Adversarial Attack

An Adversarial Attack is a technique to find a perturbation that changes the prediction of a machine learning model. The perturbation can be very small and imperceptible to human eyes.

Source: Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks

Papers

Recently Added Most Hyped Most Active Needs Verification Most Verified

Showing 1801–1808 of 1808 papers

Title	Date	Tasks	Status
Evaluations and Methods for Explanation through Robustness Analysis	May 31, 2020	Adversarial AttackPrediction	—Unverified
Unleashing the Power of Pre-trained Encoders for Universal Adversarial Attack Detection	Apr 1, 2025	Adversarial AttackAdversarial Attack Detection	—Unverified
EvolBA: Evolutionary Boundary Attack under Hard-label Black Box condition	Jul 2, 2024	Adversarial Attack	—Unverified
Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks	Jan 8, 2021	Adversarial AttackAttribute	—Unverified
Adversarial Attack and Defense on Point Sets	Feb 28, 2019	Adversarial Attack	—Unverified
Examining Adversarial Learning against Graph-based IoT Malware Detection Systems	Feb 12, 2019	Adversarial AttackGeneral Classification	—Unverified
Examining the Human Perceptibility of Black-Box Adversarial Attacks on Face Recognition	Jul 19, 2021	Adversarial AttackFace Recognition	—Unverified
You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks	Jun 16, 2023	Adversarial Attack	—Unverified

Show:10 25 50

← PrevPage 37 of 37Next →

All datasets CIFAR-10 CIFAR-100

Benchmark Results

#	Model	Metric	Claimed	Verified	Status
1	Xu et al.	Attack: PGD20	78.68	—	Unverified
2	3-ensemble of multi-resolution self-ensembles	Attack: AutoAttack	78.13	—	Unverified
3	TRADES-ANCRA/ResNet18	Attack: AutoAttack	59.7	—	Unverified
4	AdvTraining [madry2018]	Attack: PGD20	48.44	—	Unverified
5	TRADES [zhang2019b]	Attack: PGD20	45.9	—	Unverified
6	XU-Net	Robust Accuracy	1	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	3-ensemble of multi-resolution self-ensembles	Attack: AutoAttack	51.28	—	Unverified
2	multi-resolution self-ensembles	Attack: AutoAttack	47.85	—	Unverified