Defense against adversarial attacks by manipulating feature thickness.
problem Vulnerability of machine learning models to adversarial attacks.
method Feature Manipulation (FM)-Defense using a combo-variational autoencoder.
result Detection and purification of adversarial examples with high accuracy.
StealthRank subtly boosts LLM rankings without detectable anomalies.
problem Adversarial manipulation of LLM-driven ranking systems.
method Energy-based optimization with Langevin dynamics for stealthy prompt generation.
result StealthRank outperforms existing methods in covertly boosting rankings.
Adversarial manipulation fools neural network interpretations.
problem Ensuring interpretation methods are robust to model manipulations.
method Integrating manipulation into fine-tuning objective function.
result State-of-the-art interpreters can be fooled with minimal accuracy loss.
Adversarial attacks can manipulate deep trading policies, compromising their performance.
problem Adversarial attacks can compromise deep reinforcement learning trading policies.
method Developed a threat model and proposed two attack techniques.
result Demonstrated the effectiveness of adversarial attacks against DQN trading agents.
Noise added to deep Q-networks reduces adversarial attacks.
problem Vulnerability of deep reinforcement learning to policy manipulation attacks.
method Addition of noise to the parameter space of deep reinforcement learners during training.
result Noise reduces the transferability of adversarial examples.
Study cyber-attacks on RL algorithms, focusing on cost signal manipulation.
problem Adversarial manipulation of cost signals in reinforcement learning.
method Quantitative analysis of TD(λ) and Q-learning algorithms under manipulation. result Bound on approximation error for TD(λ) and convergence properties for Q-learning under stealthy attacks. Paper proposes structured semantic perturbations to improve adversarial attacks.
problem Vulnerability of deep neural networks to adversarial attacks.
method Manipulates semantic attributes via disentangled latent codes.
result Demonstrates the effectiveness of structured semantic perturbations.
Adversaries can manipulate bandit algorithms to control chosen actions.
problem Manipulating stochastic bandit algorithms to influence chosen actions.
method Proposes an attack against ε-greedy and UCB algorithms without knowing mean rewards. result Attackers can control actions with logarithmic effort, making it easy to hijack behavior.
New attack manipulates UCB algorithm, new defense algorithm reduces pseudo-regret.
problem Adversarial attacks on stochastic bandit algorithms.
method Introducing action-manipulation attacks and proposing a robust defense algorithm.
result Proposed defense algorithm reduces pseudo-regret to O(max{log T, A}).
Camera stickers can fool deep learning systems by manipulating the lens, achieving 49.6% misclassification rate.
problem The vulnerability of deep learning systems to physical adversarial attacks.
method Iterative procedure to update attack perturbation and threat model for physical realizability.
result Achieved 49.6% misclassification rate for targeted attacks on ImageNet classifiers.
Proposes a new method to generate unrestricted adversarial examples.
problem Generating unrestricted adversarial examples without norm constraints.
method Leveraging state-of-the-art generative models to manipulate image fine-grained aspects.
result Our adversarial images look indistinguishable from natural images and can bypass certified defenses.
This paper studies poisoning attacks in episodic RL and discovers their effectiveness depends on reward bounds.
problem Understanding security threats to RL algorithms through poisoning attacks.
method Examined two types of poisoning attacks: reward and action manipulation, in bounded and unbounded reward settings.
result The effectiveness of poisoning attacks depends on reward bounds, with different attack costs and success rates.
Paper examines adversarial attacks on event cause analysis in power grids.
problem Adversarial attacks manipulate data to mislead event classifiers.
method Investigated adversarial attacks on CNN-based event cause analysis.
result Demonstrated adversaries can misclassify events through stealthy data manipulations.
Paper shows adversarial classification algorithms are inherently more sensitive to data manipulation.
problem Inadequate provable guarantees for machine learning performance, especially in unreliable data environments.
method Formal analysis of binary classification algorithms' sensitivity to adversarial manipulation.
result Fundamental tradeoff curve between accuracy and sensitivity is determined by data statistics, not algorithm tuning.
Graph neural networks are vulnerable to adversarial attacks by manipulating graph structure.
problem Vulnerability of Graph Neural Networks to adversarial attacks.
method Categorization and review of existing attacks and defenses.
result Developed a repository for empirical studies on graph adversarial attacks and defenses.
MaskGAN fills in text blanks more flexibly and effectively.
problem Handling complex manipulations on given tokens in conditional text generation.
method Decomposed conditional text generation into make-a-blank and fill-in-the-blank tasks, and used hierarchical multi-agent reinforcement learning.
result The model produces realistic texts without compromising quality and diversity.
Paper proposes a new method to attack Bayesian forecasting models.
problem Lack of research on adversarial attacks against time series forecasting systems.
method Decision analysis based attacking strategy for Bayesian forecasting models.
result Demonstrates the vulnerability of Bayesian forecasting models to adversarial attacks.
Adversaries manipulate wireless power allocation to reduce user rates.
problem Adversaries exploit deep learning for power control to decrease communication rates.
method Adversaries craft perturbations to inputs of a DNN to minimize power allocation.
result Adversarial attacks are highly effective and robust to uncertainties.
Simple aggregation of multiple methods defends against adversarial attacks on neural networks.
problem Manipulation of machine learning models to hide discriminating features.
method Aggregation of multiple explanation methods to make the model robust against adversarial attacks.
result The model remains robust even when the attacker has knowledge of the model weights and explanation methods.
New system resists meme coin copy trading bots.
problem Manipulative bots exploit copy trading in illiquid meme coins.
method Multi-agent architecture with LLM and CoT reasoning.
result System outperforms other methods in prediction and economic performance.
Researchers create a flickering attack to fool video recognition networks.
problem Adversarial manipulation of video classification networks.
method Introducing a flickering temporal perturbation to fool video classifiers.
result Achieved high fooling ratio and temporal-invariant perturbation.
Adversarial attacks can fool algorithmic trading systems.
problem Adversarial perturbations can manipulate algorithmic trading models.
method Real-time adversarial attacks on trading algorithms using universal perturbations.
result Perturbations can fool trading algorithms at unseen data points.
Proposes a framework for extracting consistent physiological features across users.
problem Variability of biosignals across different users and tasks.
method Adversarial feature extractor for disentangled universal representations.
result Up to 8.8% improvement in average accuracy of classification.
Paper shows how to manipulate RL agents with sequential small perturbations.
problem Sequential attacks on reinforcement learning agents to change their behavior.
method Adversarial Transformer Network (ATN) to generate and integrate attacks.
result RL agents can be misled to optimise for adversarial rewards over time.
New attacks manipulate knowledge graph embeddings by adding or deleting facts.
problem Lack of robustness of KGE to adversarial attacks.
method Data poisoning attack strategies to manipulate knowledge graph embeddings.
result Demonstrated effectiveness and efficiency of proposed attack strategies.
Bayesian methods improve adversarial machine learning robustness.
problem Improving machine learning systems' security against adversarial manipulation.
method Integrating Bayesian perspectives to relax unrealistic assumptions in game-theoretic models.
result Bayesian approach provides more robust inferences about opponent's beliefs and interests.
Can we manipulate multiple deep neural networks simultaneously?
problem Selective fooling of multiple machine learning systems.
method Formulated as a novel optimization problem.
result It is easy to selectively manipulate multiple MNIST classifiers simultaneously.
New model improves classifier security against evasion attacks by selecting features.
problem Security of machine learning classifiers against evasion attacks.
method Adversary-aware feature selection model incorporating specific adversary assumptions.
result Classifier security worsens with feature selection, but new model improves it.
Model removes objects from general scenes using weak supervision.
problem Automatic object removal from general scene images with weak supervision.
method Two-stage editor architecture with mask generator and image in-painter; novel GAN prior for mask generator.
result Effectively removes a wide variety of objects from general scenes using weak supervision.
CopyCAT attacks neural policies by manipulating observations, not states.
problem Adversarial attacks on neural reinforcement learning agents.
method CopyCAT is a targeted attack that lures agents into following outsider policies.
result CopyCAT is effective in a read-only setting where adversaries can only manipulate observations.
This work generates training-time adversarial data using auto-encoders to manipulate classifiers.
problem Manipulating the behavior of trained classifiers during test time with bounded perturbation.
method An auto-encoder-like network generates perturbations, learning to update weights to produce harmful noise.
result The method can manipulate classifiers effectively, showing good transferability.
Adversaries can manipulate cooperative MARL networks.
problem Fragility of consensus-based MARL algorithms to adversarial attacks.
method Study of adversarial attacks on consensus-based MARL networks.
result Consensus-based MARL algorithms are vulnerable to adversarial manipulation.
Researchers show how to manipulate Partial Dependence plots to deceive explanations of predictive models.
problem The robustness and trustworthiness of Partial Dependence (PD) explanations are compromised.
method Data poisoning using genetic and gradient algorithms to manipulate PD plots.
result PD explanations can be fooled and manipulated to mislead understanding of predictive models.
Adversarial attacks can manipulate ML-aided visualizations, tricking analysts.
problem Adversarial attacks on ML-aided visualizations.
method Identifying attack surface and exemplifying five adversarial attacks.
result Adversaries can induce various attacks, like creating arbitrary and deceptive visualizations.
Paper proposes meshAdv to generate adversarial 3D meshes for visual recognition.
problem Vulnerability of deep neural networks to adversarial examples.
method Differentiable renderer to manipulate shape and texture of 3D meshes.
result 3D meshes effectively attack classifiers and object detectors.
Malicious agents can manipulate linear contextual bandits to pull desired arms with logarithmic overhead.
problem Malicious attacks on linear contextual bandit algorithms in various domains.
method Study and propose an efficient algorithm to perform adversarial attacks on linear contextual bandits.
result Malicious agents can force a linear contextual bandit algorithm to pull any desired arm T−o(T) times over a horizon of T steps with logarithmic modifications. Study shows how to manipulate VAEs for attacks and assess their robustness.
problem Adversarial attacks on Variational Autoencoders (VAE).
method Examine modifications to VAEs and propose metrics for robustness.
result Metrics to quantify the robustness of VAEs to adversarial attacks.
New approach for deep neural networks to learn invariance through adversarial forgetting.
problem Learning invariance for deep neural networks in the presence of nuisance and bias factors.
method Adversarial forgetting mechanism to induce amnesia to unwanted data factors.
result State-of-the-art performance in learning invariance across various datasets and tasks.
Recent work has shown that state-of-the-art classifiers are quite brittle, in the sense that a small adversarial change of an originally with high confidence correctly classified input leads to a wrong classification again with high confidence. This raises concerns that such classifiers are vulnerable to attacks and ca…
Optimal attack against autoregressive models by manipulating environment states.
problem Manipulating autoregressive forecasts to track a target trajectory.
method Linear Quadratic Regulator (LQR) for linear models, Model Predictive Control (MPC) for nonlinear models.
result Optimal attack formulations for both white-box and black-box settings.
Paper analyzes adversarial risk using optimal transport.
problem Poor performance of machine learning on adversarial data.
method Optimal transport perspective, optimal transport plans (couplings), convexity, smoothness assumptions.
result Fundamental limits on adversarial risk calculated for various datasets.
Study online learner attacks by manipulating labels, revealing critical thresholds.
problem Adversarial attacks on online learners, especially label manipulation.
method Control-theoretical perspective, theoretical analysis, empirical study.
result Discontinuous transition in learner's accuracy occurs at a critical threshold.
Localized adversarial training improves image classifiers' robustness.
problem State-of-the-art image classifiers fail on carefully manipulated adversarial images.
method Developed a localized adversarial attack and used it to train a robust classifier.
result Localized adversarial training increases robustness against adversarial inputs.
Simple physical modifications can fool autonomous driving systems.
problem Vulnerability of autonomous driving models to adversarial attacks.
method Demonstrated end-to-end attacks on autonomous driving using simple physical modifications.
result Simple physical modifications can induce activation patterns similar to different scenarios used in training, fooling autonomous driving models.
Wide neural networks ensure disconnected decision regions.
problem Ensuring neural networks produce disconnected decision regions.
method Analyzing conditions for connectedness of decision regions in neural networks with specific activation functions.
result For leaky ReLU and pyramidal structures, wide hidden layers are necessary for disconnected decision regions.
Paper explores vulnerabilities in image authenticity detection methods, especially printing and scanning attacks.
problem Vulnerability of image authenticity detection models to printing and scanning attacks.
method Demonstrates and proposes a new machine learning model to counter these attacks.
result Proposed model outperforms state-of-the-art models when trained on images from a single printer.
FAdeML shows pre-processing noise filters can mitigate adversarial attacks.
problem Lack of security in DNN-based ML systems due to adversarial attacks.
method Proposes FAdeML, a novel pre-processing noise Filter-aware Adversarial ML attack.
result Demonstrates that pre-processing noise filters can render ineffective most adversarial attacks.
Law responds to adversarial machine learning threats.
problem Adversarial machine learning attacks and their legal implications.
method Scenarios and legal analysis of adversarial ML attacks.
result Some attacks are more likely to result in liability.