Kassem Fawaz

On the Limitations of Stochastic Pre-processing Defenses

2022 · arXiv (Cornell University)

Defending against adversarial examples remains an open problem. A common belief is that randomness at inference increases the cost of finding adversarial inputs. An example of such a defense is to apply a random transformation …

SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks

2023 · arXiv (Cornell University)

Machine Learning (ML) systems are vulnerable to adversarial examples, particularly those from query-based black-box attacks. Despite various efforts to detect and prevent such attacks, ML systems are still at risk, demanding a more comprehensive approach …