Search Results for author:
Found 8 papers, 2 papers with code
Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain
To address this issue, we proposed a novel method of Augmenting data with Adversarial examples via a Wavelet module (AdvWavAug), an on-manifold adversarial data augmentation technique that is simple to implement.
A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking
In our benchmark, we evaluate the robustness of 55 typical deep learning models on ImageNet with diverse architectures (e. g., CNNs, Transformers) and learning algorithms (e. g., normal supervised training, pre-training, adversarial training) under numerous adversarial attacks and out-of-distribution (OOD) datasets.
Unrestricted Adversarial Attacks on ImageNet Competition
Many works have investigated the adversarial attacks or defenses under the settings where a bounded and imperceptible perturbation can be added to the input.
Adversarial Attacks on ML Defense Models Competition
Due to the vulnerability of deep neural networks (DNNs) to adversarial examples, a large number of defense techniques have been proposed to alleviate this problem in recent years.
Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness
The vulnerability of deep neural networks to adversarial examples has motivated an increasing number of defense strategies for promoting model robustness.
You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors
Fortunately, most existing adversarial patches can be outwitted, disabled and rejected by a simple classification network called an adversarial patch detector, which distinguishes adversarial patches from original images.
Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator
As designers of artificial intelligence try to outwit hackers, both sides continue to hone in on AI's inherent vulnerabilities.
Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE
Traditional adversarial examples are typically generated by adding perturbation noise to the input image within a small matrix norm.
