Adversarial Defense

Competitions with currently unpublished results:

TrojAI

Papers

Recently Added Most Hyped Most Active Needs Verification Most Verified

Showing 101–125 of 403 papers

Title	Date	Tasks	Status	Score
CAAD 2018: Generating Transferable Adversarial Examples	Sep 29, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
Adversarial Robustness of Stabilized NeuralODEs Might be from Obfuscated Gradients	Sep 28, 2020	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Feature Denoising for Improving Adversarial Robustness	Dec 9, 2018	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning	Aug 1, 2017	Adversarial AttackAdversarial Defense	CodeCode Available	5
Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach	Jul 14, 2025	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Exploring Adversarially Robust Training for Unsupervised Domain Adaptation	Feb 18, 2022	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Adaptive Modeling Against Adversarial Attacks	Dec 23, 2021	Adversarial DefenseDeep Learning	CodeCode Available	5
Adversarial Defense by Suppressing High-frequency Components	Aug 19, 2019	Adversarial DefenseClassification	CodeCode Available	5
Certified Defenses against Adversarial Examples	Jan 29, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality	Jan 8, 2018	Adversarial Defense	CodeCode Available	5
Accidental Misalignment: Fine-Tuning Language Models Induces Unexpected Vulnerability	May 22, 2025	Adversarial DefenseSemantic Similarity	CodeCode Available	5
Fast Bayesian Uncertainty Estimation and Reduction of Batch Normalized Single Image Super-Resolution Network	Mar 22, 2019	Adversarial DefenseImage Reconstruction	CodeCode Available	5
Game Theoretic Mixed Experts for Combinational Adversarial Machine Learning	Nov 26, 2022	Adversarial Defense	CodeCode Available	5
Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks	Apr 18, 2019	Adversarial AttackAdversarial Attack Detection	CodeCode Available	5
AOGNets: Compositional Grammatical Architectures for Deep Learning	Nov 15, 2017	Adversarial DefenseDeep Learning	CodeCode Available	5
Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense	Feb 2, 2023	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
A Few Large Shifts: Layer-Inconsistency Based Minimal Overhead Adversarial Example Detection	May 19, 2025	Adversarial Attack DetectionAdversarial Defense	CodeCode Available	5
Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective	Jun 1, 2023	Adversarial Defense	CodeCode Available	5
Adversarially Robust Prototypical Few-shot Segmentation with Neural-ODEs	Oct 7, 2022	Adversarial DefenseFew-Shot Learning	CodeCode Available	5
Countering Adversarial Images using Input Transformations	Oct 31, 2017	Adversarial DefenseGeneral Classification	CodeCode Available	5
Robustifying Point Cloud Networks by Refocusing	Aug 10, 2023	3D ClassificationAdversarial Defense	CodeCode Available	5
A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees	Jul 10, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies	Nov 26, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
DAD++: Improved Data-free Test Time Adversarial Defense	Sep 10, 2023	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense	Dec 5, 2022	Adversarial Defense	CodeCode Available	5

Show:10 25 50

← PrevPage 5 of 17Next →

All datasets CIFAR-10 ImageNet (non-targeted PGD, max perturbation=4)ImageNet ImageNet (targeted PGD, max perturbation=16)MNIST CAAD 2018 miniImageNet

Benchmark Results

#	Model	Metric	Claimed	Verified	Status
1	WRN-28-10	Accuracy	90.03	—	Unverified
2	Diffusion Classifier	Accuracy	89.85	—	Unverified
3	Stochastic-LWTA/PGD/WideResNet-34-10	Accuracy	84.3	—	Unverified
4	Ours (Stochastic-LWTA/PGD/WideResNet-34-5)	Accuracy	83.4	—	Unverified
5	Ours (Stochastic-LWTA/PGD/WideResNet-34-1)	Accuracy	81.87	—	Unverified
6	ResNet18 (TRADES-ANCRA/PGD-40)	Accuracy	81.7	—	Unverified
7	Stochastic-LWTA/PGD/WideResNet-34-5	Attack: AutoAttack	81.22	—	Unverified
8	PCL (against PGD, white box)	Accuracy	46.7	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	SAT-EfficientNet-L1	Accuracy	58.6	—	Unverified
2	LLR-ResNet-152	Accuracy	47	—	Unverified
3	ResNet-152 free-m=4	Accuracy	36	—	Unverified
4	ResNet-101 free-m=4	Accuracy	34.3	—	Unverified
5	ResNet-50 free-m=4	Accuracy	31.8	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet101	Accuracy	99.8	—	Unverified
2	InceptionV3	Accuracy	98.6	—	Unverified
3	Feature Denoising	Accuracy	49.5	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet-152 Denoise	Accuracy	42.8	—	Unverified
2	ResNeXt-101 DenoiseAll	Accuracy	40.4	—	Unverified
3	ResNet-152	Accuracy	39	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Defense GAN	Accuracy	0.85	—	Unverified
2	PuVAE	Accuracy	0.81	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Feature Denoising	Accuracy	50.6	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Auto Encoder-Block Switching defense with GradCAM	Accuracy	88.54	—	Unverified