Saved in:
| Main Authors: | , , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2023
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2310.17626 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911862056026112 |
|---|---|
| author | Gu, Jindong Jia, Xiaojun de Jorge, Pau Yu, Wenqain Liu, Xinwei Ma, Avery Xun, Yuan Hu, Anjun Khakzar, Ashkan Li, Zhijiang Cao, Xiaochun Torr, Philip |
| author_facet | Gu, Jindong Jia, Xiaojun de Jorge, Pau Yu, Wenqain Liu, Xinwei Ma, Avery Xun, Yuan Hu, Anjun Khakzar, Ashkan Li, Zhijiang Cao, Xiaochun Torr, Philip |
| contents | The emergence of Deep Neural Networks (DNNs) has revolutionized various domains by enabling the resolution of complex tasks spanning image recognition, natural language processing, and scientific problem-solving. However, this progress has also brought to light a concerning vulnerability: adversarial examples. These crafted inputs, imperceptible to humans, can manipulate machine learning models into making erroneous predictions, raising concerns for safety-critical applications. An intriguing property of this phenomenon is the transferability of adversarial examples, where perturbations crafted for one model can deceive another, often with a different architecture. This intriguing property enables black-box attacks which circumvents the need for detailed knowledge of the target model. This survey explores the landscape of the adversarial transferability of adversarial examples. We categorize existing methodologies to enhance adversarial transferability and discuss the fundamental principles guiding each approach. While the predominant body of research primarily concentrates on image classification, we also extend our discussion to encompass other vision tasks and beyond. Challenges and opportunities are discussed, highlighting the importance of fortifying DNNs against adversarial vulnerabilities in an evolving landscape. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2310_17626 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | A Survey on Transferability of Adversarial Examples across Deep Neural Networks Gu, Jindong Jia, Xiaojun de Jorge, Pau Yu, Wenqain Liu, Xinwei Ma, Avery Xun, Yuan Hu, Anjun Khakzar, Ashkan Li, Zhijiang Cao, Xiaochun Torr, Philip Computer Vision and Pattern Recognition The emergence of Deep Neural Networks (DNNs) has revolutionized various domains by enabling the resolution of complex tasks spanning image recognition, natural language processing, and scientific problem-solving. However, this progress has also brought to light a concerning vulnerability: adversarial examples. These crafted inputs, imperceptible to humans, can manipulate machine learning models into making erroneous predictions, raising concerns for safety-critical applications. An intriguing property of this phenomenon is the transferability of adversarial examples, where perturbations crafted for one model can deceive another, often with a different architecture. This intriguing property enables black-box attacks which circumvents the need for detailed knowledge of the target model. This survey explores the landscape of the adversarial transferability of adversarial examples. We categorize existing methodologies to enhance adversarial transferability and discuss the fundamental principles guiding each approach. While the predominant body of research primarily concentrates on image classification, we also extend our discussion to encompass other vision tasks and beyond. Challenges and opportunities are discussed, highlighting the importance of fortifying DNNs against adversarial vulnerabilities in an evolving landscape. |
| title | A Survey on Transferability of Adversarial Examples across Deep Neural Networks |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2310.17626 |