SOTAVerified

Adversarial Attack

An Adversarial Attack is a technique to find a perturbation that changes the prediction of a machine learning model. The perturbation can be very small and imperceptible to human eyes.

Source: Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks

Papers

Recently AddedMost HypedMost ActiveNeeds VerificationMost Verified

Showing 1251–1300 of 1808 papers

TitleStatusHype
Adversarial Examples for Model-Based Control: A Sensitivity Analysis—0
PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models—0
Pixab-CAM: Attend Pixel, not Channel—0
Pixel is All You Need: Adversarial Trajectory-Ensemble Active Learning for Salient Object Detection—0
PlugAT: A Plug and Play Module to Defend against Textual Adversarial Attack—0
POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm—0
Towards Transferable Adversarial Attack against Deep Face Recognition—0
Point Adversarial Self Mining: A Simple Method for Facial Expression Recognition—0
PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples—0
Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds—0
Adversarial Example Detection Using Latent Neighborhood Graph—0
Polishing Decision-Based Adversarial Noise With a Customized Sampling—0
Poster: Enhancing GNN Robustness for Network Intrusion Detection via Agent-based Analysis—0
Potential adversarial samples for white-box attacks—0
Rethinking Impersonation and Dodging Attacks on Face Recognition Systems—0
Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors—0
Practical Fast Gradient Sign Attack against Mammographic Image Classifier—0
Practical Order Attack in Deep Ranking—0
Towards Transferable Adversarial Attacks with Centralized Perturbation—0
PRAT: PRofiling Adversarial aTtacks—0
Prepared for the Worst: A Learning-Based Adversarial Attack for Resilience Analysis of the ICP Algorithm—0
Adversarial Evasion Attacks Practicality in Networks: Testing the Impact of Dynamic Learning—0
Preventing Non-intrusive Load Monitoring Privacy Invasion: A Precise Adversarial Attack Scheme for Networked Smart Meters—0
Adversarial Embedding: A robust and elusive Steganography and Watermarking technique—0
Prior Networks for Detection of Adversarial Attacks—0
Privacy Protection in Personalized Diffusion Models via Targeted Cross-Attention Adversarial Attack—0
Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage—0
Probabilistic Categorical Adversarial Attack & Adversarial Training—0
Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection—0
Adaptive Perturbation for Adversarial Attack—0
Probing Model Signal-Awareness via Prediction-Preserving Input Minimization—0
Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach—0
Wavelet-Based Image Tokenizer for Vision Transformers—0
ProjAttacker: A Configurable Physical Adversarial Attack for Face Recognition via Projector—0
Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attack on Breast Ultrasound Images—0
Prompt-driven Transferable Adversarial Attack on Person Re-Identification with Attribute-aware Textual Inversion—0
Propagated Perturbation of Adversarial Attack for well-known CNNs: Empirical Study and its Explanation—0
PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks—0
Protection against Cloning for Deep Learning—0
Protego: Detecting Adversarial Examples for Vision Transformers via Intrinsic Capabilities—0
Protein Folding Neural Networks Are Not Robust—0
Adaptive Meta-learning-based Adversarial Training for Robust Automatic Modulation Classification—0
Adversarial Eigen Attack on Black-Box Models—0
Adversarial defenses via a mixture of generators—0
Adversarial Defense based on Structure-to-Signal Autoencoders—0
Pseudo-Conversation Injection for LLM Goal Hijacking—0
Learning to Attack with Fewer Pixels: A Probabilistic Post-hoc Framework for Refining Arbitrary Dense Adversarial Attacks—0
Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation—0
QFAL: Quantum Federated Adversarial Learning—0
Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models—0
Show:102550
← PrevPage 26 of 37Next →
All datasetsCIFAR-10CIFAR-100

Benchmark Results

#ModelMetricClaimedVerifiedStatus
1Xu et al.Attack: PGD2078.68—Unverified
23-ensemble of multi-resolution self-ensemblesAttack: AutoAttack78.13—Unverified
3TRADES-ANCRA/ResNet18Attack: AutoAttack59.7—Unverified
4AdvTraining [madry2018]Attack: PGD2048.44—Unverified
5TRADES [zhang2019b]Attack: PGD2045.9—Unverified
6XU-NetRobust Accuracy1—Unverified
#ModelMetricClaimedVerifiedStatus
13-ensemble of multi-resolution self-ensemblesAttack: AutoAttack51.28—Unverified
2multi-resolution self-ensemblesAttack: AutoAttack47.85—Unverified