Browse State-of-the-Art › Adversarial Attack Detection
Adversarial Attack Detection
16 papers with code · 0 benchmarks · 0 datasets archive 2025-07-28
The detection of adversarial attacks.
Description from the archive archive 2025-07-28.
Benchmarks archive 2025-07-28
No benchmark for this task in the archive.
Libraries
Not in the archive: the export carries no per-task library table, so there is nothing to show at snapshot 2025-07-28.
Datasets archive 2025-07-28
No dataset record in the archive lists this task.
Subtasks archive 2025-07-28
No subtask under this task in the archive's task tree.
Parent tasks archive 2025-07-28
Most implemented papers archive 2025-07-28
16 shown of 16 papers with code (38 tagged with this task in all), ordered by repositories listed in the archive, not by stars (the archive holds no stars, so PwC's “Social” and “Latest” sorts cannot be reproduced). Papers without a page here are shown as plain text.
-
2 Dec 2021 2 repositories listedIn its most commonly reported sub-task, RobustBench evaluates and ranks the adversarial robustness of trained neural networks on CIFAR10 under AutoAttack (Croce and Hein 2020b) with l-inf perturbations limited to eps =…
-
22 Oct 2020 2 repositories listedHowever, it has been shown that the MMD test is unaware of adversarial attacks -- the MMD test failed to detect the discrepancy between natural and adversarial data.
-
19 May 2025 1 repository listedDeep neural networks (DNNs) are highly susceptible to adversarial examples--subtle, imperceptible perturbations that can lead to incorrect predictions.
-
7 Nov 2024 1 repository listedDespite the good performance of these detectors, we argue that in a white-box setting, where the attacker knows the configuration and weights of the network and the detector, they can overcome the detector by running…
-
21 Jul 2023 1 repository listed Syntology ran 6 of 8 samples · 2 unverifiedExperiments in the domain of student essays show that the proposed detector improves the detection performance on the attacker-generated texts by up to +41.
-
31 May 2023 1 repository listedWe introduce a novel approach of detection and interpretation of adversarial attacks from a graph perspective.
-
13 Dec 2022 1 repository listedConvolutional neural networks (CNN) define the state-of-the-art solution on many perceptual tasks.
-
17 Jun 2022 1 repository listedMany deep learning methods have successfully solved complex tasks in computer vision and speech recognition applications.
-
1 May 2022 1 repository listedUncertainty estimation (UE) of model predictions is a crucial step for a variety of tasks such as active learning, misclassification detection, adversarial attack detection, out-of-distribution detection, etc.
-
17 Apr 2022 1 repository listedMany popular image adversarial detection approaches are able to identify adversarial examples from embedding feature spaces, whilst in the NLP domain existing state of the art detection approaches solely focus on input…
-
8 Dec 2021 1 repository listed Syntology ran 3 of 3 samples · 0 unverified · 3 pointer-only (licence)In addition, we design a robust shape completion algorithm, which is guaranteed to remove the entire patch from the images if the outputs of the patch segmenter are within a certain Hamming distance of the ground-truth…
-
25 Sep 2021 1 repository listedTo this end, Argos first amplifies the discrepancies between the visual content of an image and its misclassified label induced by the attack using a set of regeneration mechanisms and then identifies an image as…
-
26 Apr 2020 1 repository listedWe propose a new adversarial attack to Deep Neural Networks for image classification.
-
6 Aug 2019 1 repository listedTo solve such few-shot problem with the evolving attack, we propose a meta-learning based robust detection method to detect new adversarial attacks with limited examples.
-
31 May 2019 1 repository listedSecond, taking advantage of this new training criterion, this paper investigates using Prior Networks to detect adversarial attacks and proposes a generalized form of adversarial training.
-
18 Apr 2019 1 repository listedAttackers' optimization algorithms gravitate towards trapdoors, leading them to produce attacks similar to trapdoors in the feature space.
Syntology lines on 2 of the papers shown; no Syntology record for the others (a paper without an arXiv id cannot be joined to the graph, and absence from the graph layer is not a recorded non-run). “Ran” means the sample executed on a synthesized fixture, not that the paper's result was reproduced. Read from the graph 2026-09-24.
Report a problem or propose a change · a person checks every report against the paper or source before anything changes; decisions are listed on /corrections