Cover Image

Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Hong, Hanbin, Zhang, Xinyu, Wang, Binghui, Ba, Zhongjie, Hong, Yuan
Format:	Preprint
Published:	2023
Subjects:	Machine Learning Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks
by: Zhang, Xinyu, et al.
Published: (2023)

Towards Strong Certified Defense with Universal Asymmetric Randomization
by: Hong, Hanbin, et al.
Published: (2025)

Provably Cost-Sensitive Adversarial Defense via Randomized Smoothing
by: Xin, Yuan, et al.
Published: (2023)

Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks
by: Noorbakhsh, Sayedeh Leila, et al.
Published: (2024)

Distributed Backdoor Attacks on Federated Graph Learning and Certified Defenses
by: Yang, Yuxin, et al.
Published: (2024)

Backdoor Attacks on Discrete Graph Diffusion Models
by: Wang, Jiawen, et al.
Published: (2025)

Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergence
by: Feng, Shuya, et al.
Published: (2024)

Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness
by: Deng, Jieren, et al.
Published: (2024)

PECAN: A Deterministic Certified Defense Against Backdoor Attacks
by: Zhang, Yuhao, et al.
Published: (2023)

Data-free Defense of Black Box Models Against Adversarial Attacks
by: Nayak, Gaurav Kumar, et al.
Published: (2022)

Learning Robust and Privacy-Preserving Representations via Information Theory
by: Zhang, Binghui, et al.
Published: (2024)

Towards Certified Malware Detection: Provable Guarantees Against Evasion Attacks
by: Giri, Nandakrishna, et al.
Published: (2026)

A Learning-Based Attack Framework to Break SOTA Poisoning Defenses in Federated Learning
by: Yang, Yuxin, et al.
Published: (2024)

Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method
by: Li, Jiate, et al.
Published: (2024)

Provably Unlearnable Data Examples
by: Wang, Derui, et al.
Published: (2024)

BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack
by: Vo, Viet Quoc, et al.
Published: (2024)

Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective
by: Naderloui, Nima, et al.
Published: (2025)

Adversarial Attacks on Locally Private Graph Neural Networks
by: Varun, Matta, et al.
Published: (2026)

Calibration Attacks: A Comprehensive Study of Adversarial Attacks on Model Confidence
by: Obadinma, Stephen, et al.
Published: (2024)

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
by: Zhan, Qiusi, et al.
Published: (2025)

Certified Defense on the Fairness of Graph Neural Networks
by: Dong, Yushun, et al.
Published: (2023)

Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses
by: Yu, Yunrui, et al.
Published: (2026)

Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences
by: Lyu, Saiyue, et al.
Published: (2024)

A No-Defense Defense Against Gradient-Based Adversarial Attacks on ML-NIDS: Is Less More?
by: elShehaby, Mohamed, et al.
Published: (2026)

PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks
by: Feng, Chen, et al.
Published: (2024)

Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost
by: Yeh, Cheng-Han, et al.
Published: (2024)

Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks
by: Bokobza, Roey, et al.
Published: (2024)

Tricking Retrievers with Influential Tokens: An Efficient Black-Box Corpus Poisoning Attack
by: Wang, Cheng, et al.
Published: (2025)

CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization
by: Wang, Derui, et al.
Published: (2025)

SoK: Pitfalls in Evaluating Black-Box Attacks
by: Suya, Fnu, et al.
Published: (2023)

Black-Box Privacy Attacks on Shared Representations in Multitask Learning
by: Abascal, John, et al.
Published: (2025)

Adversarial Sparse Teacher: Defense Against Distillation-Based Model Stealing Attacks Using Adversarial Examples
by: Yilmaz, Eda, et al.
Published: (2024)

Collective Certified Robustness against Graph Injection Attacks
by: Lai, Yuni, et al.
Published: (2024)

Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey
by: Truong, Vu Tuan, et al.
Published: (2024)

Detecting Adversarial Examples
by: Mumcu, Furkan, et al.
Published: (2024)

A Defensive Framework Against Adversarial Attacks on Machine Learning-Based Network Intrusion Detection Systems
by: Tafreshian, Benyamin, et al.
Published: (2025)

Certified Causal Defense with Generalizable Robustness
by: Qiao, Yiran, et al.
Published: (2024)

Black-Box Adversarial Attacks on LLM-Based Code Completion
by: Jenko, Slobodan, et al.
Published: (2024)

Laundering AI Authority with Adversarial Examples
by: Zhang, Jie, et al.
Published: (2026)

Efficient Adversarial Malware Defense via Trust-Based Raw Override and Confidence-Adaptive Bit-Depth Reduction
by: Chaudhary, Ayush, et al.
Published: (2025)