SOTAVerified

Adversarial Attack

An Adversarial Attack is a technique to find a perturbation that changes the prediction of a machine learning model. The perturbation can be very small and imperceptible to human eyes.

Source: Recurrent Attention Model with Log-Polar Mapping is Robust against Adversarial Attacks

Papers

Recently AddedMost HypedMost ActiveNeeds VerificationMost Verified

Showing 1526–1550 of 1808 papers

TitleStatusHype
Analyzing the Noise Robustness of Deep Neural Networks—0
Massif: Interactive Interpretation of Adversarial Attacks on Deep Learning—0
Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet—0
Generating Semantic Adversarial Examples via Feature Manipulation—0
Interpolation between CNNs and ResNets—0
Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient—0
Implicit Euler Skip Connections: Enhancing Adversarial Robustness via Numerical Stability—0
Benchmarking Adversarial Robustness—0
Geometry-Aware Generation of Adversarial Point CloudsCode0
DAmageNet: A Universal Adversarial DatasetCode0
On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration—0
CAG: A Real-time Low-cost Enhanced-robustness High-transferability Content-aware Adversarial Attack Generator—0
Potential adversarial samples for white-box attacks—0
Amora: Black-box Adversarial Morphing Attack—0
Region-Wise Attack: On Efficient Generation of Robust Physical Adversarial Examples—0
Scratch that! An Evolution-based Adversarial Attack against Neural NetworksCode0
AdvPC: Transferable Adversarial Perturbations on 3D Point CloudsCode0
Classification-by-Components: Probabilistic Modeling of Reasoning over a Set of ComponentsCode0
Light-weight Calibrator: a Separable Component for Unsupervised Domain AdaptationCode0
Towards Security Threats of Deep Learning Systems: A Survey—0
ColorFool: Semantic Adversarial ColorizationCode0
Adversarial Attack with Pattern Replacement—0
Time-aware Gradient Attack on Dynamic Network Link Prediction—0
Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion ReductionCode0
Heuristic Black-box Adversarial Attacks on Video Recognition ModelsCode0
Show:102550
← PrevPage 62 of 73Next →
All datasetsCIFAR-10CIFAR-100

Benchmark Results

#ModelMetricClaimedVerifiedStatus
1Xu et al.Attack: PGD2078.68—Unverified
23-ensemble of multi-resolution self-ensemblesAttack: AutoAttack78.13—Unverified
3TRADES-ANCRA/ResNet18Attack: AutoAttack59.7—Unverified
4AdvTraining [madry2018]Attack: PGD2048.44—Unverified
5TRADES [zhang2019b]Attack: PGD2045.9—Unverified
6XU-NetRobust Accuracy1—Unverified
#ModelMetricClaimedVerifiedStatus
13-ensemble of multi-resolution self-ensemblesAttack: AutoAttack51.28—Unverified
2multi-resolution self-ensemblesAttack: AutoAttack47.85—Unverified