88 citations · 199 across the 18 of their papers we have counts for
10 papers · 1 filter
Investigating Top- White-Box and Transferable Black-box Attack
Chaoning Zhang, Philipp Benz, Adil Karjauv +3
Existing works have identified the limitation of top- attack success rate (ASR) as a metric to evaluate the attack strength but exclusively investigated it in the white-box sett…
Dual Temperature Helps Contrastive Learning Without Many Negative Samples: Towards Understanding and Simplifying MoCo
Chaoning Zhang, Kang Zhang, Trung X. Pham +4
Contrastive learning (CL) is widely known to require many negative samples, 65536 in MoCo for instance, for which the performance of a dictionary-free framework is often inferior b…
How Does SimSiam Avoid Collapse Without Negative Samples? A Unified Understanding with Self-supervised Contrastive Learning
Chaoning Zhang, Kang Zhang, Chenshuang Zhang +3
To avoid collapse in self-supervised learning (SSL), a contrastive loss is widely used but often requires a large number of negative samples. Without negative samples yet achieving…
Universal Adversarial Training with Class-Wise Perturbations
Philipp Benz, Chaoning Zhang, Adil Karjauv +1
Despite their overwhelming success on a wide range of applications, convolutional neural networks (CNNs) are widely recognized to be vulnerable to adversarial examples. This intrig…
Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective
Chaoning Zhang, Philipp Benz, Adil Karjauv +1
The booming interest in adversarial attacks stems from a misalignment between human vision and a deep neural network (DNN), i.e. a human imperceptible perturbation fools the DNN. M…
Self-Adaptive Training: Bridging Supervised and Self-Supervised Learning
Lang Huang, Chao Zhang, Hongyang Zhang
We propose self-adaptive training -- a unified training algorithm that dynamically calibrates and enhances training processes by model predictions without incurring an extra comput…
Double Targeted Universal Adversarial Perturbations
Philipp Benz, Chaoning Zhang, Tooba Imtiaz +1
Despite their impressive performance, deep neural networks (DNNs) are widely known to be vulnerable to adversarial attacks, which makes it challenging for them to be deployed in se…
Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy
Philipp Benz, Chaoning Zhang, Adil Karjauv +1
Convolutional neural networks (CNNs) have made significant advancement, however, they are widely known to be vulnerable to adversarial attacks. Adversarial training is the most wid…
Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective
Philipp Benz, Chaoning Zhang, In So Kweon
Batch normalization (BN) has been widely used in modern deep neural networks (DNNs) due to improved convergence. BN is observed to increase the model accuracy while at the cost of…
Self-Adaptive Training: beyond Empirical Risk Minimization
Lang Huang, Chao Zhang, Hongyang Zhang
We propose self-adaptive training---a new training algorithm that dynamically corrects problematic training labels by model predictions without incurring extra computational cost--…