Fetching the paper…
Reading the bibliography…
We study black-box adversarial attacks for image classifiers in a constrained threat model, where adversaries can only modify a small fraction of pixels in the form of scratches on an image.
Wordnet: a lexical database for english
George A Miller · 1995
Earlier work this paper cites.
Handbook of computer aided geometric design
Gerald Farin, Josef Hoschek, and M-S Kim · 2002
Earlier work this paper cites.
Learning multiple layers of features from tiny images
Alex Krizhevsky et al · 2009
Earlier work this paper cites.
Poisoning attacks against support vector machines
Battista Biggio, Blaine Nelson, and Pavel Laskov · 2012
Earlier work this paper cites.
Imagenet classification with deep convolutional neural networks
Alex Krizhevsky, Ilya Sutskever, and Geoffrey E Hinton · 2012
Earlier work this paper cites.
A rasterizing algorithm for drawing curves
Alois Zingl · 2012
Earlier work this paper cites.
Intriguing properties of neural networks
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2013
Earlier work this paper cites.
Explaining and harnessing adversarial examples
Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy · 2014
Earlier work this paper cites.
Deep speech: Scaling up end-to-end speech recognition
Awni Hannun, Carl Case, Jared Casper, Bryan Catanzaro, Greg Diamos, Erich Elsen, Ryan Prenger, Sanjeev Satheesh, Shubho Sengupta, Adam Coates, et al · 2014
Earlier work this paper cites.
Very deep convolutional networks for large-scale image recognition
Karen Simonyan and Andrew Zisserman · 2014
Earlier work this paper cites.
Multi-scale convolutional neural networks for lung nodule classification
Wei Shen, Mu Zhou, Feng Yang, Caiyun Yang, and Jie Tian · 2015
Earlier work this paper cites.
Aggnet: Deep learning from crowds for mitosis detection in breast cancer histology images
Shadi Albarqouni, Christoph Baur, Felix Achilles, Vasileios Belagiannis, Stefanie Demirci, and Nassir Navab · 2016
Earlier work this paper cites.
The CMA evolution strategy: A tutorial
Nikolaus Hansen · 2016
Earlier work this paper cites.
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun · 2016
Earlier work this paper cites.
DeepFool: a simple and accurate method to fool deep neural networks
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, and Pascal Frossard · 2016
Earlier work this paper cites.
The limitations of deep learning in adversarial settings
Nicolas Papernot, Patrick McDaniel, Somesh Jha, Matt Fredrikson, Z Berkay Celik, and Ananthram Swami · 2016
Earlier work this paper cites.
Mastering the game of go with deep neural networks and tree search
David Silver, Aja Huang, Chris J Maddison, Arthur Guez, Laurent Sifre, George Van Den Driessche, Julian Schrittwieser, Ioannis Antonoglou, Veda Panneershelvam, Marc Lanctot, et al · 2016
Earlier work this paper cites.
Rethinking the inception architecture for computer vision
Christian Szegedy, Vincent Vanhoucke, Sergey Ioffe, Jon Shlens, and Zbigniew Wojna · 2016
Earlier work this paper cites.
Synthesizing robust adversarial examples
Anish Athalye, Logan Engstrom, Andrew Ilyas, and Kevin Kwok · 2017
Cited alongside, same era.
Emergent complexity via multi-agent competition
Trapit Bansal, Jakub Pachocki, Szymon Sidor, Ilya Sutskever, and Igor Mordatch · 2017
Cited alongside, same era.
Exploring the space of black-box attacks on deep neural networks
Arjun Nitin Bhagoji, Warren He, Bo Li, and Dawn Song · 2017
Cited alongside, same era.
Tom B Brown, Dandelion Mané, Aurko Roy, Martín Abadi, and Justin Gilmer · 2017
Cited alongside, same era.
Adversarial examples are not easily detected: Bypassing ten detection methods
Nicholas Carlini and David Wagner · 2017
Low frequency adversarial perturbation
Chuan Guo, Jared S Frank, and Kilian Q Weinberger · 2018
Later among the works it cites.
Black-box adversarial attacks with limited queries and information
Andrew Ilyas, Logan Engstrom, Anish Athalye, and Jessy Lin · 2018
Later among the works it cites.
Lavan: Localized and visible adversarial noise
Danny Karmon, Daniel Zoran, and Yoav Goldberg · 2018
Later among the works it cites.
Deep learning at the shallow end: Malware classification for non-domain experts
Quan Le, Oisín Boydell, Brian Mac Namee, and Mark Scanlon · 2018
Later among the works it cites.
Towards deep learning models resistant to adversarial attacks
Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu · 2018
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Cited alongside, same era.
Towards evaluating the robustness of neural networks
Nicholas Carlini and David Wagner · 2017
Cited alongside, same era.
Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models
Pin-Yu Chen, Huan Zhang, Yash Sharma, Jinfeng Yi, and Cho-Jui Hsieh · 2017
Cited alongside, same era.
Densely connected convolutional networks
Gao Huang, Zhuang Liu, Laurens Van Der Maaten, and Kilian Q Weinberger · 2017
Cited alongside, same era.
Simple black-box adversarial attacks on deep neural networks
Nina Narodytska and Shiva Kasiviswanathan · 2017
Cited alongside, same era.
Attacking the madry defense model with l _ 1 l\_1 -based adversarial examples
Yash Sharma and Pin-Yu Chen · 2017
Cited alongside, same era.
Mastering chess and shogi by self-play with a general reinforcement learning algorithm
David Silver, Thomas Hubert, Julian Schrittwieser, Ioannis Antonoglou, Matthew Lai, Arthur Guez, Marc Lanctot, Laurent Sifre, Dharshan Kumaran, Thore Graepel, et al · 2017
Cited alongside, same era.
GenAttack: Practical black-box attacks with gradient-free optimization
Moustafa Alzantot, Yash Sharma, Supriyo Chakraborty, and Mani Srivastava · 2018
Cited alongside, same era.
Later among the works it cites.
Malware detection by eating a whole exe
Edward Raff, Jon Barker, Jared Sylvester, Robert Brandon, Bryan Catanzaro, and Charles K Nicholas · 2018
Later among the works it cites.
Simple black-box adversarial attacks
Chuan Guo, Jacob R Gardner, Yurong You, Andrew Gordon Wilson, and Kilian Q Weinberger · 2019
Closest in time.
Sparsefool: a few pixels make a big difference
Apostolos Modas, Seyed-Mohsen Moosavi-Dezfooli, and Pascal Frossard · 2019
Closest in time.
Language models are unsupervised multitask learners
Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, and Ilya Sutskever · 2019
Closest in time.
One pixel attack for fooling deep neural networks
Jiawei Su, Danilo Vasconcellos Vargas, and Kouichi Sakurai · 2019
Closest in time.
Robust intelligent malware detection using deep learning
R Vinayakumar, Mamoun Alazab, KP Soman, Prabaharan Poornachandran, and Sitalakshmi Venkatraman · 2019
Closest in time.
Grandmaster level in StarCraft II using multi-agent reinforcement learning
Oriol Vinyals, Igor Babuschkin, Wojciech M Czarnecki, Michaël Mathieu, Andrew Dudzik, Junyoung Chung, David H Choi, Richard Powell, Timo Ewalds, Petko Georgiev, et al · 2019
Closest in time.
Certified defenses for adversarial patches
Ping-yeh Chiang, Renkun Ni, Ahmed Abdelkader, Chen Zhu, Christoph Studor, and Tom Goldstein · 2020
Closest in time.
Black-box adversarial sample generation based on differential evolution
Junyu Lin, Lei Xu, Yingqi Liu, and Xiangyu Zhang · 2020
Closest in time.
Cognitive Services Image Captioning API
Microsoft · 2020
Closest in time.
Sponge examples: Energy-latency attacks on neural networks
Ilia Shumailov, Yiren Zhao, Daniel Bates, Nicholas Papernot, Robert Mullins, and Ross Anderson · 2020
Closest in time.
Patchattack: A black-box texture-based attack with reinforcement learning
Chenglin Yang, Adam Kortylewski, Cihang Xie, Yinzhi Cao, and Alan Yuille · 2020
Closest in time.