Adversarial Defense

Competitions with currently unpublished results:

TrojAI

Papers

Recently Added Most Hyped Most Active Needs Verification Most Verified

Showing 376–400 of 403 papers

Title	Date	Tasks	Status
Secure Video Quality Assessment Resisting Adversarial Attacks	Oct 9, 2024	Adversarial DefenseVideo Quality Assessment	—Unverified
Self-Gradient Networks	Nov 18, 2020	Adversarial Defense	—Unverified
NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations	Jun 22, 2021	Adversarial DefenseAdversarial Robustness	—Unverified
ShieldLearner: A New Paradigm for Jailbreak Attack Defense in LLMs	Feb 16, 2025	Adversarial Defense	—Unverified
Simple and Effective Stochastic Neural Networks	Sep 25, 2019	Adversarial AttackAdversarial Defense	—Unverified
Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs	May 13, 2021	Adversarial DefenseDeep Learning	—Unverified
Adversarial Defense Framework for Graph Neural Network	May 9, 2019	Adversarial DefenseContrastive Learning	—Unverified
Subspace Defense: Discarding Adversarial Perturbations by Learning a Subspace for Clean Signals	Mar 24, 2024	Adversarial Defense	—Unverified
Sustainable Self-evolution Adversarial Training	Dec 3, 2024	Adversarial DefenseContinual Learning	—Unverified
Sylva: Tailoring Personalized Adversarial Defense in Pre-trained Models via Collaborative Fine-tuning	Jun 4, 2025	Adversarial DefenseAdversarial Robustness	—Unverified
Target Training: Tricking Adversarial Attacks to Fail	Jan 1, 2021	Adversarial Defense	—Unverified
TART: Boosting Clean Accuracy Through Tangent Direction Guided Adversarial Training	Aug 27, 2024	Adversarial Defense	—Unverified
Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost	Oct 22, 2024	Adversarial DefenseDenoising	—Unverified
The Good, the Bad and the Ugly: Watermarks, Transferable Attacks and Adversarial Defenses	Oct 11, 2024	Adversarial Defense	—Unverified
The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing	Jan 11, 2021	Adversarial DefenseAutonomous Driving	—Unverified
Towards Achieving Adversarial Robustness Beyond Perceptual Limits	Sep 29, 2021	Adversarial DefenseAdversarial Robustness	—Unverified
Towards a constructive framework for control theory	Jan 4, 2025	Adversarial Defense	—Unverified
Towards Adversarial-Resilient Deep Neural Networks for False Data Injection Attack Detection in Power Grids	Feb 17, 2021	Adversarial DefenseState Estimation	—Unverified
Towards Black-box Adversarial Example Detection: A Data Reconstruction-based Method	Jun 3, 2023	Adversarial Defense	—Unverified
Training Robust Deep Neural Networks via Adversarial Noise Propagation	Sep 19, 2019	Adversarial DefenseAdversarial Robustness	—Unverified
Towards Model-Agnostic Adversarial Defenses using Adversarially Trained Autoencoders	Sep 12, 2019	Adversarial DefenseAdversarial Robustness	—Unverified
TREATED:Towards Universal Defense against Textual Adversarial Attacks	Sep 13, 2021	Adversarial Defense	—Unverified
Tricking Adversarial Attacks To Fail	Jun 8, 2020	Adversarial Defense	—Unverified
Two Heads Are Better Than One: Boosting Graph Sparse Training via Semantic and Topological Awareness	Feb 2, 2024	Adversarial DefenseGraph Learning	—Unverified
Universal Learning Approach for Adversarial Defense	Sep 25, 2019	Adversarial Defense	—Unverified

Show:10 25 50

← PrevPage 16 of 17Next →

All datasets CIFAR-10 ImageNet (non-targeted PGD, max perturbation=4)ImageNet ImageNet (targeted PGD, max perturbation=16)MNIST CAAD 2018 miniImageNet

Benchmark Results

#	Model	Metric	Claimed	Verified	Status
1	WRN-28-10	Accuracy	90.03	—	Unverified
2	Diffusion Classifier	Accuracy	89.85	—	Unverified
3	Stochastic-LWTA/PGD/WideResNet-34-10	Accuracy	84.3	—	Unverified
4	Ours (Stochastic-LWTA/PGD/WideResNet-34-5)	Accuracy	83.4	—	Unverified
5	Ours (Stochastic-LWTA/PGD/WideResNet-34-1)	Accuracy	81.87	—	Unverified
6	ResNet18 (TRADES-ANCRA/PGD-40)	Accuracy	81.7	—	Unverified
7	Stochastic-LWTA/PGD/WideResNet-34-5	Attack: AutoAttack	81.22	—	Unverified
8	PCL (against PGD, white box)	Accuracy	46.7	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	SAT-EfficientNet-L1	Accuracy	58.6	—	Unverified
2	LLR-ResNet-152	Accuracy	47	—	Unverified
3	ResNet-152 free-m=4	Accuracy	36	—	Unverified
4	ResNet-101 free-m=4	Accuracy	34.3	—	Unverified
5	ResNet-50 free-m=4	Accuracy	31.8	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet101	Accuracy	99.8	—	Unverified
2	InceptionV3	Accuracy	98.6	—	Unverified
3	Feature Denoising	Accuracy	49.5	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet-152 Denoise	Accuracy	42.8	—	Unverified
2	ResNeXt-101 DenoiseAll	Accuracy	40.4	—	Unverified
3	ResNet-152	Accuracy	39	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Defense GAN	Accuracy	0.85	—	Unverified
2	PuVAE	Accuracy	0.81	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Feature Denoising	Accuracy	50.6	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Auto Encoder-Block Switching defense with GradCAM	Accuracy	88.54	—	Unverified