{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2606-02267","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","arxiv_id":"2606.02267","date":"2026-06-01","proceeding":null,"authors":["Nicolas Stalder","Benjamin F. Grewe","Matteo Saponati","Pau Vilimelis Aceituno"],"abstract":"The vulnerability of deep neural networks to adversarial examples poses a significant challenge for real-world deployment. Existing techniques to enhance deep network robustness rely on adversarial training, an approach that is powerful but computationally intensive and typically tailored to specific attack types. To address these limitations, existing works have explored techniques such as adding gaussian noise or filtering images, both of which can boost the network robustness to various adversarial attacks, albeit modestly. Here, we theoretically demonstrate that these two approaches enhance robustness against adversarial attacks through complementary mechanisms, resulting in supralinear robustness when combined. Building on this insight, we experimentally show that a simple preprocessor combining Gaussian noise and bilateral filtering yields supralinear improvements in adversarial robustness with minimal computational cost. Next, we combine our preprocessor with adversarial training and test on RobustBench to assess its supralinear improvement over state-of-the-art defenses. First, this combination ranks second on AutoAttack and third overall, while using only $\\sim$35% of the training FLOPs, using a model with $\\sim$50% less parametets, trained with $\\sim$33% of the epochs and $\\sim$15% the data compared to state-of-the-art defenses. Second, our method scales efficiently, matching the accuracy of competing models with roughly 2-8x less total compute across 3 orders of magnitude. Overall, our approach provides a principled and easily integrable framework for enhancing adversarial robustness, offering negligible computational overhead and a simple yet theoretically grounded design.","url_abs":"https://arxiv.org/abs/2606.02267","url_pdf":"https://arxiv.org/pdf/2606.02267","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2606.02267","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2606.02267"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/wzekai99/DM-Improves-AT","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_draft_wrong":1,"ran":5,"unverified":1},"by_repo_kind":{"found_in_text":{"samples":7,"ran":6,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"9aa516330b945a07","entry":"accuracy","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/metrics.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/metrics.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9aa516330b945a07"}},{"code_sha256_prefix":"6d57c3097e379953","entry":"calc_l2distsq","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/attacks/utils.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/attacks/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6d57c3097e379953"}},{"code_sha256_prefix":"8a6e2e06ca96fb3c","entry":"perturb_deepfool","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/attacks/deepfool.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/attacks/deepfool.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8a6e2e06ca96fb3c"}},{"code_sha256_prefix":"a99efdab28da25d8","entry":"preact_resnet","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/models/preact_resnet.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/models/preact_resnet.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"a99efdab28da25d8"}},{"code_sha256_prefix":"096e065144e00e11","entry":"replicate_input","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/attacks/utils.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/attacks/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"096e065144e00e11"}},{"code_sha256_prefix":"706e45721616b050","entry":"replicate_input_withgrad","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/attacks/utils.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/attacks/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"706e45721616b050"}},{"code_sha256_prefix":"ec5326fd666c5823","entry":"perturb_iterative","repo":"wzekai99/DM-Improves-AT","repo_kind":"found_in_text","path":"core/attacks/pgd.py","file_url":"https://github.com/wzekai99/DM-Improves-AT/blob/HEAD/core/attacks/pgd.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ec5326fd666c5823"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.LG","source":"arxiv_2026.jsonl"},"syntology_extracted_results":null}