5 papers
STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario
Renyang Liu, Kwok-Yan Lam, Wei Zhou +4
Many attack techniques have been proposed to explore the vulnerability of DNNs and further help to improve their robustness. Despite the significant progress made recently, existin…
SSTA: Salient Spatially Transformed Attack
Renyang Liu, Wei Zhou, Sixin Wu +2
Extensive studies have demonstrated that deep neural networks (DNNs) are vulnerable to adversarial attacks, which brings a huge security risk to the further application of DNNs, es…
Can LSH (Locality-Sensitive Hashing) Be Replaced by Neural Network?
Renyang Liu, Jun Zhao, Xing Chu +3
With the rapid development of GPU (Graphics Processing Unit) technologies and neural networks, we can explore more appropriate data structures and algorithms. Recent progress shows…
SCME: A Self-Contrastive Method for Data-free and Query-Limited Model Extraction Attack
Renyang Liu, Jinhong Zhang, Kwok-Yan Lam +2
Previous studies have revealed that artificial intelligence (AI) systems are vulnerable to adversarial attacks. Among them, model extraction attacks fool the target model by genera…
Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models
Renyang Liu, Wei Zhou, Tianwei Zhang +3
Existing black-box attacks have demonstrated promising potential in creating adversarial examples (AE) to deceive deep learning models. Most of these attacks need to handle a vast…