Adversarial Defense

Competitions with currently unpublished results:

TrojAI

Papers

Recently Added Most Hyped Most Active Needs Verification Most Verified

Showing 201–225 of 403 papers

Title	Date	Tasks	Status	Score
CAAD 2018: Generating Transferable Adversarial Examples	Sep 29, 2018	Adversarial AttackAdversarial Defense	CodeCode Available	5
All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines	Dec 16, 2021	Adversarial DefenseAll	CodeCode Available	5
Towards Effective and Efficient Adversarial Defense with Diffusion Models for Robust Visual Tracking	May 31, 2025	Adversarial DefenseDenoising	CodeCode Available	5
Towards Unified Robustness Against Both Backdoor and Adversarial Attacks	May 28, 2024	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
GraphDefense: Towards Robust Graph Convolutional Networks	Nov 11, 2019	Adversarial Defense	CodeCode Available	5
Accidental Misalignment: Fine-Tuning Language Models Induces Unexpected Vulnerability	May 22, 2025	Adversarial DefenseSemantic Similarity	CodeCode Available	5
Defending against adversarial attacks on medical imaging AI system, classification or detection?	Jun 24, 2020	Adversarial DefenseGeneral Classification	CodeCode Available	5
PPD: Permutation Phase Defense Against Adversarial Examples in Deep Learning	Dec 25, 2018	Adversarial DefenseDeep Learning	CodeCode Available	5
Defending Against Universal Attacks Through Selective Feature Regeneration	Jun 8, 2019	Adversarial Defense	CodeCode Available	5
Privacy Risks of Securing Machine Learning Models against Adversarial Examples	May 24, 2019	Adversarial DefenseBIG-bench Machine Learning	CodeCode Available	5
Defending against black-box adversarial attacks with gradient-free trained sign activation neural networks	Jan 1, 2021	Adversarial Defense	CodeCode Available	5
Provably Cost-Sensitive Adversarial Defense via Randomized Smoothing	Oct 12, 2023	Adversarial Defense	CodeCode Available	5
Erasing, Transforming, and Noising Defense Network for Occluded Person Re-Identification	Jul 14, 2023	Adversarial DefenseOccluded Person Re-Identification	CodeCode Available	5
Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders	Jul 19, 2022	Adversarial AttackAdversarial Defense	CodeCode Available	5
Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser	Dec 8, 2017	Adversarial AttackAdversarial Defense	CodeCode Available	5
Error Correcting Output Codes Improve Probability Estimation and Adversarial Robustness of Deep Neural Networks	Dec 1, 2019	Adversarial DefenseAdversarial Robustness	CodeCode Available	5
RAIN: A Simple Approach for Robust and Accurate Image Classification Networks	Apr 24, 2020	Adversarial DefenseGeneral Classification	CodeCode Available	5
Defense Against Adversarial Attacks using Convolutional Auto-Encoders	Dec 6, 2023	Adversarial Defense	CodeCode Available	5
A Simple and Yet Fairly Effective Defense for Graph Neural Networks	Feb 21, 2024	Adversarial DefenseNode Classification	CodeCode Available	5
Struggle with Adversarial Defense? Try Diffusion	Apr 12, 2024	Adversarial DefenseAdversarial Robustness	—Unverified	0
OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack	Aug 1, 2024	Adversarial AttackAdversarial Defense	—Unverified	0
A Comprehensive Evaluation Framework for Deep Model Robustness	Jan 24, 2021	Adversarial Defensemodel	—Unverified	0
Active Adversarial Noise Suppression for Image Forgery Localization	Jun 15, 2025	Adversarial Defense	—Unverified	0
Adaptive Batch Normalization Networks for Adversarial Robustness	May 20, 2024	Adversarial DefenseAdversarial Robustness	—Unverified	0
Adaptive Feature Alignment for Adversarial Training	May 31, 2021	Adversarial Defense	—Unverified	0

Show:10 25 50

← PrevPage 9 of 17Next →

All datasets CIFAR-10 ImageNet (non-targeted PGD, max perturbation=4)ImageNet ImageNet (targeted PGD, max perturbation=16)MNIST CAAD 2018 miniImageNet

Benchmark Results

#	Model	Metric	Claimed	Verified	Status
1	WRN-28-10	Accuracy	90.03	—	Unverified
2	Diffusion Classifier	Accuracy	89.85	—	Unverified
3	Stochastic-LWTA/PGD/WideResNet-34-10	Accuracy	84.3	—	Unverified
4	Ours (Stochastic-LWTA/PGD/WideResNet-34-5)	Accuracy	83.4	—	Unverified
5	Ours (Stochastic-LWTA/PGD/WideResNet-34-1)	Accuracy	81.87	—	Unverified
6	ResNet18 (TRADES-ANCRA/PGD-40)	Accuracy	81.7	—	Unverified
7	Stochastic-LWTA/PGD/WideResNet-34-5	Attack: AutoAttack	81.22	—	Unverified
8	PCL (against PGD, white box)	Accuracy	46.7	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	SAT-EfficientNet-L1	Accuracy	58.6	—	Unverified
2	LLR-ResNet-152	Accuracy	47	—	Unverified
3	ResNet-152 free-m=4	Accuracy	36	—	Unverified
4	ResNet-101 free-m=4	Accuracy	34.3	—	Unverified
5	ResNet-50 free-m=4	Accuracy	31.8	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet101	Accuracy	99.8	—	Unverified
2	InceptionV3	Accuracy	98.6	—	Unverified
3	Feature Denoising	Accuracy	49.5	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	ResNet-152 Denoise	Accuracy	42.8	—	Unverified
2	ResNeXt-101 DenoiseAll	Accuracy	40.4	—	Unverified
3	ResNet-152	Accuracy	39	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Defense GAN	Accuracy	0.85	—	Unverified
2	PuVAE	Accuracy	0.81	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Feature Denoising	Accuracy	50.6	—	Unverified

#	Model	Metric	Claimed	Verified	Status
1	Auto Encoder-Block Switching defense with GradCAM	Accuracy	88.54	—	Unverified