{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-attack/papers/16","list_of":"/task/adversarial-attack","task":"Adversarial Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":16,"pages_in_order":19,"rows_per_page":100,"rows":[1501,1600],"of":1808,"counts":{"archive_papers_tagged":1808,"with_a_code_link":745,"where_syntology_ran_a_sample":206,"not_listed_spam_title":0,"listed":1808,"listed_where_code_ran":206,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":161,"every_run_a_failure_of_syntologys_instrument":45,"listed_with_a_run_with_no_instrument_failure":161,"listed_every_run_a_failure_of_syntologys_instrument":45,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-attack","prev":"/task/adversarial-attack/papers/15","next":"/task/adversarial-attack/papers/17","papers":[{"url":null,"slug":"stabilized-medical-attacks","title":"Stabilized Medical Attacks","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-robustness-of-deep-neural-networks","title":"Towards Robustness of Deep Neural Networks via Regularization","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"black-box-adversarial-attacks-on-monocular","title":"Black-box Adversarial Attacks on Monocular Depth Estimation Using Evolutionary Multi-objective Optimization","date":"2020-12-29","arxiv_id":"2101.10452","repositories_listed":0,"syntology":null},{"url":null,"slug":"adjust-free-adversarial-example-generation-in","title":"Adjust-free adversarial example generation in speech recognition using evolutionary multi-objective optimization under black-box condition","date":"2020-12-21","arxiv_id":"2012.11138","repositories_listed":0,"syntology":null},{"url":null,"slug":"blurring-fools-the-network-adversarial","title":"Blurring Fools the Network -- Adversarial Attacks by Feature Peak Suppression and Gaussian Blurring","date":"2020-12-21","arxiv_id":"2012.11442","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploiting-vulnerability-of-pooling-in","title":"Exploiting Vulnerability of Pooling in Convolutional Neural Networks by Strict Layer-Output Manipulation for Adversarial Attacks","date":"2020-12-21","arxiv_id":"2012.11413","repositories_listed":0,"syntology":null},{"url":null,"slug":"variational-quantum-cloning-improving","title":"Variational Quantum Cloning: Improving Practicality for Quantum Cryptanalysis","date":"2020-12-21","arxiv_id":"2012.11424","repositories_listed":0,"syntology":null},{"url":null,"slug":"query-free-black-box-adversarial-attacks-on","title":"Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs","date":"2020-12-12","arxiv_id":"2012.06757","repositories_listed":0,"syntology":null},{"url":null,"slug":"random-projections-for-adversarial-attack","title":"Attack Agnostic Detection of Adversarial Examples via Random Subspace Analysis","date":"2020-12-11","arxiv_id":"2012.06405","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-out-of-distribution-adversarial","title":"Generating Out of Distribution Adversarial Attack using Latent Space Poisoning","date":"2020-12-09","arxiv_id":"2012.05027","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-natural-robustness-against-1","title":"Towards Natural Robustness Against Adversarial Examples","date":"2020-12-04","arxiv_id":"2012.02452","repositories_listed":0,"syntology":null},{"url":null,"slug":"channel-effects-on-surrogate-models-of","title":"Channel Effects on Surrogate Models of Adversarial Attacks against Wireless Signal Classifiers","date":"2020-12-03","arxiv_id":"2012.02160","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-deep-graph-matching","title":"Adversarial Attacks on Deep Graph Matching","date":"2020-12-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"contrastive-zero-shot-learning-for-cross","title":"Contrastive Zero-Shot Learning for Cross-Domain Slot Filling with Adversarial Attack","date":"2020-12-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"just-one-moment-inconspicuous-one-frame","title":"Just One Moment: Structural Vulnerability of Deep Action Recognition against One Frame Attack","date":"2020-11-30","arxiv_id":"2011.14585","repositories_listed":0,"syntology":null},{"url":null,"slug":"faceguard-a-self-supervised-defense-against","title":"FaceGuard: A Self-Supervised Defense Against Adversarial Face Images","date":"2020-11-28","arxiv_id":"2011.14218","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-and-natural-physical-adversarial","title":"NaturalAE: Natural and Robust Physical Adversarial Examples for Object Detectors","date":"2020-11-27","arxiv_id":"2011.13692","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-on-facial-recognition","title":"Adversarial Attack on Facial Recognition using Visible Light","date":"2020-11-25","arxiv_id":"2011.12680","repositories_listed":0,"syntology":null},{"url":null,"slug":"probing-model-signal-awareness-via-prediction","title":"Probing Model Signal-Awareness via Prediction-Preserving Input Minimization","date":"2020-11-25","arxiv_id":"2011.14934","repositories_listed":0,"syntology":null},{"url":null,"slug":"detecting-universal-trigger-s-adversarial","title":"A Sweet Rabbit Hole by DARCY: Using Honeypots to Detect Universal Trigger's Adversarial Attacks","date":"2020-11-20","arxiv_id":"2011.10492","repositories_listed":0,"syntology":null},{"url":null,"slug":"multi-task-adversarial-attack","title":"Multi-Task Adversarial Attack","date":"2020-11-19","arxiv_id":"2011.09824","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-profiles-detecting-out","title":"Adversarial Profiles: Detecting Out-Distribution & Adversarial Samples in Pre-trained CNNs","date":"2020-11-18","arxiv_id":"2011.09123","repositories_listed":0,"syntology":null},{"url":null,"slug":"dynamic-backdoor-attacks-against-federated","title":"Dynamic backdoor attacks against federated learning","date":"2020-11-15","arxiv_id":"2011.07429","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-images-for-the-primate-brain","title":"Fooling the primate brain with minimal, targeted image manipulation","date":"2020-11-11","arxiv_id":"2011.05623","repositories_listed":0,"syntology":null},{"url":null,"slug":"sampled-nonlocal-gradients-for-stronger","title":"Dynamically Sampled Nonlocal Gradients for Stronger Adversarial Attacks","date":"2020-11-05","arxiv_id":"2011.02707","repositories_listed":0,"syntology":null},{"url":null,"slug":"generalization-to-mitigate-synonym","title":"Generalization to Mitigate Synonym Substitution Attacks","date":"2020-11-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"second-order-nlp-adversarial-examples-1","title":"Second-Order NLP Adversarial Examples","date":"2020-11-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"textattack-lessons-learned-in-designing","title":"TextAttack: Lessons learned in designing Python frameworks for NLP","date":"2020-11-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"utilizing-multimodal-feature-consistency-to","title":"Utilizing Multimodal Feature Consistency to Detect Adversarial Examples on Clinical Summaries","date":"2020-11-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"perception-improvement-for-free-exploring","title":"Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification","date":"2020-10-30","arxiv_id":"2011.05254","repositories_listed":0,"syntology":null},{"url":null,"slug":"can-the-state-of-relevant-neurons-in-a-deep","title":"Can the state of relevant neurons in a deep neural networks serve as indicators for detecting adversarial attacks?","date":"2020-10-29","arxiv_id":"2010.15974","repositories_listed":0,"syntology":null},{"url":null,"slug":"defense-guided-transferable-adversarial","title":"Defense-guided Transferable Adversarial Attacks","date":"2020-10-22","arxiv_id":"2010.11535","repositories_listed":0,"syntology":null},{"url":null,"slug":"rewriting-meaningful-sentences-via","title":"Rewriting Meaningful Sentences via Conditional BERT Sampling and an application on fooling text classifiers","date":"2020-10-22","arxiv_id":"2010.11869","repositories_listed":0,"syntology":null},{"url":null,"slug":"l-red-efficient-post-training-detection-of","title":"L-RED: Efficient Post-Training Detection of Imperceptible Backdoor Attacks without Access to the Training Set","date":"2020-10-20","arxiv_id":"2010.09987","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-hamiltonian-monte-carlo-method-for","title":"A Hamiltonian Monte Carlo Method for Probabilistic Adversarial Attack and Learning","date":"2020-10-15","arxiv_id":"2010.07849","repositories_listed":0,"syntology":null},{"url":null,"slug":"reverse-engineering-imperceptible-backdoor","title":"Reverse Engineering Imperceptible Backdoor Attacks on Deep Neural Networks for Detection and Training Set Cleansing","date":"2020-10-15","arxiv_id":"2010.07489","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-understanding-pixel-vulnerability","title":"Learning to Attack with Fewer Pixels: A Probabilistic Post-hoc Framework for Refining Arbitrary Dense Adversarial Attacks","date":"2020-10-13","arxiv_id":"2010.06131","repositories_listed":0,"syntology":null},{"url":null,"slug":"efsg-evolutionary-fooling-sentences-generator","title":"EFSG: Evolutionary Fooling Sentences Generator","date":"2020-10-12","arxiv_id":"2010.05736","repositories_listed":0,"syntology":null},{"url":null,"slug":"is-it-time-to-redefine-the-classification","title":"Learning Task-aware Robust Deep Learning Systems","date":"2020-10-11","arxiv_id":"2010.05125","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-audio-source","title":"Adversarial attacks on audio source separation","date":"2020-10-07","arxiv_id":"2010.03164","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-to-machine-learning-based","title":"Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems","date":"2020-10-07","arxiv_id":"2010.03671","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-patch-attacks-on-monocular-depth","title":"Adversarial Patch Attacks on Monocular Depth Estimation Networks","date":"2020-10-06","arxiv_id":"2010.03072","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-study-for-universal-adversarial-attacks-on","title":"A Study for Universal Adversarial Attacks on Texture Recognition","date":"2020-10-04","arxiv_id":"2010.01506","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-deep-genetic-programming-based-methodology","title":"A Deep Genetic Programming based Methodology for Art Media Classification Robust to Adversarial Perturbations","date":"2020-10-03","arxiv_id":"2010.01238","repositories_listed":0,"syntology":null},{"url":null,"slug":"corrattack-black-box-adversarial-attack-with-1","title":"CorrAttack: Black-box Adversarial Attack with Structured Search","date":"2020-10-03","arxiv_id":"2010.01250","repositories_listed":0,"syntology":null},{"url":null,"slug":"note-an-alternative-proof-of-the","title":"An alternative proof of the vulnerability of retrieval in high intrinsic dimensionality neighborhood","date":"2020-10-02","arxiv_id":"2010.00990","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-against-deep-learning","title":"Adversarial Attacks Against Deep Learning Systems for ICD-9 Code Assignment","date":"2020-09-29","arxiv_id":"2009.13720","repositories_listed":0,"syntology":null},{"url":null,"slug":"learned-fine-tuner-for-incongruous-few-shot","title":"Learning to Generate Image Source-Agnostic Universal Adversarial Perturbations","date":"2020-09-29","arxiv_id":"2009.13714","repositories_listed":0,"syntology":null},{"url":null,"slug":"scalable-adversarial-attack-on-graph-neural","title":"Scalable Adversarial Attack on Graph Neural Networks with Alternating Direction Method of Multipliers","date":"2020-09-22","arxiv_id":"2009.10233","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-exposure-attack-on-diabetic","title":"Adversarial Exposure Attack on Diabetic Retinopathy Imagery Grading","date":"2020-09-19","arxiv_id":"2009.09231","repositories_listed":0,"syntology":null},{"url":null,"slug":"bias-field-poses-a-threat-to-dnn-based-x-ray","title":"Bias Field Poses a Threat to DNN-based X-Ray Recognition","date":"2020-09-19","arxiv_id":"2009.09247","repositories_listed":0,"syntology":null},{"url":null,"slug":"it-s-raining-cats-or-dogs-adversarial-rain","title":"Adversarial Rain Attack and Defensive Deraining for DNN Perception","date":"2020-09-19","arxiv_id":"2009.09205","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-to-attack-towards-textual","title":"Learning to Attack: Towards Textual Adversarial Attacking in Real-world Situations","date":"2020-09-19","arxiv_id":"2009.09192","repositories_listed":0,"syntology":null},{"url":null,"slug":"label-smoothing-and-adversarial-robustness","title":"Label Smoothing and Adversarial Robustness","date":"2020-09-17","arxiv_id":"2009.08233","repositories_listed":0,"syntology":null},{"url":null,"slug":"multav-multiplicative-adversarial-videos","title":"MultAV: Multiplicative Adversarial Videos","date":"2020-09-17","arxiv_id":"2009.08058","repositories_listed":0,"syntology":null},{"url":null,"slug":"switching-gradient-directions-for-query","title":"Switching Transferable Gradient Directions for Query-Efficient Black-Box Adversarial Attacks","date":"2020-09-15","arxiv_id":"2009.07191","repositories_listed":0,"syntology":null},{"url":null,"slug":"input-hessian-regularization-of-neural","title":"Input Hessian Regularization of Neural Networks","date":"2020-09-14","arxiv_id":"2009.06571","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-deep-learning-models","title":"Adversarial attacks on deep learning models for fatty liver disease classification by modification of ultrasound image reconstruction method","date":"2020-09-07","arxiv_id":"2009.03364","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarially-robust-neural-architectures","title":"Adversarially Robust Neural Architectures","date":"2020-09-02","arxiv_id":"2009.00902","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-eigen-attack-on-black-box-models","title":"Adversarial Eigen Attack on Black-Box Models","date":"2020-08-27","arxiv_id":"2009.00097","repositories_listed":0,"syntology":null},{"url":null,"slug":"point-adversarial-self-mining-a-simple-method","title":"Point Adversarial Self Mining: A Simple Method for Facial Expression Recognition","date":"2020-08-26","arxiv_id":"2008.11401","repositories_listed":0,"syntology":null},{"url":null,"slug":"sigl-securing-software-installations-through","title":"SIGL: Securing Software Installations Through Deep Graph Learning","date":"2020-08-26","arxiv_id":"2008.11533","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-adversarial-attack-defending-system-for","title":"An Adversarial Attack Defending System for Securing In-Vehicle Networks","date":"2020-08-25","arxiv_id":"2008.11278","repositories_listed":0,"syntology":null},{"url":null,"slug":"near-optimal-adversarial-attack-on-ucb","title":"Near Optimal Adversarial Attacks on Stochastic Bandits and Defenses with Smoothed Responses","date":"2020-08-21","arxiv_id":"2008.09312","repositories_listed":0,"syntology":null},{"url":null,"slug":"accelerated-zeroth-order-momentum-methods","title":"Accelerated Zeroth-Order and First-Order Momentum Methods from Mini to Minimax Optimization","date":"2020-08-18","arxiv_id":"2008.08170","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-adversarial-robustness-of-deep","title":"Improving adversarial robustness of deep neural networks by using semantic information","date":"2020-08-18","arxiv_id":"2008.07838","repositories_listed":0,"syntology":null},{"url":null,"slug":"semantics-preserving-adversarial-attacks-in","title":"Model Robustness with Text Classification: Semantic-preserving adversarial attacks","date":"2020-08-12","arxiv_id":"2008.05536","repositories_listed":0,"syntology":null},{"url":null,"slug":"visual-attack-and-defense-on-text","title":"Visual Attack and Defense on Text","date":"2020-08-07","arxiv_id":"2008.10356","repositories_listed":0,"syntology":null},{"url":null,"slug":"stabilizing-deep-tomographic-reconstruction","title":"Stabilizing Deep Tomographic Reconstruction","date":"2020-08-04","arxiv_id":"2008.01846","repositories_listed":0,"syntology":null},{"url":null,"slug":"hardware-accelerator-for-adversarial-attacks","title":"Hardware Accelerator for Adversarial Attacks on Deep Learning Neural Networks","date":"2020-08-03","arxiv_id":"2008.01219","repositories_listed":0,"syntology":null},{"url":null,"slug":"physical-adversarial-attack-on-vehicle","title":"Physical Adversarial Attack on Vehicle Detector in the Carla Simulator","date":"2020-07-31","arxiv_id":"2007.16118","repositories_listed":0,"syntology":null},{"url":null,"slug":"deeppeep-exploiting-design-ramifications-to","title":"DeepPeep: Exploiting Design Ramifications to Decipher the Architecture of Compact DNNs","date":"2020-07-30","arxiv_id":"2007.15248","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-robustness-for-machine-learning","title":"Adversarial Robustness for Machine Learning Cyber Defenses Using Log Data","date":"2020-07-29","arxiv_id":"2007.14983","repositories_listed":0,"syntology":null},{"url":null,"slug":"derivation-of-information-theoretically","title":"Derivation of Information-Theoretically Optimal Adversarial Attacks with Applications to Robust Machine Learning","date":"2020-07-28","arxiv_id":"2007.14042","repositories_listed":0,"syntology":null},{"url":null,"slug":"from-sound-representation-to-model-robustness","title":"From Sound Representation to Model Robustness","date":"2020-07-27","arxiv_id":"2007.13703","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-accuracy-fairness-paradox-adversarial","title":"Towards Accuracy-Fairness Paradox: Adversarial Example-based Data Augmentation for Visual Debiasing","date":"2020-07-27","arxiv_id":"2007.13632","repositories_listed":0,"syntology":null},{"url":null,"slug":"ddr-id-dual-deep-reconstruction-networks","title":"DDR-ID: Dual Deep Reconstruction Networks Based Image Decomposition for Anomaly Detection","date":"2020-07-18","arxiv_id":"2007.09431","repositories_listed":0,"syntology":null},{"url":null,"slug":"anomaly-detection-in-unsupervised","title":"Anomaly Detection in Unsupervised Surveillance Setting Using Ensemble of Multimodal Data with Adversarial Defense","date":"2020-07-17","arxiv_id":"2007.10812","repositories_listed":0,"syntology":null},{"url":null,"slug":"pasadena-perceptually-aware-and-stealthy","title":"Pasadena: Perceptually Aware and Stealthy Adversarial Denoise Attack","date":"2020-07-14","arxiv_id":"2007.07097","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-adversarial-inputs-using-a-black","title":"Generating Adversarial Inputs Using A Black-box Differential Technique","date":"2020-07-10","arxiv_id":"2007.05315","repositories_listed":0,"syntology":null},{"url":null,"slug":"evaluation-of-adversarial-training-on","title":"Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSs","date":"2020-07-08","arxiv_id":"2007.04472","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-data-augmentation-and-adversarial-risk-an","title":"On Data Augmentation and Adversarial Risk: An Empirical Analysis","date":"2020-07-06","arxiv_id":"2007.02650","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-learning-in-the-cyber-security","title":"Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain","date":"2020-07-05","arxiv_id":"2007.02407","repositories_listed":0,"syntology":null},{"url":null,"slug":"deep-learning-defenses-against-adversarial","title":"Deep Learning Defenses Against Adversarial Examples for Dynamic Risk Assessment","date":"2020-07-02","arxiv_id":"2007.01017","repositories_listed":0,"syntology":null},{"url":null,"slug":"query-free-adversarial-transfer-via","title":"Query-Free Adversarial Transfer via Undertrained Surrogates","date":"2020-07-01","arxiv_id":"2007.00806","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-adversarial-examples-with-an","title":"Generating Adversarial Examples with an Optimized Quality","date":"2020-06-30","arxiv_id":"2007.00146","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-for-multi-view-deep","title":"Adversarial Attacks for Multi-view Deep Models","date":"2020-06-19","arxiv_id":"2006.11004","repositories_listed":0,"syntology":null},{"url":null,"slug":"local-competition-and-uncertainty-for","title":"Local Competition and Uncertainty for Adversarial Robustness in Deep Learning","date":"2020-06-18","arxiv_id":"2006.10620","repositories_listed":0,"syntology":null},{"url":null,"slug":"disrupting-deepfakes-with-an-adversarial","title":"OGAN: Disrupting Deepfakes with an Adversarial Attack that Survives Training","date":"2020-06-17","arxiv_id":"2006.12247","repositories_listed":0,"syntology":null},{"url":null,"slug":"universal-lower-bounds-on-classification","title":"Classifier-independent Lower-Bounds for Adversarial Robustness","date":"2020-06-17","arxiv_id":"2006.09989","repositories_listed":0,"syntology":null},{"url":null,"slug":"d-square-b-deep-distribution-bound-for","title":"D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack","date":"2020-06-12","arxiv_id":"2006.07258","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-tightness-of-semidefinite-relaxations","title":"On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples","date":"2020-06-11","arxiv_id":"2006.06759","repositories_listed":0,"syntology":null},{"url":null,"slug":"global-robustness-verification-networks","title":"Global Robustness Verification Networks","date":"2020-06-08","arxiv_id":"2006.04403","repositories_listed":0,"syntology":null},{"url":null,"slug":"ilfo-adversarial-attack-on-adaptive-neural","title":"ILFO: Adversarial Attack on Adaptive Neural Networks","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"modeling-biological-immunity-to-adversarial","title":"Modeling Biological Immunity to Adversarial Examples","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"one-shot-adversarial-attacks-on-visual","title":"One-Shot Adversarial Attacks on Visual Tracking With Dual Attention","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"polishing-decision-based-adversarial-noise","title":"Polishing Decision-Based Adversarial Noise With a Customized Sampling","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-superpixel-guided-attentional","title":"Robust Superpixel-Guided Attentional Adversarial Attack","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"what-machines-see-is-not-what-they-get","title":"What Machines See Is Not What They Get: Fooling Scene Text Recognition Models With Adversarial Text Images","date":"2020-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"evaluations-and-methods-for-explanation-1","title":"Evaluations and Methods for Explanation through Robustness Analysis","date":"2020-05-31","arxiv_id":"2006.00442","repositories_listed":0,"syntology":null}],"record_sha256":"8bbb4b3928607c03fbd6e373cb5cb434d88583afd5d6ae48d158aa641188594e","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}