On Adaptive Attacks to Adversarial Example Defenses

Tramer, Florian, Carlini, Nicholas, Brendel, Wieland, Madry, Aleksander·2020·arXiv

Cited by (486)

Items 301–400 of 486

  1. Adversarial Input Detection Using Image Processing Techniques (IPT)
    Kishor Datta Gupta, Dipankar Dasgupta, Zahid Akhtar · 2020 · IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)
  2. Forensics Through Stega Glasses: The Case of Adversarial Images
    Benoît Bonnet, Teddy Furon, Patrick Bas · 2021 · Lecture notes in computer science
  3. Noise Optimization in Artificial Neural Networks
    Xiao Li, Zeliang Zhang, Jinyang Jiang, Yijie Peng · 2022 · IEEE International Conference on Automation Science and Engineering (CASE)
  4. BUZz: BUffer Zones for defending adversarial examples in image classification
    Kaleel Mahmood, Phuong Ha Nguyen, Lam M. Nguyen, Nguyen, Thanh, Marten van Dijk · 2019 · arXiv (Cornell University)
  5. Bridging the Gap Between Adversarial Robustness and Optimization Bias
    Fartash Faghri, Gowal, Sven, Cristina Nader Vasconcelos, David J. Fleet, Fabián Pedregosa, Nicolas Le Roux · 2021 · arXiv (Cornell University)
  6. On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving
    Takami Sato, Qi Alfred Chen · 2021 · arXiv (Cornell University)
  7. A Markov Game Model for AI-based Cyber Security Attack Mitigation
    Hooman Alavizadeh, Julian Jang‐Jaccard, Tansu Alpcan, Seyit Ahmet Camtepe · 2021 · arXiv (Cornell University)
  8. Adversarial attacks and defenses in natural language processing
    Xinshuai Dong · 2022 · DR-NTU (Nanyang Technological University)
  9. UltraAdv: An Ultrasonic Adversarial Attack on Closed-Box Speech Recognition Systems
    Guoming Zhang, Xiaohui Ma, Huiting Zhang, Riccardo Spolaor, Yanni Yang, Xiaoyu Ji, Xiuzhen Cheng, Pengfei Hu · 2025 · IEEE Transactions on Mobile Computing
  10. MACPruning: Dynamic Operation Pruning to Mitigate Side-Channel DNN Model Extraction
    Ruyi Ding, Cheng Gongye, Davis Ranney, Aidong Adam Ding, Yunsi Fei · 2025 · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
  11. Evaluating the Effectiveness of Attacks and Defenses on Machine Learning Through Adversarial Samples
    Viraj R. Gala, Martin Schneider · 2023 · IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW)
  12. Efficient Key-Based Adversarial Defense for ImageNet by Using Pre-Trained Models
    AprilPyone MaungMaung, Isao Echizen, Hitoshi Kiya · 2024 · IEEE Open Journal of Signal Processing
  13. Multilabel Black-Box Adversarial Attacks Only With Predicted Labels
    Linghao Kong, Wenjian Luo, Zipeng Ye, Qi Zhou, Yan Jia · 2024 · IEEE Transactions on Artificial Intelligence
  14. Attacking the spike: On the security of spiking neural networks to adversarial examples
    Nuo Xu, Kaleel Mahmood, Haowen Fang, Ethan Rathbun, Caiwen Ding, Wujie Wen · 2025 · Neurocomputing
  15. Transdisciplinary AI Observatory—Retrospective Analyses and Future-Oriented Contradistinctions
    Nadisha-Marie Aliman, Leon J. H. M. Kester, Roman V. Yampolskiy · 2021 · Philosophies
  16. Towards Transferable Adversarial Perturbations with Minimum Norm
    Fangcheng Liu, Chao Zhang, Hongyang Zhang · 2021 · International Conference on Machine Learning
  17. SymDNN: Simple & Effective Adversarial Robustness for Embedded Systems
    S. Dey, Pallab Dasgupta, P. P. Chakrabarti · 2022 · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)
  18. Adversarial Robustness Assessment of NeuroEvolution Approaches
    Inês Valentim, Nuno Lourenço, Nuno Antunes · 2022 · IEEE Congress on Evolutionary Computation (CEC)
  19. Ten Key Problems of Pre-trained Models: An Outlook of Representation Learning
    Ning Ding, Weize Chen, Zhengyan Zhang, Shengding Hu, Ganqu Cui, Yuan Yao, Yujia Qin, Zheni Zeng, Xu Han, Zhiyuan Liu et al. · 2023 · Springer eBooks
  20. LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features
    Yunrui Yu, Xitong Gao, Chengzhong Xu · 2023 · IEEE Transactions on Pattern Analysis and Machine Intelligence
  21. Multi-Task Learning With Self-Defined Tasks for Adversarial Robustness of Deep Networks
    Changhun Hyun, Hyeyoung Park · 2024 · IEEE Access
  22. Vulnerability of Deep Forest to Adversarial Attacks
    Ziad Tariq Muhammad Ali, Ameer Mohammed, Imtiaz Ahmad · 2024 · IEEE Transactions on Information Forensics and Security
  23. Securing Machine Learning: Understanding Adversarial Attacks and Bias Mitigation
    Archit Lakhani, N. Rohit · 2024 · International Journal of Innovative Science and Research Technology (IJISRT)
  24. MEH-FEST-NA: An Ensemble Defense System Against Adversarial Attacks in Speaker Verification Systems
    Zesheng Chen, Jack Li, Chao Chen · 2024 · IEEE International Conference on Artificial Intelligence Testing (AITest)
  25. Defending Against Adversarial Examples Via Modeling Adversarial Noise
    Dawei Zhou, Nannan Wang, Bo Han, Tongliang Liu, Xinbo Gao · 2025 · International Journal of Computer Vision
  26. Adversarial Robustness for Face Recognition: How to Introduce Ensemble Diversity among Feature Extractors?
    Takuma Amada, Kazuya Kakizaki, Seng Pei Liew, Toshinori Araki, Joseph Keshet, Jun Furukawa · 2021 · National Conference on Artificial Intelligence
  27. AI and Security: A Game Perspective
    Arunesh Sinha · 2022 · International Conference on Communication Systems & Networks (COMSNETS)
  28. One Neuron to Fool Them All
    Anshuman Suri, David Evans · 2020 · arXiv (Cornell University)
  29. Improve Adversarial Robustness via Weight Penalization on Classification Layer
    Cong Xu, Dan Li, Min Yang · 2020 · arXiv (Cornell University)
  30. Adversarial Robustness Against Image Color Transformation within Parametric Filter Space.
    Zhengyu Zhao, Zhuoran Liu, Martha Larson · 2020 · arXiv (Cornell University)
  31. On the human-recognizability phenomenon of adversarially trained deep image classifiers
    Jonathan Helland, Nathan VanHoudnos · 2020 · arXiv (Cornell University)
  32. Identifying Untrustworthy Predictions in Neural Networks by Geometric Gradient Analysis
    Leo Schwinn, An Nguyen, René Raab, Leon Bungert, Daniel Tenbrinck, Dario Zanca, Martin Burger, Bjoern M. Eskofier · 2021 · arXiv (Cornell University)
  33. Enhancing Certified Robustness via Smoothed Weighted Ensembling
    Chizhou Liu, Yunzhen Feng, Ranran Wang, Bin Dong · 2020 · arXiv (Cornell University)
  34. Adversarially Optimized Mixup for Robust Classification
    Jason J. Bunk, Srinjoy Chattopadhyay, B. S. Manjunath, Shivkumar Chandrasekaran · 2021 · arXiv (Cornell University)
  35. Voting for the right answer: Adversarial defense for speaker verification
    Haibin Wu, Yang Zhang, Zhiyong Wu, Dong Wang, Hung-yi Lee · 2021 · arXiv (Cornell University)
  36. HASI: Hardware-Accelerated Stochastic Inference, A Defense Against Adversarial Machine Learning Attacks
    Mohammad Hossein Samavatian, Majumdar, Saikat, Kristin Barber, Radu Teodorescu · 2021 · arXiv (Cornell University)
  37. Backdoor Attacks on Network Certification via Data Poisoning.
    Tobias Lorenz, Marta Kwiatkowska, Mario Fritz · 2021 · arXiv (Cornell University)
  38. A Survey on Threat Situation Awareness Systems: Framework, Techniques, and Insights
    Hooman Alavizadeh, Julian Jang‐Jaccard, Simon Yusuf Enoch, Harith Al-Sahaf, Ian S. Welch, Seyit Ahmet Camtepe, Dong Seong Kim · 2021 · arXiv (Cornell University)
  39. Medical Aegis: Robust adversarial protectors for medical images
    Qingsong Yao, Zecheng He, Shubo Zhou · 2021 · arXiv (Cornell University)
  40. "Making AI Work for Cyber Defense: The Accuracy-Robustness Tradeoff "
    Wyatt Hoffman · 2021
  41. Towards the Generation of Medical Imaging Classifiers Robust to Common Perturbations
    Joshua Chuah, Pingkun Yan, Ge Wang, Juergen Hahn · 2024 · BioMedInformatics
  42. Ranking the Transferability of Adversarial Examples
    Moshe Levy, Guy Amit, Yuval Elovici, Yisroel Mirsky · 2024 · ACM Transactions on Intelligent Systems and Technology
  43. Boosting certified robustness via an expectation-based similarity regularization
    Jiawen Li, Kun Fang, Xiaolin Huang, Jie Yang · 2024 · Image and Vision Computing
  44. SLAPP: Poisoning Prevention in Federated Learning and Differential Privacy via Stateful Proofs of Execution
    Norrathep Rattanavipanon, Ivan De Oliveira Nunes · 2025 · IEEE Transactions on Information Forensics and Security
  45. Enhancing Robustness of Fruit and Vegetable Image Classification Against Adversarial Attacks Through Defensive Strategies
    Dhuha Khalid Alferidah, Abdulelah Abdallah Algosaibi, Alaa Sagheer, Ahmed Afifi, Abdullah Algosaibi · 2025 · International Conference on IT Innovation and Knowledge Discovery (ITIKD)
  46. A Mathematical Framework for Understanding and Countering Packet-Mutation Adversarial Attacks on NIDS
    Md. Mehedi Hasan, Rafiqul Islam, Quazi Mamun, Md Mujibur Rahman · 2024 · International Conference on Computer and Information Technology (ICCIT)
  47. Mitigating Adversarial Attacks Based on Denoising & Reconstruction With Finance Authentication System Case Study
    Juzhen Wang, Yiqi Hu, Yiren Qi, Ziwen Peng, Changjia Zhou · 2021 · IEEE Transactions on Computers
  48. Randomize Adversarial Defense in a Light Way
    Ji Young Park, Lin Liu, Jixue Liu, Jiuyong Li · 2022 · IEEE International Conference on Big Data (BigData)
  49. Beyond Neural-on-Neural Approaches to Speaker Gender Protection
    Loes van Bemmel, Zhuoran Liu, Nik Vaessen, Martha Larson · 2023 · IEEE International Conference on Acoustics Speech and Signal Processing
  50. Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings
    AprilPyone MaungMaung, Isao Echizen, Hitoshi Kiya · 2023 · Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC)
  51. Adaptive Learning in IoT-Based Smart City Applications
    Nawaf A. Abdulla, Sedef Demirci, Mehmet Demirci, Suat Özdemi̇r · 2023 · Advances in computational intelligence and robotics book series
  52. NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations
    Sungmin Cha, Naeun Ko, H.G. Choi, Youngjoon Yoo, Taesup Moon · 2024 · IEEE Winter Conference on Applications of Computer Vision
  53. An AI blue team playbook
    Mike Tan, Kureha Yamaguchi, Anna Raney, Victoria Nockles, Margaux Leblanc, Shiri Bendelac · 2024 · Assurance and Security for AI-enabled Systems
  54. SpotOn: Adversarially Robust Keyword Spotting on Resource-Constrained IoT Platforms
    Mehreen Jabbeen, Vireshwar Kumar, Rijurekha Sen · 2024 · ACM Asia Conference on Computer and Communications Security (ASIA CCS)
  55. CMDN: Pre-Trained Visual Representations Boost Adversarial Robustness for UAV Tracking
    Ruilong Yu, Zhewei Wu, Qihe Liu, Shijie Zhou, Min Gou, Bingchen Xiang · 2024 · Drones
  56. MARS: Robustness Certification for Deep Network Intrusion Detectors via Multi-Order Adaptive Randomized Smoothing
    Mengdie Huang, Yingjun Lin, Xiaofeng Chen, Elisa Bertino · 2024 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  57. Distilling Adversarial Robustness Using Heterogeneous Teachers
    Jieren Deng, Aaron Palmer, Rigel Mahmood, Ethan Rathbun, Jinbo Bi, Kaleel Mahmood, Derek Aguiar · 2025 · Procedia Computer Science
  58. Certify or Predict: Boosting Certified Robustness with Compositional Architectures
    Mark Niklas Müller, Mislav Balunović, Martin Vechev · 2021 · International Conference on Learning Representations
  59. AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense
    Duhun Hwang, Eunjung Lee, Wonjong Rhee · 2022 · Proceedings - International Conference on Pattern Recognition/Proceedings/International Conference on Pattern Recognition
  60. Get Fooled for the Right Reason: Improving Adversarial Robustness through a Teacher-guided Curriculum Learning Approach
    Anindya Sarkar, Sarkar, Anirban, Sowrya Gali, Vineeth Nallure Balasubramanian · 2021 · Research Archive of Indian Institute of Technology Hyderabad (Indian Institute of Technology Hyderabad)
  61. Hierarchical binding in convolutional neural networks: Making adversarial attacks geometrically challenging
    Niels Leadholm, Simon M. Stringer · 2022 · Neural Networks
  62. Exploring the Feasibility of Physical Adversarial Attacks: A Cybersecurity Study
    Ronan Hamon, H. Junklewitz · 2023 · Frontiers in artificial intelligence and applications
  63. Improving robustness with image filtering
    Matteo Terzi, Mattia Carletti, Gian Antonio Susto · 2024 · Neurocomputing
  64. Error-Correcting Neural Network.
    Yang Song, Qiyu Kang, Wee Peng Tay · 2019 · arXiv (Cornell University)
  65. Obliviousness Makes Poisoning Adversaries Weaker
    Sanjam Garg, Somesh Jha, Saeed Mahloujifar, Mohammad Mahmoody, Abhradeep Thakurta · 2020 · arXiv (Cornell University)
  66. Certifying Joint Adversarial Robustness for Model Ensembles
    Mainuddin Ahmad Jonas, David Evans · 2020 · arXiv (Cornell University)
  67. D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack
    Qiuling Xu, Guanhong Tao, Zhang, Xiangyu · 2020 · arXiv (Cornell University)
  68. ClusTR: Clustering Training for Robustness.
    Motasem Alfarra, Juan C. Pérez, Adel Bibi, Ali Thabet, Pablo Arbeláez, Bernard Ghanem · 2020 · arXiv (Cornell University)
  69. Understanding the Error in Evaluating Adversarial Robustness
    Pengfei Xia, Ziqiang Li, Hongjing Niu, Bin Li · 2021 · arXiv (Cornell University)
  70. Noise Optimization for Artificial Neural Networks
    Xiao Li, Zeliang Zhang, Yijie Peng · 2021 · arXiv (Cornell University)
  71. "What's in the box?!": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models
    Sahar Abdelnabi, Mario Fritz · 2021 · arXiv (Cornell University)
  72. IWA: Integrated Gradient based White-box Attacks for Fooling Deep Neural Networks
    Yixiang Wang, Jiqiang Liu, Xiaolin Chang, Jelena Mišić, Vojislav B. Mišić · 2021 · arXiv (Cornell University)
  73. Center Smoothing for Certifiably Robust Vector-Valued Functions.
    Aounon Kumar, Tom Goldstein · 2021 · arXiv (Cornell University)
  74. Bio-inspired Robustness: A Review
    Harshitha Machiraju, Oh-Hyeon Choung, Pascal Frossard, Michael H. Herzog · 2021 · arXiv (Cornell University)
  75. Towards Adversarial Robustness via Transductive Learning
    Jiefeng Chen, Yang Guo, Xi Wu, Tianqi Li, Qicheng Lao, Yingyu Liang, Somesh Jha · 2021 · arXiv (Cornell University)
  76. Reachability Analysis of Convolutional Neural Networks
    Xiao-Dong Yang, Tomoya Yamaguchi, Hoang-Dung Tran, Bardh Hoxha, Taylor T. Johnson, D. Prokhorov · 2021 · arXiv.org
  77. Benign Adversarial Attack: Tricking Algorithm for Goodness.
    Xian Zhao, Jiaming Zhang, Zhiyu Lin, Jitao Sang · 2021 · arXiv (Cornell University)
  78. On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples
    Adelin Travers, Lorna Licollari, Guanghan Wang, Varun Chandrasekaran, Adam Dziedzic, David Lie, Nicolas Papernot · 2021 · arXiv (Cornell University)
  79. Training Efficiency and Robustness in Deep Learning
    Fartash Faghri · 2021 · arXiv (Cornell University)
  80. Over-Parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis
    Zhang Chen, Luca Demetrio, Srishti Gupta, Xiaoy Feng, Zhaoqiang Xia, Antonio Emanuele Ciná, Maura Pintor, Luca Oneto, Ambra Demontis, Battista Biggio et al. · 2024 · SSRN Electronic Journal
  81. On Optimality of Deterministic Rules in Adversarial Bayesian Detection
    Jinsub Kim · 2022 · IEEE Signal Processing Letters
  82. Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Features (Extended Abstract)
    Taha Belkhouja, Janardhan Rao Doppa · 2023 · International Joint Conference on Artificial Intelligence
  83. Adversarial Examples are Misaligned in Diffusion Model Manifolds
    Peter Lorenz, Ricard Durall, Janis Keuper · 2024 · International Joint Conference on Neural Networks (IJCNN)
  84. MeetSafe: enhancing robustness against white-box adversarial examples
    Ruben Stenhuis, Dazhuang Liu, Yanqi Qiao, Mauro Conti, Manos Panaousis, Kaitai Liang · 2025 · Frontiers in Computer Science
  85. Dynamic Layer Routing Defense for Real-Time Embedded Vision
    Zimo Ma, Xiangzhong Luo, Qun Song, Rui Tan · 2025 · ACM Transactions on Embedded Computing Systems
  86. Learning to Balance Mixed Adversarial Attacks for Robust Reinforcement Learning
    Mustafa Erdem, Nazım Kemal Üre · 2025 · Machine Learning and Knowledge Extraction
  87. μ GAN: A mutation-based cost optimal adversarial malware generation approach against evolving Android malware variants
    Xiaojian Liu, Zilin Qin, Kehong Liu · 2025 · Computers & Security
  88. A Neuro-Inspired Autoencoding Defense Against Adversarial Attacks
    Can Bakiskan, Metehan Cekic, Ahmet Dündar Sezer, Upamanyu Madhow · 2021 · Proceedings - International Conference on Image Processing
  89. Robustifying automatic speech recognition by extracting slowly varying features
    Matias Pizarro, Dorothea Kolossa, Asja Fischer · 2021
  90. Transferable 3D Adversarial Textures using End-to-end Optimization
    Camilo Pestana, Naveed Akhtar, Nazanin Rahnavard, Mubarak Shah, Ajmal Saeed Mian · 2022 · IEEE Winter Conference on Applications of Computer Vision
  91. MDTD: A Multi-Domain Trojan Detector for Deep Neural Networks
    Arezoo Rajabi, Surudhi Asokraj, Fengqing Jiang, Luyao Niu, Bhaskar Ramasubramanian, James A. Ritcey, Radha Poovendran · 2023 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  92. Not-in-Perspective: Towards Shielding Google's Perspective API Against Adversarial Negation Attacks
    Michail S. Alexiou, J. Sukarno Mertoguno · 2023 · International Conference on Information, Intelligence, Systems & Applications (IISA)
  93. A novel generalized adversarial image method using descriptive features
    Trương Phi Hồ, Pham Duy Trung, Lam Thu Bui · 2023 · Journal of Science and Technology on Information security
  94. Revisiting the Benefits of Knowledge Distillation against Adversarial Examples
    Jiawen Li, Jie Yang · 2023 · International Conference on Data Science and Information Technology (DSIT)
  95. Deblurring as a Defense against Adversarial Attacks
    William Duckworth, Weixian Liao, Wei Yu · 2023 · IEEE International Conference on Cloud Networking
  96. Slope: A First-order Approach for Measuring Gradient Obfuscation
    Maura Pintor, Luca Demetrio, Giovanni Manca, Battista Biggio, Fabio Roli · 2021 · European Symposium on Artificial Neural Networks, Computational Intelligence and Machine Learning (ESANN)
  97. Safe Reinforcement Learning via Observation Shielding
    Joe McCalmon, Tongtong Liu, Reid Goldsmith, Andrew Cyhaniuk, Talal Halabi, Sarra Alqahtani · 2023 · Hawaii International Conference on System Sciences (HICSS)
  98. Adversarial examples and where to find them
    Niklas Risse, Christina Göpfert, Jan Philip Göpfert · 2020 · arXiv (Cornell University)
  99. Analysis of Random Perturbations for Robust Convolutional Neural Networks
    Adam Dziedzic, Sanjay Krishnan · 2020 · arXiv (Cornell University)
  100. Fast & Accurate Method for Bounding the Singular Values of Convolutional Layers with Application to Lipschitz Regularization.
    Alexandre Araujo, Benjamin Négrevergne, Yann Chevaleyre, Jamal Atif C · 2020 · arXiv (Cornell University)