The DOI matches its Crossref record; 43 of the 46 references it cites were found in a registry or an index.
Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning
Open accessAbstract
Pretrained models from self-supervision are prevalently used in fine-tuning downstream tasks faster or for better accuracy. However, gaining robustness from pretraining is left unexplored. We introduce adversarial training into self-supervision, to provide general-purpose robust pretrained models for the first time. We find these robust pretrained models can benefit the subsequent fine-tuning in two ways: i) boosting final model robustness; ii) saving the computation cost, if proceeding towards adversarial fine-tuning. We conduct extensive experiments to demonstrate that the proposed framework achieves large performance margins (eg, 3.83% on robust accuracy and 1.3% on standard accuracy, on the CIFAR-10 dataset), compared with the conventional end-to-end adversarial training baseline. Moreover, we find that different self-supervised pretrained models have diverse adversarial vulnerability. It inspires us to ensemble several pretraining tasks, which boosts robustness more. Our ensemble strategy contributes to a further improvement of 3.59% on robust accuracy, while maintaining a slightly higher standard accuracy on CIFAR-10. Our codes are available at https://github.com/TAMU-VITA/Adv-SS-Pretraining.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Chen et al. [35, 36] used a hybrid SSL approach to regularize the training of a text classification task.”
From Self-supervised learning: A succinct review (2023) · cites this paper as [35]
Citations
Cites
Deep Residual Learning for Image Recognition
He, K., Zhang, X., Ren, S., & Sun, J. (2016) · 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2016.90 · Cited by 235,474
A fast learning algorithm for deep belief nets
Hinton, G. E., Osindero, S., & Teh, Y.-W. (2006) · Neural Computation · doi:10.1162/neco.2006.18.7.1527 · Cited by 16,336
Identity mappings in deep residual networks
He, K., Zhang, X., Ren, S., & Sun, J. (2016) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-46493-0_38 · Cited by 10,741
Towards Deep Learning Models Resistant to Adversarial Attacks
Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. (2017) · arXiv · doi:10.48550/arxiv.1706.06083 · Cited by 6,602
DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks
Moosavi-Dezfooli, S.-M., Fawzi, A., & Frossard, P. (2016) · 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2016.282 · Cited by 5,317
Greedy layer-wise training of deep networks
Bengio, Y., Lamblin, P., Popovici, D., & Larochelle, H. (2007) · Advances in Neural Information Processing Systems 19 · doi:10.7551/mitpress/7503.003.0024 · Cited by 4,841
On Assessing ML Model Robustness: A Methodological Framework (Academic Track)
Awadid, A., & Robert, B. (2025) · OASIcs : OpenAccess Series in Informatics · doi:10.4230/oasics.saia.2024.1 · Cited by 4,723
(2010) · Journal of Machine Learning Research · doi:10.5555/1756006.1953039 · Cited by 4,051
Zhang, R., Isola, P., & Efros, A. A. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-46487-9_40 · Cited by 3,417
Region Filling and Object Removal by Exemplar-Based Image Inpainting
Criminisi, A., Perez, P., & Toyama, K. (2004) · IEEE Transactions on Image Processing · doi:10.1109/tip.2004.833105 · Cited by 3,258 · cited 2×
“Examples of tasks proven to attain high accuracy through self-supervised pretraining include position predicting tasks (Selfie [35], Jigsaw [25, 3]), rotation predicting tasks (Rotation [9]), and a variety of other perception tasks [6, 41, 8].”
Background
Cited by
Sorted by citations
Graph Contrastive Learning with AugmentationsPreprint
You, Y., Chen, T., Sui, Y., Chen, T., Wang, Z., & Shen, Y. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.13902 · Cited by 1,400
Self-citationRecent advances and clinical applications of deep learning in medical image analysis
Chen, X., Wang, X., Zhang, K., Fung, K.-M. A., Thai, T., Moore, K. N., Mannel, R. S., Liu, H., Zheng, B., & Qiu, Y. (2022) · Medical Image Analysis · doi:10.1016/j.media.2022.102444 · Cited by 1,180
A Survey on Self-Supervised Learning: Algorithms, Applications, and Future Trends
Gui, J., Chen, T., Zhang, J., Cao, Q., Sun, Z., Luo, H., & Tao, D. (2024) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2024.3415112 · Cited by 730
Self-citationRGB-D salient object detection: A survey
Zhou, T., Fan, D.-P., Cheng, M.-M., Shen, J., & Shao, L. (2021) · Computational Visual Media · doi:10.1007/s41095-020-0199-z · Cited by 331
Advances in Adversarial Attacks and Defenses in Computer Vision: A Survey
Akhtar, N., Mian, A. S., Kardan, N., & Shah, M. (2021) · IEEE Access · doi:10.1109/access.2021.3127960 · Cited by 355
Large-Scale Adversarial Training for Vision-and-Language Representation LearningPreprint
Gan, Z., Chen, Y.-C., Li, L., Zhu, C., Cheng, Y., & Liu, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.06195 · Cited by 358
Self-citationSelf-supervised learning: A succinct review
Rani, V., Nabi, S. T., Kumar, M., Mittal, A., & Kumar, K. (2023) · Archives of Computational Methods in Engineering · doi:10.1007/s11831-023-09884-2 · Cited by 295
Cao, Y., Wang, N., Xiao, C., Yang, D., Jin, F., Yang, R., Chen, Q. A., Liu, M., & Li, B. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00076 · Cited by 273
The Lottery Ticket Hypothesis for Pre-trained BERT NetworksPreprint
Chen, T., Frankle, J., Chang, S., Liu, S., Zhang, Y., Wang, Z., & Carbin, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.12223 · Cited by 225
Self-citationBag of Tricks for Adversarial TrainingPreprint
Pang, T., Yang, X. H., Dong, Y., Su, H., & Zhu, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.00467 · Cited by 217
Geometry-aware Instance-reweighted Adversarial TrainingPreprint
Zhang, J., Zhu, J., Niu, G., Han, B., Sugiyama, M., & Kankanhalli, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.01736 · Cited by 161
Learnable Boundary Guided Adversarial Training
Cui, J., Liu, S., Wang, L., & Jia, J. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01543 · Cited by 141
Self-citationAdversarial Self-Supervised Contrastive LearningPreprint
Kim, M., Tack, J., & Hwang, S. J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.07589 · Cited by 145
A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking
Liu, C., Dong, Y., Xiang, W., Yang, X. H., Su, H., Zhu, J., Chen, Y., He, Y., Xue, H., & Zheng, S. (2024) · International Journal of Computer Vision · doi:10.1007/s11263-024-02196-3 · Cited by 162
Light field salient object detection: A review and benchmark
Fu, K., Jiang, Y., Ji, G.-P., Zhou, T., Zhao, Q., & Fan, D.-P. (2022) · Computational Visual Media · doi:10.1007/s41095-021-0256-2 · Cited by 90
Chen, T., Frankle, J., Chang, S., Liu, S., Zhang, Y., Carbin, M., & Wang, Z. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01604 · Cited by 101
Self-citationAn overview of large AI models and their applications
Tu, X., He, Z., Huang, Y., Zhang, Z., Yang, M., & Zhao, J. C. (2024) · Visual Intelligence · doi:10.1007/s44267-024-00065-8 · Cited by 106
Predicting What You Already Know Helps: Provable Self-Supervised LearningPreprint
Lee, J. D., Lei, Q., Saunshi, N., & Zhuo, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2008.01064 · Cited by 102
XGPT: Cross-modal Generative Pre-Training for Image Captioning
Xia, Q., Huang, H., Duan, N., Zhang, D., Ji, L., Sui, Z., Cui, E., Bharti, T., & Zhou, M. (2021) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-88480-2_63 · Cited by 70
Are Vision Transformers Robust to Patch Perturbations?
Gu, J., Volker Tresp, C., & Qin, Y. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-19775-8_24 · Cited by 82
McIntosh, T. R., Susnjak, T., Liu, T., Watters, P., & Halgamuge, M. N. (2024) · IEEE Transactions on Cognitive and Developmental Systems · doi:10.1109/tcds.2024.3377445 · Cited by 62
Structured Adversarial Self-Supervised Learning for Robust Object Detection in Remote Sensing Images
Zhang, C., Lam, K., Liu, T., Chan, Y., & Wang, Q. (2024) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2024.3375398 · Cited by 65
Taxonomy of Machine Learning Safety: A Survey and Primer
Mohseni, S., Wang, H., Xiao, C., Yu, Z., Wang, Z., & Yadawa, J. (2023) · ACM Computing Surveys · doi:10.1145/3551385 · Cited by 53
Self-citationA Survey on Learning to Reject
Zhang, X.-Y., Xie, G.-S., Li, X., Mei, T., & Liu, C. (2023) · Proceedings of the IEEE · doi:10.1109/jproc.2023.3238024 · Cited by 64
Cascading Failure Analysis Based on a Physics-Informed Graph Neural Network
Zhu, Y., Zhou, Y., Wei, W., & Wang, N. (2022) · IEEE Transactions on Power Systems · doi:10.1109/tpwrs.2022.3205043 · Cited by 49
MaxUp: Lightweight Adversarial Training with Data Augmentation Improves Neural Network Training
Gong, C., Ren, T., Ye, M., & Liu, Q. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00250 · Cited by 107
Universal Adversarial Patch Attack for Automatic Checkout Using Perceptual and Attentional Bias
Wang, J., Liu, A., Bai, X., & Liu, X. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3127849 · Cited by 43
Once-for-All Adversarial Training: In-Situ Tradeoff between Robustness and Accuracy for FreePreprint
Wang, H., Chen, T., Gui, S., Hu, T.-K., Liu, J., & Wang, Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.11828 · Cited by 45
Self-citationDissecting the High-Frequency Bias in Convolutional Neural Networks
Abello, A. A., Hirata, R., & Wang, Z. (2021) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw53098.2021.00096 · Cited by 41
Self-citationReliable Adversarial Distillation with Unreliable TeachersPreprint
Zhu, J., Yao, J., Han, B., Zhang, J., Liu, T., Niu, G., Zhou, J., Xu, J., & Yang, H. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.04928 · Cited by 54
You Are Catching My Attention: Are Vision Transformers Bad Learners under Backdoor Attacks?
Yuan, Z., Zhou, P., Zou, K., & Cheng, Y. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.02357 · Cited by 41
Self-citationLAFEAT: Piercing Through Adversarial Defenses with Latent Features
Yu, Y., Gao, X., & Xu, C. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00568 · Cited by 43
One Prompt Word is Enough to Boost Adversarial Robustness for Pre-Trained Vision-Language Models
Li, L., Guan, H., Qiu, J., & Spratling, M. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02304 · Cited by 42
Low Curvature Activations Reduce Overfitting in Adversarial Training
Singla, V., Singla, S., Feizi, S., & Jacobs, D. W. (2021) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv48922.2021.01611 · Cited by 39
Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning
Wu, H., Xu, L., Liu, A. T., Wu, Z., Meng, H. M. L., & Lee, H.-Y. (2021) · IEEE/ACM Transactions on Audio Speech and Language Processing · doi:10.1109/taslp.2021.3133189 · Cited by 37
Adversarial Self-Supervised Learning for Robust SAR Target Recognition
Xu, Y., Sun, H., Chen, J., Lei, L., Ji, K., & Kuang, G. (2021) · Remote Sensing · doi:10.3390/rs13204158 · Cited by 35
Hierarchical and progressive learning with key point sensitive loss for sonar image classification
Chen, X., Tao, H., Zhou, H., Zhou, P., & Deng, Y. (2024) · Multimedia Systems · doi:10.1007/s00530-024-01590-8 · Cited by 35
Visual Prompting for Adversarial Robustness
Chen, A., Lorenz, P., Yao, Y., Chen, P., & Liu, S. (2023) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49357.2023.10097245 · Cited by 36
Self-citationOn Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-LearningPreprint
Wang, R., Xu, K., Liu, S., Chen, P., Weng, T.-W., Gan, C., & Wang, M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.10454 · Cited by 27
Self-citationFine-tuning large language models for interdisciplinary environmental challenges
Zhang, Y., Lin, S., Xiong, Y., Li, N., Zhong, L., Ding, L., & Hu, Q. (2025) · Environmental Science and Ecotechnology · doi:10.1016/j.ese.2025.100608 · Cited by 30
Zhao, T., Yue, M., & Wang, J. (2023) · IEEE Transactions on Power Systems · doi:10.1109/tpwrs.2022.3233735 · Cited by 25
Zhang, X., Zhao, P., Ji, J., Lu, X., & Yin, Y. (2023) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2023.3294567 · Cited by 26
Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket PerspectivePreprint
Chen, T., Cheng, Y., Gan, Z., Liu, J., & Wang, Z. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.00397 · Cited by 44
Self-citationZhai, Y., Zhou, W., Sun, B. S., Li, J., Ke, Q., Ying, Z., Gan, J., Mai, C., Labati, R. D., Piuri, V., et al. (2021) · IEEE Transactions on Geoscience and Remote Sensing · doi:10.1109/tgrs.2021.3066195 · Cited by 25
Enhancing Adversarial Robustness via Test-time Transformation Ensembling
Pérez, J. C., Alfarra, M., Jeanneret, G., Rueda, L., Thabet, A., Ghanem, B., & Arbeláez, P. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00015 · Cited by 26
Pahari, S., Lee, C. H., Sitapure, N., & Kwon, J. S. (2025) · AIChE Journal · doi:10.1002/aic.18923 · Cited by 24
Srinidhi, C. L., & Martel, A. L. (2021) · IEEE International Conference on Computer Vision Workshops · doi:10.1109/iccvw54120.2021.00069 · Cited by 23
Ghelmani, A., & Hammad, A. (2023) · Automation in Construction · doi:10.1016/j.autcon.2023.105001 · Cited by 27
Medical Image Analysis Through Deep Learning Techniques: A Comprehensive Survey
Balasamy, K., Seethalakshmi, V., & Suganyadevi, S. (2024) · Wireless Personal Communications · doi:10.1007/s11277-024-11428-1 · Cited by 39
Yang, Y., Gao, R., Li, Y., Lai, Q., & Xu, Q. (2022) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.24001 · Cited by 25
Adversarial Contrastive Learning via Asymmetric InfoNCE
Yu, Q., Lou, J., Zhan, X., Li, Q., Zuo, W., Liu, Y., & Liu, J. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-20065-6_4 · Cited by 21
Liang, J., Yi, R., Chen, J., Nie, Y., & Zhang, H. (2024) · IEEE Transactions on Intelligent Vehicles · doi:10.1109/tiv.2024.3403667 · Cited by 21
Liu, Z., Xu, Y. T., Ji, X., & Chan, A. B. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01577 · Cited by 20
Adaptive Adversarial Contrastive Learning for Cross-Domain Recommendation
Hsu, C.-W., Chen, C.-T., & Huang, S.-H. (2023) · ACM Transactions on Knowledge Discovery from Data · doi:10.1145/3630259 · Cited by 19
Visually Source-Free Domain Adaptation via Adversarial Style Matching
Jing, M., Li, J., Lü, K., Zhu, L., & Shen, H. T. (2024) · IEEE Transactions on Image Processing · doi:10.1109/tip.2024.3353539 · Cited by 19
Decoupled Adversarial Contrastive Learning for Self-supervised Adversarial Robustness
Zhang, C., Zhang, C., Zhang, C., Niu, A., Feng, J., Yoo, C. D., & Kweon, I. S. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-20056-4_42 · Cited by 18
Self-supervised Adversarial Robustness for the Low-label, High-data Regime
Gowal, S., Huang, P.-S., van den Oord, A., Mann, T., & Kohli, P. (2021) · Cited by 18
CrysGNN: Distilling Pre-trained Knowledge to Enhance Property Prediction for Crystalline Materials
Das, K., Samanta, B., Goyal, P., Lee, S., Bhattacharjee, S., & Ganguly, N. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i6.25892 · Cited by 26
Self-supervised Pre-training with Hard Examples Improves Visual RepresentationsPreprint
Li, C., Li, X., Zhang, L., Peng, B., Zhou, M., & Gao, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.13493 · Cited by 20
Toward a blind image quality evaluator in the wild by learning beyond human opinion scores
Wang, Z., Tang, Z., Zhang, J., & Fang, Y. (2023) · Pattern Recognition · doi:10.1016/j.patcog.2022.109296 · Cited by 21
Self-citationAlkhowaiter, M., Kholidy, H. A., Alyami, M., Alghamdi, A. M., & Zou, C. C. (2023) · Sensors · doi:10.3390/s23146287 · Cited by 20
Coverage-guided fuzzing for deep reinforcement learning systems
Wan, X., Li, T., Lin, W., Cai, Y., & Zheng, Z. (2024) · Journal of Systems and Software · doi:10.1016/j.jss.2024.111963 · Cited by 16
Online Adversarial Purification based on Self-SupervisionPreprint
Shi, C., Holtz, C., & Mishne, G. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2101.09387 · Cited by 35
Spatial-Semantic Collaborative Graph Network for Textbook Question Answering
Wang, Y., Wei, B., Liu, J., Lin, Q., Zhang, L., & Wu, Y. (2022) · IEEE Transactions on Circuits and Systems for Video Technology · doi:10.1109/tcsvt.2022.3231463 · Cited by 17
Cybersecurity in neural interfaces: Survey and future trends
Jiang, X., Fan, J., Zhu, Z., Wang, Z., Guo, Y., Liu, X., Jia, F., & Dai, C. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.107604 · Cited by 19
Self-citationAttacking Adversarial Attacks as A DefensePreprint
Wú, B., Pan, H., Shen, L., Gu, J., Zhao, S., Li, Z., Cai, D., He, X., & Liu, W. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.04938 · Cited by 47
Ghazi, N., Aarabi, M. H., & Hamid Soltanian-zadeh, A. (2023) · Neuroinformatics · doi:10.1007/s12021-023-09636-4 · Cited by 16
Backdoor Attacks on Crowd Counting
Sun, Y., Zhang, T., Ma, X., Zhou, P., Lou, J., Xu, Z., Di, X., Cheng, Y., & Sun, L. (2022) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3503161.3548296 · Cited by 15
Self-citationMT3: Meta Test-Time Training for Self-Supervised Test-Time AdaptionPreprint
Bartler, A., Bühler, A., Wiewel, F., Döbler, M., & Yang, B. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.16201 · Cited by 14
Adversarial supervised contrastive learning
Li, Z., Yu, D., Wu, M., Jin, C., & Yu, H. (2022) · Machine Learning · doi:10.1007/s10994-022-06269-7 · Cited by 14
What Does CNN Shift Invariance Look Like? A Visualization Study
Lee, J., Yang, J., & Wang, Z. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-68238-5_15 · Cited by 12
Self-citationTong, B., Lai, H., Pan, Y., & Yin, J. P. (2025) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52734.2025.01855 · Cited by 12
RODD: A Self-Supervised Approach for Robust Out-of-Distribution Detection
Khalid, U., Esmaeili, A., Karim, N., & Rahnavard, N. (2022) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw56347.2022.00028 · Cited by 14
Hussain, M., & Hong, J. (2024) · IEEE Transactions on Reliability · doi:10.1109/tr.2024.3458805 · Cited by 10
da Silva, M. P., Correa, S. P. L. P., Schaefer, M. A. R., Reis, J. C. S., Nunes, I. M., dos Santos, J. A., & Oliveira, H. (2025) · Computers & Graphics · doi:10.1016/j.cag.2025.104434 · Cited by 15
Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces
Shamshad, F., Srivatsan, K., & Nandakumar, K. (2023) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52729.2023.01580 · Cited by 10
Adversarial Feature Augmentation and Normalization for Visual RecognitionPreprint
Chen, T., Cheng, Y., Gan, Z., Wang, J., Wang, L., Wang, Z., & Liu, J. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.12171 · Cited by 17
Self-citationTTAPS: Test-Time Adaption by Aligning Prototypes using Self-Supervision
Bartler, A., Bender, F., Wiewel, F., & Yang, B. (2022) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn55064.2022.9892154 · Cited by 10
Li, H., Dong, D., Fang, M., He, B., Liu, S., Hu, C. Y., Liu, Z., Wang, H., Tang, L., & Tian, J. (2024) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2024.3484991 · Cited by 9
Self-citationAdversarial momentum-contrastive pre-training
Xu, C., Li, D., & Yang, M. (2022) · Pattern Recognition Letters · doi:10.1016/j.patrec.2022.07.005 · Cited by 9
Towards Corruption-Agnostic Robust Domain Adaptation
Xu, Y., Sheng, K., Dong, W., Wu, B., Xu, C., & Hu, B.-G. (2022) · ACM Transactions on Multimedia Computing Communications and Applications · doi:10.1145/3501800 · Cited by 9
Li, G., Lin, C.-C., Zhang, X., Ma, X., & Guo, L. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00030 · Cited by 8
To pretrain or not? A systematic analysis of the benefits of pretraining in diabetic retinopathy
Srinivasan, V., Strodthoff, N., Ma, J., Binder, A., Müller, K., & Samek, W. (2022) · PLoS ONE · doi:10.1371/journal.pone.0274291 · Cited by 16
Maximum Mean Discrepancy is Aware of Adversarial AttacksPreprint
Gao, R., Liu, F., Zhang, J., Han, B., Liu, T., Niu, G., & Sugiyama, M. (2020) · arXiv (Cornell University) · Cited by 8
Adversarial Training with Rectified RejectionPreprint
Pang, T., Zhang, H., He, D., Dong, Y., Su, H., Chen, W. R., Zhu, J., & Liu, T. (2021) · arXiv (Cornell University) · Cited by 8
Initialization Matters for Adversarial Transfer Learning
Hua, A., Gu, J., Xue, Z., Carlini, N., Wong, E., & Qin, Y. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02345 · Cited by 11
Troubleshooting image segmentation models with human-in-the-loop
Wang, H., Chen, T., Wang, Z., & Ma, K. (2022) · Machine Learning · doi:10.1007/s10994-021-06110-7 · Cited by 7
Self-citationAdversarial Robustness through the Lens of Convolutional Filters
Gavrikov, P., & Keuper, J. (2022) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw56347.2022.00025 · Cited by 10
Khoo, L. S., Bay, J. Q., Yap, M. L. K., Lim, M. K., Chong, C. Y., Yang, Z., & Lo, D. (2023) · IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) · doi:10.1109/saner56733.2023.00066 · Cited by 7
10 Security and Privacy Problems in Large Foundation Models
Jia, J., Liu, H., & Gong, N. Z. (2023) · Springer eBooks · doi:10.1007/978-3-031-42637-7_8 · Cited by 8
Practical Machine Learning Safety: A Survey and PrimerPreprint
Mohseni, S., Wang, H., Yu, Z., Xiao, C., Wang, Z., & Yadawa, J. (2021) · arXiv (Cornell University) · Cited by 10
Self-citationHow and When Adversarial Robustness Transfers in Knowledge Distillation?Preprint
Shao, R., Yi, J., Chen, P., & Hsieh, C. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.12072 · Cited by 17
Dynamic robustness evaluation for automated model selection in operation
Zhang, J., Li, J., & Yang, Z. (2024) · Information and Software Technology · doi:10.1016/j.infsof.2024.107603 · Cited by 6
REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service
Qu, W., Jia, J., & Gong, N. Z. (2023) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2023.24444 · Cited by 6
Learning the imaging mechanism directly from optical microscopy observations
Wang, Z., Shan, L., Weng, T.-T., Chen, T., Chen, X.-D., Wang, Z.-Y., Guo, G., & Sun, F. (2023) · Photonics Research · doi:10.1364/prj.488310 · Cited by 6
Self-citationDPA-P2PNet: Deformable Proposal-Aware P2PNet for Accurate Point-Based Cell Detection
Shui, Z., Zheng, S., Zhu, C., Zhang, S., Yu, X., Li, H., Li, J., Chen, P., & Yang, L. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i5.28289 · Cited by 10
Neural architecture search for adversarial robustness via learnable pruning
Li, Y., Zhao, P., Ding, R., Zhou, T. H., Fei, Y., Xu, X., & Lin, X. (2024) · Frontiers in High Performance Computing · doi:10.3389/fhpcp.2024.1301384 · Cited by 9
Simple Post-Training Robustness using Test Time Augmentations and Random Forest
Cohen, G., & Giryes, R. (2024) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv57701.2024.00395 · Cited by 8
Do Invariances in Deep Neural Networks Align with Human Perception?
Nanda, V., Majumdar, A., Kolling, C., Dickerson, J. P., Gummadi, K. P., Love, B. C., & Weller, A. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i8.26112 · Cited by 10
Contrastive Self-Supervised Learning Leads to Higher Adversarial Susceptibility
Gupta, R., Akhtar, N., Mian, A. S., & Shah, M. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i12.26733 · Cited by 7
Metadata
- Authors
- Chen, T., Liu, S., Chang, S., Cheng, Y., Amini, L., & Wang, Z.
- Affiliations
- Texas A&M University (US)
- IBM (United States) (US)
- Microsoft (United States) (US)
- Venue
- 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
- Publisher
- IEEE
- Published
- 2020-06
- Pages
- 696-705
- ISSN
- 1063-6919 (ISSN-L)
- OpenAlex
- W3035106315
- Cited by
- 205
- References
- 46
- Citations by year
- 2026: 13 · 2025: 32 · 2024: 35 · 2023: 34 · 2022: 31 · 2021: 46 · 2020: 14
- FWCI
- 11.94
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Machine Learning and Data Classification
- Physical Sciences › Computer Science › Artificial Intelligence › Domain Adaptation and Few-Shot Learning
- Keywords
- adversarial robustness, self-supervised pre-training, adversarial fine-tuning, adversarial vulnerability, robust accuracy, CIFAR-10, computational complexity reduction
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
