examples with K-Nearest Neighbor.
2019-06-21
Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations.
A Fourier Perspective on Model Robustness in Computer Vision.
Evolution Attack On Neural Networks.
Adversarial Examples to Fool Iris Recognition Systems.
A Cyclically-Trained Adversarial Network for Invariant Representation Learning.
2019-06-20
On Physical Adversarial Patches for Object Detection.
2019-06-19
Catfish Effect Between Internal and External Attackers:Being Semi-honest is Helpful.
Improving the robustness of ImageNet classifiers using elements of human visual cognition.
A unified view on differential privacy and robustness to adversarial examples.
Convergence of Adversarial Training in Overparametrized Networks.
Global Adversarial Attacks for Assessing Deep Learning Robustness.
Cloud-based Image Classification Service Is Not Robust To Simple Transformations: A Forgotten Battlefield.
SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing.
2019-06-17
Adversarial attacks on Copyright Detection Systems.
Improving Black-box Adversarial Attacks with a Transfer-based Prior.
The Attack Generator: A Systematic Approach Towards Constructing Adversarial Attacks.
2019-06-16
Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Accuracy.
Defending Against Adversarial Attacks Using Random Forests.
2019-06-15
Representation Quality Of Neural Networks Links To Adversarial Attacks and Defences.
2019-06-14
Adversarial Training Can Hurt Generalization.
Towards Compact and Robust Deep Neural Networks.
Perceptual Based Adversarial Audio Attacks.
Copy and Paste: A Simple But Effective Initialization Method for Black-Box Adversarial Attacks.
Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks.
Towards Stable and Efficient Training of Verifiably Robust Neural Networks.
Adversarial Robustness Assessment: Why both $L_0$ and $L_\infty$ Attacks Are Necessary.
2019-06-13
A Computationally Efficient Method for Defending Adversarial Deep Learning Attacks.
Lower Bounds for Adversarially Robust PAC Learning.
2019-06-12
Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers.
2019-06-11
Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks.
Mimic and Fool: A Task Agnostic Adversarial Attack.
Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks.
2019-06-10
E-LPIPS: Robust Perceptual Image Similarity via Random Transformation Ensembles.
Evaluating the Robustness of Nearest Neighbor Classifiers: A Primal-Dual Perspective.
Robustness Verification of Tree-based Models.
Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective.
2019-06-09
On the Vulnerability of Capsule Networks to Adversarial Attacks.
Intriguing properties of adversarial training.
Improved Adversarial Robustness via Logit Regularization Methods.
Attacking Graph Convolutional Networks via Rewiring.
Towards A Unified Min-Max Framework for Adversarial Exploration and Robustness.
Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers.
2019-06-08
Strategies to architect AI Safety: Defense to guard AI from Adversaries.
Making targeted black-box evasion attacks effective and efficient.
Sensitivity of Deep Convolutional Networks to Gabor Noise.
ML-LOO: Detecting Adversarial Examples with Feature Attribution.
Provably Robust Boosted Decision Stumps and Trees against Adversarial Attacks.
Defending Against Universal Attacks Through Selective Feature Regeneration.
2019-06-07
A cryptographic approach to black box adversarial machine learning.
Using learned optimizers to make models robust to input noise.
Efficient Project Gradient Descent for Ensemble Adversarial Attack.
Inductive Bias of Gradient Descent based Adversarial Training on Separable Data.
Adversarial Explanations for Understanding Image Classification Decisions and Improved Neural Network Robustness.
Robustness for Non-Parametric Classification: A Generic Attack and Defense.
2019-06-06
Robust Attacks against Multiple Classifiers.
Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation.
Understanding Adversarial Behavior of DNNs by Disentangling Non-Robust and Robust Components in Performance Metric.
Should Adversarial Attacks Use Pixel p-Norm?
Image Synthesis with a Single (Robust) Classifier.
2019-06-05
MNIST-C: A Robustness Benchmark for Computer Vision.
Enhancing Gradient-based Attacks with Symbolic Intervals.
Query-efficient Meta Attack to Deep Neural Networks.
Multi-way Encoding for Robustness.
2019-06-04
Adversarial Training is a Form of Data-dependent Operator Norm Regularization.
2019-06-03
Adversarial Exploitation of Policy Imitation.
RL-Based Method for Benchmarking the Adversarial Resilience and Robustness of Deep Reinforcement Learning Policies.
Adversarial Risk Bounds for Neural Networks through Sparsity based Compression.
The Adversarial Machine Learning Conundrum: Can The Insecurity of ML Become The Achilles' Heel of Cognitive Networks?
Adversarial Robustness as a Prior for Learned Representations.
Achieving Generalizable Robustness of Deep Neural Networks by Stability Training.
A Surprising Density of Illusionable Natural Speech.
Fast and Stable Interval Bounds Propagation for Training Verifiably Robust Models.
Understanding the Limitations of Conditional Generative Models.
2019-06-02
Adversarially Robust Generalization Just Requires More Unlabeled Data.
2019-06-01
Adversarial Examples for Edge Detection: They Exist, and They Transfer.
Perceptual Evaluation of Adversarial Attacks for CNN-based Image Classification.
Enhancing Transformation-based Defenses using a Distribution Classifier.
2019-05-31
Unlabeled Data Improves Adversarial Robustness.
Reverse KL-Divergence Training of Prior Networks: Improved Uncertainty and Adversarial Robustness.
Are Labels Required for Improving Adversarial Robustness?
2019-05-30
Real-Time Adversarial Attacks.
Residual Networks as Nonlinear Systems: Stability Analysis using Linearization.
Identifying Classes Susceptible to Adversarial Attacks.
Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness.
Interpretable Adversarial Training for Text.
2019-05-29
Bandlimiting Neural Networks Against Adversarial Attacks.
Misleading Authorship Attribution of Source Code using Adversarial Learning.
Securing Connected & Autonomous Vehicles: Challenges Posed by Adversarial Machine Learning and The Way Forward.
Functional Adversarial Attacks.
CopyCAT: Taking Control of Neural Policies with Constant Attacks.
2019-05-28
ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation.
Adversarial Attacks on Remote User Authentication Using Behavioural Mouse Dynamics.
Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss.
Snooping Attacks on Deep Reinforcement Learning.
Probabilistically True and Tight Bounds for Robust Deep Neural Network Training.
High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks.
Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness.
Cross-Domain Transferability of Adversarial Perturbations.
Certifiably Robust Interpretation in Deep Learning.
2019-05-27
Brain-inspired reverse adversarial examples.
Label Universal Targeted Attack.
Divide-and-Conquer Adversarial Detection.
Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking.
Provable robustness against all adversarial $l_p$-perturbations for $p\geq 1$.
Scaleable input gradient regularization for adversarial robustness.
Combating Adversarial Misspellings with Robust Word Recognition.
Analyzing the Interpretability Robustness of Self-Explaining Models.
Adversarially Robust Learning Could Leverage Computational Hardness.
Unsupervised Euclidean Distance Attack on Network Embedding.
2019-05-26
State-Reification Networks: Improving Generalization by Modeling the Distribution of Hidden Representations.
Non-Determinism in Neural Networks for Adversarial Robustness.
Purifying Adversarial Perturbation with Adversarially Trained Auto-encoders.
Rearchitecting Classification Frameworks For Increased Robustness.
Robust Classification using Robust Feature Augmentation.
Generalizable Adversarial Attacks Using Generative Models.
2019-05-25
Trust but Verify: An Information-Theoretic Explanation for the Adversarial Fragility of Machine Learning Systems, and a General Defense against Adversarial Attacks.
Adversarial Distillation for Ordered Top-k Attacks.
Adversarial Policies: Attacking Deep Reinforcement Learning.
Rethinking Softmax Cross-Entropy Loss for Adversarial Robustness.
2019-05-24
Robustness to Adversarial Perturbations in Learning from Incomplete Data.
Power up! Robust Graph Convolutional Network against Evasion Attacks based on Graph Powering.
Enhancing Adversarial Defense by k-Winners-Take-All.
2019-05-23
A Direct Approach to Robust Deep Learning Using Adversarial Networks.
PHom-GeM: Persistent Homology for Generative Models.
Thwarting finite difference adversarial attacks with output randomization.
Interpreting Adversarially Trained Convolutional Neural Networks.
Adversarially Robust Distillation.
2019-05-22
Convergence and Margin of Adversarial Training on Separable Data.
Detecting Adversarial Examples and Other Misclassifications in Neural Networks by Introspection.
2019-05-21
DoPa: A Fast and Comprehensive CNN Defense Methodology against Physical Adversarial Attacks.
2019-05-20
Adversarially robust transfer learning.
2019-05-19
Testing DNN Image Classifiers for Confusion & Bias Errors.
2019-05-18
What Do Adversarially Robust Models Look At?
Taking Care of The Discretization Problem:A Black-Box Adversarial Image Attack in Discrete Integer Domain.
2019-05-17
POPQORN: Quantifying Robustness of Recurrent Neural Networks.
A critique of the DeepSec Platform for Security Analysis of Deep Learning Models.
Simple Black-box Adversarial Attacks.
2019-05-16
Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization.
2019-05-15
On Norm-Agnostic Robustness of Adversarial Training.
An Efficient Pre-processing Method to Eliminate Adversarial Effects.
2019-05-14
Robustification of deep net classifiers by key based diversified aggregation with pre-filtering.
2019-05-13
Adversarial Examples for Electrocardiograms.
Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networks.
Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models.
2019-05-11
Moving Target Defense for Deep Visual Sensing against Adversarial Examples.
2019-05-10
Interpreting and Evaluating Neural Network Robustness.
On the Connection Between Adversarial Robustness and Saliency Map Interpretability.
Exact Adversarial Attack to Image Captioning via Structured Output Learning with Latent Variables.
2019-05-09
Adversarial Defense Framework for Graph Neural Network.
Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain.
Exploring the Hyperparameter Landscape of Adversarial Robustness.
Learning Interpretable Features via Adversarially Robust Optimization.
Universal Adversarial Perturbations for Speech Recognition Systems.
2019-05-08
ROSA: Robust Salient Object Detection against Adversarial Attacks.
Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction.
Adversarial Image Translation: Unrestricted Adversarial Examples in Face Recognition Systems.
2019-05-07
A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks.
Representation of White- and Black-Box Adversarial Examples in Deep Neural Networks and Humans: A Functional Magnetic Resonance Imaging Study.
An Empirical Evaluation of Adversarial Robustness under Transfer Learning.
Adaptive Generation of Unrestricted Adversarial Inputs.
2019-05-06
Batch Normalization is a Cause of Adversarial Vulnerability.
Adversarial Examples Are Not Bugs, They Are Features.
2019-05-05
Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples.
2019-05-03
Transfer of Adversarial Robustness Between Perturbation Types.
2019-05-02
Adversarial Training with Voronoi Constraints.
Weight Map Layer for Noise and Adversarial Attack Robustness.
You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle.
2019-05-01
POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm.
Dropping Pixels for Adversarial Robustness.
NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks.
2019-04-30
Test Selection for Deep Learning Systems.
Detecting Adversarial Examples through Nonlinear Dimensionality Reduction.
2019-04-29
Adversarial Training for Free!
Adversarial Training and Robustness for Multiple Perturbations.
2019-04-27
Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks.
2019-04-26
Robustness Verification of Support Vector Machines.
2019-04-24
A Robust Approach for Securing Audio Classification Against Adversarial Attacks.
Physical Adversarial Textures that Fool Visual Object Tracking.
2019-04-23
Minimizing Perceived Image Quality Loss Through Adversarial Attack Scoping.
2019-04-22
blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness.
Using Videos to Evaluate Image Model Robustness.
2019-04-21
Beyond Explainability: Leveraging Interpretability for Improved Adversarial Learning.
2019-04-20
Can Machine Learning Model with Static Features be Fooled: an Adversarial Machine Learning Approach.
2019-04-19
Salient Object Detection in the Deep Learning Era: An In-Depth Survey.
2019-04-18
Fooling automated surveillance cameras: adversarial patches to attack person detection.
2019-04-17
ZK-GanDef: A GAN based Zero Knowledge Adversarial Training Defense for Neural Networks.
Defensive Quantization: When Efficiency Meets Robustness.
Interpreting Adversarial Examples with Attributes.
Adversarial Defense Through Network Profiling Based Path Extraction.
Gotta Catch 'Em All: Using Concealed Trapdoors to Detect Adversarial Attacks on Neural Networks.
Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers.
2019-04-16
Reducing Adversarial Example Transferability Using Gradient Regularization.
AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples.
2019-04-15
Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction.
Influence of Control Parameters and the Size of Biomedical Image Datasets on the Success of Adversarial Attacks.
2019-04-13
Exploiting Vulnerabilities of Load Forecasting Through Adversarial Attacks.
2019-04-12
Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense.
Generating Minimal Adversarial Perturbations with Integrated Adaptive Gradients.
Evaluating Robustness of Deep Image Super-Resolution against Adversarial Attacks.
Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks.
Unrestricted Adversarial Examples via Semantic Manipulation.
2019-04-11
Black-Box Decision based Adversarial Attack with Symmetric $\alpha$-stable Distribution.
2019-04-10
Learning to Generate Synthetic Data via Compositing.
Black-box Adversarial Attacks on Video Recognition Models.
2019-04-09
Generation & Evaluation of Adversarial Examples for Malware Obfuscation.
2019-04-08
Efficient Decision-based Black-box Adversarial Attacks on Face Recognition.
A Target-Agnostic Attack on Deep Models: Exploiting Security Vulnerabilities of Transfer Learning.
2019-04-07
JumpReLU: A Retrofit Defense Strategy for Adversarial Attacks.
Malware Evasion Attack and Defense.
2019-04-06
On Training Robust PDF Malware Classifiers.
2019-04-05
Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks.
2019-04-04
Minimum Uncertainty Based Detection of Adversaries in Deep Neural Networks.
White-to-Black: Efficient Distillation of Black-Box Adversarial Attacks.
2019-04-03
Understanding the efficacy, reliability and resiliency of computer vision techniques for malware detection and future research directions.
Interpreting Adversarial Examples by Activation Promotion and Suppression.
HopSkipJumpAttack: A Query-Efficient Decision-Based Attack.
Summit: Scaling Deep Learning Interpretability by Visualizing Activation and Attribution Summarizations.
2019-04-02
Adversarial Attacks against Deep Saliency Models.
2019-04-01
Curls & Whey: Boosting Black-Box Adversarial Attacks.
Robustness of 3D Deep Learning in an Adversarial Setting.
Defending against adversarial attacks by randomized diversification.
Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks.
Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses.
2019-03-31
On the Vulnerability of CNN Classifiers in EEG-Based BCIs.
2019-03-29
Adversarial Robustness vs Model Compression, or Both?
2019-03-28
Benchmarking Neural Network Robustness to Common Corruptions and Perturbations.
Smooth Adversarial Examples.
2019-03-27
Rallying Adversarial Techniques against Deep Learning for Network Security.
Bridging Adversarial Robustness and Gradient Interpretability.
Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks.
Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systems.
2019-03-26
On the Adversarial Robustness of Multivariate Robust Estimation.
A geometry-inspired decision-based attack.
2019-03-25
Defending against Whitebox Adversarial Attacks via Randomized Discretization.
Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness.
The LogBarrier adversarial attack: making effective use of decision boundary information.
Robust Neural Networks using Randomized Adversarial Training.
2019-03-24
A Formalization of Robustness for Deep Neural Networks.
Variational Inference with Latent Space Quantization for Adversarial Resilience.
2019-03-23
Improving Adversarial Robustness via Guided Complement Entropy.
2019-03-22
Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition.
2019-03-21
Adversarial camera stickers: A physical camera-based attack on deep learning systems.
2019-03-20
Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes.
2019-03-19
On the Robustness of Deep K-Nearest Neighbors.
2019-03-18
Generating Adversarial Examples With Conditional Generative Adversarial Net.
Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems.
2019-03-17
Adversarial Attacks on Deep Neural Networks for Time Series Classification.
2019-03-15
On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Models.
On Certifying Non-uniform Bound against Adversarial Attacks.
2019-03-14
A Research Agenda: Dynamic Models to Defend Against Correlated Attacks.
Attribution-driven Causal Analysis for Detection of Adversarial Examples.
2019-03-13
Adversarial attacks against Fact Extraction and VERification.
2019-03-12
Simple Physical Adversarial Examples against End-to-End Autonomous Driving Models.
2019-03-11
Can Adversarial Network Attack be Defended?
2019-03-09
Manifold Preserving Adversarial Learning.
2019-03-07
Attack Type Agnostic Perceptual Enhancement of Adversarial Images.
Out-domain examples for generative models.
2019-03-06
GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier.
2019-03-05
Statistical Guarantees for the Robustness of Bayesian Neural Networks.
L 1-norm double backpropagation adversarial defense.
2019-03-04
Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search.
The Vulnerabilities of Graph Convolutional Networks: Stronger Attacks and Defensive Techniques.
Complement Objective Training.
Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming.
2019-03-03
A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations.
2019-03-01
Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications.
PuVAE: A Variational Autoencoder to Purify Adversarial Examples.
Attacking Graph-based Classification via Manipulating the Graph Structure.
2019-02-28
On the Effectiveness of Low Frequency Perturbations.
Enhancing the Robustness of Deep Neural Networks by Boundary Conditional GAN.
Towards Understanding Adversarial Examples Systematically: Exploring Data Size, Task and Model Factors.
Adversarial Attack and Defense on Point Sets.
2019-02-27
Stochastically Rank-Regularized Tensor Regression Networks.
Adversarial Attacks on Time Series.
Robust Decision Trees Against Adversarial Examples.
The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection.
2019-02-26
Disentangled Deep Autoencoding Regularization for Robust Image Classification.
Analyzing Deep Neural Networks with Symbolic Propagation: Towards Higher Precision and Faster Verification.
2019-02-25
Verification of Non-Linear Specifications for Neural Networks.
Adversarial attacks hidden in plain sight.
2019-02-24
MaskDGA: A Black-box Evasion Technique Against DGA Classifiers and Adversarial Defenses.
Adversarial Reinforcement Learning under Partial Observability in Software-Defined Networking.
2019-02-23
Re-evaluating ADEM: A Deeper Look at Scoring Dialogue Responses.
A Deep, Information-theoretic Framework for Robust Biometric Recognition.
2019-02-22
Adversarial Attacks on Graph Neural Networks via Meta Learning.
Physical Adversarial Attacks Against End-to-End Autoencoder Communication Systems.
A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks.
2019-02-21
On the Sensitivity of Adversarial Robustness to Input Data Distributions.
Quantifying Perceptual Distortion of Adversarial Examples.
Wasserstein Adversarial Examples via Projected Sinkhorn Iterations.
2019-02-20
advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch.
Perceptual Quality-preserving Black-Box Attack against Deep Learning Image Classifiers.
Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure.
2019-02-19
There are No Bit Parts for Sign Bits in Black-Box Attacks.
2019-02-18
On Evaluating Adversarial Robustness.
AuxBlocks: Defense Adversarial Example via Auxiliary Blocks.
Mockingbird: Defending Against Deep-Learning-Based Website Fingerprinting Attacks with Adversarial Traces.
2019-02-16
Mitigation of Adversarial Examples in RF Deep Classifiers Utilizing AutoEncoder Pre-training.
Adversarial Examples in RF Deep Learning: Detection of the Attack and its Physical Robustness.
2019-02-15
DeepFault: Fault Localization for Deep Neural Networks.
2019-02-14
Can Intelligent Hyperparameter Selection Improve Resistance to Adversarial Examples?
2019-02-13
The Odds are Odd: A Statistical Test for Detecting Adversarial Examples.
2019-02-12
Examining Adversarial Learning against Graph-based IoT Malware Detection Systems.
2019-02-11
Adversarial Samples on Android Malware Detection Systems for IoT Systems.
A Survey: Towards a Robust Deep Neural Network in Text Domain.
2019-02-09
Model Compression with Adversarial Robustness: A Unified Optimization Framework.
When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networks.
2019-02-08
Minimal Images in Deep Neural Networks: Fragile Object Recognition in Natural Images.
Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis.
Discretization based Solutions for Secure Machine Learning against Adversarial Attacks.
2019-02-07
Robustness Of Saak Transform Against Adversarial Attacks.
Certified Adversarial Robustness via Randomized Smoothing.
2019-02-06
Fooling Neural Network Interpretations via Adversarial Model Manipulation.
Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples.
2019-02-05
Fatal Brain Damage.
2019-02-04
Theoretical evidence for adversarial robustness through randomization.
Predictive Uncertainty Quantification with Compound Density Networks.
Is Spiking Secure? A Comparative Study on the Security Vulnerabilities of Spiking and Deep Neural Networks.
2019-02-01
Robustness Certificates Against Adversarial Examples for ReLU Networks.
Natural and Adversarial Error Detection using Invariance to Image Transformations.
Adaptive Gradient for Adversarial Perturbations Generation.
Robustness of Generalized Learning Vector Quantization Models against Adversarial Attacks.
The Efficacy of SHIELD under Different Threat Models.
2019-01-31
A New Family of Neural Networks Provably Resistant to Adversarial Attacks.
Training Artificial Neural Networks by Generalized Likelihood Ratio Method: Exploring Brain-like Learning to Improve Robustness.
2019-01-30
A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance.
Augmenting Model Robustness with Transformation-Invariant Attacks.
2019-01-29
Metric Attack and Defense for Person Re-identification.
Adversarial Examples Are a Natural Consequence of Test Error in Noise.
On the Effect of Low-Rank Weights on Adversarial Robustness of Neural Networks.
RED-Attack: Resource Efficient Decision based Attack for Machine Learning.
Reliable Smart Road Signs.
2019-01-28
Improving Adversarial Robustness of Ensembles with Diversity Training.
CapsAttacks: Robust and Imperceptible Adversarial Attacks on Capsule Networks.
Defense Methods Against Adversarial Examples for Recurrent Neural Networks.
Using Pre-Training Can Improve Model Robustness and Uncertainty.
2019-01-27
An Information-Theoretic Explanation for the Adversarial Fragility of AI Classifiers.
Characterizing the Shape of Activation Space in Deep Neural Networks.
Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models.
2019-01-26
A Black-box Attack on Neural Networks Based on Swarm Evolutionary Algorithm.
Weighted-Sampling Audio Adversarial Example Attack.
2019-01-25
Generative Adversarial Networks for Black-Box API Attacks with Limited Training Data.
Improving Adversarial Robustness via Promoting Ensemble Diversity.
2019-01-24
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples.
Theoretically Principled Trade-off between Robustness and Accuracy.
2019-01-23
SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systems.
Sitatapatra: Blocking the Transfer of Adversarial Samples.
2019-01-21
Universal Rules for Fooling Deep Neural Networks based Text Classification.
Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey.
Sensitivity Analysis of Deep Neural Networks.
Perception-in-the-Loop Adversarial Examples.
2019-01-17
Easy to Fool? Testing the Anti-evasion Capabilities of PDF Malware Scanners.
2019-01-15
The Limitations of Adversarial Training and the Blind-Spot Attack.
2019-01-13
Generating Adversarial Perturbation with Root Mean Square Gradient.
2019-01-12
ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System.
2019-01-11
Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries.
2019-01-10
Characterizing and evaluating adversarial examples for Offline Handwritten Signature Verification.
Image Transformation can make Neural Networks more robust against Adversarial Examples.
2019-01-09
Extending Adversarial Attacks and Defenses to Deep 3D Point Cloud Classifiers.
2019-01-08
Interpretable BoW Networks for Adversarial Example Detection.
2019-01-07
Image Super-Resolution as a Defense Against Adversarial Attacks.
2019-01-05
Fake News Detection via NLP is Vulnerable to Adversarial Attacks.
2019-01-04
Adversarial Examples Versus Cloud-based Detectors: A Black-box Empirical Study.
2019-01-02
Multi-Label Adversarial Perturbations.
Adversarial Robustness May Be at Odds With Simplicity.
2019-01-01
A Noise-Sensitivity-Analysis-Based Test Prioritization Technique for Deep Neural Networks.
2018-12-27
DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems.
2018-12-26
Adversarial Attack and Defense on Graph Data: A Survey.
2018-12-25
A Data-driven Adversarial Examples Recognition Framework via Adversarial Feature Genome.
Noise Flooding for Detecting Audio Adversarial Examples Against Automatic Speech Recognition.
PPD: Permutation Phase Defense Against Adversarial Examples in Deep Learning.
A Multiversion Programming Inspired Approach to Detecting Audio Adversarial Examples.
Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors.
2018-12-24
DUP-Net: Denoiser and Upsampler Network for 3D Adversarial Point Clouds Defense.
2018-12-23
Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks.
Markov Game Modeling of Moving Target Defense for Strategic Detection of Threats in Cloud Networks.
2018-12-22
Exploiting the Inherent Limitation of L0 Adversarial Examples.
2018-12-21
Dissociable neural representations of adversarially perturbed images in convolutional neural networks and the human brain.
2018-12-19
Enhancing Robustness of Deep Neural Networks Against Adversarial Malware Samples: Principles, Framework, and AICS'2019 Challenge.
2018-12-18
PROVEN: Certifying Robustness of Neural Networks with a Probabilistic Approach.
2018-12-17
Spartan Networks: Self-Feature-Squeezing Neural Networks for increased robustness in adversarial settings.
Designing Adversarially Resilient Classifiers using Resilient Feature Engineering.
A Survey of Safety and Trustworthiness of Deep Neural Networks.
2018-12-16
Defense-VAE: A Fast and Accurate Defense against Adversarial Attacks.
2018-12-15
Perturbation Analysis of Learning Algorithms: A Unifying Perspective on Generation of Adversarial Examples.
Trust Region Based Adversarial Attack on Neural Networks.
2018-12-14
Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing.
2018-12-13
TextBugger: Generating Adversarial Text Against Real-world Applications.
Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem.
2018-12-12
Thwarting Adversarial Examples: An $L_0$-RobustSparse Fourier Transform.
2018-12-11
On the Security of Randomized Defenses Against Adversarial Samples.
Adversarial Framing for Image and Video Classification.
2018-12-10
Defending Against Universal Perturbations With Shared Adversarial Training.
2018-12-08
Feature Denoising for Improving Adversarial Robustness.
AutoGAN: Robust Classifier Against Adversarial Attacks.
Detecting Adversarial Examples in Convolutional Neural Networks.
Learning Transferable Adversarial Examples via Ghost Networks.
2018-12-07
Deep-RBF Networks Revisited: Robust Classification with Rejection.
Combatting Adversarial Attacks through Denoising and Dimensionality Reduction: A Cascaded Autoencoder Approach.
2018-12-06
Adversarial Defense of Image Classification Using a Variational Auto-Encoder.
Adversarial Attacks, Regression, and Numerical Stability Regularization.
Prior Networks for Detection of Adversarial Attacks.
Towards Leveraging the Information of Gradients in Optimization-based Adversarial Attack.
Fooling Network Interpretation in Image Classification.
The Limitations of Model Uncertainty in Adversarial Settings.
MMA Training: Direct Input Space Margin Maximization through Adversarial Training.
2018-12-05
On Configurable Defense against Adversarial Example Attacks.
Regularized Ensembles and Transferability in Adversarial Learning.
SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications.
2018-12-04
Rigorous Agent Evaluation: An Adversarial Approach to Uncover Catastrophic Failures.
Random Spiking and Systematic Evaluation of Defenses Against Adversarial Examples.
2018-12-03
Disentangling Adversarial Robustness and Generalization.
Interpretable Deep Learning under Fire.
Adversarial Example Decomposition.
2018-12-02
Model-Reuse Attacks on Deep Learning Systems.
Universal Perturbation Attack Against Image Retrieval.
2018-12-01
FineFool: Fine Object Contour Attack via Attention.
Building robust classifiers through generation of confident out of distribution examples.
Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classification.
Effects of Loss Functions And Target Representations on Adversarial Robustness.
SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems.
2018-11-30
Transferable Adversarial Attacks for Image and Video Object Detection.
ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples.
Adversarial Defense by Stratified Convolutional Sparse Coding.
2018-11-29
CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks.
Bayesian Adversarial Spheres: Bayesian Inference and Adversarial Examples in a Noiseless Setting.
Adversarial Examples as an Input-Fault Tolerance Problem.
Analyzing Federated Learning through an Adversarial Lens.
2018-11-28
Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers.
Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects.
A randomized gradient-free attack on ReLU networks.
Adversarial Machine Learning And Speech Emotion Recognition: Utilizing Generative Adversarial Networks For Robustness.
2018-11-27
Robust Classification of Financial Risk.
Universal Adversarial Training.
Using Attribution to Decode Dataset Bias in Neural Network Models for Chemistry.
A Frank-Wolfe Framework for Efficient and Effective Adversarial Attacks.
2018-11-26
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies.
Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks.
2018-11-25
Is Data Clustering in Adversarial Settings Secure?
2018-11-24
Attention, Please! Adversarial Defense via Attention Rectification and Preservation.
2018-11-23
Robustness via curvature regularization, and vice versa.
Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses.
2018-11-22
Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack.
Strength in Numbers: Trading-off Robustness and Computation via Adversarially-Trained Ensembles.
Detecting Adversarial Perturbations Through Spatial Behavior in Activation Spaces.
2018-11-21
Task-generalizable Adversarial Attack based on Perceptual Metric.
Towards Robust Neural Networks with Lipschitz Continuity.
2018-11-20
How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples.
MimicGAN: Corruption-Mimicking for Blind Image Recovery & Adversarial Defense.
Intermediate Level Adversarial Attack for Enhanced Transferability.
Lightweight Lipschitz Margin Training for Certified Defense against Adversarial Examples.
Convolutional Neural Networks with Transformed Input based on Robust Tensor Network Decomposition.
2018-11-19
Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding.
2018-11-18
Generalizable Adversarial Training via Spectral Normalization.
Regularized adversarial examples for model interpretability.
The Taboo Trap: Behavioural Detection of Adversarial Samples.
2018-11-17
DeepConsensus: using the consensus of features from multiple layers to attain robust image classification.
Classifiers Based on Deep Sparse Coding Architectures are Robust to Deep Learning Transferable Examples.
Boosting the Robustness Verification of DNN by Identifying the Achilles's Heel.
2018-11-16
Protecting Voice Controlled Systems Using Sound Source Identification Based on Acoustic Cues.
DARCCC: Detecting Adversaries by Reconstruction from Class Conditional Capsules.
2018-11-15
A Spectral View of Adversarially Robust Features.
A note on hyperparameters in black-box adversarial examples.
Mathematical Analysis of Adversarial Attacks.
Adversarial Examples from Cryptographic Pseudo-Random Generators.
2018-11-14
Verification of Recurrent Neural Networks Through Rule Extraction.
Robustness of spectral methods for community detection.
2018-11-13
Deep Q learning for fooling neural networks.
2018-11-08
Universal Decision-Based Black-Box Perturbations: Breaking Security-Through-Obscurity Defenses.
New CleverHans Feature: Better Adversarial Robustness Evaluations with Attack Bundling.
A Geometric Perspective on the Transferability of Adversarial Directions.
2018-11-07
CAAD 2018: Iterative Ensemble Adversarial Attack.
AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning.
2018-11-06
MixTrain: Scalable Training of Verifiably Robust Neural Networks.
SparseFool: a few pixels make a big difference.
2018-11-05
Active Deep Learning Attacks under Strict Rate Limitations for Online API Calls.
FUNN: Flexible Unsupervised Neural Network.
On the Transferability of Adversarial Examples Against CNN-Based Image Forensics.
2018-11-04
FAdeML: Understanding the Impact of Pre-Processing Noise Filtering on Adversarial Machine Learning.
QuSecNets: Quantization-based Defense Mechanism for Securing Deep Neural Network against Adversarial Attacks.
SSCNets: Robustifying DNNs using Secure Selective Convolutional Filters.
2018-11-03
Adversarial Gain.
CAAD 2018: Powerful None-Access Black-Box Attack Based on Adversarial Transformation Network.
Adversarial Black-Box Attacks on Automatic Speech Recognition Systems using Multi-Objective Evolutionary Optimization.
Learning to Defense by Learning to Attack.
2018-11-02
A Marauder's Map of Security and Privacy in Machine Learning.
Semidefinite relaxations for certifying robustness to adversarial examples.
Efficient Neural Network Robustness Certification with General Activation Functions.
Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks.
TrISec: Training Data-Unaware Imperceptible Security Attacks on Deep Neural Networks.
2018-11-01
Improving Adversarial Robustness by Encouraging Discriminative Features.
On the Geometry of Adversarial Examples.
Excessive Invariance Causes Adversarial Vulnerability.
2018-10-31
When Not to Classify: Detection of Reverse Engineering Attacks on DNN Image Classifiers.
Reversible Adversarial Examples.
2018-10-30
Improved Network Robustness with Adversary Critic.
On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models.
2018-10-29
Adversarial Risk and Robustness: General Definitions and Implications for the Uniform Distribution.
Logit Pairing Methods Can Fool Gradient-Based Attacks.
2018-10-28
RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applications.
Rademacher Complexity for Adversarially Robust Generalization.
Robust Audio Adversarial Example for a Physical Attack.
2018-10-27
Towards Robust Deep Neural Networks.
Regularization Effect of Fast Gradient Sign Method and its Generalization.
2018-10-26
Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples.
2018-10-25
Law and Adversarial Machine Learning.
Attack Graph Convolutional Networks by Adding Fake Nodes.
Evading classifiers in discrete domains with provable optimality guarantees.
2018-10-24
Robust Adversarial Learning via Sparsifying Front Ends.
2018-10-23
Stochastic Substitute Training: A Gray-box Approach to Craft Adversarial Examples Against Gradient Obfuscation Defenses.
One Bit Matters: Understanding Adversarial Examples as the Abuse of Redundancy.
Et Tu Alexa? When Commodity WiFi Devices Turn into Adversarial Motion Sensors.
2018-10-22
Adversarial Risk Bounds via Function Transformation.
Cost-Sensitive Robustness against Adversarial Examples.
Sparse DNNs with Improved Adversarial Robustness.
2018-10-19
On Extensions of CLEVER: A Neural Network Robustness Evaluation Algorithm.
2018-10-18
Exploring Adversarial Examples in Malware Detection.
A Training-based Identification Approach to VIN Adversarial Examples.
2018-10-17
Provable Robustness of ReLU networks via Maximization of Linear Regions.
2018-10-16
Projecting Trouble: Light Based Adversarial Attacks on Deep Learning Classifiers.
Security Matters: A Survey on Adversarial Machine Learning.
2018-10-15
Concise Explanations of Neural Networks using Adversarial Training.
2018-10-11
Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation.
MeshAdv: Adversarial Meshes for Visual Recognition.
2018-10-09
Is PGD-Adversarial Training Necessary? Alternative Training via a Soft-Quantization Network with Noisy-Natural Samples Only.
Analyzing the Noise Robustness of Deep Neural Networks.
The Adversarial Attack and Detection under the Fisher Information Metric.
2018-10-08
Limitations of adversarial robustness: strong No Free Lunch Theorem.
Efficient Two-Step Adversarial Defense for Deep Neural Networks.
Combinatorial Attacks on Binarized Neural Networks.
Average Margin Regularization for Classifiers.
2018-10-04
Improved Generalization Bounds for Robust Learning.
Feature Prioritization and Regularization Improve Standard Accuracy and Adversarial Robustness.
2018-10-02
Can Adversarially Robust Learning Leverage Computational Hardness?
Adversarial Examples - A Complete Characterisation of the Phenomenon.
Link Prediction Adversarial Attack.
2018-10-01
Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network.
Improving the Generalization of Adversarial Training with Domain Adaptation.
Large batch size training of neural networks with adversarial training and second-order information.
Improved robustness to adversarial examples using Lipschitz regularization of the loss.
2018-09-30
Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Convolutional Networks.
2018-09-29
CAAD 2018: Generating Transferable Adversarial Examples.
Interpreting Adversarial Robustness: A View from Decision Surface in Input Space.
To compress or not to compress: Understanding the Interactions between Adversarial Attacks and Neural Network Compression.
2018-09-28
Characterizing Audio Adversarial Examples Using Temporal Dependency.
Adversarial Attacks and Defences: A Survey.
Explainable Black-Box Attacks Against Model-based Authentication.
2018-09-26
Adversarial Attacks on Cognitive Self-Organizing Networks: The Challenge and the Way Forward.
2018-09-24
Neural Networks with Structural Resistance to Adversarial Attacks.
Fast Geometrically-Perturbed Adversarial Faces.
On The Utility of Conditional Generation Based Mutual Information for Characterizing Adversarial Subspaces.
Low Frequency Adversarial Perturbation.
2018-09-23
Is Ordered Weighted $\ell_1$ Regularized Regression Robust to Adversarial Perturbation? A Case Study on OSCAR.
2018-09-22
Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization.
2018-09-21
Unrestricted Adversarial Examples.
Adversarial Binaries for Authorship Identification.
2018-09-20
Playing the Game of Universal Adversarial Perturbations.
2018-09-19
Efficient Formal Safety Analysis of Neural Networks.
Adversarial Training Towards Robust Multimedia Recommender System.
Generating 3D Adversarial Point Clouds.
2018-09-17
HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware Samples.
Robustness Guarantees for Bayesian Inference with Gaussian Processes.
2018-09-16
Exploring the Vulnerability of Single Shot Module in Object Detectors via Imperceptible Background Patches.
Robust Adversarial Perturbation on Deep Proposal-based Models.
2018-09-13
Defensive Dropout for Hardening Deep Neural Networks under Adversarial Attacks.
Query-Efficient Black-Box Attack by Active Learning.
Adversarial Examples: Opportunities and Challenges.
2018-09-11
On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions.
Isolated and Ensemble Audio Preprocessing Methods for Detecting Adversarial Examples against Automatic Speech Recognition.
Humans can decipher adversarial images.
2018-09-09
The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure.
Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability.
Certified Adversarial Robustness with Additive Noise.
2018-09-08
Towards Query Efficient Black-box Attacks: An Input-free Perspective.
Fast Gradient Attack on Network Embedding.
Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples.
Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks.
2018-09-07
Open Set Adversarial Examples.
A Deeper Look at 3D Shape Classifiers.
Metamorphic Relation Based Adversarial Attacks on Differentiable Neural Computer.
Trick Me If You Can: Human-in-the-loop Generation of Adversarial Examples for Question Answering.
2018-09-06
Adversarial Over-Sensitivity and Over-Stability Strategies for Dialogue Models.
Are adversarial examples inevitable?
IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection.
Adversarial Reprogramming of Text Classification Neural Networks.
2018-09-05
Bridging machine learning and cryptography in defence against adversarial attacks.
2018-09-04
Adversarial Attacks on Node Embeddings.
2018-09-03
HASP: A High-Performance Adaptive Mobile Security Enhancement Against Malicious Speech Recognition.
Adversarial Attack Type I: Cheat Classifiers by Significant Changes.
2018-08-31
MULDEF: Multi-model-based Defense Against Adversarial Examples for Neural Networks.
2018-08-28
DLFuzz: Differential Fuzzing Testing of Deep Learning Systems.
All You Need is "Love": Evading Hate-speech Detection.
Lipschitz regularized Deep Neural Networks generalize and are adversarially robust.
2018-08-27
Targeted Nonlinear Adversarial Perturbations in Images and Videos.
Generalisation in humans and deep neural networks.
2018-08-26
Adversarially Regularising Neural NLI Models to Integrate Logical Background Knowledge.
2018-08-25
Guiding Deep Learning System Testing using Surprise Adequacy.
Analysis of adversarial attacks against CNN-based image forgery detectors.
2018-08-24
Is Machine Learning in Power Systems Vulnerable?
2018-08-23
Maximal Jacobian-based Saliency Map Attack.
Adversarial Attacks on Deep-Learning Based Radio Signal Classification.
2018-08-20
Controlling Over-generalization and its Effect on Adversarial Examples Generation and Detection.
Stochastic Combinatorial Ensembles for Defending Against Adversarial Examples.
2018-08-17
Reinforcement Learning for Autonomous Defence in Software-Defined Networking.
2018-08-16
Mitigation of Adversarial Attacks through Embedded Feature Selection.
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding.
Distributionally Adversarial Attack.
2018-08-10
Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection.
Using Randomness to Improve Robustness of Machine-Learning Models Against Evasion Attacks.
2018-08-08
Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically Differentiable Renderer.
2018-08-07
Data augmentation using synthetic data for time series classification with deep residual networks.
2018-08-06
Adversarial Vision Challenge.
Defense Against Adversarial Attacks with Saak Transform.
Gray-box Adversarial Training.
2018-08-05
Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models.
Structured Adversarial Attack: Towards General Implementation and Better Interpretability.
2018-08-04
Traits & Transferability of Adversarial Examples against Instance Segmentation & Object Detection.
ATMPA: Attacking Machine Learning-based Malware Visualization Detection Methods via Adversarial Examples.
2018-08-03
Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressions.
DeepCloak: Adversarial Crafting As a Defensive Measure to Cloak Processes.
2018-07-31
EagleEye: Attack-Agnostic Defense against Adversarial Inputs (Technical Report).
2018-07-27
Rob-GAN: Generator, Discriminator, and Adversarial Attacker.
2018-07-26
A general metric for identifying adversarial images.
Evaluating and Understanding the Robustness of Adversarial Logit Pairing.
2018-07-25
HiDDeN: Hiding Data With Deep Networks.
Limitations of the Lipschitz constant as a defense against adversarial examples.
Unbounded Output Networks for Classification.
2018-07-24
Contrastive Video Representation Learning via Adversarial Perturbations.
2018-07-21
Simultaneous Adversarial Training - Learn from Others Mistakes.
2018-07-20
Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors.
Physical Adversarial Examples for Object Detectors.
2018-07-18
Harmonic Adversarial Attack Method.
2018-07-17
Gradient Band-based Adversarial Training for Generalized Attack Immunity of A3C Path Finding.
Motivating the Rules of the Game for Adversarial Example Research.
Defend Deep Neural Networks Against Adversarial Examples via Fixed and Dynamic Quantized Activation Functions.
2018-07-16
Online Robust Policy Learning in the Presence of Unknown Adversaries.
Manifold Adversarial Learning.
2018-07-12
Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach.
2018-07-11
With Friends Like These, Who Needs Adversaries?
2018-07-10
A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks.
A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees.
Attack and defence in cellular decision-making: lessons from machine learning.
2018-07-09
Adaptive Adversarial Attack on Scene Text Recognition.
2018-07-08
Vulnerability Analysis of Chest X-Ray Image Classification Against Adversarial Attacks.
2018-07-05
Implicit Generative Modeling of Random Noise during Training for Adversarial Robustness.
2018-07-04
Benchmarking Neural Network Robustness to Common Corruptions and Surface Variations.
2018-07-03
Local Gradients Smoothing: Defense against localized adversarial attacks.
Adversarial Robustness Toolbox v1.0.0.
2018-07-02
Adversarial Perturbations Against Real-Time Video Classification Systems.
2018-07-01
Towards Adversarial Training with Moderate Performance Improvement for Neural Network Classification.
2018-06-29
Adversarial Examples in Deep Learning: Characterization and Divergence.
2018-06-28
Adversarial Reprogramming of Neural Networks.
2018-06-27
Gradient Similarity: An Explainable Approach to Detect Adversarial Attacks against Deep Learning.
Customizing an Adversarial Example Generator with Class-Conditional GANs.
2018-06-25
Exploring Adversarial Examples: Patterns of One-Pixel Attacks.
2018-06-23
Defending Malware Classification Networks Against Adversarial Perturbations with Non-Negative Weight Restrictions.
On Adversarial Examples for Character-Level Neural Machine Translation.
Evaluation of Momentum Diverse Input Iterative Fast Gradient Sign Method (M-DI2-FGSM) Based Attack Method on MCS 2018 Adversarial Attacks on Black Box Face Recognition System.
2018-06-21
Detection based Defense against Adversarial Examples from the Steganalysis Point of View.
2018-06-20
Gradient Adversarial Training of Neural Networks.
Combinatorial Testing for Deep Learning Systems.
2018-06-19
On the Learning of Deep Local Features for Robust Face Spoofing Detection.
Built-in Vulnerabilities to Imperceptible Adversarial Perturbations.
2018-06-15
Non-Negative Networks Against Adversarial Attacks.
2018-06-14
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data.
2018-06-13
Hierarchical interpretations for neural network predictions.
Manifold Mixup: Better Representations by Interpolating Hidden States.
2018-06-12
Adversarial Attacks on Variational Autoencoders.
Ranking Robustness Under Adversarial Document Manipulations.
2018-06-11
Defense Against the Dark Arts: An overview of adversarial example security research and future research directions.
2018-06-08
Monge blunts Bayes: Hardness Results for Adversarial Training.
2018-06-07
Revisiting Adversarial Risk.
Training Augmentation with Adversarial Examples for Robust Speech Recognition.
2018-06-06
Adversarial Attack on Graph Structured Data.
Adversarial Regression with Multiple Learners.
Killing Four Birds with one Gaussian Process: Analyzing Test-Time Attack Vectors on Classification.
2018-06-05
DPatch: An Adversarial Patch Attack on Object Detectors.
2018-06-04
Mitigation of Policy Manipulation Attacks on Deep Q-Networks with Parameter-Space Noise.
An Explainable Adversarial Robustness Metric for Deep Learning Neural Networks.
PAC-learning in the presence of evasion adversaries.
2018-06-02
Sufficient Conditions for Idealised Models to Have No Adversarial Examples: a Theoretical and Empirical Study with Bayesian Neural Networks.
Detecting Adversarial Examples via Key-based Network.
2018-05-31
PeerNets: Exploiting Peer Wisdom Against Adversarial Attacks.
Resisting Adversarial Attacks using Gaussian Mixture Variational Autoencoders.
Scaling provable adversarial defenses.
Sequential Attacks on Agents for Long-Term Adversarial Goals.
Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Data.
2018-05-30
Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization.
ADAGIO: Interactive Experimentation with Adversarial Attack and Defense for Audio.
Robustifying Models Against Adversarial Attacks by Langevin Dynamics.
Robustness May Be at Odds with Accuracy.
2018-05-29
AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks.
Adversarial Noise Attacks of Deep Learning Architectures -- Stability Analysis via Sparse Modeled Signals.
Why Botnets Work: Distributed Brute-Force Attacks Need No Synchronization.
2018-05-28
Adversarial Examples in Remote Sensing.
GenAttack: Practical Black-box Attacks with Gradient-Free Optimization.
2018-05-27
Defending Against Adversarial Attacks by Leveraging an Entire GAN.
2018-05-25
Training verified learners with learned verifiers.
Adversarial examples from computational constraints.
2018-05-24
Laplacian Networks: Bounding Indicator Function Smoothness for Neural Network Robustness.
2018-05-23
Anonymizing k-Facial Attributes via Adversarial Perturbations.
Towards Robust Training of Neural Networks by Regularizing Adversarial Gradients.
Towards the first adversarially robust neural network model on MNIST.
2018-05-22
Adversarially Robust Training through Structured Gradient Regularization.
2018-05-21
Adversarial Noise Layer: Regularize Neural Network By Adding Noise.
Adversarial Attacks on Neural Networks for Graph Data.
Constructing Unrestricted Adversarial Examples with Generative Models.
Bidirectional Learning for Robust Neural Networks.
2018-05-20
Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference.
Towards Understanding Limitations of Pixel Discretization Against Adversarial Attacks.
Targeted Adversarial Examples for Black Box Audio Systems.
2018-05-17
Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models.
2018-05-16
Towards Robust Neural Machine Translation.
2018-05-14
Detecting Adversarial Samples for Deep Neural Networks through Mutation Testing.
2018-05-12
Curriculum Adversarial Training.
AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning.
2018-05-11
Breaking Transferability of Adversarial Samples with Randomness.
2018-05-09
On Visual Hallmarks of Robustness to Adversarial Malware.
Robust Classification with Convolutional Prototype Learning.
2018-05-08
Interpretable Adversarial Perturbation in Input Embedding Space for Text.
2018-05-05
A Counter-Forensic Method for CNN-Based Camera Model Identification.
2018-05-03
Siamese networks for generating adversarial examples.
2018-04-30
Concolic Testing for Deep Neural Networks.
How Robust are Deep Neural Networks?
Adversarially Robust Generalization Requires More Data.
2018-04-29
Adversarial Regression for Detecting Attacks in Cyber-Physical Systems.
2018-04-28
Formal Security Analysis of Neural Networks using Symbolic Intervals.
2018-04-25
Towards Fast Computation of Certified Robustness for ReLU Networks.
2018-04-23
Towards Dependable Deep Convolutional Neural Networks (CNNs) with Out-distribution Learning.
Siamese Generative Adversarial Privatizer for Biometric Data.
Black-box Adversarial Attacks with Limited Queries and Information.
VectorDefense: Vectorization as a Defense to Adversarial Examples.
Query-Efficient Black-Box Attack Against Sequence-Based Malware Classifiers.
2018-04-21
Generating Natural Language Adversarial Examples.
2018-04-20
Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size.
Learning More Robust Features with Adversarial Training.
ADef: an Iterative Algorithm to Construct Adversarial Deformations.
2018-04-19
Attacking Convolutional Neural Network using Differential Evolution.
Semantic Adversarial Deep Learning.
2018-04-18
Simulation-based Adversarial Test Generation for Autonomous Vehicles with Machine Learning Components.
Neural Automated Essay Scoring and Coherence Modeling for Adversarially Crafted Input.
2018-04-17
Robust Machine Comprehension Models via Adversarial Training.
Adversarial Example Generation with Syntactically Controlled Paraphrase Networks.
2018-04-16
Global Robustness Evaluation of Deep Neural Networks with Provable Guarantees for the $L_0$ Norm.
ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector.
2018-04-14
On the Limitation of MagNet Defense against $L_1$-based Adversarial Examples.
Adversarial Attacks Against Medical Deep Learning Systems.
2018-04-11
Detecting Malicious PowerShell Commands using Deep Neural Networks.
2018-04-10
On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses.
2018-04-09
Adversarial Training Versus Weight Decay.
An ADMM-Based Universal Framework for Adversarial Attacks on Deep Neural Networks.
2018-04-08
Adaptive Spatial Steganography Based on Probability-Controlled Adversarial Examples.
2018-04-06
Fortified Networks: Improving the Robustness of Deep Networks by Modeling the Manifold of Hidden Representations.
2018-04-04
Unifying Bilateral Filtering and Adversarial Training for Robust Neural Networks.
2018-03-30
Adversarial Attacks and Defences Competition.
2018-03-29
Security Consideration For Deep Learning-Based Image Forensics.
2018-03-28
Defending against Adversarial Images using Basis Functions Transformations.
The Effects of JPEG and JPEG2000 Compression on Attacks using Adversarial Examples.
2018-03-26
Bypassing Feature Squeezing by Increasing Adversary Strength.
On the Limitation of Local Intrinsic Dimensionality for Characterizing the Subspaces of Adversarial Examples.
Clipping free attacks against artificial neural networks.
2018-03-24
Security Theater: On the Vulnerability of Classifiers to Exploratory Attacks.
A Dynamic-Adversarial Mining Approach to the Security of Machine Learning.
An Overview of Vulnerabilities of Voice Controlled Systems.
2018-03-23
Generalizability vs. Robustness: Adversarial Examples for Medical Imaging.
CNN Based Adversarial Embedding with Minimum Alteration for Image Steganography.
Detecting Adversarial Perturbations with Saliency.
Improving DNN Robustness to Adversarial Attacks using Jacobian Regularization.
2018-03-22
Understanding Measures of Uncertainty for Adversarial Example Detection.
2018-03-21
Adversarial Defense based on Structure-to-Signal Autoencoders.
Task-specific Deep LDA pruning of neural networks.
2018-03-20
DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems.
2018-03-19
Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks.
Improving Transferability of Adversarial Examples with Input Diversity.
2018-03-17
A Dual Approach to Scalable Verification of Deep Networks.
2018-03-16
Adversarial Logit Pairing.
Semantic Adversarial Examples.
2018-03-15
Large Margin Deep Networks for Classification.
2018-03-13
Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples.
Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning.
Invisible Mask: Practical Attacks on Face Recognition with Infrared.
Defending against Adversarial Attack towards Deep Neural Networks via Collaborative Multi-task Training.
2018-03-12
Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables.
2018-03-10
Combating Adversarial Attacks Using Sparse Representations.
Detecting Adversarial Examples via Neural Fingerprinting.
2018-03-09
Detecting Adversarial Examples - A Lesson from Multimedia Forensics.
On Generation of Adversarial Examples using Convex Programming.
Explaining Black-box Android Malware Detection.
2018-03-08
Rethinking Feature Distribution for Loss Functions in Image Classification.
2018-03-07
Sparse Adversarial Perturbations for Videos.
2018-03-04
Stochastic Activation Pruning for Robust Adversarial Defense.
2018-03-03
Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples.
2018-03-02
Protecting JPEG Images Against Adversarial Attacks.
2018-02-26
Understanding and Enhancing the Transferability of Adversarial Examples.
On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples.
Retrieval-Augmented Convolutional Neural Networks for Improved Robustness against Adversarial Examples.
Max-Mahalanobis Linear Discriminant Analysis Networks.
2018-02-23
Deep Defense: Training DNNs with Improved Adversarial Robustness.
Sensitivity and Generalization in Neural Networks: an Empirical Study.
Adversarial vulnerability for any classifier.
Verifying Controllers Against Adversarial Examples with Bayesian Optimization.
2018-02-22
Unravelling Robustness of Deep Learning based Face Recognition Against Adversarial Attacks.
Hessian-based Analysis of Large Batch Training and Robustness to Adversaries.
Adversarial Examples that Fool both Computer Vision and Time-Limited Humans.
2018-02-21
Adversarial Training for Probabilistic Spiking Neural Networks.
L2-Nonexpansive Neural Networks.
Generalizable Adversarial Examples Detection Based on Bi-model Decision Mismatch.
2018-02-20
Attack Strength vs. Detectability Dilemma in Adversarial Machine Learning.
Out-distribution training confers robustness to deep neural networks.
2018-02-19
On Lyapunov exponents and adversarial perturbation.
Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression.
Divide, Denoise, and Defend against Adversarial Attacks.
Robustness of Rotation-Equivariant Networks to Adversarial Perturbations.
Are Generative Classifiers More Robust to Adversarial Attacks?
2018-02-18
DARTS: Deceiving Autonomous Cars with Toxic Signs.
2018-02-15
ASP:A Fast Adversarial Attack Example Generation Framework based on Adversarial Saliency Prediction.
Adversarial Risk and the Dangers of Evaluating Against Weak Attacks.
2018-02-14
Fooling OCR Systems with Adversarial Text Images.
Security Analysis and Enhancement of Model Compressed Deep Learning Systems under Adversarial Attacks.
2018-02-13
Query-Free Attacks on Industry-Grade Face Recognition Systems under Resource Constraints.
Identify Susceptible Locations in Medical Records via Adversarial Attacks on Deep Predictive Models.
Deceiving End-to-End Deep Learning Malware Detectors using Adversarial Examples.
2018-02-12
Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks.
Predicting Adversarial Examples with High Confidence.
2018-02-09
Certified Robustness to Adversarial Examples with Differential Privacy.
2018-02-08
Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection.
2018-02-05
Blind Pre-Processing: A Robust Defense Method Against Adversarial Examples.
First-order Adversarial Vulnerability of Neural Networks and Input Dimension.
2018-02-02
Secure Detection of Image Manipulation by means of Random Feature Selection.
Hardening Deep Neural Networks via Adversarial Model Cascades.
2018-02-01
Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples.
2018-01-31
Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach.
2018-01-29
Robustness of classification ability of spiking neural networks.
2018-01-28
Certified Defenses against Adversarial Examples.
2018-01-27
Towards an Understanding of Neural Networks in Natural-Image Spaces.
2018-01-26
Deflecting Adversarial Attacks with Pixel Deflection.
Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning.
2018-01-24
CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition.
Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations.
2018-01-22
Adversarial Texts with Gradient Methods.
2018-01-15
A Comparative Study of Rule Extraction for Recurrent Neural Networks.
Sparsity-based Defense against Adversarial Attacks on Linear Classifiers.
Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networks.
2018-01-12
Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers.
2018-01-11
A3T: Adversarially Augmented Adversarial Training.
2018-01-10
Fooling End-to-end Speaker Verification by Adversarial Examples.
2018-01-09
Adversarial Deep Learning for Robust Detection of Binary Encoded Malware.
Less is More: Culling the Training Set to Improve Robustness of Deep Neural Networks.
2018-01-08
Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos.
Adversarial Spheres.
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality.
Spatially Transformed Adversarial Examples.
Generating Adversarial Examples with Adversarial Networks.
LaVAN: Localized and Visible Adversarial Noise.
Attacking Speaker Recognition With Deep Generative Models.
HeNet: A Deep Learning Approach on Intel$^\circledR$ Processor Trace for Effective Exploit Detection.
2018-01-07
Denoising Dictionary Learning Against Adversarial Perturbations.
2018-01-05
Adversarial Perturbation Intensity Achieving Chosen Intra-Technique Transferability Level for Logistic Regression.
Audio Adversarial Examples: Targeted Attacks on Speech-to-Text.
Shielding Google's language toxicity model against adversarial attacks.
2018-01-03
Facial Attributes: Accuracy and Adversarial Robustness.
Neural Networks in Adversarial Setting and Ill-Conditioned Weight Space.
2018-01-02
High Dimensional Spaces, Deep Learning and Adversarial Examples.
Did you hear that? Adversarial Examples Against Automatic Speech Recognition.
Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey.
2017-12-31
A General Framework for Adversarial Examples with Objectives.
2017-12-28
Gradient Regularization Improves Accuracy of Discriminative Models.
2017-12-27
Adversarial Patch.
2017-12-26
Exploring the Space of Black-box Attacks on Deep Neural Networks.
Building Robust Deep Neural Networks for Road Sign Detection.
The Robust Manifold Defense: Adversarial Training using Generative Models.
2017-12-24
Android Malware Detection using Deep Learning on API Method Sequences.
2017-12-23
Whatever Does Not Kill Deep Reinforcement Learning, Makes It Stronger.
2017-12-22
Query-limited Black-box Attacks to Classifiers.
2017-12-21
Using LIP to Gloss Over Faces in Single-Stage Face Detection Networks.
ReabsNet: Detecting and Revising Adversarial Examples.
Note on Attacking Object Detectors with Adversarial Stickers.
Wolf in Sheep's Clothing - The Downscaling Attack Against Deep Learning Applications.
2017-12-19
Query-Efficient Black-box Adversarial Examples (superceded).
Adversarial Examples: Attacks and Defenses for Deep Learning.
2017-12-18
HotFlip: White-Box Adversarial Examples for Text Classification.
When Not to Classify: Anomaly Detection of Attacks (ADA) on DNN Classifiers at Test Time.
2017-12-17
Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Study.
Super-sparse Learning in Similarity Spaces.
2017-12-16
Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models.
2017-12-14
DANCin SEQ2SEQ: Fooling Text Classifiers with Adversarial Text Example Generation.
2017-12-12
Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models.
2017-12-11
Training Ensembles to Detect Adversarial Examples.
2017-12-10
Robust Deep Reinforcement Learning with Adversarial Attacks.
2017-12-09
NAG: Network for Adversary Generation.
2017-12-08
Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning.
Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser.
2017-12-07
Adversarial Examples that Fool Detectors.
Exploring the Landscape of Spatial Robustness.
2017-12-06
Generative Adversarial Perturbations.
Attacking Visual Language Grounding with Adversarial Examples: A Case Study on Neural Image Captioning.
2017-12-05
Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems.
2017-12-02
Improving Network Robustness against Adversarial Attacks with Compact Convolution.
Towards Robust Neural Networks via Random Self-ensemble.
Where Classification Fails, Interpretation Rises.
2017-11-30
Measuring the tendency of CNNs to Learn Surface Statistical Regularities.
2017-11-27
Adversary Detection in Neural Networks via Persistent Homology.
On the Robustness of Semantic Segmentation Models to Adversarial Attacks.
Butterfly Effect: Bidirectional Control of Classification Performance by Small Additive Perturbation.
2017-11-26
Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients.
2017-11-24
Geometric robustness of deep networks: analysis and improvement.
2017-11-22
Safer Classification by Synthesis.
MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.
Adversarial Phenomenon in the Eyes of Bayesian Deep Learning.
2017-11-21
Reinforcing Adversarial Robustness using Model Confidence Induced by Adversarial Training.
2017-11-20
Evaluating Robustness of Neural Networks with Mixed Integer Programming.
Adversarial Attacks Beyond the Image Space.
2017-11-17
How Wrong Am I? - Studying Adversarial Examples and their Impact on Uncertainty in Gaussian Process Machine Learning Models.
2017-11-16
Enhanced Attacks on Defensively Distilled Deep Neural Networks.
Defense against Universal Adversarial Perturbations.
2017-11-15
The best defense is a good offense: Countering black box attacks by predicting slightly wrong labels.
2017-11-12
Machine vs Machine: Minimax-Optimal Defense Against Adversarial Examples.
2017-11-09
Crafting Adversarial Examples For Speech Paralinguistics Applications.
2017-11-08
Intriguing Properties of Adversarial Examples.
2017-11-06
Mitigating Adversarial Effects Through Randomization.
HyperNetworks with statistical filtering for defending adversarial examples.
Towards Reverse-Engineering Black-Box Neural Networks.
2017-11-02
The (Un)reliability of saliency methods.
Provable defenses against adversarial examples via the convex outer adversarial polytope.
2017-11-01
Attacking Binarized Neural Networks.
2017-10-31
Countering Adversarial Images using Input Transformations.
Conditional Variance Penalties and Domain Shift Robustness.
Generating Natural Adversarial Examples.
2017-10-30
PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples.
2017-10-29
Attacking the Madry Defense Model with $L_1$-based Adversarial Examples.
Certifying Some Distributional Robustness with Principled Adversarial Training.
2017-10-28
Interpretation of Neural Networks is Fragile.
2017-10-27
Adversarial Detection of Flash Malware: Limitations and Open Issues.
2017-10-25
mixup: Beyond Empirical Risk Minimization.
2017-10-24
One pixel attack for fooling deep neural networks.
2017-10-21
Feature-Guided Black-Box Safety Testing of Deep Neural Networks.
2017-10-17
Boosting Adversarial Attacks with Momentum.
2017-10-12
Game-Theoretic Design of Secure and Resilient Distributed Support Vector Machines with Adversaries.
2017-10-09
Standard detectors aren't (currently) fooled by physical adversarial stop signs.
Verification of Binarized Neural Networks via Inter-Neuron Factoring.
2017-10-02
Detecting Adversarial Attacks on Neural Network Policies with Visual Foresight.
DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural Networks.
2017-09-28
Provably Minimally-Distorted Adversarial Examples.
DR.SGX: Hardening SGX Enclaves against Cache Attacks with Data Location Randomization.
2017-09-26
Output Range Analysis for Deep Neural Networks.
2017-09-25
Fooling Vision and Language Models Despite Localization and Attention Mechanism.
2017-09-19
Verifying Properties of Binarized Deep Neural Networks.
2017-09-16
Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification.
2017-09-13
A Learning and Masking Approach to Secure Learning.
Models and Framework for Adversarial Attacks on Complex Adaptive Systems.
2017-09-12
EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples.
2017-09-11
Art of singular vectors and universal adversarial perturbations.
Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks.
2017-09-08
Towards Proving the Adversarial Robustness of Deep Neural Networks.
DeepFense: Online Accelerated Defense Against Adversarial Deep Learning.
2017-09-02
Security Evaluation of Pattern Classifiers under Attack.
2017-08-31
On Security and Sparsity of Linear Classifiers for Adversarial Settings.
Be Selfish and Avoid Dilemmas: Fork After Withholding (FAW) Attacks on Bitcoin.
2017-08-29
Practical Attacks Against Graph-based Clustering.
2017-08-28
DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars.
Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features.
2017-08-23
Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid.
2017-08-22
CNN Fixations: An unraveling approach to visualize the discriminative image regions.
2017-08-21
Evasion Attacks against Machine Learning at Test Time.
2017-08-17
Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples.
Learning Universal Adversarial Perturbations with Generative Models.
2017-08-14
Attacking Automatic Video Analysis Algorithms: A Case Study of Google Cloud Video Intelligence API.
2017-08-13
ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models.
2017-08-08
Cascade Adversarial Machine Learning Regularized with a Unified Embedding.
2017-08-04
Adversarial Robustness: Softmax versus Openmax.
2017-08-01
Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning.
2017-07-27
Robust Physical-World Attacks on Deep Learning Models.
2017-07-24
Synthesizing Robust Adversarial Examples.
2017-07-23
Adversarial Examples for Evaluating Reading Comprehension Systems.
2017-07-21
Confidence estimation in Deep Neural networks via density modelling.
2017-07-20
Efficient Defenses Against Adversarial Attacks.
2017-07-19
Generic Black-Box End-to-End Attack Against State of the Art API Call Based Malware Classifiers.
2017-07-18
Fast Feature Fool: A data independent approach to universal adversarial perturbations.
APE-GAN: Adversarial Perturbation Elimination with GAN.
2017-07-17
Houdini: Fooling Deep Structured Prediction Models.
2017-07-13
Foolbox: A Python toolbox to benchmark the robustness of machine learning models.
2017-07-11
NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles.
A Survey on Resilient Machine Learning.
2017-07-10
Towards Crafting Text Adversarial Samples.
2017-07-04
UPSET and ANGRI : Breaking High Performance Image Classifiers.
2017-06-21
Comparing deep neural networks against humans: object recognition when the signal gets weaker.
2017-06-19
Towards Deep Learning Models Resistant to Adversarial Attacks.
2017-06-14
Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong.
2017-06-13
Analyzing the Robustness of Nearest Neighbors to Adversarial Examples.
2017-06-06
Adversarial-Playground: A Visualization Suite for Adversarial Sample Generation.
2017-06-02
Towards Robust Detection of Adversarial Examples.
2017-05-30
Feature Squeezing Mitigates and Detects Carlini/Wagner Adversarial Examples.
2017-05-27
MAT: A Multi-strength Adversarial Training Method to Mitigate Adversarial Attacks.
2017-05-26
Analysis of universal adversarial perturbations.
Classification regions of deep neural networks.
2017-05-25
MagNet: a Two-Pronged Defense against Adversarial Examples.
2017-05-23
Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation.
Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reduction.
Black-Box Attacks against RNN based Malware Detection Algorithms.
2017-05-22
Regularizing deep networks using efficient layerwise adversarial training.
2017-05-21
Evading Classifiers by Morphing in the Dark.
2017-05-20
Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods.
2017-05-19
Ensemble Adversarial Training: Attacks and Defenses.
MTDeep: Boosting the Security of Deep Neural Nets Against Adversarial Attacks with Moving Target Defense.
2017-05-18
DeepXplore: Automated Whitebox Testing of Deep Learning Systems.
Delving into adversarial attacks on deep policies.
2017-05-15
Extending Defensive Distillation.
2017-05-09
Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN.
2017-05-08
Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression.
2017-05-05
Detecting Adversarial Samples Using Density Ratio Estimates.
2017-04-28
Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection.
Parseval Networks: Improving Robustness to Adversarial Examples.
2017-04-26
Deep Text Classification Can be Fooled.
2017-04-19
Universal Adversarial Perturbations Against Semantic Image Segmentation.
2017-04-17
Adversarial and Clean Data Are Not Twins.
2017-04-16
Google's Cloud Vision API Is Not Robust To Noise.
2017-04-11
The Space of Transferable Adversarial Examples.
2017-04-09
Enhancing Robustness of Machine Learning Systems via Data Transformations.
2017-04-06
Adequacy of the Gradient-Descent Method for Classifier Evasion Attacks.
2017-04-05
Comment on "Biologically inspired protection of deep networks from adversarial attacks".
2017-04-04
Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks.
2017-03-31
SafetyNet: Detecting and Rejecting Adversarial Examples Robustly.
2017-03-27
Adversarial Transformation Networks: Learning to Generate Adversarial Examples.
Biologically inspired protection of deep networks from adversarial attacks.
2017-03-26
Deceiving Google's Cloud Video Intelligence API Built for Summarizing Videos.
2017-03-24
Adversarial Examples for Semantic Segmentation and Object Detection.
2017-03-23
Self corrective Perturbations for Semantic Segmentation and Classification.
2017-03-22
Data Driven Exploratory Attacks on Black Box Classifiers in Adversarial Domains.
2017-03-20
On the Limitation of Convolutional Neural Networks in Recognizing Negative Images.
2017-03-16
Fraternal Twins: Unifying Attacks on Machine Learning and Digital Watermarking.
2017-03-13
Blocking Transferability of Adversarial Examples in Black-Box Learning Systems.
2017-03-07
Tactics of Adversarial Attack on Deep Reinforcement Learning Agents.
2017-03-03
Adversarial Examples for Semantic Image Segmentation.
2017-03-02
Compositional Falsification of Cyber-Physical Systems with Machine Learning Components.
2017-03-01
Detecting Adversarial Samples from Artifacts.
2017-02-26
Deceiving Google's Perspective API Built for Detecting Toxic Comments.
2017-02-22
Robustness to Adversarial Examples through an Ensemble of Specialists.
Adversarial examples for generative models.
DeepCloak: Masking Deep Neural Network Models for Robustness Against Adversarial Samples.
2017-02-21
On the (Statistical) Detection of Adversarial Examples.
2017-02-20
Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN.
2017-02-14
On Detecting Adversarial Perturbations.
2017-02-07
Adversarial Attacks on Neural Network Policies.
2017-02-03
Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks.
2017-01-15
Vulnerability of Deep Reinforcement Learning to Policy Induction Attacks.
2017-01-04
Dense Associative Memory is Robust to Adversarial Inputs.
2016-12-22
Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics.
2016-12-19
Simple Black-Box Adversarial Perturbations for Deep Networks.
2016-12-05
Learning Adversary-Resistant Deep Neural Networks.
2016-12-01
A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial Examples.
Adversarial Images for Variational Autoencoders.
Deep Variational Information Bottleneck.
2016-11-30
Towards Robust Deep Neural Networks with BANG.
2016-11-18
LOTS about Attacking Deep Features.
2016-11-15
AdversariaLib: An Open-source Library for the Security Evaluation of Machine Learning Algorithms Under Attack.
2016-11-11
Towards the Science of Security and Privacy in Machine Learning.
2016-11-08
Delving into Transferable Adversarial Examples and Black-box Attacks.
2016-11-03
Adversarial Machine Learning at Scale.
2016-10-26
Universal adversarial perturbations.
2016-10-21
Safety Verification of Deep Neural Networks.
2016-10-14
Are Accuracy and Robustness Correlated?
2016-10-13
Assessing Threat of Adversarial Examples on Deep Neural Networks.
2016-10-06
Using Non-invertible Data Transformations to Build Adversarial-Robust Neural Networks.
2016-10-04
Adversary Resistant Deep Neural Networks with an Application to Malware Detection.
2016-10-03
Technical Report on the CleverHans v2.1.0 Adversarial Examples Library.
2016-09-06
Statistical Meta-Analysis of Presentation Attacks for Secure Multibiometric Systems.
2016-09-03
Randomized Prediction Games for Adversarial Machine Learning.
2016-08-31
Robustness of classifiers: from adversarial to random noise.
2016-08-27
A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples.
2016-08-16
Towards Evaluating the Robustness of Neural Networks.
2016-08-02
A study of the effect of JPG compression on adversarial images.
2016-08-01
Early Methods for Detecting Adversarial Images.
2016-07-18
On the Effectiveness of Defensive Distillation.
2016-07-14
Defensive Distillation is Not Robust to Adversarial Examples.
2016-07-08
Adversarial examples in the physical world.
2016-06-14
Adversarial Perturbations Against Deep Neural Networks for Malware Classification.
2016-05-23
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples.
Measuring Neural Net Robustness with Constraints.
2016-05-17
Are Facial Attributes Adversarially Robust?
2016-05-05
Adversarial Diversity and Hard Positive Generation.
2016-04-27
Crafting Adversarial Input Sequences for Recurrent Neural Networks.
2016-04-14
Improving the Robustness of Deep Neural Networks via Stability Training.
2016-04-09
A General Retraining Framework for Scalable Adversarial Classification.
2016-03-16
Suppressing the Unusual: towards Robust CNNs using Symmetric Activation Functions.
2016-02-08
Practical Black-Box Attacks against Machine Learning.
2016-02-07
Ensemble Robustness and Generalization of Stochastic Deep Learning Algorithms.
2016-01-26
Unifying Adversarial Training Algorithms with Flexible Deep Data Gradient Regularization.
2015-11-23
The Limitations of Deep Learning in Adversarial Settings.
2015-11-19
A Unified Gradient Regularization Family for Adversarial Examples.
Manifold Regularized Deep Neural Networks using Adversarial Examples.
Robust Convolutional Neural Networks under Adversarial Noise.
Foveation-based Mechanisms Alleviate Adversarial Examples.
Towards Open Set Deep Networks.
2015-11-17
Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization.
2015-11-16
Adversarial Manipulation of Deep Representations.
2015-11-14
DeepFool: a simple and accurate method to fool deep neural networks.
2015-11-13
Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks.
2015-11-10
Learning with a Strong Adversary.
2015-10-18
Exploring the Space of Adversarial Images.
2015-10-14
Improving Back-Propagation by Adding an Adversarial Gradient.
2015-07-16
Deep Learning and Music Adversaries.
2015-02-09
Analysis of classifiers' robustness to adversarial perturbations.
2014-12-19
Explaining and Harnessing Adversarial Examples.
2014-12-11
Towards Deep Neural Network Architectures Robust to Adversarial Examples.
2014-12-05
Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images.
2014-01-29
Security Evaluation of Support Vector Machines in Adversarial Environments.
2013-12-20
Intriguing properties of neural networks.