activity
20182020
most citedFooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking

19 citations · 40 across the 4 of their papers we have counts for

collaborators

8 papers

cs.CR2020

Hermes Attack: Steal DNN Models with Lossless Inference Accuracy

Yuankun Zhu, Yueqiang Cheng, Husheng Zhou +1

Deep Neural Networks (DNNs) models become one of the most valuable enterprise assets due to their critical roles in all aspects of applications. With the trend of privatization dep…

cs.LG2020

Towards Practical Lottery Ticket Hypothesis for Adversarial Training

Bai Li, Shiqi Wang, Yunhan Jia +4

Recent research has proposed the lottery ticket hypothesis, suggesting that for a deep neural network, there exist trainable sub-networks performing equally or better than the orig…

eess.IV20199 cited

Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction

Yantao Lu, Yunhan Jia, Jianyu Wang +4

Neural networks are known to be vulnerable to carefully crafted adversarial examples, and these malicious samples often transfer, i.e., they remain adversarial even against other m…

cs.CV201919 cited

Fooling Detection Alone is Not Enough: First Adversarial Attack against Multiple Object Tracking

Yunhan Jia, Yantao Lu, Junjie Shen +3

Recent work in adversarial machine learning started to focus on the visual perception in autonomous driving and studied Adversarial Examples (AEs) for object detection models. Howe…

cs.CV20191 cited

Autonomous Human Activity Classification from Ego-vision Camera and Accelerometer Data

Yantao Lu, Senem Velipasalar

There has been significant amount of research work on human activity classification relying either on Inertial Measurement Unit (IMU) data or data from static cameras providing a t…

cs.LG201911 cited

Enhancing Cross-task Transferability of Adversarial Examples with Dispersion Reduction

Yunhan Jia, Yantao Lu, Senem Velipasalar +2

Neural networks are known to be vulnerable to carefully crafted adversarial examples, and these malicious samples often transfer, i.e., they maintain their effectiveness even again…