Fetching the paper…
Reading the bibliography…
Boundary based blackbox attack has been recognized as practical and effective, given that an attacker only needs to access the final model prediction.
Gradient-based learning applied to document recognition
LeCun, Y., Bottou, L., Bengio, Y., and Haffner, P · 1998
Earlier work this paper cites.
Nonsmooth analysis and control theory , volume 178
Clarke, F. H., Ledyaev, Y. S., Stern, R. J., and Wolenski, P. R · 2008
Earlier work this paper cites.
ImageNet: A Large-Scale Hierarchical Image Database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., and Fei-Fei, L · 2009
Earlier work this paper cites.
Learning multiple layers of features from tiny images
Krizhevsky, A., Hinton, G., et al · 2009
Earlier work this paper cites.
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R · 2013
Earlier work this paper cites.
Explaining and harnessing adversarial examples
Goodfellow, I. J., Shlens, J., and Szegedy, C · 2014
Earlier work this paper cites.
Going deeper with convolutions, 2014
Szegedy, C., Liu, W., Jia, Y., Sermanet, P., Reed, S., Anguelov, D., Erhan, D., Vanhoucke, V., and Rabinovich, A · 2014
Earlier work this paper cites.
Deep learning face attributes in the wild
Liu, Z., Luo, P., Wang, X., and Tang, X · 2015
Earlier work this paper cites.
Very deep convolutional networks for large-scale image recognition, 2015
Simonyan, K. and Zisserman, A · 2015
Earlier work this paper cites.
A unified multi-scale deep convolutional neural network for fast object detection
Cai, Z., Fan, Q., Feris, R. S., and Vasconcelos, N · 2016
Earlier work this paper cites.
Deep residual learning for image recognition
He, K., Zhang, X., Ren, S., and Sun, J · 2016
Earlier work this paper cites.
Adversarial examples in the physical world
Kurakin, A., Goodfellow, I., and Bengio, S · 2016
Earlier work this paper cites.
Transferability in machine learning: from phenomena to black-box attacks using adversarial samples
Papernot, N., McDaniel, P., and Goodfellow, I · 2016
Earlier work this paper cites.
Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models
Chen, P.-Y., Zhang, H., Sharma, Y., Yi, J., and Hsieh, C.-J · 2017
Earlier work this paper cites.
Feature pyramid networks for object detection
Lin, T.-Y., Dollár, P., Girshick, R., He, K., Hariharan, B., and Belongie, S · 2017
Earlier work this paper cites.
The space of transferable adversarial examples
Tramèr, F., Papernot, N., Goodfellow, I., Boneh, D., and McDaniel, P · 2017
Cited alongside, same era.
Attention is all you need
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, L., and Polosukhin, I · 2017
Cited alongside, same era.
Aggregated residual transformations for deep neural networks, 2017
Xie, S., Girshick, R., Dollár, P., Tu, Z., and He, K · 2017
Cited alongside, same era.
Wide residual networks, 2017
Zagoruyko, S. and Komodakis, N · 2017
Cited alongside, same era.
Practical black-box attacks on deep neural networks using efficient query mechanisms
Bhagoji, A. N., He, W., Li, B., and Song, D · 2018
Cited alongside, same era.
Decision-based adversarial attacks: Reliable attacks against black-box machine learning models
Progressive augmentation of gans
Zhang, D. and Khoreva, A · 2019
Later among the works it cites.
Rays: A ray searching method for hard-label adversarial attack
Chen, J. and Gu, Q · 2020
Later among the works it cites.
Hopskipjumpattack: A query-efficient decision-based attack
Chen, J., Jordan, M. I., and Wainwright, M. J · 2020
Later among the works it cites.
Sign-opt: A query-efficient hard-label adversarial attack, 2020
Cheng, M., Singh, S., Chen, P., Chen, P.-Y., Liu, S., and Hsieh, C.-J · 2020
Later among the works it cites.
Controllable orthogonalization in training dnns
Huang, L., Liu, L., Zhu, F., Wan, D., Yuan, Z., Li, B., and Shao, L · 2020
Later among the works it cites.
Mdfn: Multi-scale deep feature learning network for object detection
Ma, W., Wu, Y., Cen, F., and Wang, G · 2020
Later among the works it cites.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Brendel, W., Rauber, J., and Bethge, M · 2018
Cited alongside, same era.
Why are randomly drawn vectors nearly perpendicular in high dimensions
Fiers, T · 2018
Cited alongside, same era.
Densely connected convolutional networks, 2018
Huang, G., Liu, Z., van der Maaten, L., and Weinberger, K. Q · 2018
Cited alongside, same era.
Black-box adversarial attacks with limited queries and information
Ilyas, A., Engstrom, L., Athalye, A., and Lin, J · 2018
Cited alongside, same era.
Progressive growing of gans for improved quality, stability, and variation, 2018
Karras, T., Aila, T., Laine, S., and Lehtinen, J · 2018
Cited alongside, same era.
Towards deep learning models resistant to adversarial attacks
Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A · 2018
Cited alongside, same era.
Efficient decision-based black-box adversarial attacks on face recognition
Dong, Y., Su, H., Wu, B., Li, Z., Liu, W., Zhang, T., and Zhu, J · 2019
Cited alongside, same era.
Torchvision.models
PyTorch · 2020
Later among the works it cites.
Pytorch GAN zoo
Research, F · 2020
Later among the works it cites.
Hybrid batch attacks: Finding black-box adversarial examples with limited queries
Suya, F., Chi, J., Evans, D., and Tian, Y · 2020
Later among the works it cites.
Diversity can be transferred: Output diversification for white-and black-box attacks
Tashiro, Y., Song, Y., and Ermon, S · 2020
Later among the works it cites.
Autozoom: Autoencoder-based zeroth order optimization method for attacking black-box neural networks, 2020
Tu, C.-C., Ting, P., Chen, P.-Y., Liu, S., Zhang, H., Yi, J., Hsieh, C.-J., and Cheng, S.-M · 2020
Later among the works it cites.
Cascade ef-gan: Progressive facial expression editing with local focuses
Wu, R., Zhang, G., Lu, S., and Chen, T · 2020
Later among the works it cites.
Randomized smoothing of all shapes and sizes
Yang, G., Duan, T., Hu, E., Salman, H., Razenshteyn, I., and Li, J · 2020
Later among the works it cites.
A cascaded r-cnn with multiscale attention and imbalanced samples for traffic sign detection
Zhang, J., Xie, Z., Sun, J., Zou, X., and Wang, J · 2020
Later among the works it cites.
Nonlinear gradient estimation for query efficient blackbox attack
Li, H., Li, L., Xu, X., Zhang, X., Yang, S., and Li, B · 2021
Closest in time.