Fetching the paper…

Reading the bibliography…

2016

Technical Report on the CleverHans v2.1.0 Adversarial Examples Library

Papernot, Nicolas, Faghri, Fartash, Carlini, Nicholas et al.

Original
PDF
Post on X

Understand

CleverHans is a software library that provides standardized reference implementations of adversarial example construction techniques and adversarial training.

The library may be used to develop more robust machine learning models and to provide standardized benchmarks of models' performance in the adversarial setting.
Benchmarks constructed without a standardized implementation of adversarial example construction are not comparable to each other, because a good result may indicate a robust model or it may merely indicate a weak implementation of the adversarial example construction procedure.
This technical report is structured as follows.

Technical Report on the CleverHans v2.1.0 Adversarial Examples Library · Around

Built on

A fast iterative shrinkage-thresholding algorithm for linear inverse problems
Amir Beck and Marc Teboulle · 2009
Earlier work this paper cites.
Evasion attacks against machine learning at test time
Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim Šrndić, Pavel Laskov, Giorgio Giacinto, and Fabio Roli · 2013
Earlier work this paper cites.
Intriguing properties of neural networks
Original
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2013
Earlier work this paper cites.
Adam: A Method for Stochastic Optimization
Original
Diedrik P Kingma and Jimmy Ba · 2014
Earlier work this paper cites.
Explaining and harnessing adversarial examples
Original
Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy · 2014
Earlier work this paper cites.
DeepFool: a simple and accurate method to fool deep neural networks
Original
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, and Pascal Frossard · 2015
Earlier work this paper cites.
Adversarial manipulation of deep representations
Original
Sara Sabour, Yanshuai Cao, Fartash Faghri, and David J Fleet · 2015
Earlier work this paper cites.
Tensorflow: Large-scale machine learning on heterogeneous distributed systems
Original
Martın Abadi, Ashish Agarwal, Paul Barham, Eugene Brevdo, Zhifeng Chen, Craig Citro, Greg S Corrado, Andy Davis, Jeffrey Dean, Matthieu Devin, et al · 2016
Earlier work this paper cites.

Similar

Towards evaluating the robustness of neural networks
Original
Nicholas Carlini and David Wagner · 2016
Cited alongside, same era.
Adversarial examples in the physical world
Original
Alexey Kurakin, Ian Goodfellow, and Samy Bengio · 2016
Cited alongside, same era.
The limitations of deep learning in adversarial settings
Nicolas Papernot, Patrick McDaniel, Somesh Jha, Matt Fredrikson, Z Berkay Celik, and Ananthram Swami · 2016
Cited alongside, same era.
Theano: A Python framework for fast computation of mathematical expressions
Original
Theano Development Team · 2016
Cited alongside, same era.
Adversarial examples are not easily detected: Bypassing ten detection methods
Original
Nicholas Carlini and David Wagner · 2017

Then

Towards deep learning models resistant to adversarial attacks
Original
Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu · 2017
Closest in time.
Attacking the Madry defense model with L1-based adversarial examples
Original
Yash Sharma and Pin-Yu Chen · 2017
Closest in time.
Ensemble adversarial training: Attacks and defenses
Original
Florian Tramèr, Alexey Kurakin, Nicolas Papernot, Dan Boneh, and Patrick McDaniel · 2017
Closest in time.
On the limitation of MagNet defense against L1-based adversarial examples
Original
Pei-Hsuan Lu, Pin-Yu Chen, Kang-Cheng Chen, and Chia-Mu Yu · 2018
Closest in time.
Adversarial attacks and defences competition

Beyond the bibliography

alphaXiv searches the wider corpus for related work and actual follow-ups.

Open on alphaXiv

alphaXiv is searching for related work…

Cited alongside, same era.

EAD: Elastic-net attacks to deep neural networks via adversarial examples

Pin-Yu Chen, Yash Sharma, Huan Zhang, Jinfeng Yi, and Cho-Jui Hsieh · 2017

Cited alongside, same era.

ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models

Pin-Yu Chen, Huan Zhang, Yash Sharma, Jinfeng Yi, and Cho-Jui Hsieh · 2017

Cited alongside, same era.

Boosting adversarial attacks with momentum

Yinpeng Dong, Fangzhou Liao, Tianyu Pang, Hang Su, Jun Zhu, Xiaolin Hu, and Jianguo Li · 2017

Cited alongside, same era.

Alexey Kurakin, Ian Goodfellow, Samy Bengio, Yinpeng Dong, Fangzhou Liao, Ming Liang, Tianyu Pang, Jun Zhu, Xiaolin Hu, Cihang Xie, Jianyu Wang, Zhishuai Zhang, Zhou Ren, Alan Yuille, Sangxia Huang, Yao Zhao, Yuzhe Zhao, Zhonglin Han, Junjiajia Long, Yerkebulan Berdibekov, Takuya Akiba, Setya Tokui, and Motoki Abe · 2018

Closest in time.

Bypassing feature squeezing by increasing adversary strength

Yash Sharma and Pin-Yu Chen · 2018

Closest in time.

Adversarial risk and the dangers of evaluating against weak attacks

Jonathan Uesato, Brendan O’Donoghue, Aaron van den Oord, and Pushmeet Kohli · 2018

Closest in time.