Adversarial examples for deep neural networks (DNNs) have been shown to be transferable: examples that successfully fool one white-box surrogate model can also deceive other black-box models with different architectur...
详细信息
Adversarial examples for deep neural networks (DNNs) have been shown to be transferable: examples that successfully fool one white-box surrogate model can also deceive other black-box models with different architectures. Although a bunch of empirical studies have provided guidance on generating highly transferable adversarial examples, many of these findings fail to be well explained and even lead to confusing or inconsistent advice for practical use. In this paper, we take a further step towards understanding adversarial transferability, with a particular focus on surrogate aspects. Starting from the intriguing "little robustness" phenomenon, where models adversarially trained with mildly perturbed adversarial samples can serve as better surrogates for transfer attacks, we attribute it to a trade-off between two dominant factors: model smoothness and gradient similarity. Our research focuses on their joint effects on transferability, rather than demonstrating the separate relationships alone. Through a combination of theoretical and empirical analyses, we hypothesize that the data distribution shift induced by off-manifold samples in adversarial training is the reason that impairs gradient similarity. Building on these insights, we further explore the impacts of prevalent data augmentation and gradient regularization on transferability and analyze how the trade-off manifest in various training methods, thus building a comprehensive blueprint for the regulation mechanisms behind transferability. Finally, we provide a general route for constructing superior surrogates to boost transferability, which optimizes both model smoothness and gradient similarity simultaneously, e.g., the combination of input gradient regularization and sharpness-aware minimization (SAM), validated by extensive experiments. In summary, we call for attention to the united impacts of these two factors for launching effective transfer attacks, rather than optimizing one while ignoring the other,
Following the completion of the 500-metre aperture spherical radio telescope (FAST) and the launch of the 19-beam receiver survey project, the number of candidates obtained from pulsar searches has exhibited a notable...
详细信息
ISBN:
(数字)9798350356670
ISBN:
(纸本)9798350356687
Following the completion of the 500-metre aperture spherical radio telescope (FAST) and the launch of the 19-beam receiver survey project, the number of candidates obtained from pulsar searches has exhibited a notable increase, resulting in a significant expansion in the number of observable celestial objects and astronomical phenomena. It has furnished a substantial corpus of data for astronomical research. However, the vast quantity of pulsar candidate data presents a considerable challenge in identifying genuine candidates, due to the presence of numerous interfering signals. (1) The search for pulsar candidates is a complex and time-consuming process, necessitating the acquisition and analysis of a substantial amount of observational data; (2) The discovery of each new pulsar contributes to our understanding of extreme physical processes in the Universe. It is therefore necessary to search for new pulsar candidates on an ongoing basis. This paper examines the key factors influencing the identification of pulsar candidates, with a view to developing an efficient screening process. The High Time Resolution Universe Survey 2 (HTRU2) dataset from the University of California, Irvine (UCI or UC Irvine) platform was employed for data analysis and the construction of predictive analysis models. These were evaluated using classification metrics, including precision, recall, F1-score, and ROC-AUC curves. The latter were constructed using decision trees (DT), random forest (RF) and alpha-investing algorithms. The experimental results demonstrate that the three most critical factors affecting the pulsar candidates are the mean value of the integrated profile (Mean_IP), the excess kurtosis of the integrated profile (Excess_kurtosis_IP), and the skewness of the integrated profile (Skewness_IP).
Federated Semi-supervised Learning (FSSL) combines techniques from both fields of federated and semi-supervised learning to improve the accuracy and performance of models in a distributed environment by using a small ...
详细信息
Feature pyramids have become an essential component in most modern object detectors, such as Mask RCNN, YOLOv3, RetinaNet. In these detectors, the pyramidal feature representations are commonly used which represent an...
详细信息
The automatic generation of brain CT reports has gained widespread attention, given its potential to assist radiologists in diagnosing cranial diseases. However, brain CT scans involve extensive medical entities, such...
详细信息
Implicit feedback (e.g., purchases, views, clicks) have been receiving more attention due to their close relationship with real applications, including shopping, making friends, healthcare, etc. In some recent works, ...
Implicit feedback (e.g., purchases, views, clicks) have been receiving more attention due to their close relationship with real applications, including shopping, making friends, healthcare, etc. In some recent works, pairwise ranking algorithms have been shown to leverage different types of users' behaviors to solve the recommendation problem of heterogeneous implicit feedback. The ever-growing healthcare websites impose a new challenge for medical services recommendation. In this paper, we develop a novel preference learning algorithm to learn a confidence over multiple users' actions, which is called Multi-type Implicit Feedback Confidence Learned Bayesian Personalized Ranking (MTC-BPR). MTC-BPR has the merits of generating positive data from multiple auxiliary feedback and accommodates both the original and generated data for pairwise ranking. Experimental results on the real-world dataset from a healthcare website demonstrate that MTC-BPR achieves more accurate recommendations than several state-of-the-art methods.
In this paper, we consider the following query problem: given two weighted point sets A and B in the Euclidean space Rd, we want to quickly determine that whether their earth mover’s distance (EMD) is larger or small...
详细信息
AI-based automatic aiming cheats (a.k.a., AI aimbots) have proliferated in first-person shooter (FPS) games, which grant malicious users an unfair gameplay advantage. Since AI aimbots operate independently of game dat...
详细信息
This paper examines the interconnections between environmental, social, and governance (ESG) financial trends and the sentiment analysis of ESG-related news from 2019 to 2022. A substantial corpus of news articles and...
详细信息
Aiming at the problems of high detection difficulty and low recognition rate due to the large length-to-width ratio of the weld image and complex defect imaging, this paper proposes a YOLO-SD model with a slight incre...
Aiming at the problems of high detection difficulty and low recognition rate due to the large length-to-width ratio of the weld image and complex defect imaging, this paper proposes a YOLO-SD model with a slight increase in the number of parameters. The model adds a convolutional attention mechanism module CBAM(Convolutional Block Attention Module) to the YOLOv5s (You Only Look Once) backbone network, which improves the accuracy of the model by enhancing effective features and suppressing invalid features; for large-size images with a fixed step size Slice the image, perform detection on the smaller image after the image is taken, and merge the prediction results on the image after the full image detection is completed. The experimental results show that the mAP value of the improved detection model in this paper is increased from 89.73% to 93.46%,and the YOLO-SD model has a stronger ability to identify weld defects. This method has higher accuracy and recognition rate under the premise of controlling the cost of weld defect detection.
暂无评论