arXiv Machine Learning By Raik Dankworth, Felix M\"achtle, Thomas Eisenbarth, Gesina Schwalbe

Attack logics, not outputs: Concept-based Property Attacks for Shortcut Elimination in Neural Networks

Read the original on arXiv Machine Learning →

The paper introduces concept-based property attacks, which target logical inconsistencies in human‑interpretable concepts (e.g., “red ∧ octagonal → stop_sign”) rather than merely flipping final class labels. It formalizes these properties, proves that attacking them reduces the search space compared to class‑level attacks, and implements them using concept‑based explainable AI techniques. Empirical results across vision and code‑processing models show that retraining with these attacks preserves robustness gains while better eliminating semantic biases.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Machine Learning.

arXiv Machine Learning
Sep 22

Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision

The paper introduces RIBA, a reinforcement‑learning inspired black‑box adversarial attack that generates perturbations for neural networks with fewer queries than existing methods. RIBA achieves a 25.4% reduction in median queries on ResNet‑18/Cifar10 and a 22.5% reduction on Vit‑B/16/ImageNet, while matching white‑box attack performance on an adversarially trained model.

By Florian Krone, Elena Hoemann, Sven Hallerbach
arXiv AI
Sep 2

Does Reasoning Mitigate Backdoor Attacks? A Neuro-Symbolic Perspective

The paper investigates whether neuro‑symbolic (NeSy) AI models, which combine neural perception with symbolic reasoning, can mitigate backdoor attacks. It presents a systematic evaluation comparing the NeSy framework DeepProbLog to baseline neural networks across eight backdoor settings and four reasoning tasks. Results indicate that NeSy models are generally more robust than pure neural models, but their resilience depends heavily on how strictly the reasoning process is enforced and its alignment with the attack target.

By Marco Antonio Corallo, Andrea Agiollo, Mauro Conti, Alberto Giaretta