SOTAVerified

Adversarial Attack

An Adversarial Attack is a technique to find a perturbation that changes the prediction of a machine learning model. The perturbation can be very small and imperceptible to human eyes.

Source: Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks

Papers

Showing 251275 of 1808 papers

TitleStatusHype
An Efficient Adversarial Attack for Tree EnsemblesCode1
Taking Over the Stock Market: Adversarial Perturbations Against Algorithmic TradersCode1
Generalizing Universal Adversarial Attacks Beyond Additive PerturbationsCode1
Towards Resistant Audio Adversarial ExamplesCode1
Adversarial Attack and Defense of Structured Prediction ModelsCode1
Adversarial Examples in Deep Learning for Multivariate Time Series RegressionCode1
Improving Query Efficiency of Black-box Adversarial AttackCode1
Stereopagnosia: Fooling Stereo Networks with Adversarial PerturbationsCode1
Can You Spot the Chameleon? Adversarially Camouflaging Images from Co-Salient Object DetectionCode1
OpenAttack: An Open-source Textual Adversarial Attack ToolkitCode1
Contextualized Perturbation for Textual Adversarial AttackCode1
Adversarial Attack on Large Scale GraphCode1
Adversarial Attack and Defense Strategies for Deep Speaker Recognition SystemsCode1
Adversarial Training with Fast Gradient Projection Method against Synonym Substitution based Text AttacksCode1
Robust Deep Reinforcement Learning through Adversarial LossCode1
Sparse Adversarial Attack via Perturbation FactorizationCode1
SemanticAdv: Generating Adversarial Examples via Attribute-conditioned Image EditingCode1
SimAug: Learning Robust Representations from Simulation for Trajectory PredictionCode1
Robust Tracking against Adversarial AttacksCode1
Semantic Equivalent Adversarial Data Augmentation for Visual Question AnsweringCode1
Adversarial Immunization for Certifiable Robustness on GraphsCode1
AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing FlowsCode1
Patch-wise Attack for Fooling Deep Neural NetworkCode1
Miss the Point: Targeted Adversarial Attack on Multiple Landmark DetectionCode1
Black-box Adversarial Example Generation with Normalizing FlowsCode1
Show:102550
← PrevPage 11 of 73Next →

Benchmark Results

#ModelMetricClaimedVerifiedStatus
1Xu et al.Attack: PGD2078.68Unverified
23-ensemble of multi-resolution self-ensemblesAttack: AutoAttack78.13Unverified
3TRADES-ANCRA/ResNet18Attack: AutoAttack59.7Unverified
4AdvTraining [madry2018]Attack: PGD2048.44Unverified
5TRADES [zhang2019b]Attack: PGD2045.9Unverified
6XU-NetRobust Accuracy1Unverified
#ModelMetricClaimedVerifiedStatus
13-ensemble of multi-resolution self-ensemblesAttack: AutoAttack51.28Unverified
2multi-resolution self-ensemblesAttack: AutoAttack47.85Unverified