Query-Efficient Black-Box Attack by Active Learning

J. S. Vitter, “Random Sampling with A Reservoir,” ACM Transactions on Mathematical Software , vol. 11, no. 1, pp. 37–57, 1985

1985

Earlier work this paper cites.

A. L. Berger, V. J. D. Pietra, and S. A. D. Pietra, “A Maximum Entropy Approach to Natural Language Processing,” Computational linguistics , vol. 22, no. 1, pp. 39–71, 1996

1996

Earlier work this paper cites.

Y. LeCun, “The MNIST Database of Handwritten Digits,” http://yann. lecun. com/exdb/mnist/ , 1998

1998

Earlier work this paper cites.

T. Scheffer, C. Decomain, and S. Wrobel, “Active Hidden Markov Models for Information Extraction,” in Proceedings of the International Symposium on Intelligent Data Analysis . Springer, 2001, pp. 309–318

2001

Earlier work this paper cites.

Z. Zheng and B. Padmanabhan, “On Active Learning for Data Acquisition,” in Proceedings of the 2002 IEEE International Conference on Data Mining , 2002

2002

Earlier work this paper cites.

S. Har-Peled, D. Roth, and D. Zimak, “Constraint Classification for Multiclass Classification and Ranking,” in Advances in Neural Information Processing Systems 16 , 2003, pp. 809–816

2003

Earlier work this paper cites.

J. Zhu, H. Wang, T. Yao, and B. K. Tsou, “Active Learning with Sampling by Uncertainty and Density for Word Sense Disambiguation and Text Classification,” in Proceedings of the 22nd International Conference on Computational Linguistics-Volume 1 . Association for Computational Linguistics, 2008, pp. 1137–1144

2008

Earlier work this paper cites.

A. Krizhevsky and G. Hinton, “Learning Multiple Layers of Features from Tiny Images,” Technical report, University of Toronto, , 2009

2009

Earlier work this paper cites.

B. Settles, “Active Learning Literature Survey,” University of Wisconsin, Madison , vol. 52, no. 55-66, p. 11, 2010

2010

Earlier work this paper cites.

K. Small and D. Roth, “Margin-based Active Learning for Structured Predictions,” International Journal of Machine Learning and Cybernetics , vol. 1, no. 1-4, pp. 3–25, 2010

2010

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and Harnessing Adversarial Examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very Deep Convolutional Networks for Large-Scale Image Recognition,” arXiv preprint arXiv:1409.1556 , 2014

Original

2014

Earlier work this paper cites.

Y. LeCun, Y. Bengio, and G. Hinton, “Deep Learning,” Nature , vol. 521, no. 7553, p. 436, 2015

2015

Earlier work this paper cites.

S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: A Simple and Accurate Method to fool Deep Neural Networks,” in Proceedings of the 2016 IEEE Conference on Computer Vision and Pattern Recognition , 2016, pp. 2574–2582

2016

Earlier work this paper cites.

N. Narodytska and S. P. Kasiviswanathan, “Simple Black-Box Adversarial Perturbations for Deep Networks,” arXiv preprint arXiv:1612.06299 , 2016

Original

2016

Cited alongside, same era.

N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, “The Limitations of Deep Learning in Adversarial Settings,” in Proceedings of the 2016 IEEE European Symposium on Security and Privacy , 2016, pp. 372–387

2016

Cited alongside, same era.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial Examples in the Physical World,” arXiv preprint arXiv:1607.02533 , 2016

Original

2016

Cited alongside, same era.

A. Rozsa, E. M. Rudd, and T. E. Boult, “Adversarial Diversity and Hard Positive Generation,” in Proceedings of the 2016 IEEE Conference on Computer Vision and Pattern Recognition Workshops , 2016, pp. 25–32

2016

Cited alongside, same era.

C. Xie, J. Wang, Z. Zhang, Z. Ren, and A. Yuille, “Mitigating Adversarial Effects through Randomization,” arXiv preprint arXiv:1711.01991 , 2017

Original

2017

Later among the works it cites.

A. Athalye and I. Sutskever, “Synthesizing Robust Adversarial Examples,” arXiv preprint arXiv:1707.07397 , 2017

Original

2017

Later among the works it cites.

N. Carlini and D. Wagner, “Adversarial Examples are not Easily Detected: Bypassing Ten Detection Methods,” in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security , 2017, pp. 3–14

2017

Later among the works it cites.

P.-Y. Chen, Y. Sharma, H. Zhang, J. Yi, and C.-J. Hsieh, “EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples,” arXiv preprint arXiv:1709.04114 , 2017

Original

2017

Later among the works it cites.