Certified adversarial robustness via randomized smoothing

J Cohen, E Rosenfeld, Z Kolter - international conference on …, 2019 - proceedings.mlr.press
We show how to turn any classifier that classifies well under Gaussian noise into a new
classifier that is certifiably robust to adversarial perturbations under the L2 norm. While this" …

A review of adversarial attack and defense for classification methods

Y Li, M Cheng, CJ Hsieh, TCM Lee - The American Statistician, 2022 - Taylor & Francis
Despite the efficiency and scalability of machine learning systems, recent studies have
demonstrated that many classification methods, especially Deep Neural Networks (DNNs) …

Evaluating the robustness of neural networks: An extreme value theory approach

TW Weng, H Zhang, PY Chen, J Yi, D Su, Y Gao… - arxiv preprint arxiv …, 2018 - arxiv.org
The robustness of neural networks to adversarial examples has received great attention due
to security implications. Despite various attack approaches to crafting visually imperceptible …

Virtual homogeneity learning: Defending against data heterogeneity in federated learning

Z Tang, Y Zhang, S Shi, X He… - … on Machine Learning, 2022 - proceedings.mlr.press
In federated learning (FL), model performance typically suffers from client drift induced by
data heterogeneity, and mainstream works focus on correcting client drift. We propose a …

Adversarial perturbation defense on deep neural networks

X Zhang, X Zheng, W Mao - ACM Computing Surveys (CSUR), 2021 - dl.acm.org
Deep neural networks (DNNs) have been verified to be easily attacked by well-designed
adversarial perturbations. Image objects with small perturbations that are imperceptible to …

Channel-aware adversarial attacks against deep learning-based wireless signal classifiers

B Kim, YE Sagduyu, K Davaslioglu… - IEEE Transactions …, 2021 - ieeexplore.ieee.org
This paper presents channel-aware adversarial attacks against deep learning-based
wireless signal classifiers. There is a transmitter that transmits signals with different …

Per-channel energy normalization: Why and how

V Lostanlen, J Salamon, M Cartwright… - IEEE Signal …, 2018 - ieeexplore.ieee.org
In the context of automatic speech recognition and acoustic event detection, an adaptive
procedure named per-channel energy normalization (PCEN) has recently shown to …

Robust adversarial attacks against DNN-based wireless communication systems

A Bahramali, M Nasr, A Houmansadr… - Proceedings of the …, 2021 - dl.acm.org
There is significant enthusiasm for the employment of Deep Neural Networks (DNNs) for
important tasks in major wireless communication systems: channel estimation and decoding …

PROVEN: Verifying robustness of neural networks with a probabilistic approach

L Weng, PY Chen, L Nguyen… - International …, 2019 - proceedings.mlr.press
We propose a novel framework PROVEN to\textbf {PRO} babilistically\textbf {VE} rify\textbf
{N} eural network's robustness with statistical guarantees. PROVEN provides probability …

Noisy feature mixup

SH Lim, NB Erichson, F Utrera, W Xu… - arxiv preprint arxiv …, 2021 - arxiv.org
We introduce Noisy Feature Mixup (NFM), an inexpensive yet effective method for data
augmentation that combines the best of interpolation based training and noise injection …