Search Results for author:
Found 8 papers, 3 papers with code
MEA-Defender: A Robust Watermark against Model Extraction Attack
To protect the Intellectual Property (IP) of the original owners over such DNN models, backdoor-based watermarks have been extensively studied.
Boosting Neural Networks to Decompile Optimized Binaries
They formulate the decompilation process as a translation problem between LPL and HPL, aiming to reduce the human cost required to develop decompilation tools and improve their generalizability.
A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information
Although traditional static DNNs are vulnerable to the membership inference attack (MIA) , which aims to infer whether a particular point was used to train the model, little is known about how such an attack performs on the dynamic NNs.
SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning
Recent years have witnessed tremendous success in Self-Supervised Learning (SSL), which has been widely utilized to facilitate various downstream tasks in Computer Vision (CV) and Natural Language Processing (NLP) domains.
Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain
However, most of the triggers used in the current study are fixed patterns patched on a small fraction of an image and are often clearly mislabeled, which is easily detected by humans or defense methods such as Neural Cleanse and SentiNet.
DBIA: Data-free Backdoor Injection Attack against Transformer Networks
In this paper, we propose DBIA, a novel data-free backdoor attack against the CV-oriented transformer networks, leveraging the inherent attention mechanism of transformers to generate triggers and injecting the backdoor using the poisoned surrogate dataset.
HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks
Most existing solutions embed backdoors in DNN model training such that DNN ownership can be verified by triggering distinguishable model behaviors with a set of secret inputs.
Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors
In this paper, we presented systematic solutions to build robust and practical AEs against real world object detectors.
