11 citations · 31 across the 9 of their papers we have counts for
6 papers · 1 filter
Investigating Top- White-Box and Transferable Black-box Attack
Chaoning Zhang, Philipp Benz, Adil Karjauv +3
Existing works have identified the limitation of top- attack success rate (ASR) as a metric to evaluate the attack strength but exclusively investigated it in the white-box sett…
Universal Adversarial Training with Class-Wise Perturbations
Philipp Benz, Chaoning Zhang, Adil Karjauv +1
Despite their overwhelming success on a wide range of applications, convolutional neural networks (CNNs) are widely recognized to be vulnerable to adversarial examples. This intrig…
Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective
Chaoning Zhang, Philipp Benz, Adil Karjauv +1
The booming interest in adversarial attacks stems from a misalignment between human vision and a deep neural network (DNN), i.e. a human imperceptible perturbation fools the DNN. M…
Double Targeted Universal Adversarial Perturbations
Philipp Benz, Chaoning Zhang, Tooba Imtiaz +1
Despite their impressive performance, deep neural networks (DNNs) are widely known to be vulnerable to adversarial attacks, which makes it challenging for them to be deployed in se…
Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy
Philipp Benz, Chaoning Zhang, Adil Karjauv +1
Convolutional neural networks (CNNs) have made significant advancement, however, they are widely known to be vulnerable to adversarial attacks. Adversarial training is the most wid…
Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective
Philipp Benz, Chaoning Zhang, In So Kweon
Batch normalization (BN) has been widely used in modern deep neural networks (DNNs) due to improved convergence. BN is observed to increase the model accuracy while at the cost of…