activity
20152024
most citedRobust Physical-World Attacks on Deep Learning Models

491 citations · 1k across the 20 of their papers we have counts for

collaborators
Showing cs.CRShow all

12 papers · 1 filter

cs.CR2024★ 1 cited

Attacking the Diebold Signature Variant -- RSA Signatures with Unverified High-order Padding

Ryan W. Gardner, Tadayoshi Kohno, Alec Yasinsac

We examine a natural but improper implementation of RSA signature verification deployed on the widely used Diebold Touch Screen and Optical Scan voting machines. In the implemented…

cs.CR2023★ 6 cited

LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins

Umar Iqbal, Tadayoshi Kohno, Franziska Roesner

Large language model (LLM) platforms, such as ChatGPT, have recently begun offering an app ecosystem to interface with third-party services on the internet. While these apps extend…

cs.CR2023★ 5 cited

Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations

Tadayoshi Kohno, Yasemin Acar, Wulf Loh

The computer security research community regularly tackles ethical questions. The field of ethics / moral philosophy has for centuries considered what it means to be "morally good"…

cs.CR2022

Re-purposing Perceptual Hashing based Client Side Scanning for Physical Surveillance

Ashish Hooda, Andrey Labunets, Tadayoshi Kohno +1

Content scanning systems employ perceptual hashing algorithms to scan user content for illegal material, such as child pornography or terrorist recruitment flyers. Perceptual hashi…

cs.CR2020★ 8 cited

Security and Machine Learning in the Real World

Ivan Evtimov, Weidong Cui, Ece Kamar +3

Machine learning (ML) models deployed in many safety- and business-critical systems are vulnerable to exploitation through adversarial examples. A large body of academic research h…

cs.CR2020★ 169 cited

PACT: Privacy Sensitive Protocols and Mechanisms for Mobile Contact Tracing

Justin Chan, Dean Foster, Shyam Gollakota +10

The global health threat from COVID-19 has been controlled in a number of instances by large-scale testing and contact tracing efforts. We created this document to suggest three fu…

cs.CR2020★ 35 cited

COVID-19 Contact Tracing and Privacy: Studying Opinion and Preferences

Lucy Simko, Ryan Calo, Franziska Roesner +1

There is growing interest in technology-enabled contact tracing, the process of identifying potentially infected COVID-19 patients by notifying all recent contacts of an infected p…

cs.CR2018★ 9 cited

Computer Security Risks of Distant Relative Matching in Consumer Genetic Databases

Peter M. Ney, Luis Ceze, Tadayoshi Kohno

Consumer genetic testing has become immensely popular in recent years and has lead to the creation of large scale genetic databases containing millions of dense autosomal genotype…

cs.CR2018★ 103 cited

Physical Adversarial Examples for Object Detectors

Kevin Eykholt, Ivan Evtimov, Earlence Fernandes +6

Deep neural networks (DNNs) are vulnerable to adversarial examples-maliciously crafted inputs that cause DNNs to make incorrect predictions. Recent work has shown that these attack…

cs.CR2018★ 10 cited

Challenges and New Directions in Augmented Reality, Computer Security, and Neuroscience -- Part 1: Risks to Sensation and Perception

Stefano Baldassi, Tadayoshi Kohno, Franziska Roesner +1

Rapidly advancing AR technologies are in a unique position to directly mediate between the human brain and the physical world. Though this tight coupling presents tremendous opport…

cs.CR2017★ 37 cited

Note on Attacking Object Detectors with Adversarial Stickers

Kevin Eykholt, Ivan Evtimov, Earlence Fernandes +6

Deep learning has proven to be a powerful tool for computer vision and has seen widespread adoption for numerous tasks. However, deep learning algorithms are known to be vulnerable…

cs.CR2017★ 491 cited

Robust Physical-World Attacks on Deep Learning Models

Kevin Eykholt, Ivan Evtimov, Earlence Fernandes +6

Recent studies show that the state-of-the-art deep neural networks (DNNs) are vulnerable to adversarial examples, resulting from small-magnitude perturbations added to the input. G…