Search Results for author:
Found 8 papers, 5 papers with code
2-hop Neighbor Class Similarity (2NCS): A graph structural metric indicative of graph neural network performance
In this work, we highlight the limitations of the widely used homophily ratio and the recent Cross-Class Neighborhood Similarity (CCNS) metric in estimating GNN performance.
Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness
Neural architectures based on attention such as vision transformers are revolutionizing image recognition.
Widen The Backdoor To Let More Attackers In
As collaborative learning and the outsourcing of data collection become more common, malicious actors (or agents) which attempt to manipulate the learning process face an additional obstacle as they compete with each other.
They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors
We validate our model against empirical data collected on two separate cameras, showing that by simply using information from the camera's datasheet the adversary can accurately predict the injected distortion size and optimize their attack accordingly.
Speaker Anonymization with Distribution-Preserving X-Vector Generation for the VoicePrivacy Challenge 2020
In this paper, we present a Distribution-Preserving Voice Anonymization technique, as our submission to the VoicePrivacy Challenge 2020.
SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations
Research into adversarial examples (AE) has developed rapidly, yet static adversarial patches are still the main technique for conducting attacks in the real world, despite being obvious, semi-permanent and unmodifiable once deployed.
Seeing Red: PPG Biometrics Using Smartphone Cameras
PPG signals are obtained by recording a video from the camera as users are resting their finger on top of the camera lens.
Biometric Backdoors: A Poisoning Attack Against Unsupervised Template Updating
In this work, we investigate the concept of biometric backdoors: a template poisoning attack on biometric systems that allows adversaries to stealthily and effortlessly impersonate users in the long-term by exploiting the template update procedure.
Cryptography and Security
