A survey on adversarial attacks in computer vision: Taxonomy, visualization and future directions

T Long, Q Gao, L Xu, Z Zhou - Computers & Security, 2022 - Elsevier
Deep learning has been widely applied in various fields such as computer vision, natural
language processing, and data mining. Although deep learning has achieved significant …

[HTML][HTML] A comprehensive survey of robust deep learning in computer vision

J Liu, Y ** - Journal of Automation and Intelligence, 2023 - Elsevier
Deep learning has presented remarkable progress in various tasks. Despite the excellent
performance, deep learning models remain not robust, especially to well-designed …

Tight certificates of adversarial robustness for randomly smoothed classifiers

GH Lee, Y Yuan, S Chang… - Advances in Neural …, 2019 - proceedings.neurips.cc
Strong theoretical guarantees of robustness can be given for ensembles of classifiers
generated by input randomization. Specifically, an $\ell_2 $ bounded adversary cannot alter …

Query-efficient black-box adversarial attack with customized iteration and sampling

Y Shi, Y Han, Q Hu, Y Yang… - IEEE Transactions on …, 2022 - ieeexplore.ieee.org
It is a challenging task to fool an image classifier based on deep neural networks under the
black-box setting where the target model can only be queried. Among existing black-box …

Scaleable input gradient regularization for adversarial robustness

C Finlay, AM Oberman - Machine Learning with Applications, 2021 - Elsevier
In this work we revisit gradient regularization for adversarial robustness with some new
ingredients. First, we derive new per-image theoretical robustness bounds based on local …

Polishing decision-based adversarial noise with a customized sampling

Y Shi, Y Han, Q Tian - … of the IEEE/CVF Conference on …, 2020 - openaccess.thecvf.com
As an effective black-box adversarial attack, decision-based methods polish adversarial
noise by querying the target model. Among them, boundary attack is widely applied due to …

A black-box adversarial attack strategy with adjustable sparsity and generalizability for deep image classifiers

A Ghosh, SS Mullick, S Datta, S Das, AK Das… - Pattern Recognition, 2022 - Elsevier
Constructing adversarial perturbations for deep neural networks is an important direction of
research. Crafting image-dependent adversarial perturbations using white-box feedback …

UPAM: unified prompt attack in text-to-image generation models against both textual filters and visual checkers

D Peng, Q Ke, J Liu - arxiv preprint arxiv:2405.11336, 2024 - arxiv.org
Text-to-Image (T2I) models have raised security concerns due to their potential to generate
inappropriate or harmful images. In this paper, we propose UPAM, a novel framework that …

Improved gradient-based adversarial attacks for quantized networks

K Gupta, T Ajanthan - Proceedings of the AAAI Conference on Artificial …, 2022 - ojs.aaai.org
Neural network quantization has become increasingly popular due to efficient memory
consumption and faster computation resulting from bitwise operations on the quantized …

Restricted‐Area Adversarial Example Attack for Image Captioning Model

H Kwon, SH Kim - Wireless Communications and Mobile …, 2022 - Wiley Online Library
Deep neural networks provide good performance in the fields of image recognition, speech
recognition, and text recognition. For example, recurrent neural networks are used by image …