DeepCloak: Masking Deep Neural Network Models for Robustness Against Adversarial Samples
Not on the map. Why?
Abstract (arXiv)
Recent studies have shown that deep neural networks (DNN) are vulnerable to adversarial samples: maliciously-perturbed samples crafted to yield incorrect model outputs. Such attacks can severely undermine DNN systems, particularly in security-sensitive settings. It was observed that an adversary could easily generate adversarial samples by making a small perturbation on irrelevant feature dimensions that are unnecessary for the current classification task. To overcome this problem, we introduce a defensive mechanism called DeepCloak. By identifying and removing unnecessary features in a DNN model, DeepCloak limits the capacity an attacker can use generating adversarial samples and therefore increase the robustness against such inputs. Comparing with other defensive approaches, DeepCloak is easy to implement and computationally efficient. Experimental results show that DeepCloak can increase the performance of state-of-the-art DNN models against adversarial samples.
Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). First posted on arXiv 22 Feb 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 9; 2022: 5; 2023: 4; 2024: 2; 2025: 2.
22 papers.
Sort:
- 2022Sparsity Winning Twice: Better Robust Generalization from More Efficient Trainingcited by 41
- 2021Generative Dynamic Patch Attackcited by 19
- 2023Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identificationcited by 19
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustnesscited by 17
- 2022Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Freecited by 15
- 2022Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustnesscited by 10
- 2021Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspectivecited by 9
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2024Machine Learning Robustness: A Primercited by 8
- 2021Adversarial Attacks and Defenses in Physiological Computing: A Systematic Reviewcited by 7
- 2021Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practicecited by 6
10 more
- 2025Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systemscited by 4
- 2021DiPSeN: Differentially Private Self-normalizing Neural Networks For Adversarial Robustness in Federated Learningcited by 2
- 2023A Random-patch based Defense Strategy Against Physical Attacks for Face Recognition Systemscited by 2
- 2021Improving Global Adversarial Robustness Generalization With Adversarially Trained GANcited by 1
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustnesscited by 0
- 2021Benign Adversarial Attack: Tricking Models for Goodnesscited by 0
- 2022Hardening DNNs against Transfer Attacks during Network Compression using Greedy Adversarial Pruningcited by 0
- 2023RobustPdM: Designing Robust Predictive Maintenance against Adversarial Attackscited by 0
- 2023Improving Robustness of Deep Convolutional Neural Networks via Multiresolution Learningcited by 0
- 2025Insights on Adversarial Attacks for Tabular Machine Learning via a Systematic Literature Reviewcited by 0
- 2025Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systems5 Jul 2025
- 2025Insights on Adversarial Attacks for Tabular Machine Learning via a Systematic Literature Review18 Jun 2025
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Masking18 Jul 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2023Improving Robustness of Deep Convolutional Neural Networks via Multiresolution Learning24 Sep 2023
- 2023Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identification14 Jul 2023
- 2023A Random-patch based Defense Strategy Against Physical Attacks for Face Recognition Systems16 Apr 2023
- 2023RobustPdM: Designing Robust Predictive Maintenance against Adversarial Attacks25 Jan 2023
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities17 Oct 2022
- 2022Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustness15 Jun 2022
- 2022Hardening DNNs against Transfer Attacks during Network Compression using Greedy Adversarial Pruning15 Jun 2022
- 2022Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free24 May 2022
10 more
- 2022Sparsity Winning Twice: Better Robust Generalization from More Efficient Training20 Feb 2022
- 2021Generative Dynamic Patch Attack8 Nov 2021
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustness5 Nov 2021
- 2021Benign Adversarial Attack: Tricking Models for Goodness26 Jul 2021
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustness12 Mar 2021
- 2021Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN8 Mar 2021
- 2021Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review4 Feb 2021
- 2021Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practice3 Feb 2021
- 2021DiPSeN: Differentially Private Self-normalizing Neural Networks For Adversarial Robustness in Federated Learning8 Jan 2021
- 2021Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective8 Jan 2021
- 2022Sparsity Winning Twice: Better Robust Generalization from More Efficient Trainingcited by 41
- 2021Generative Dynamic Patch Attackcited by 19
- 2023Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identificationcited by 19
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Maskingcited by 19
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustnesscited by 17
- 2022Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Freecited by 15
- 2022Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustnesscited by 10
- 2021Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspectivecited by 9
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2024Machine Learning Robustness: A Primercited by 8
- 2021Adversarial Attacks and Defenses in Physiological Computing: A Systematic Reviewcited by 7
- 2021Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practicecited by 6
12 most cited of 22 All 22 (JSON)
- 2025Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systems5 Jul 2025
- 2025Insights on Adversarial Attacks for Tabular Machine Learning via a Systematic Literature Review18 Jun 2025
- 2024Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Masking18 Jul 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2023Improving Robustness of Deep Convolutional Neural Networks via Multiresolution Learning24 Sep 2023
- 2023Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identification14 Jul 2023
- 2023A Random-patch based Defense Strategy Against Physical Attacks for Face Recognition Systems16 Apr 2023
- 2023RobustPdM: Designing Robust Predictive Maintenance against Adversarial Attacks25 Jan 2023
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities17 Oct 2022
- 2022Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustness15 Jun 2022
- 2022Hardening DNNs against Transfer Attacks during Network Compression using Greedy Adversarial Pruning15 Jun 2022
- 2022Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free24 May 2022
12 newest of 22 All 22 (JSON)