{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/certified-defenses-for-adversarial-patches-1","title":"Certified Defenses for Adversarial Patches","arxiv_id":"2003.06693","date":"2020-03-14","proceeding":"ICLR 2020 1","authors":["Ping-Yeh Chiang","Renkun Ni","Ahmed Abdelkader","Chen Zhu","Christoph Studer","Tom Goldstein"],"abstract":"Adversarial patch attacks are among one of the most practical threat models against real-world computer vision systems. This paper studies certified and empirical defenses against patch attacks. We begin with a set of experiments showing that most existing defenses, which work by pre-processing input images to mitigate adversarial patches, are easily broken by simple white-box adversaries. Motivated by this finding, we propose the first certified defense against patch attacks, and propose faster methods for its training. Furthermore, we experiment with different patch shapes for testing, obtaining surprisingly good robustness transfer across shapes, and present preliminary results on certified defense against sparse attacks. Our complete implementation can be found on: https://github.com/Ping-C/certifiedpatchdefense.","url_abs":"https://arxiv.org/abs/2003.06693v2","url_pdf":"https://arxiv.org/pdf/2003.06693v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"certified-defenses-for-adversarial-patches-1","repo_url":"https://github.com/Ping-C/certifiedpatchdefense","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":"https://app.syntology.ai/?focus=2003.06693","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2003.06693"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/Ping-C/certifiedpatchdefense","reach":null}],"summary":{"ran":2,"unverified":3},"by_repo_kind":{"official":{"samples":5,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"31c1d423620fd896","entry":"BoundConv2d","repo":"Ping-C/certifiedpatchdefense","repo_kind":"official","path":"bound_layers.py","file_url":"https://github.com/Ping-C/certifiedpatchdefense/blob/HEAD/bound_layers.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"BSD-2-Clause","inline_ok":true,"mcp_get_code":{"code_sha256":"31c1d423620fd896"}},{"code_sha256_prefix":"f16174246d046adc","entry":"BoundReLU","repo":"Ping-C/certifiedpatchdefense","repo_kind":"official","path":"bound_layers.py","file_url":"https://github.com/Ping-C/certifiedpatchdefense/blob/HEAD/bound_layers.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"BSD-2-Clause","inline_ok":true,"mcp_get_code":{"code_sha256":"f16174246d046adc"}},{"code_sha256_prefix":"d77f8c4a2bc288b6","entry":"BoundFlatten","repo":"Ping-C/certifiedpatchdefense","repo_kind":"official","path":"bound_layers.py","file_url":"https://github.com/Ping-C/certifiedpatchdefense/blob/HEAD/bound_layers.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"BSD-2-Clause","inline_ok":true,"mcp_get_code":{"code_sha256":"d77f8c4a2bc288b6"}},{"code_sha256_prefix":"b7e8434309b84446","entry":"BoundLinear","repo":"Ping-C/certifiedpatchdefense","repo_kind":"official","path":"bound_layers.py","file_url":"https://github.com/Ping-C/certifiedpatchdefense/blob/HEAD/bound_layers.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"BSD-2-Clause","inline_ok":true,"mcp_get_code":{"code_sha256":"b7e8434309b84446"}},{"code_sha256_prefix":"e091918c17715fed","entry":"BoundSequential","repo":"Ping-C/certifiedpatchdefense","repo_kind":"official","path":"bound_layers.py","file_url":"https://github.com/Ping-C/certifiedpatchdefense/blob/HEAD/bound_layers.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"BSD-2-Clause","inline_ok":true,"mcp_get_code":{"code_sha256":"e091918c17715fed"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}