Paper discusses methods to evaluate defenses against adversarial examples.
problem Difficulty in evaluating adversarial robustness.
method Methodological foundations and best practices for evaluating defenses.
result Suggests new methods to avoid common pitfalls in evaluations.
Machine learning identifies key defensive factors for playoff and championship teams.
problem Characterize NBA playoff and championship teams using machine learning.
method Used classification trees, random forests, and neural networks to analyze 17 seasons of NBA data.
result Defensive factors, particularly made three-point shots and perimeter defense, are crucial for playoff and championship success.
New defense against DNN model stealing attacks by poisoning predictions.
problem Stealing DNN models through black-box access attacks.
method Active perturbation of predictions to mislead attacker's training.
result Effective against a wide range of DNN stealing attacks, reducing attacker's success rate significantly.
Stochastic defense improves natural classifiers against adversarial attacks.
problem Vulnerability of deep networks to adversarial attacks.
method Long-run MCMC sampling with Energy-Based Model for adversarial purification.
result Balancing memoryless and metastable behavior leads to effective purification and robust classification.
Deep learning algorithms have been shown to perform extremely well on many classical machine learning problems. However, recent studies have shown that deep learning, like other machine learning techniques, is vulnerable to adversarial samples: inputs crafted to force a deep neural network (DNN) to provide adversary-se…
This paper proposes a continuous timing strategy for growth vs. defensive style allocation.
problem Dynamic allocation of growth and defensive ETF baskets using macro-market timing signals.
method Continuous smooth score combining multiple factors, mapped to G/D weights, smoothed with EWMA.
result Continuous style timing strategy outperforms static benchmarks in risk-adjusted returns.
The paper explores why adversarial attacks are inevitable for certain classifiers.
problem The inevitability of adversarial attacks on neural networks.
method Theoretical analysis and experiments on classifier robustness.
result Adversarial examples are inescapable for certain classes of problems.
New risk factors improve stress testing accuracy.
problem Improving stress testing accuracy with new risk factors.
method Adapted PCA and autoencoders for dimension reduction and interpretation.
result Aggregated risk factors enhance stress testing outcomes.
TensorShield defends images from adversarial attacks using tensor decomposition.
problem Adversarial attacks on images can fool deep neural networks.
method Tensor decomposition to find low-rank approximations of images, reducing high-frequency perturbations.
result TensorShield outperforms existing methods like SLQ by 14% against FGSM attacks.
New taxonomy divides defense methods for neural networks.
problem Improving adversarial robustness of neural networks.
method Reframing existing defense categories into two new categories.
result There is no universal trade-off between robustness and accuracy.
Research evaluates model extraction attacks on complex ML models and introduces a defense.
problem Model extraction attacks steal functionality of ML models through prediction APIs.
method Evaluation of Knockoff nets and introduction of a defense.
result Realistic adversaries can effectively steal complex ML models and evade known defenses.
Sparsifying data reduces adversarial perturbation effects in deep networks.
problem Adversarial attacks on deep neural networks.
method Exploiting sparsity in natural data to reduce adversarial perturbation effects.
result A sparsifying front end reduces output distortion due to adversarial attacks by a factor of K/N. ATHENA builds flexible defenses against adversarial attacks.
problem Extensive research on adversarial attacks is domain-specific and cannot be easily extended.
method Designing an extensible framework based on diverse weak defenses.
result Comprehensive empirical study demonstrates the effectiveness of ATHENA.
New defense method inspired by encryption improves visual classification accuracy.
problem Conventional defenses reduce accuracy and are defeated by obfuscated gradients.
method Block-wise pixel shuffling with secret key for training and test images.
result Achieves high accuracy (91.55%) on clean images and (89.66%) on adversarial examples.
Automated discovery of adaptive attacks improves adversarial defense evaluation.
problem Challenges in reliably evaluating adversarial defenses.
method Formalizes adaptive attacks as reusable building blocks in a search space for automatic discovery.
result Our tool discovers significantly stronger attacks than AutoAttack, improving adversarial defense evaluation.
New research shows many recent defenses against adversarial examples are ineffective against black-box attacks.
problem The robustness of recent defenses against adversarial examples is insufficient, especially against black-box attacks.
method Evaluation of nine defenses on two black-box adversarial models and six attacks on CIFAR-10 and Fashion-MNIST datasets.
result Most recent defenses provide only marginal improvements in security (<25%) compared to undefended networks. Study defenses against data poisoning attacks in online learning.
problem Data poisoning attacks on machine learning models.
method Rigorous study of four standard defenses in both a powerful and a realistic threat model.
result The effectiveness of defenses depends on the ease of the learning problem.
Paper analyzes adversarial attacks and defenses using game theory.
problem Unclear conditions for optimal attacks and defenses in adversarial learning.
method Game-theoretic framework with locally linear decision boundary model.
result Fast Gradient Method attack and Randomized Smoothing defense form a Nash Equilibrium.
Topology-aware generative models improve manifold-based defenses against adversarial examples.
problem Adversarial examples compromise the reliability of ML models, especially DNNs.
method Investigate if generative models used in manifold-based defenses need to be topology-aware.
result Topology-aware generative models enhance the robustness of manifold-based defenses.
Paper presents certified defenses against adversarial patch attacks.
problem Certified defenses against adversarial patch attacks are needed.
method Proposes the first certified defense and faster training methods.
result Demonstrates robustness transfer across different patch shapes.
First certified defense scaling to large datasets and models.
problem Robustness against adversarial examples in machine learning models.
method PixelDP, based on differential privacy.
result First certified defense that scales to large networks and models.
New adaptive attacks bypass many defenses to adversarial examples.
problem Adversarial example defenses are not adequately evaluated using adaptive attacks.
method Detailed analysis of thirteen defenses, demonstrating their vulnerabilities to adaptive attacks.
result Adversarial example defenses are more vulnerable to adaptive attacks than previously thought.
This study evaluates adversarial attacks and defenses for chest X-ray disease classification.
problem Vulnerability of deep neural networks to adversarial examples in chest X-ray disease detection.
method Detailed introduction and evaluation of various attack and defense methods.
result Attack and defense methods perform poorly with excessive iterations and large perturbations.
Paper presents a defense framework against adversarial examples.
problem Vulnerability of deep neural networks to adversarial examples.
method Cross-layer strategic ensemble defense with input and output transformations.
result Strategic ensemble defense achieves high defense success rates and robustness.
Defense against small image patches using occlusions.
problem Vulnerability of deep learning to small adversarial patches.
method Partially occlude image around each patch location.
result Certified security against patch attacks of a certain size.
This paper introduces defensive dropout to protect deep neural networks from adversarial attacks.
problem Vulnerability of deep neural networks to adversarial attacks.
method Proposes using dropout at test time to enhance robustness, modeling the problem as a game between attacker and defender.
result Defensive dropout reduces adversarial attack success rate significantly, from 100% to 13.89% on MNIST.
Paper introduces a new method to create adversarial examples against gradient-obfuscating defenses.
problem Crafting adversarial examples to fool gradient-obfuscating defenses.
method Stochastic Substitute Training (SST), a gray-box approach.
result Adversaries can create adversarial examples without knowledge or limited information about the defense.
Researchers improve defensive distillation to better protect machine learning models from adversarial attacks.
problem Machine learning models are vulnerable to adversarial examples that can cause misclassification.
method Revisit and improve defensive distillation as a defense mechanism.
result The improved defensive distillation is an effective way to address recent adversarial attacks.
Defense against ASR attacks using dropout uncertainty.
problem Adversarial attacks on ASR systems.
method Dropout uncertainty in neural networks.
result High detection accuracy across various ASR systems and datasets.
Survey of algorithms to correct past mistakes in prediction.
problem Improving prediction accuracy by correcting past errors.
method Defensive Forecasting as a sequential game theory approach to minimize prediction metrics.
result Simple, near-optimal algorithms for various prediction tasks.
This paper evaluates defenses against adversarial attacks on neural networks.
problem Adversarial attacks can trick DNNs into mis-classifying inputs.
method Scientific evaluation methodology for randomized defenses.
result RPENNs outperformed other defenses against adversarial attacks.
CVPR 2018 defenses ineffective against adversarial examples.
problem Vulnerability of neural networks to adversarial examples.
method Evaluated two white-box defenses from CVPR 2018.
result Defenses reduced model accuracy to 0%.
This paper benchmarks time-series adversarial defenses and attacks.
problem Adversarial attacks on time-series data.
method Detailed benchmarking of adversarial defense methods in the L∞ threat model. result Adversarial defenses offer robustness against both strong white-box and black-box attacks.
Defense-GAN defends deep neural networks from adversarial attacks using generative models.
problem Vulnerability of deep neural networks to adversarial perturbations.
method Defense-GAN models the distribution of unperturbed images and finds a close output to a given image without adversarial changes.
result Defense-GAN consistently improves over existing defense strategies and works against various attack methods.
The paper reviews defenses against adversarial examples in deep learning.
problem Adversarial examples in deep learning models.
method Summarizes existing defenses and future research directions.
result Recommendations for enhancing security in deep learning models.
DeepRobust is a PyTorch library for adversarial attacks and defenses.
problem Addressing adversarial attacks and defenses in deep learning.
method Contains over 20 attack and defense algorithms for various deep learning architectures.
result Fosters research in adversarial learning with comprehensive and easy-to-use platform.
New defense method reduces adversarial attacks on neural networks.
problem Vulnerability of deep neural networks to adversarial attacks.
method Sparse coding frontend trained on clean images.
result Significantly attenuates adversarial attacks before reaching classifier.
New defense mechanism RS outperforms existing schemes in protecting against adversarial examples.
problem Adversarial examples trick classifiers into misclassification.
method Proposed a new defense mechanism called Random Spiking (RS) and an evaluation framework.
result Random Spiking (RS) delivers better protection against adversarial examples than many existing schemes.
Paper proposes HRS to improve neural network robustness without significant accuracy loss.
problem Vulnerability of neural networks to adversarial attacks and performance degradation.
method Hierarchical Random Switching (HRS) for robustness without sacrificing accuracy.
result HRS significantly improves adversarial robustness with minimal accuracy loss.
New defense improves numerical stability in regression networks.
problem Adversarial attacks on regression neural networks.
method Formulated a stability-inducing regularization defense.
result Defense outperforms prior approaches and improves numerical stability.
BUZz defends images from adversarial attacks using simple transformations.
problem Adversarial attacks on deep neural networks for image classification.
method Combination of deep neural networks and simple image transformations.
result Achieves significant improvement over state-of-the-art defenses with a modest drop in clean accuracy.
Deep Partition Aggregation defends against poisoning attacks with provable certificates.
problem Adversarial poisoning attacks corrupt classifier test-time behavior.
method Deep Partition Aggregation (DPA) is an ensemble method using hash partitions and base models trained on these partitions.
result DPA can certify >= 50% of test images against over 500 poison image insertions on MNIST, and nine insertions on CIFAR-10.
This paper reviews defenses against adversarial learning attacks on statistical classifiers.
problem Adversarial attacks on machine learning systems, particularly statistical classifiers.
method Survey of recent work on test-time evasion, data poisoning, and reverse engineering attacks and defenses.
result Novel insights that challenge conventional AL wisdom and target unresolved issues.
Unified framework for analyzing model stealing attacks and defenses.
problem Vulnerability of ML applications to model stealing attacks.
method Developed a rigorous threat model and evaluation criteria, proposed methods to quantify attack and defense strategies.
result Demonstrated the importance of attack-specific perturbations for effective defenses.
A new method defends against adversarial examples using minimax optimization.
problem Adversarial examples can fool state-of-the-art classifiers.
method Formulated as a two-player game, proposed minimax optimization algorithm.
result Numerical minimax defense is more robust than non-minimax defenses.
The paper evaluates machine learning cyber defenses using log data against adversarial attacks.
problem Evaluating the robustness of machine learning cyber defenses against adversarial attacks.
method Developed a testing framework using deep reinforcement learning and adversarial natural language processing.
result Higher dropout levels increase robustness, with 90% dropout probability showing the highest robustness.
A Bayesian framework models adversarial uncertainty for robust machine learning.
problem Vulnerability of machine learning models to adversarial attacks.
method Formal Bayesian framework that models adversarial uncertainty through a stochastic channel, articulating probabilistic assumptions.
result Explicitly modeling adversarial uncertainty leads to improved robustification strategies.
Interpreting machine learning models helps understand adversarial attacks and defenses.
problem Understanding model vulnerability to adversarial attacks.
method Model interpretation techniques to explore adversarial attacks and defenses.
result Interpretation methods can be applied to adversarial attacks and defenses.