no code implementations • 19 Mar 2021 • Ashkan Esmaeili, Marzieh Edraki, Nazanin Rahnavard, Mubarak Shah, Ajmal Mian
It is set forth that the proposed sparse perturbation is the most aligned sparse perturbation with the shortest path from the input sample to the decision boundary for some initial adversarial sample (the best sparse approximation of shortest path, likely to fool the model).
1 code implementation • 16 Jul 2020 • Marzieh Edraki, Nazmul Karim, Nazanin Rahnavard, Ajmal Mian, Mubarak Shah
We propose a detector that is based on the analysis of the intrinsic DNN properties; that are affected due to the Trojaning process.
1 code implementation • 7 Feb 2020 • Marzieh Edraki, Nazanin Rahnavard, Mubarak Shah
In this paper, we propose the SubSpace Capsule Network (SCN) that exploits the idea of capsule networks to model possible variations in the appearance or implicitly defined properties of an entity through a group of capsule subspaces instead of simply grouping neurons to create capsules.
no code implementations • ECCV 2018 • Marzieh Edraki, Guo-Jun Qi
Such a manifold assumption suggests the distance over the manifold should be a better measure to characterize the distinct between real and fake sam- ples.
no code implementations • NeurIPS 2018 • Liheng Zhang, Marzieh Edraki, Guo-Jun Qi
In this paper, we formalize the idea behind capsule nets of using a capsule vector rather than a neuron activation to predict the label of samples.
2 code implementations • CVPR 2018 • Guo-Jun Qi, Liheng Zhang, Hao Hu, Marzieh Edraki, Jingdong Wang, Xian-Sheng Hua
In this paper, we present a novel localized Generative Adversarial Net (GAN) to learn on the manifold of real data.