4 papers
DifAttack++: Query-Efficient Black-Box Adversarial Attack via Hierarchical Disentangled Feature Space in Cross-Domain
Jun Liu, Jiantao Zhou, Jiandian Zeng +2
This work investigates efficient score-based black-box adversarial attacks that achieve a high Attack Success Rate (ASR) and good generalization ability. We propose a novel attack…
LLM Unlearning with LLM Beliefs
Kemou Li, Qizhou Wang, Yue Wang +4
Large language models trained on vast corpora inherently risk memorizing sensitive or harmful content, which may later resurface in their outputs. Prevailing unlearning methods gen…
Deferred Poisoning: Making the Model More Vulnerable via Hessian Singularization
Yuhao He, Jinyu Tian, Xianwei Zheng +3
Recent studies have shown that deep learning models are very vulnerable to poisoning attacks. Many defense methods have been proposed to address this issue. However, traditional po…
DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain
Fengpeng Li, Kemou Li, Haiwei Wu +2
To protect deep neural networks (DNNs) from adversarial attacks, adversarial training (AT) is developed by incorporating adversarial examples (AEs) into model training. Recent stud…