activity
20172020
most citedFooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking

19 citations · 57 across the 5 of their papers we have counts for

collaborators

7 papers

cs.LG2020

Towards Practical Lottery Ticket Hypothesis for Adversarial Training

Bai Li, Shiqi Wang, Yunhan Jia +4

Recent research has proposed the lottery ticket hypothesis, suggesting that for a deep neural network, there exist trainable sub-networks performing equally or better than the orig…

cs.CR202013 cited

Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack

Takami Sato, Junjie Shen, Ningfei Wang +3

Lane-Keeping Assistance System (LKAS) is convenient and widely available today, but also extremely security and safety critical. In this work, we design and implement the first sys…

eess.IV20199 cited

Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction

Yantao Lu, Yunhan Jia, Jianyu Wang +4

Neural networks are known to be vulnerable to carefully crafted adversarial examples, and these malicious samples often transfer, i.e., they remain adversarial even against other m…

cs.LG2019

Explainable Machine Learning in Deployment

Umang Bhatt, Alice Xiang, Shubham Sharma +7

Explainable machine learning offers the potential to provide stakeholders with insights into model behavior by using various methods such as feature importance scores, counterfactu…

cs.CV201919 cited

Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking

Yunhan Jia, Yantao Lu, Junjie Shen +3

Recent work in adversarial machine learning started to focus on the visual perception in autonomous driving and studied Adversarial Examples (AEs) for object detection models. Howe…

cs.LG201911 cited

Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction

Yunhan Jia, Yantao Lu, Senem Velipasalar +2

Neural networks are known to be vulnerable to carefully crafted adversarial examples, and these malicious samples often transfer, i.e., they maintain their effectiveness even again…