Adversarial Defense

Competitions with currently unpublished results:

TrojAI

Papers

Recently Added Most Hyped Most Active Needs Verification Most Verified

Showing 101–125 of 403 papers

Title	Date	Tasks	Status	Score
Feature Denoising for Improving Adversarial Robustness	Dec 9, 2018	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
CAAD 2018: Generating Transferable Adversarial Examples	Sep 29, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
Adversarial Robustness of Stabilized NeuralODEs Might be from Obfuscated Gradients	Sep 28, 2020	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Adversarial Robustness via Fisher-Rao Regularization	Jun 12, 2021	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Game Theoretic Mixed Experts for Combinational Adversarial Machine Learning	Nov 26, 2022	Adversarial Defense	CodeCode Available	5
Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning	Aug 1, 2017	Adversarial AttackAdversarial Defense	CodeCode Available	5
Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach	Jul 14, 2025	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Fast Bayesian Uncertainty Estimation and Reduction of Batch Normalized Single Image Super-Resolution Network	Mar 22, 2019	Adversarial DefenseImage Reconstruction	CodeCode Available	5
Certified Defenses against Adversarial Examples	Jan 29, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality	Jan 8, 2018	Adversarial Defense	CodeCode Available	5
Adaptive Modeling Against Adversarial Attacks	Dec 23, 2021	Adversarial DefenseDeep Learning	CodeCode Available	5
GraphDefense: Towards Robust Graph Convolutional Networks	Nov 11, 2019	Adversarial Defense	CodeCode Available	5
Accidental Misalignment: Fine-Tuning Language Models Induces Unexpected Vulnerability	May 22, 2025	Adversarial DefenseSemantic Similarity	CodeCode Available	5
Game Theory for Adversarial Attacks and Defenses	Oct 8, 2021	Adversarial DefenseDenoising	CodeCode Available	5
Improving Adversarial Robustness via Decoupled Visual Representation Masking	Jun 16, 2024	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Learning Defense Transformers for Counterattacking Adversarial Examples	Mar 13, 2021	Adversarial Defense	CodeCode Available	5
Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense	Feb 2, 2023	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective	Jun 1, 2023	Adversarial Defense	CodeCode Available	5
Continual Adversarial Defense	Dec 15, 2023	Adversarial DefenseContinual Learning	CodeCode Available	5
Countering Adversarial Images using Input Transformations	Oct 31, 2017	Adversarial DefenseGeneral Classification	CodeCode Available	5
Robustifying Point Cloud Networks by Refocusing	Aug 10, 2023	3D ClassificationAdversarial Defense	CodeCode Available	5
A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees	Jul 10, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies	Nov 26, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
Adversarially Robust Prototypical Few-shot Segmentation with Neural-ODEs	Oct 7, 2022	Adversarial DefenseFew-Shot Learning	CodeCode Available	5
EBM Life Cycle: MCMC Strategies for Synthesis, Defense, and Density Modeling	May 24, 2022	Adversarial DefenseImage Generation	CodeCode Available	5

Show:10 25 50

← PrevPage 5 of 17Next →

All datasets CIFAR-10 ImageNet (non-targeted PGD, max perturbation=4)ImageNet ImageNet (targeted PGD, max perturbation=16)MNIST CAAD 2018 miniImageNet

Benchmark Results

#	Model	Metric	Claimed	Verified	Status
1	WRN-28-10	Accuracy	90.03	—	Unverified
2	Diffusion Classifier	Accuracy	89.85	—	Unverified
3	Stochastic-LWTA/PGD/WideResNet-34-10	Accuracy	84.3	—	Unverified
4	Ours (Stochastic-LWTA/PGD/WideResNet-34-5)	Accuracy	83.4	—	Unverified
5	Ours (Stochastic-LWTA/PGD/WideResNet-34-1)	Accuracy	81.87	—	Unverified
6	ResNet18 (TRADES-ANCRA/PGD-40)	Accuracy	81.7	—	Unverified
7	Stochastic-LWTA/PGD/WideResNet-34-5	Attack: AutoAttack	81.22	—	Unverified
8	PCL (against PGD, white box)	Accuracy	46.7	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	SAT-EfficientNet-L1	Accuracy	58.6	—	Unverified
2	LLR-ResNet-152	Accuracy	47	—	Unverified
3	ResNet-152 free-m=4	Accuracy	36	—	Unverified
4	ResNet-101 free-m=4	Accuracy	34.3	—	Unverified
5	ResNet-50 free-m=4	Accuracy	31.8	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet101	Accuracy	99.8	—	Unverified
2	InceptionV3	Accuracy	98.6	—	Unverified
3	Feature Denoising	Accuracy	49.5	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet-152 Denoise	Accuracy	42.8	—	Unverified
2	ResNeXt-101 DenoiseAll	Accuracy	40.4	—	Unverified
3	ResNet-152	Accuracy	39	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Defense GAN	Accuracy	0.85	—	Unverified
2	PuVAE	Accuracy	0.81	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Feature Denoising	Accuracy	50.6	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Auto Encoder-Block Switching defense with GradCAM	Accuracy	88.54	—	Unverified