{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-attack/papers/17","list_of":"/task/adversarial-attack","task":"Adversarial Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":17,"pages_in_order":19,"rows_per_page":100,"rows":[1601,1700],"of":1808,"counts":{"archive_papers_tagged":1808,"with_a_code_link":745,"where_syntology_ran_a_sample":206,"not_listed_spam_title":0,"listed":1808,"listed_where_code_ran":206,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":161,"every_run_a_failure_of_syntologys_instrument":45,"listed_with_a_run_with_no_instrument_failure":161,"listed_every_run_a_failure_of_syntologys_instrument":45,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-attack","prev":"/task/adversarial-attack/papers/16","next":"/task/adversarial-attack/papers/18","papers":[{"url":null,"slug":"effects-of-forward-error-correction-on","title":"Effects of Forward Error Correction on Communications Aware Evasion Attacks","date":"2020-05-27","arxiv_id":"2005.13123","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-semantically-valid-adversarial","title":"Generating Semantically Valid Adversarial Questions for TableQA","date":"2020-05-26","arxiv_id":"2005.12696","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-on-hierarchical-graph","title":"Adversarial Attack on Hierarchical Graph Pooling Neural Networks","date":"2020-05-23","arxiv_id":"2005.11560","repositories_listed":0,"syntology":null},{"url":null,"slug":"investigating-vulnerability-to-adversarial","title":"Investigating Vulnerability to Adversarial Examples on Multimodal Data Fusion in Deep Learning","date":"2020-05-22","arxiv_id":"2005.10987","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-ensemble-model-training-via-random","title":"Robust Ensemble Model Training via Random Layer Sampling Against Adversarial Attack","date":"2020-05-21","arxiv_id":"2005.10757","repositories_listed":0,"syntology":null},{"url":null,"slug":"stealthy-and-efficient-adversarial-attacks","title":"Stealthy and Efficient Adversarial Attacks against Deep Reinforcement Learning","date":"2020-05-14","arxiv_id":"2005.07099","repositories_listed":0,"syntology":null},{"url":null,"slug":"channel-aware-adversarial-attacks-against","title":"Channel-Aware Adversarial Attacks Against Deep Learning-Based Wireless Signal Classifiers","date":"2020-05-11","arxiv_id":"2005.05321","repositories_listed":0,"syntology":null},{"url":null,"slug":"class-aware-domain-adaptation-for-improving","title":"Class-Aware Domain Adaptation for Improving Adversarial Robustness","date":"2020-05-10","arxiv_id":"2005.04564","repositories_listed":0,"syntology":null},{"url":null,"slug":"anonymized-gcn-a-novel-robust-graph-embedding","title":"AN-GCN: An Anonymous Graph Convolutional Network Defense Against Edge-Perturbing Attack","date":"2020-05-06","arxiv_id":"2005.03482","repositories_listed":0,"syntology":null},{"url":null,"slug":"enhancing-transformation-based-defenses","title":"Enhancing Transformation-Based Defenses Against Adversarial Attacks with a Distribution Classifier","date":"2020-05-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"perturbing-across-the-feature-hierarchy-to","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","date":"2020-04-29","arxiv_id":"2004.14861","repositories_listed":0,"syntology":null},{"url":null,"slug":"minority-reports-defense-defending-against","title":"Minority Reports Defense: Defending Against Adversarial Patches","date":"2020-04-28","arxiv_id":"2004.13799","repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-perturbations-of-deep-feature-1","title":"Transferable Perturbations of Deep Feature Distributions","date":"2020-04-27","arxiv_id":"2004.12519","repositories_listed":0,"syntology":null},{"url":null,"slug":"enabling-fast-and-universal-audio-adversarial","title":"Enabling Fast and Universal Audio Adversarial Attack Using Generative Model","date":"2020-04-26","arxiv_id":"2004.12261","repositories_listed":0,"syntology":null},{"url":null,"slug":"improved-adversarial-training-via-learned","title":"Improved Adversarial Training via Learned Optimizer","date":"2020-04-25","arxiv_id":"2004.12227","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-optimal-interaction-range-for-multi","title":"On the Optimal Interaction Range for Multi-Agent Systems Under Adversarial Attack","date":"2020-04-25","arxiv_id":"2004.06562","repositories_listed":0,"syntology":null},{"url":null,"slug":"one-sparse-perturbation-to-fool-them-all","title":"A Black-box Adversarial Attack Strategy with Adjustable Sparsity and Generalizability for Deep Image Classifiers","date":"2020-04-24","arxiv_id":"2004.13002","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-characterizing-adversarial-defects-of","title":"Towards Characterizing Adversarial Defects of Deep Learning Software from the Lens of Uncertainty","date":"2020-04-24","arxiv_id":"2004.11573","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-machine-learning-an","title":"Adversarial Attacks and Defenses: An Interpretation Perspective","date":"2020-04-23","arxiv_id":"2004.11488","repositories_listed":0,"syntology":null},{"url":null,"slug":"headless-horseman-adversarial-attacks-on","title":"Headless Horseman: Adversarial Attacks on Transfer Learning Models","date":"2020-04-20","arxiv_id":"2004.09007","repositories_listed":0,"syntology":null},{"url":null,"slug":"dynamic-knowledge-graph-based-dialogue","title":"Dynamic Knowledge Graph-based Dialogue Generation with Improved Adversarial Meta-Learning","date":"2020-04-19","arxiv_id":"2004.08833","repositories_listed":0,"syntology":null},{"url":null,"slug":"active-sentence-learning-by-adversarial","title":"Active Sentence Learning by Adversarial Uncertainty Sampling in Discrete Space","date":"2020-04-17","arxiv_id":"2004.08046","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-transferable-adversarial-attack","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","date":"2020-04-13","arxiv_id":"2004.05790","repositories_listed":0,"syntology":null},{"url":null,"slug":"domain-adaptive-transfer-attack-data-based","title":"Domain Adaptive Transfer Attack (DATA)-based Segmentation Networks for Building Extraction from Aerial Images","date":"2020-04-11","arxiv_id":"2004.11819","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-thorough-comparison-study-on-adversarial","title":"A Thorough Comparison Study on Adversarial Attacks and Defenses for Common Thorax Disease Classification in Chest X-rays","date":"2020-03-31","arxiv_id":"2003.13969","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-imitation-attack-1","title":"Adversarial Imitation Attack","date":"2020-03-28","arxiv_id":"2003.12760","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-adversarial-robustness-of-dnns-based","title":"Challenging the adversarial robustness of DNNs based on error-correcting output codes","date":"2020-03-26","arxiv_id":"2003.11855","repositories_listed":0,"syntology":null},{"url":null,"slug":"solving-non-convex-non-differentiable-min-max","title":"Solving Non-Convex Non-Differentiable Min-Max Games using Proximal Gradient Method","date":"2020-03-18","arxiv_id":"2003.08093","repositories_listed":0,"syntology":null},{"url":null,"slug":"inline-detection-of-dga-domains-using-side","title":"Inline Detection of DGA Domains Using Side Information","date":"2020-03-12","arxiv_id":"2003.05703","repositories_listed":0,"syntology":null},{"url":null,"slug":"frequency-tuned-universal-adversarial-attacks","title":"Frequency-Tuned Universal Adversarial Attacks","date":"2020-03-11","arxiv_id":"2003.05549","repositories_listed":0,"syntology":null},{"url":"/paper/sad-saliency-based-defenses-against","slug":"sad-saliency-based-defenses-against","title":"SAD: Saliency-based Defenses Against Adversarial Examples","date":"2020-03-10","arxiv_id":"2003.04820","repositories_listed":0,"syntology":null},{"url":null,"slug":"using-an-ensemble-color-space-model-to-tackle","title":"Using an ensemble color space model to tackle adversarial examples","date":"2020-03-10","arxiv_id":"2003.05005","repositories_listed":0,"syntology":null},{"url":null,"slug":"gradient-based-adversarial-attacks-on","title":"Gradient-based adversarial attacks on categorical sequence models via traversing an embedded world","date":"2020-03-09","arxiv_id":"2003.04173","repositories_listed":0,"syntology":null},{"url":null,"slug":"no-surprises-training-robust-lung-nodule","title":"No Surprises: Training Robust Lung Nodule Detection for Low-Dose CT Scans by Augmenting with Adversarial Attacks","date":"2020-03-08","arxiv_id":"2003.03824","repositories_listed":0,"syntology":null},{"url":null,"slug":"search-space-of-adversarial-perturbations","title":"Search Space of Adversarial Perturbations against Image Filters","date":"2020-03-05","arxiv_id":"2003.02750","repositories_listed":0,"syntology":null},{"url":null,"slug":"double-backpropagation-for-training","title":"Double Backpropagation for Training Autoencoders against Adversarial Attack","date":"2020-03-04","arxiv_id":"2003.01895","repositories_listed":0,"syntology":null},{"url":null,"slug":"real-time-universal-and-robust-adversarial","title":"Real-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems","date":"2020-03-04","arxiv_id":"2003.02301","repositories_listed":0,"syntology":null},{"url":null,"slug":"security-of-deep-learning-based-lane-keeping","title":"Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack","date":"2020-03-03","arxiv_id":"2003.01782","repositories_listed":0,"syntology":null},{"url":null,"slug":"applying-tensor-decomposition-to-image-for","title":"Applying Tensor Decomposition to image for Robustness against Adversarial Attack","date":"2020-02-28","arxiv_id":"2002.12913","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-on-deep-product","title":"Adversarial Attack on Deep Product Quantization Network for Image Retrieval","date":"2020-02-26","arxiv_id":"2002.11374","repositories_listed":0,"syntology":null},{"url":null,"slug":"temporal-sparse-adversarial-attack-on-gait","title":"Temporal Sparse Adversarial Attack on Sequence-based Gait Recognition","date":"2020-02-22","arxiv_id":"2002.09674","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-bayes-optimal-view-on-adversarial-examples-1","title":"A Bayes-Optimal View on Adversarial Examples","date":"2020-02-20","arxiv_id":"2002.08859","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-stochastic-bandit-algorithms-under","title":"Robust Stochastic Bandit Algorithms under Probabilistic Unbounded Adversarial Attack","date":"2020-02-17","arxiv_id":"2002.07214","repositories_listed":0,"syntology":null},{"url":null,"slug":"undersensitivity-in-neural-reading-1","title":"Undersensitivity in Neural Reading Comprehension","date":"2020-02-15","arxiv_id":"2003.04808","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-data-encryption","title":"Adversarial Data Encryption","date":"2020-02-10","arxiv_id":"2002.03793","repositories_listed":0,"syntology":null},{"url":null,"slug":"over-the-air-adversarial-attacks-on-deep","title":"Over-the-Air Adversarial Attacks on Deep Learning Based Modulation Classifier over Wireless Channels","date":"2020-02-05","arxiv_id":"2002.02400","repositories_listed":0,"syntology":null},{"url":null,"slug":"practical-fast-gradient-sign-attack-against","title":"Practical Fast Gradient Sign Attack against Mammographic Image Classifier","date":"2020-01-27","arxiv_id":"2001.09610","repositories_listed":0,"syntology":null},{"url":null,"slug":"analyzing-the-noise-robustness-of-deep-neural-1","title":"Analyzing the Noise Robustness of Deep Neural Networks","date":"2020-01-26","arxiv_id":"2001.09395","repositories_listed":0,"syntology":null},{"url":null,"slug":"massif-interactive-interpretation-of","title":"Massif: Interactive Interpretation of Adversarial Attacks on Deep Learning","date":"2020-01-21","arxiv_id":"2001.07769","repositories_listed":0,"syntology":null},{"url":null,"slug":"universal-adversarial-attack-on-attention-and","title":"Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet","date":"2020-01-16","arxiv_id":"2001.06325","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-semantic-adversarial-examples-via","title":"Generating Semantic Adversarial Examples via Feature Manipulation","date":"2020-01-06","arxiv_id":"2001.02297","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploring-adversarial-attack-in-spiking","title":"Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient","date":"2020-01-01","arxiv_id":"2001.01587","repositories_listed":0,"syntology":null},{"url":null,"slug":"implicit-euler-skip-connections-enhancing","title":"Implicit Euler Skip Connections: Enhancing Adversarial Robustness via Numerical Stability","date":"2020-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"interpolation-between-cnns-and-resnets","title":"Interpolation between CNNs and ResNets","date":"2020-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"benchmarking-adversarial-robustness","title":"Benchmarking Adversarial Robustness","date":"2019-12-26","arxiv_id":"1912.11852","repositories_listed":0,"syntology":null},{"url":null,"slug":"cag-a-real-time-low-cost-enhanced-robustness","title":"CAG: A Real-time Low-cost Enhanced-robustness High-transferability Content-aware Adversarial Attack Generator","date":"2019-12-16","arxiv_id":"1912.07742","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-manifold-adversarial-data-augmentation","title":"On-manifold Adversarial Data Augmentation Improves Uncertainty Calibration","date":"2019-12-16","arxiv_id":"1912.07458","repositories_listed":0,"syntology":null},{"url":null,"slug":"potential-adversarial-samples-for-white-box","title":"Potential adversarial samples for white-box attacks","date":"2019-12-13","arxiv_id":"1912.06409","repositories_listed":0,"syntology":null},{"url":null,"slug":"amora-black-box-adversarial-morphing-attack","title":"Amora: Black-box Adversarial Morphing Attack","date":"2019-12-09","arxiv_id":"1912.03829","repositories_listed":0,"syntology":null},{"url":null,"slug":"region-wise-attack-on-efficient-generation-of","title":"Region-Wise Attack: On Efficient Generation of Robust Physical Adversarial Examples","date":"2019-12-05","arxiv_id":"1912.02598","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-privacy-and-security-of-deep-learning","title":"Towards Security Threats of Deep Learning Systems: A Survey","date":"2019-11-28","arxiv_id":"1911.12562","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-with-pattern-replacement","title":"Adversarial Attack with Pattern Replacement","date":"2019-11-25","arxiv_id":"1911.10875","repositories_listed":0,"syntology":null},{"url":null,"slug":"time-aware-gradient-attack-on-dynamic-network","title":"Time-aware Gradient Attack on Dynamic Network Link Prediction","date":"2019-11-24","arxiv_id":"1911.10561","repositories_listed":0,"syntology":null},{"url":null,"slug":"smart-skeletal-motion-action-recognition","title":"SMART: Skeletal Motion Action Recognition aTtack","date":"2019-11-16","arxiv_id":"1911.07107","repositories_listed":0,"syntology":null},{"url":null,"slug":"suspicion-free-adversarial-attacks-on","title":"Suspicion-Free Adversarial Attacks on Clustering Algorithms","date":"2019-11-16","arxiv_id":"1911.07015","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-embedding-a-robust-and-elusive","title":"Adversarial Embedding: A robust and elusive Steganography and Watermarking technique","date":"2019-11-14","arxiv_id":"1912.01487","repositories_listed":0,"syntology":null},{"url":null,"slug":"few-features-attack-to-fool-machine-learning","title":"Few-Features Attack to Fool Machine Learning Models through Mask-Based GAN","date":"2019-11-12","arxiv_id":"1911.06269","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-robustness-of-task-oriented-dialog","title":"Improving Robustness of Task Oriented Dialog Systems","date":"2019-11-12","arxiv_id":"1911.05153","repositories_listed":0,"syntology":null},{"url":null,"slug":"minimalistic-attacks-how-little-it-takes-to","title":"Minimalistic Attacks: How Little it Takes to Fool a Deep Reinforcement Learning Policy","date":"2019-11-10","arxiv_id":"1911.03849","repositories_listed":0,"syntology":null},{"url":null,"slug":"intrusion-detection-for-industrial-control","title":"Adversarial Attacks on Time-Series Intrusion Detection for Industrial Control Systems","date":"2019-11-08","arxiv_id":"1911.04278","repositories_listed":0,"syntology":null},{"url":null,"slug":"white-box-target-attack-for-eeg-based-bci","title":"White-Box Target Attack for EEG-Based BCI Regression Problems","date":"2019-11-07","arxiv_id":"1911.04606","repositories_listed":0,"syntology":null},{"url":null,"slug":"reversible-adversarial-examples-based-on","title":"Reversible Adversarial Attack based on Reversible Image Transformation","date":"2019-11-06","arxiv_id":"1911.02360","repositories_listed":0,"syntology":null},{"url":null,"slug":"the-fever20-shared-task","title":"The FEVER2.0 Shared Task","date":"2019-11-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-music-real-world-audio-adversary","title":"Adversarial Music: Real World Audio Adversary Against Wake-word Detection System","date":"2019-10-31","arxiv_id":"1911.00126","repositories_listed":0,"syntology":null},{"url":null,"slug":"investigating-resistance-of-deep-learning","title":"Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization","date":"2019-10-30","arxiv_id":"1910.14107","repositories_listed":0,"syntology":null},{"url":null,"slug":"wasserstein-smoothing-certified-robustness","title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks","date":"2019-10-23","arxiv_id":"1910.10783","repositories_listed":0,"syntology":null},{"url":null,"slug":"lance-a-comprehensive-and-lightweight-cnn","title":"LanCe: A Comprehensive and Lightweight CNN Defense Methodology against Physical Adversarial Attacks on Embedded Multimedia Applications","date":"2019-10-17","arxiv_id":"1910.08536","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-robustness-of-time-series","title":"ODE guided Neural Data Augmentation Techniques for Time Series Data and its Benefits on Robustness","date":"2019-10-15","arxiv_id":"1910.06813","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-learning-of-deepfakes-in","title":"Adversarial Learning of Deepfakes in Accounting","date":"2019-10-09","arxiv_id":"1910.03810","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-deep-forest-with-multi-scale-local","title":"Learning deep forest with multi-scale Local Binary Pattern features for face anti-spoofing","date":"2019-10-09","arxiv_id":"1910.03850","repositories_listed":0,"syntology":null},{"url":null,"slug":"unrestricted-adversarial-attacks-for-semantic-1","title":"AdvSPADE: Realistic Unrestricted Attacks for Semantic Segmentation","date":"2019-10-06","arxiv_id":"1910.02354","repositories_listed":0,"syntology":null},{"url":null,"slug":"yet-another-but-more-efficient-black-box-1","title":"Yet another but more efficient black-box adversarial attack: tiling and evolution strategies","date":"2019-10-05","arxiv_id":"1910.02244","repositories_listed":0,"syntology":null},{"url":null,"slug":"perturbations-are-not-enough-generating-1","title":"Perturbations are not Enough: Generating Adversarial Examples with Spatial Distortions","date":"2019-10-03","arxiv_id":"1910.01329","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-efficient-and-margin-approaching-zero-1","title":"An Efficient and Margin-Approaching Zero-Confidence Adversarial Attack","date":"2019-10-01","arxiv_id":"1910.00511","repositories_listed":0,"syntology":null},{"url":null,"slug":"accelerating-monte-carlo-bayesian-inference-1","title":"Accelerating Monte Carlo Bayesian Inference via Approximating Predictive Uncertainty over the Simplex","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-training-with-perturbation","title":"Adversarial training with perturbation generator networks","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-adversarial-examples-by","title":"Defending Against Adversarial Examples by Regularized Deep Embedding","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"do-autoencoder-learning-and-intervening","title":"DO-AutoEncoder: Learning and Intervening Bivariate Causal Mechanisms in Images","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-key-steps-to-attack-deep","title":"Learning Key Steps to Attack Deep Reinforcement Learning Agents","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"probabilistic-modeling-of-deep-features-for","title":"Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection","date":"2019-09-25","arxiv_id":"1909.11786","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-saliency-maps-with-distribution","title":"Robust saliency maps with distribution-preserving decoys","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"self-knowledge-distillation-adversarial","title":"SELF-KNOWLEDGE DISTILLATION ADVERSARIAL ATTACK","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"simple-and-effective-stochastic-neural","title":"Simple and Effective Stochastic Neural Networks","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"the-effect-of-adversarial-training-a","title":"THE EFFECT OF ADVERSARIAL TRAINING: A THEORETICAL CHARACTERIZATION","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-a-unified-min-max-framework-for","title":"Towards A Unified Min-Max Framework for Adversarial Exploration and Robustness","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-certified-defense-for-unrestricted","title":"Towards Certified Defense for Unrestricted Adversarial Attacks","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"universal-adversarial-attack-using-very-few","title":"Universal Adversarial Attack Using Very Few Test Examples","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"190909735","title":"COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection","date":"2019-09-20","arxiv_id":"1909.09735","repositories_listed":0,"syntology":null},{"url":null,"slug":"absum-simple-regularization-method-for","title":"Absum: Simple Regularization Method for Reducing Structural Sensitivity of Convolutional Neural Networks","date":"2019-09-19","arxiv_id":"1909.08830","repositories_listed":0,"syntology":null},{"url":null,"slug":"propagated-perturbation-of-adversarial-attack","title":"Propagated Perturbation of Adversarial Attack for well-known CNNs: Empirical Study and its Explanation","date":"2019-09-19","arxiv_id":"1909.09263","repositories_listed":0,"syntology":null}],"record_sha256":"3c5c5e9c50b9d8666cd223723b1a54c70e3aeae75bbf244dda199b37f0fa9cc2","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}