{"url":"/method/advprop","slug":"advprop","name":"AdvProp","full_name":"AdvProp","full_name_withheld":false,"description_markdown":"**AdvProp** is an adversarial training scheme which treats adversarial examples as additional examples, to prevent overfitting. Key to the method is the usage of a separate auxiliary batch norm for adversarial examples, as they have different underlying distributions to normal examples.","description_state":"present","introduced_year":null,"introduced_by":{"title":"Adversarial Examples Improve Image Recognition","paper":"/paper/adversarial-examples-improve-image","first_author":"Cihang Xie","n_authors":6,"url_abs":null,"archive_paper_url":"https://paperswithcode.com/paper/adversarial-examples-improve-image"},"source":{"url":"https://arxiv.org/abs/1911.09665v2","title":"Adversarial Examples Improve Image Recognition","url_on_a_paper_host":true},"code_snippet_url":null,"code_snippet_url_on_a_code_host":false,"categories":[{"area":"General","area_id":"general","collection":"Adversarial Training","url":"/methods/category/adversarial-training","pwc_aliases":[]}],"n_papers_tagged":6,"archive_num_papers":6,"papers_newest_first":[{"paper":null,"title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","date":"2023-02-28","arxiv_id":"2302.14302","n_code_links":0,"syntology":null},{"paper":null,"title":"How explainable are adversarially-robust CNNs?","date":"2022-05-25","arxiv_id":"2205.13042","n_code_links":0,"syntology":null},{"paper":"/paper/fast-advprop-1","title":"Fast AdvProp","date":"2022-04-21","arxiv_id":"2204.09838","n_code_links":1,"syntology":{"ran":4,"of":4,"unverified":0,"pointer_only":0}},{"paper":"/paper/pyramid-adversarial-training-improves-vit","title":"Pyramid Adversarial Training Improves ViT Performance","date":"2021-11-30","arxiv_id":"2111.15121","n_code_links":1,"syntology":null},{"paper":"/paper/moleculekit-machine-learning-methods-for","title":"Advanced Graph and Sequence Neural Networks for Molecular Property Prediction and Drug Discovery","date":"2020-12-02","arxiv_id":"2012.01981","n_code_links":1,"syntology":null},{"paper":"/paper/adversarial-examples-improve-image","title":"Adversarial Examples Improve Image Recognition","date":"2019-11-21","arxiv_id":"1911.09665","n_code_links":6,"syntology":{"ran":2,"of":2,"unverified":0,"pointer_only":0}}],"papers_shown":6,"tasks":[{"task":"/task/data-augmentation","name":"Data Augmentation","papers":3},{"task":"/task/domain-generalization","name":"Domain Generalization","papers":2},{"task":"/task/image-classification","name":"Image Classification","papers":2},{"task":"/task/adversarial-attack","name":"Adversarial Attack","papers":1},{"task":"/task/machine-learning","name":"BIG-bench Machine Learning","papers":1},{"task":"/task/drug-discovery","name":"Drug Discovery","papers":1},{"task":"/task/feature-importance","name":"Feature Importance","papers":1},{"task":"/task/molecular-property-prediction","name":"Molecular Property Prediction","papers":1},{"task":"/task/object-detection","name":"Object Detection","papers":1},{"task":"/task/property-prediction","name":"Property Prediction","papers":1},{"task":"/task/object-detection-1","name":"object-detection","papers":1}],"tasks_shown":11,"n_tasks":11,"usage_by_year":[{"year":"2019","papers":1},{"year":"2020","papers":1},{"year":"2021","papers":1},{"year":"2022","papers":2},{"year":"2023","papers":1}],"row_source":"methods_table","archive":{"source":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","archive_url":"https://paperswithcode.com/method/advprop"},"syntology_read_at":"2026-09-24T18:15:14+00:00"}