Geometry-aware metric learning for similar face recognition

Zhang, Nanhai; Han, Jiajie; Hu, Jiani; Deng, Weihong

doi:10.1109/icme.2016.7552916

Cited by 1 publication

(1 citation statement)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We gathered 30 models from the literature for the attack evaluation. All models were either taken from the Robust-Bench library [31] or from the GitHub repositories of the authors directly [14,27,39,49]. We excluded some models from RobustBench as we had difficulties getting them to run correctly.…”

Section: Data and Modelsmentioning

confidence: 99%

Exploring misclassifications of robust neural networks to enhance adversarial attacks

et al. 2023

View full text Add to dashboard Cite

Progress in making neural networks more robust against adversarial attacks is mostly marginal, despite the great efforts of the research community. Moreover, the robustness evaluation is often imprecise, making it challenging to identify promising approaches. We do an observational study on the classification decisions of 19 different state-of-the-art neural networks trained to be robust against adversarial attacks. This analysis gives a new indication of the limits of the robustness of current models on a common benchmark. In addition, our findings suggest that current untargeted adversarial attacks induce misclassification toward only a limited amount of different classes. Similarly, we find that previous attacks under-explore the perturbation space during optimization. This leads to unsuccessful attacks for samples where the initial gradient direction is not a good approximation of the final adversarial perturbation direction. Additionally, we observe that both over- and under-confidence in model predictions result in an inaccurate assessment of model robustness. Based on these observations, we propose a novel loss function for adversarial attacks that consistently improves their efficiency and success rate compared to prior attacks for all 30 analyzed models.

show abstract

Section: Data and Modelsmentioning

confidence: 99%