activity
20232025
most citedDANAA: Towards transferable attacks with double adversarial neuron attribution

1 citations · 1 across the 6 of their papers we have counts for

collaborators

6 papers

cs.LG2025

PAR-AdvGAN: Improving Adversarial Attack Capability with Progressive Auto-Regression AdvGAN

Jiayu Zhang, Zhiyu Zhu, Xinyi Wang +4

Deep neural networks have demonstrated remarkable performance across various domains. However, they are vulnerable to adversarial examples, which can lead to erroneous predictions.…

cs.LG2024

Leveraging Information Consistency in Frequency and Spatial Domain for Adversarial Attacks

Zhibo Jin, Jiayu Zhang, Zhiyu Zhu +3

Adversarial examples are a key method to exploit deep neural networks. Using gradient information, such examples can be generated in an efficient way without altering the victim mo…

cs.CR2024

DMS: Addressing Information Loss with More Steps for Pragmatic Adversarial Attacks

Zhiyu Zhu, Jiayu Zhang, Xinyi Wang +2

Despite the exceptional performance of deep neural networks (DNNs) across different domains, they are vulnerable to adversarial samples, in particular for tasks related to computer…

cs.CV2024

GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model

Zhiyu Zhu, Huaming Chen, Xinyi Wang +5

Adversarial generative models, such as Generative Adversarial Networks (GANs), are widely applied for generating various types of data, i.e., images, text, and audio. Accordingly,…

cs.CV2023

MFABA: A More Faithful and Accelerated Boundary-based Attribution Method for Deep Neural Networks

Zhiyu Zhu, Huaming Chen, Jiayu Zhang +5

To better understand the output of deep neural networks (DNN), attribution based methods have been an important approach for model interpretability, which assign a score for each i…

cs.CV2023★ 1 cited

DANAA: Towards transferable attacks with double adversarial neuron attribution

Zhibo Jin, Zhiyu Zhu, Xinyi Wang +3

While deep neural networks have excellent results in many fields, they are susceptible to interference from attacking samples resulting in erroneous judgments. Feature-level attack…