| Boosting adversarial attacks with momentum Y Dong, F Liao, T Pang, H Su, J Zhu, X Hu, J Li Proceedings of the IEEE Conference on Computer Vision and Pattern …, 2018 | 3153 | 2018 |
| Defense against adversarial attacks using high-level representation guided denoiser F Liao, M Liang, Y Dong, T Pang, X Hu, J Zhu Proceedings of the IEEE conference on computer vision and pattern …, 2018 | 1015 | 2018 |
| Evading defenses to transferable adversarial examples by translation-invariant attacks Y Dong, T Pang, H Su, J Zhu Proceedings of the IEEE/CVF conference on computer vision and pattern …, 2019 | 919 | 2019 |
| Efficient decision-based black-box adversarial attacks on face recognition Y Dong, H Su, B Wu, Z Li, W Liu, T Zhang, J Zhu proceedings of the IEEE/CVF conference on computer vision and pattern …, 2019 | 465 | 2019 |
| Technical report on the cleverhans v2. 1.0 adversarial examples library N Papernot, F Faghri, N Carlini, I Goodfellow, R Feinman, A Kurakin, ... arXiv preprint arXiv:1610.00768, 2016 | 423 | 2016 |
| Adversarial attacks and defences competition A Kurakin, I Goodfellow, S Bengio, Y Dong, F Liao, M Liang, T Pang, ... The NIPS'17 Competition: Building Intelligent Systems, 195-231, 2018 | 358 | 2018 |
| Benchmarking adversarial robustness on image classification Y Dong, QA Fu, X Yang, T Pang, H Su, Z Xiao, J Zhu proceedings of the IEEE/CVF conference on computer vision and pattern …, 2020 | 313 | 2020 |
| Bag of tricks for adversarial training T Pang, X Yang, Y Dong, H Su, J Zhu ICLR 2021, 2020 | 292 | 2020 |
| Improving black-box adversarial attacks with a transfer-based prior S Cheng, Y Dong, T Pang, H Su, J Zhu NeurIPS 2019, 2019 | 288 | 2019 |
| Towards robust detection of adversarial examples T Pang, C Du, Y Dong, J Zhu NeurIPS 2018, 2017 | 256* | 2017 |
| Rethinking softmax cross-entropy loss for adversarial robustness T Pang, K Xu, Y Dong, C Du, N Chen, J Zhu ICLR 2020, 2019 | 191 | 2019 |
| Boosting adversarial training with hypersphere embedding T Pang, X Yang, Y Dong, K Xu, J Zhu, H Su NeurIPS 2020, 2020 | 161 | 2020 |
| Improving interpretability of deep neural networks with semantic information Y Dong, H Su, J Zhu, B Zhang Proceedings of the IEEE conference on computer vision and pattern …, 2017 | 156 | 2017 |
| Towards interpretable deep neural networks by leveraging adversarial examples Y Dong, H Su, J Zhu, F Bao AAAI 2019 Workshop on Network Interpretability for Deep Learning, 2017 | 143 | 2017 |
| Adversarial Distributional Training for Robust Deep Learning Y Dong, Z Deng, T Pang, H Su, J Zhu Advances in Neural Information Processing Systems, 2020 | 122 | 2020 |
| Black-box Detection of Backdoor Attacks with Limited Information and Data Y Dong, X Yang, Z Deng, T Pang, Z Xiao, H Su, J Zhu ICCV 2021, 2021 | 114 | 2021 |
| Improving transferability of adversarial patches on face recognition with generative models Z Xiao, X Gao, C Fu, Y Dong, W Gao, X Zhang, J Zhou, J Zhu Proceedings of the IEEE/CVF conference on computer vision and pattern …, 2021 | 111 | 2021 |
| Towards Face Encryption by Generating Adversarial Identity Masks X Yang, Y Dong, T Pang, H Su, J Zhu, Y Chen, H Xue ICCV 2021, 2021 | 95 | 2021 |
| Batch virtual adversarial training for graph convolutional networks Z Deng, Y Dong, J Zhu ICML 2019 Workshop on Learning and Reasoning with Graph-Structured …, 2019 | 94* | 2019 |
| Forecast the Plausible Paths in Crowd Scenes. H Su, J Zhu, Y Dong, B Zhang IJCAI 1, 2, 2017 | 87 | 2017 |
Jun ZhuProfessor of Computer Science, Tsinghua UniversityVerified email at mail.tsinghua.edu.cn
