{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-attack/papers/18","list_of":"/task/adversarial-attack","task":"Adversarial Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":18,"pages_in_order":19,"rows_per_page":100,"rows":[1701,1800],"of":1808,"counts":{"archive_papers_tagged":1808,"with_a_code_link":745,"where_syntology_ran_a_sample":206,"not_listed_spam_title":0,"listed":1808,"listed_where_code_ran":206,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":161,"every_run_a_failure_of_syntologys_instrument":45,"listed_with_a_run_with_no_instrument_failure":161,"listed_every_run_a_failure_of_syntologys_instrument":45,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-attack","prev":"/task/adversarial-attack/papers/17","next":"/task/adversarial-attack/papers/19","papers":[{"url":null,"slug":"an-empirical-study-towards-characterizing","title":"An Empirical Study towards Characterizing Deep Learning Development and Deployment across Different Frameworks and Platforms","date":"2019-09-15","arxiv_id":"1909.06727","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-on-skeleton-based-human","title":"Adversarial Attack on Skeleton-based Human Action Recognition","date":"2019-09-14","arxiv_id":"1909.06500","repositories_listed":0,"syntology":null},{"url":null,"slug":"localized-adversarial-training-for-increased","title":"Localized Adversarial Training for Increased Accuracy and Robustness in Image Classification","date":"2019-09-10","arxiv_id":"1909.04779","repositories_listed":0,"syntology":null},{"url":null,"slug":"toward-finding-the-global-optimal-of","title":"BOSH: An Efficient Meta Algorithm for Decision-based Attacks","date":"2019-09-10","arxiv_id":"1909.04288","repositories_listed":0,"syntology":null},{"url":null,"slug":"sta-adversarial-attacks-on-siamese-trackers","title":"STA: Adversarial Attacks on Siamese Trackers","date":"2019-09-08","arxiv_id":"1909.03413","repositories_listed":0,"syntology":null},{"url":null,"slug":"dapas-denoising-autoencoder-to-prevent","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","date":"2019-08-14","arxiv_id":"1908.05195","repositories_listed":0,"syntology":null},{"url":null,"slug":"investigating-decision-boundaries-of-trained","title":"Investigating Decision Boundaries of Trained Neural Networks","date":"2019-08-07","arxiv_id":"1908.02802","repositories_listed":0,"syntology":null},{"url":null,"slug":"invariance-based-adversarial-attack-on-neural","title":"Exploring the Robustness of NMT Systems to Nonsensical Inputs","date":"2019-08-03","arxiv_id":"1908.01165","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-on-sentiment","title":"Adversarial Attack on Sentiment Classification","date":"2019-08-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"black-box-adversarial-ml-attack-on-modulation","title":"Black-box Adversarial ML Attack on Modulation Classification","date":"2019-08-01","arxiv_id":"1908.00635","repositories_listed":0,"syntology":null},{"url":null,"slug":"nonconvex-zeroth-order-stochastic-admm","title":"Nonconvex Zeroth-Order Stochastic ADMM Methods with Lower Function Query Complexity","date":"2019-07-30","arxiv_id":"1907.13463","repositories_listed":0,"syntology":null},{"url":null,"slug":"affine-disentangled-gan-for-interpretable-and","title":"Affine Disentangled GAN for Interpretable and Robust AV Perception","date":"2019-07-06","arxiv_id":"1907.05274","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-in-sound-event","title":"Adversarial Attacks in Sound Event Classification","date":"2019-07-04","arxiv_id":"1907.02477","repositories_listed":0,"syntology":null},{"url":null,"slug":"comment-on-adv-bnn-improved-adversarial","title":"Comment on \"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network\"","date":"2019-07-01","arxiv_id":"1907.00895","repositories_listed":0,"syntology":null},{"url":null,"slug":"the-attack-generator-a-systematic-approach","title":"The Attack Generator: A Systematic Approach Towards Constructing Adversarial Attacks","date":"2019-06-17","arxiv_id":"1906.07077","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-computationally-efficient-method-for","title":"A Computationally Efficient Method for Defending Adversarial Deep Learning Attacks","date":"2019-06-13","arxiv_id":"1906.05599","repositories_listed":0,"syntology":null},{"url":null,"slug":"should-adversarial-attacks-use-pixel-p-norm","title":"Should Adversarial Attacks Use Pixel p-Norm?","date":"2019-06-06","arxiv_id":"1906.02439","repositories_listed":0,"syntology":null},{"url":null,"slug":"architecture-selection-via-the-trade-off","title":"Architecture Selection via the Trade-off Between Accuracy and Robustness","date":"2019-06-04","arxiv_id":"1906.01354","repositories_listed":0,"syntology":null},{"url":null,"slug":"190600230","title":"Improving VAEs' Robustness to Adversarial Attack","date":"2019-06-01","arxiv_id":"1906.00230","repositories_listed":0,"syntology":null},{"url":null,"slug":"190600258","title":"Enhancing Transformation-based Defenses using a Distribution Classifier","date":"2019-06-01","arxiv_id":"1906.00258","repositories_listed":0,"syntology":null},{"url":null,"slug":"shieldnets-defending-against-adversarial","title":"ShieldNets: Defending Against Adversarial Attacks Using Probabilistic Adversarial Robustness","date":"2019-06-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"bandlimiting-neural-networks-against","title":"Bandlimiting Neural Networks Against Adversarial Attacks","date":"2019-05-30","arxiv_id":"1905.12797","repositories_listed":0,"syntology":null},{"url":null,"slug":"identifying-classes-susceptible-to","title":"Identifying Classes Susceptible to Adversarial Attacks","date":"2019-05-30","arxiv_id":"1905.13284","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-sparse-regularization-simultaneously","title":"Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness","date":"2019-05-30","arxiv_id":"1905.13074","repositories_listed":0,"syntology":null},{"url":null,"slug":"zeroth-order-stochastic-alternating-direction","title":"Zeroth-Order Stochastic Alternating Direction Method of Multipliers for Nonconvex Nonsmooth Optimization","date":"2019-05-29","arxiv_id":"1905.12729","repositories_listed":0,"syntology":null},{"url":null,"slug":"thwarting-finite-difference-adversarial","title":"Thwarting finite difference adversarial attacks with output randomization","date":"2019-05-23","arxiv_id":"1905.09871","repositories_listed":0,"syntology":null},{"url":null,"slug":"dopa-a-fast-and-comprehensive-cnn-defense","title":"DoPa: A Comprehensive CNN Detection Methodology against Physical Adversarial Attacks","date":"2019-05-21","arxiv_id":"1905.08790","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-critique-of-the-deepsec-platform-for","title":"A critique of the DeepSec Platform for Security Analysis of Deep Learning Models","date":"2019-05-17","arxiv_id":"1905.07112","repositories_listed":0,"syntology":null},{"url":null,"slug":"interpreting-and-evaluating-neural-network","title":"Interpreting and Evaluating Neural Network Robustness","date":"2019-05-10","arxiv_id":"1905.04270","repositories_listed":0,"syntology":null},{"url":null,"slug":"190503517","title":"Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain","date":"2019-05-09","arxiv_id":"1905.03517","repositories_listed":0,"syntology":null},{"url":null,"slug":"charbot-a-simple-and-effective-method-for","title":"CharBot: A Simple and Effective Method for Evading DGA Classifiers","date":"2019-05-03","arxiv_id":"1905.01078","repositories_listed":0,"syntology":null},{"url":null,"slug":"weight-map-layer-for-noise-and-adversarial","title":"Weight Map Layer for Noise and Adversarial Attack Robustness","date":"2019-05-02","arxiv_id":"1905.00568","repositories_listed":0,"syntology":null},{"url":null,"slug":"nattack-a-strong-and-universal-gaussian-black","title":"NATTACK: A STRONG AND UNIVERSAL GAUSSIAN BLACK-BOX ADVERSARIAL ATTACK","date":"2019-05-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"poba-ga-perturbation-optimized-black-box","title":"POBA-GA: Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm","date":"2019-05-01","arxiv_id":"1906.03181","repositories_listed":0,"syntology":null},{"url":null,"slug":"second-order-adversarial-attack-and-1","title":"Second-Order Adversarial Attack and Certifiable Robustness","date":"2019-05-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"minimizing-perceived-image-quality-loss","title":"Minimizing Perceived Image Quality Loss Through Adversarial Attack Scoping","date":"2019-04-23","arxiv_id":"1904.10390","repositories_listed":0,"syntology":null},{"url":null,"slug":"blessing-in-disguise-designing-robust-turing","title":"blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness","date":"2019-04-22","arxiv_id":"1904.09804","repositories_listed":0,"syntology":null},{"url":null,"slug":"defensive-quantization-when-efficiency-meets-1","title":"Defensive Quantization: When Efficiency Meets Robustness","date":"2019-04-17","arxiv_id":"1904.08444","repositories_listed":0,"syntology":null},{"url":null,"slug":"at-gan-a-generative-attack-model-for","title":"AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples","date":"2019-04-16","arxiv_id":"1904.07793","repositories_listed":0,"syntology":null},{"url":null,"slug":"cycle-consistent-adversarial-gan-the","title":"Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense","date":"2019-04-12","arxiv_id":"1904.06026","repositories_listed":0,"syntology":null},{"url":null,"slug":"black-box-decision-based-adversarial-attack","title":"Black-Box Decision based Adversarial Attack with Symmetric $α$-stable Distribution","date":"2019-04-11","arxiv_id":"1904.05586","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-against-deep-saliency","title":"Adversarial Attacks against Deep Saliency Models","date":"2019-04-02","arxiv_id":"1904.01231","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-to-defense-by-learning-to-attack-1","title":"Learning to Defense by Learning to Attack","date":"2019-03-27","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"a-formalization-of-robustness-for-deep-neural","title":"A Formalization of Robustness for Deep Neural Networks","date":"2019-03-24","arxiv_id":"1903.10033","repositories_listed":0,"syntology":null},{"url":null,"slug":"attribution-driven-causal-analysis-for","title":"Attribution-driven Causal Analysis for Detection of Adversarial Examples","date":"2019-03-14","arxiv_id":"1903.05821","repositories_listed":0,"syntology":null},{"url":null,"slug":"attack-type-agnostic-perceptual-enhancement","title":"Attack Type Agnostic Perceptual Enhancement of Adversarial Images","date":"2019-03-07","arxiv_id":"1903.03029","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-and-defense-on-point-sets","title":"Adversarial Attack and Defense on Point Sets","date":"2019-02-28","arxiv_id":"1902.10899","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-effectiveness-of-low-frequency","title":"On the Effectiveness of Low Frequency Perturbations","date":"2019-02-28","arxiv_id":"1903.00073","repositories_listed":0,"syntology":null},{"url":null,"slug":"there-are-no-bit-parts-for-sign-bits-in-black","title":"There are No Bit Parts for Sign Bits in Black-Box Attacks","date":"2019-02-19","arxiv_id":"1902.06894","repositories_listed":0,"syntology":null},{"url":null,"slug":"examining-adversarial-learning-against-graph","title":"Examining Adversarial Learning against Graph-based IoT Malware Detection Systems","date":"2019-02-12","arxiv_id":"1902.04416","repositories_listed":0,"syntology":null},{"url":null,"slug":"optimal-adversarial-attack-on-autoregressive","title":"Optimal Attack against Autoregressive Models by Manipulating the Environment","date":"2019-02-01","arxiv_id":"1902.00202","repositories_listed":0,"syntology":null},{"url":null,"slug":"the-efficacy-of-shield-under-different-threat","title":"The Efficacy of SHIELD under Different Threat Models","date":"2019-02-01","arxiv_id":"1902.00541","repositories_listed":0,"syntology":null},{"url":null,"slug":"strong-black-box-adversarial-attacks-on","title":"Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models","date":"2019-01-28","arxiv_id":"1901.09493","repositories_listed":0,"syntology":null},{"url":null,"slug":"weighted-sampling-audio-adversarial-example","title":"Weighted-Sampling Audio Adversarial Example Attack","date":"2019-01-26","arxiv_id":"1901.10300","repositories_listed":0,"syntology":null},{"url":null,"slug":"hessian-aware-zeroth-order-optimization-for","title":"Hessian-Aware Zeroth-Order Optimization for Black-Box Adversarial Attack","date":"2018-12-29","arxiv_id":"1812.11377","repositories_listed":0,"syntology":null},{"url":null,"slug":"practical-adversarial-attack-against-object","title":"Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors","date":"2018-12-26","arxiv_id":"1812.10217","repositories_listed":0,"syntology":null},{"url":null,"slug":"safety-and-trustworthiness-of-deep-neural","title":"A Survey of Safety and Trustworthiness of Deep Neural Networks: Verification, Testing, Adversarial Attack and Defence, and Interpretability","date":"2018-12-18","arxiv_id":"1812.08342","repositories_listed":0,"syntology":null},{"url":null,"slug":"deep-rbf-networks-revisited-robust","title":"Deep-RBF Networks Revisited: Robust Classification with Rejection","date":"2018-12-07","arxiv_id":"1812.03190","repositories_listed":0,"syntology":null},{"url":null,"slug":"prior-networks-for-detection-of-adversarial","title":"Prior Networks for Detection of Adversarial Attacks","date":"2018-12-06","arxiv_id":"1812.02575","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-hiding-adversarial-examples-from","title":"Fooling Network Interpretation in Image Classification","date":"2018-12-06","arxiv_id":"1812.02843","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-leveraging-the-information-of","title":"Towards Leveraging the Information of Gradients in Optimization-based Adversarial Attack","date":"2018-12-06","arxiv_id":"1812.02524","repositories_listed":0,"syntology":null},{"url":null,"slug":"finefool-fine-object-contour-attack-via","title":"FineFool: Fine Object Contour Attack via Attention","date":"2018-12-01","arxiv_id":"1812.01713","repositories_listed":0,"syntology":null},{"url":null,"slug":"attacks-on-state-of-the-art-face-recognition","title":"Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network","date":"2018-11-29","arxiv_id":"1811.12026","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-for-optical-flow-based","title":"Adversarial Attacks for Optical Flow-Based Action Recognition Classifiers","date":"2018-11-28","arxiv_id":"1811.11875","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-machine-learning-and-speech","title":"Adversarial Machine Learning And Speech Emotion Recognition: Utilizing Generative Adversarial Networks For Robustness","date":"2018-11-28","arxiv_id":"1811.11402","repositories_listed":0,"syntology":null},{"url":null,"slug":"attention-please-adversarial-defense-via","title":"Attention, Please! Adversarial Defense via Activation Rectification and Preservation","date":"2018-11-24","arxiv_id":"1811.09831","repositories_listed":0,"syntology":null},{"url":null,"slug":"intermediate-level-adversarial-attack-for","title":"Intermediate Level Adversarial Attack for Enhanced Transferability","date":"2018-11-20","arxiv_id":"1811.08458","repositories_listed":0,"syntology":null},{"url":null,"slug":"optimal-transport-classifier-defending","title":"Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding","date":"2018-11-19","arxiv_id":"1811.07950","repositories_listed":0,"syntology":null},{"url":null,"slug":"caad-2018-iterative-ensemble-adversarial","title":"CAAD 2018: Iterative Ensemble Adversarial Attack","date":"2018-11-07","arxiv_id":"1811.03456","repositories_listed":0,"syntology":null},{"url":null,"slug":"fademl-understanding-the-impact-of-pre","title":"FAdeML: Understanding the Impact of Pre-Processing Noise Filtering on Adversarial Machine Learning","date":"2018-11-04","arxiv_id":"1811.01444","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-to-defense-by-learning-to-attack","title":"Learning to Defend by Learning to Attack","date":"2018-11-03","arxiv_id":"1811.01213","repositories_listed":0,"syntology":null},{"url":null,"slug":"reversible-adversarial-examples","title":"Unauthorized AI cannot Recognize Me: Reversible Adversarial Example","date":"2018-11-01","arxiv_id":"1811.00189","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-machine-learning-and-speech-1","title":"Adversarial Machine Learning And Speech Emotion Recognition: Utilizing Generative Adversarial Networks For Robustness","date":"2018-10-24","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-and-configurable-audio","title":"Transferable and Configurable Audio Adversarial Attack from Low-Level Features","date":"2018-10-22","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"is-pgd-adversarial-training-necessary","title":"Is PGD-Adversarial Training Necessary? Alternative Training via a Soft-Quantization Network with Noisy-Natural Samples Only","date":"2018-10-10","arxiv_id":"1810.05665","repositories_listed":0,"syntology":null},{"url":null,"slug":"universal-attacks-on-equivariant-networks","title":"Universal Attacks on Equivariant Networks","date":"2018-09-27","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"using-word-embeddings-to-explore-the-learned","title":"Using Word Embeddings to Explore the Learned Representations of Convolutional Neural Networks","date":"2018-09-27","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"query-efficient-black-box-attack-by-active","title":"Query-Efficient Black-Box Attack by Active Learning","date":"2018-09-13","arxiv_id":"1809.04913","repositories_listed":0,"syntology":null},{"url":null,"slug":"isolated-and-ensemble-audio-preprocessing","title":"Isolated and Ensemble Audio Preprocessing Methods for Detecting Adversarial Examples against Automatic Speech Recognition","date":"2018-09-11","arxiv_id":"1809.04397","repositories_listed":0,"syntology":null},{"url":null,"slug":"idsgan-generative-adversarial-networks-for","title":"IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection","date":"2018-09-06","arxiv_id":"1809.02077","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attack-type-i-generating-false","title":"Adversarial Attack Type I: Cheat Classifiers by Significant Changes","date":"2018-09-03","arxiv_id":"1809.00594","repositories_listed":0,"syntology":null},{"url":null,"slug":"maximal-jacobian-based-saliency-map-attack","title":"Maximal Jacobian-based Saliency Map Attack","date":"2018-08-23","arxiv_id":"1808.07945","repositories_listed":0,"syntology":null},{"url":null,"slug":"stochastic-combinatorial-ensembles-for","title":"Stochastic Combinatorial Ensembles for Defending Against Adversarial Examples","date":"2018-08-20","arxiv_id":"1808.06645","repositories_listed":0,"syntology":null},{"url":null,"slug":"harmonic-adversarial-attack-method","title":"Harmonic Adversarial Attack Method","date":"2018-07-18","arxiv_id":"1807.10590","repositories_listed":0,"syntology":null},{"url":null,"slug":"adaptive-adversarial-attack-on-scene-text","title":"Adaptive Adversarial Attack on Scene Text Recognition","date":"2018-07-09","arxiv_id":"1807.03326","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-examples-in-deep-learning","title":"Adversarial Examples in Deep Learning: Characterization and Divergence","date":"2018-06-29","arxiv_id":"1807.00051","repositories_listed":0,"syntology":null},{"url":null,"slug":"evaluation-of-momentum-diverse-input","title":"Evaluation of Momentum Diverse Input Iterative Fast Gradient Sign Method (M-DI2-FGSM) Based Attack Method on MCS 2018 Adversarial Attacks on Black Box Face Recognition System","date":"2018-06-23","arxiv_id":"1806.08970","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-explainable-adversarial-robustness-metric","title":"An Explainable Adversarial Robustness Metric for Deep Learning Neural Networks","date":"2018-06-05","arxiv_id":"1806.01477","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-face-detectors-using","title":"Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization","date":"2018-05-31","arxiv_id":"1805.12302","repositories_listed":0,"syntology":null},{"url":null,"slug":"sequential-attacks-on-agents-for-long-term","title":"Sequential Attacks on Agents for Long-Term Adversarial Goals","date":"2018-05-31","arxiv_id":"1805.12487","repositories_listed":0,"syntology":null},{"url":null,"slug":"adagio-interactive-experimentation-with","title":"ADAGIO: Interactive Experimentation with Adversarial Attack and Defense for Audio","date":"2018-05-30","arxiv_id":"1805.11852","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-admm-based-universal-framework-for","title":"An ADMM-Based Universal Framework for Adversarial Attacks on Deep Neural Networks","date":"2018-04-09","arxiv_id":"1804.03193","repositories_listed":0,"syntology":null},{"url":null,"slug":"protection-against-cloning-for-deep-learning","title":"Protection against Cloning for Deep Learning","date":"2018-03-29","arxiv_id":"1803.10995","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-based-on-structure-to","title":"Adversarial Defense based on Structure-to-Signal Autoencoders","date":"2018-03-21","arxiv_id":"1803.07994","repositories_listed":0,"syntology":null},{"url":null,"slug":"deepgauge-multi-granularity-testing-criteria","title":"DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems","date":"2018-03-20","arxiv_id":"1803.07519","repositories_listed":0,"syntology":null},{"url":null,"slug":"vulnerability-of-deep-learning","title":"Vulnerability of Deep Learning","date":"2018-03-16","arxiv_id":"1803.06111","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-adversarial-attack-towards","title":"Defending against Adversarial Attack towards Deep Neural Networks via Collaborative Multi-task Training","date":"2018-03-14","arxiv_id":"1803.05123","repositories_listed":0,"syntology":null},{"url":null,"slug":"aspa-fast-adversarial-attack-example","title":"ASP:A Fast Adversarial Attack Example Generation Framework based on Adversarial Saliency Prediction","date":"2018-02-15","arxiv_id":"1802.05763","repositories_listed":0,"syntology":null},{"url":null,"slug":"security-analysis-and-enhancement-of-model","title":"Security Analysis and Enhancement of Model Compressed Deep Learning Systems under Adversarial Attacks","date":"2018-02-14","arxiv_id":"1802.05193","repositories_listed":0,"syntology":null},{"url":null,"slug":"blind-pre-processing-a-robust-defense-method","title":"Blind Pre-Processing: A Robust Defense Method Against Adversarial Examples","date":"2018-02-05","arxiv_id":"1802.01549","repositories_listed":0,"syntology":null}],"record_sha256":"31615c450075c4ca915d295460098410382162d6fa265805ff418b9ba77bd429","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}