Certified adversarial robustness via randomized smoothing
We show how to turn any classifier that classifies well under Gaussian noise into a new
classifier that is certifiably robust to adversarial perturbations under the L2 norm. While this" …
classifier that is certifiably robust to adversarial perturbations under the L2 norm. While this" …
A review of adversarial attack and defense for classification methods
Despite the efficiency and scalability of machine learning systems, recent studies have
demonstrated that many classification methods, especially Deep Neural Networks (DNNs) …
demonstrated that many classification methods, especially Deep Neural Networks (DNNs) …
Evaluating the robustness of neural networks: An extreme value theory approach
The robustness of neural networks to adversarial examples has received great attention due
to security implications. Despite various attack approaches to crafting visually imperceptible …
to security implications. Despite various attack approaches to crafting visually imperceptible …
Virtual homogeneity learning: Defending against data heterogeneity in federated learning
In federated learning (FL), model performance typically suffers from client drift induced by
data heterogeneity, and mainstream works focus on correcting client drift. We propose a …
data heterogeneity, and mainstream works focus on correcting client drift. We propose a …
Adversarial perturbation defense on deep neural networks
Deep neural networks (DNNs) have been verified to be easily attacked by well-designed
adversarial perturbations. Image objects with small perturbations that are imperceptible to …
adversarial perturbations. Image objects with small perturbations that are imperceptible to …
Channel-aware adversarial attacks against deep learning-based wireless signal classifiers
This paper presents channel-aware adversarial attacks against deep learning-based
wireless signal classifiers. There is a transmitter that transmits signals with different …
wireless signal classifiers. There is a transmitter that transmits signals with different …
Per-channel energy normalization: Why and how
In the context of automatic speech recognition and acoustic event detection, an adaptive
procedure named per-channel energy normalization (PCEN) has recently shown to …
procedure named per-channel energy normalization (PCEN) has recently shown to …
Robust adversarial attacks against DNN-based wireless communication systems
There is significant enthusiasm for the employment of Deep Neural Networks (DNNs) for
important tasks in major wireless communication systems: channel estimation and decoding …
important tasks in major wireless communication systems: channel estimation and decoding …
PROVEN: Verifying robustness of neural networks with a probabilistic approach
We propose a novel framework PROVEN to\textbf {PRO} babilistically\textbf {VE} rify\textbf
{N} eural network's robustness with statistical guarantees. PROVEN provides probability …
{N} eural network's robustness with statistical guarantees. PROVEN provides probability …
Noisy feature mixup
We introduce Noisy Feature Mixup (NFM), an inexpensive yet effective method for data
augmentation that combines the best of interpolation based training and noise injection …
augmentation that combines the best of interpolation based training and noise injection …