{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/me-net-towards-effective-adversarial","title":"ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation","arxiv_id":"1905.11971","date":"2019-05-28","proceeding":null,"authors":["Yuzhe Yang","Guo Zhang","Dina Katabi","Zhi Xu"],"abstract":"Deep neural networks are vulnerable to adversarial attacks. The literature is rich with algorithms that can easily craft successful adversarial examples. In contrast, the performance of defense techniques still lags behind. This paper proposes ME-Net, a defense method that leverages matrix estimation (ME). In ME-Net, images are preprocessed using two steps: first pixels are randomly dropped from the image; then, the image is reconstructed using ME. We show that this process destroys the adversarial structure of the noise, while re-enforcing the global structure in the original image. Since humans typically rely on such global structures in classifying images, the process makes the network mode compatible with human perception. We conduct comprehensive experiments on prevailing benchmarks such as MNIST, CIFAR-10, SVHN, and Tiny-ImageNet. Comparing ME-Net with state-of-the-art defense mechanisms shows that ME-Net consistently outperforms prior techniques, improving robustness against both black-box and white-box attacks.","url_abs":"https://arxiv.org/abs/1905.11971v1","url_pdf":"https://arxiv.org/pdf/1905.11971v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"me-net-towards-effective-adversarial","repo_url":"https://github.com/YyzHarry/ME-Net","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"adversarial-robustness","task_name":"Adversarial Robustness"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=1905.11971","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1905.11971"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/YyzHarry/ME-Net","reach":null}],"summary":{"ran_violates":1,"ran_draft_wrong":1,"unverified":3},"by_repo_kind":{"official":{"samples":5,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"908e7e3772392464","entry":"target_transform","repo":"YyzHarry/ME-Net","repo_kind":"official","path":"attack_blackbox.py","file_url":"https://github.com/YyzHarry/ME-Net/blob/HEAD/attack_blackbox.py","link_basis":"first_harvest_node","language":"python","status":"ran_violates","verification_level":1,"contract_check":"VIOLATES","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"908e7e3772392464"}},{"code_sha256_prefix":"80b795d920e2967a","entry":"unpickle","repo":"YyzHarry/ME-Net","repo_kind":"official","path":"attack_blackbox.py","file_url":"https://github.com/YyzHarry/ME-Net/blob/HEAD/attack_blackbox.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"80b795d920e2967a"}},{"code_sha256_prefix":"71fe542d64f2d418","entry":"nuclear_norm_solve","repo":"YyzHarry/ME-Net","repo_kind":"official","path":"train_pure.py","file_url":"https://github.com/YyzHarry/ME-Net/blob/HEAD/train_pure.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"71fe542d64f2d418"}},{"code_sha256_prefix":"8d121f6d045143a1","entry":"nucnorm","repo":"YyzHarry/ME-Net","repo_kind":"official","path":"train_pure.py","file_url":"https://github.com/YyzHarry/ME-Net/blob/HEAD/train_pure.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8d121f6d045143a1"}},{"code_sha256_prefix":"f15d1bdad7f1e1eb","entry":"usvt","repo":"YyzHarry/ME-Net","repo_kind":"official","path":"train_pure.py","file_url":"https://github.com/YyzHarry/ME-Net/blob/HEAD/train_pure.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"f15d1bdad7f1e1eb"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}