{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-attack/papers/7","list_of":"/task/adversarial-attack","task":"Adversarial Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":7,"pages_in_order":19,"rows_per_page":100,"rows":[601,700],"of":1808,"counts":{"archive_papers_tagged":1808,"with_a_code_link":745,"where_syntology_ran_a_sample":206,"not_listed_spam_title":0,"listed":1808,"listed_where_code_ran":206,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":161,"every_run_a_failure_of_syntologys_instrument":45,"listed_with_a_run_with_no_instrument_failure":161,"listed_every_run_a_failure_of_syntologys_instrument":45,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-attack","prev":"/task/adversarial-attack/papers/6","next":"/task/adversarial-attack/papers/8","papers":[{"url":"/paper/greedyfool-distortion-aware-sparse","slug":"greedyfool-distortion-aware-sparse","title":"GreedyFool: Distortion-Aware Sparse Adversarial Attack","date":"2020-10-26","arxiv_id":"2010.13773","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/greedyfool-distortion-aware-sparse#ran","syntology_url":"https://syntology.ai/paper/2010.13773","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.13773"}},"official":{"repos":["LightDXY/GreedyFool"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":1,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/an-efficient-adversarial-attack-for-tree","slug":"an-efficient-adversarial-attack-for-tree","title":"An Efficient Adversarial Attack for Tree Ensembles","date":"2020-10-22","arxiv_id":"2010.11598","repositories_listed":1,"syntology":{"n":3,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/an-efficient-adversarial-attack-for-tree#ran","syntology_url":"https://syntology.ai/paper/2010.11598","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.11598"}},"official":{"repos":["chong-z/tree-ensemble-attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["found_in_text","official"]}}},{"url":"/paper/learning-black-box-attackers-with","slug":"learning-black-box-attackers-with","title":"Learning Black-Box Attackers with Transferable Priors and Query Feedback","date":"2020-10-21","arxiv_id":"2010.11742","repositories_listed":1,"syntology":{"n":19,"n_ran":13,"n_constructed":0,"n_ran_checked":10,"n_instrument":3,"n_unverified":6,"n_honours":0,"n_violates":0,"n_no_contract":10,"n_pointer_only":1,"phrase":"13 ran (of which 0 constructed an object rather than computing a result; 10 with no instrument failure: 0 honoured, 0 violated, 10 with no contract checked; 3 where Syntology's instrument failed) · 6 unverified","sample_list":"/paper/learning-black-box-attackers-with#ran","syntology_url":"https://syntology.ai/paper/2010.11742","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.11742"}},"official":{"repos":["TrustworthyDL/LeBA"],"state":"official (archive's flag): 13 ran","n_ran":13,"n_constructed":0,"n_ran_no_instrument_failure":10,"n_unverified":6,"ran_from_kinds":["official"]}}},{"url":"/paper/when-bots-take-over-the-stock-market-evasion","slug":"when-bots-take-over-the-stock-market-evasion","title":"Taking Over the Stock Market: Adversarial Perturbations Against Algorithmic Traders","date":"2020-10-19","arxiv_id":"2010.09246","repositories_listed":1,"syntology":null},{"url":"/paper/greedyfool-an-imperceptible-black-box","slug":"greedyfool-an-imperceptible-black-box","title":"GreedyFool: Multi-Factor Imperceptibility and Its Application to Designing a Black-box Adversarial Attack","date":"2020-10-14","arxiv_id":"2010.06855","repositories_listed":1,"syntology":null},{"url":"/paper/transfer2attack-text-adversarial-attack-with","slug":"transfer2attack-text-adversarial-attack-with","title":"Explain2Attack: Text Adversarial Attacks via Cross-Domain Interpretability","date":"2020-10-14","arxiv_id":"2010.06812","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/transfer2attack-text-adversarial-attack-with#ran","syntology_url":"https://syntology.ai/paper/2010.06812","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.06812"}},"official":{"repos":["mahossam/Explain2Attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/on-the-power-of-abstention-and-data-driven-1","slug":"on-the-power-of-abstention-and-data-driven-1","title":"An Analysis of Robustness of Non-Lipschitz Networks","date":"2020-10-13","arxiv_id":"2010.06154","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":0,"n_honours":2,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 2 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/on-the-power-of-abstention-and-data-driven-1#ran","syntology_url":"https://syntology.ai/paper/2010.06154","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.06154"}},"official":{"repos":["dravyanshsharma/adversarial-contrastive"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/second-order-nlp-adversarial-examples","slug":"second-order-nlp-adversarial-examples","title":"Second-Order NLP Adversarial Examples","date":"2020-10-05","arxiv_id":"2010.01770","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-attack-and-defense-of-structured","slug":"adversarial-attack-and-defense-of-structured","title":"Adversarial Attack and Defense of Structured Prediction Models","date":"2020-10-04","arxiv_id":"2010.01610","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":1,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/adversarial-attack-and-defense-of-structured#ran","syntology_url":"https://syntology.ai/paper/2010.01610","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.01610"}},"official":{"repos":["WinnieHAN/structure_adv"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":1,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/adversarial-examples-in-deep-learning-for","slug":"adversarial-examples-in-deep-learning-for","title":"Adversarial Examples in Deep Learning for Multivariate Time Series Regression","date":"2020-09-24","arxiv_id":"2009.11911","repositories_listed":1,"syntology":null},{"url":"/paper/improving-query-efficiency-of-black-box-1","slug":"improving-query-efficiency-of-black-box-1","title":"Improving Query Efficiency of Black-box Adversarial Attack","date":"2020-09-24","arxiv_id":"2009.11508","repositories_listed":1,"syntology":{"n":2,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"0 ran · 2 unverified","sample_list":"/paper/improving-query-efficiency-of-black-box-1#ran","syntology_url":"https://syntology.ai/paper/2009.11508","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2009.11508"}},"official":{"repos":["Sandy-Zeng/NPAttack"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":[]}}},{"url":"/paper/stereopagnosia-fooling-stereo-networks-with","slug":"stereopagnosia-fooling-stereo-networks-with","title":"Stereopagnosia: Fooling Stereo Networks with Adversarial Perturbations","date":"2020-09-21","arxiv_id":"2009.10142","repositories_listed":1,"syntology":null},{"url":"/paper/making-images-undiscoverable-from-co-saliency","slug":"making-images-undiscoverable-from-co-saliency","title":"Can You Spot the Chameleon? Adversarially Camouflaging Images from Co-Salient Object Detection","date":"2020-09-19","arxiv_id":"2009.09258","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/making-images-undiscoverable-from-co-saliency#ran","syntology_url":"https://syntology.ai/paper/2009.09258","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2009.09258"}},"official":{"repos":["tsingqguo/jadena"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/openattack-an-open-source-textual-adversarial","slug":"openattack-an-open-source-textual-adversarial","title":"OpenAttack: An Open-source Textual Adversarial Attack Toolkit","date":"2020-09-19","arxiv_id":"2009.09191","repositories_listed":1,"syntology":null},{"url":"/paper/contextualized-perturbation-for-textual","slug":"contextualized-perturbation-for-textual","title":"Contextualized Perturbation for Textual Adversarial Attack","date":"2020-09-16","arxiv_id":"2009.07502","repositories_listed":1,"syntology":null},{"url":"/paper/decision-based-universal-adversarial-attack","slug":"decision-based-universal-adversarial-attack","title":"Decision-based Universal Adversarial Attack","date":"2020-09-15","arxiv_id":"2009.07024","repositories_listed":1,"syntology":null},{"url":"/paper/a-black-box-adversarial-attack-for-poisoning","slug":"a-black-box-adversarial-attack-for-poisoning","title":"A black-box adversarial attack for poisoning clustering","date":"2020-09-09","arxiv_id":"2009.05474","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-attack-on-large-scale-graph","slug":"adversarial-attack-on-large-scale-graph","title":"Adversarial Attack on Large Scale Graph","date":"2020-09-08","arxiv_id":"2009.03488","repositories_listed":1,"syntology":{"n":9,"n_ran":7,"n_constructed":0,"n_ran_checked":7,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":1,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/adversarial-attack-on-large-scale-graph#ran","syntology_url":"https://syntology.ai/paper/2009.03488","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2009.03488"}},"official":{"repos":["EdisonLeeeee/SGAttack"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/permuteattack-counterfactual-explanation-of","slug":"permuteattack-counterfactual-explanation-of","title":"PermuteAttack: Counterfactual Explanation of Machine Learning Credit Scorecards","date":"2020-08-24","arxiv_id":"2008.10138","repositories_listed":1,"syntology":null},{"url":"/paper/direct-adversarial-training-for-gans","slug":"direct-adversarial-training-for-gans","title":"A New Perspective on Stabilizing GANs training: Direct Adversarial Training","date":"2020-08-19","arxiv_id":"2008.09041","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/direct-adversarial-training-for-gans#ran","syntology_url":"https://syntology.ai/paper/2008.09041","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2008.09041"}},"official":{"repos":["iceli1007/DAT-GAN"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/adversarial-attack-and-defense-strategies-for","slug":"adversarial-attack-and-defense-strategies-for","title":"Adversarial Attack and Defense Strategies for Deep Speaker Recognition Systems","date":"2020-08-18","arxiv_id":"2008.07685","repositories_listed":1,"syntology":null},{"url":"/paper/firebert-hardening-bert-based-classifiers","slug":"firebert-hardening-bert-based-classifiers","title":"FireBERT: Hardening BERT-based classifiers against adversarial attack","date":"2020-08-10","arxiv_id":"2008.04203","repositories_listed":1,"syntology":null},{"url":"/paper/fast-gradient-projection-method-for-text","slug":"fast-gradient-projection-method-for-text","title":"Adversarial Training with Fast Gradient Projection Method against Synonym Substitution based Text Attacks","date":"2020-08-09","arxiv_id":"2008.03709","repositories_listed":1,"syntology":null},{"url":"/paper/semanticadv-generating-adversarial-examples-1","slug":"semanticadv-generating-adversarial-examples-1","title":"SemanticAdv: Generating Adversarial Examples via Attribute-conditioned Image Editing","date":"2020-08-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/simaug-learning-robust-representations-from-1","slug":"simaug-learning-robust-representations-from-1","title":"SimAug: Learning Robust Representations from Simulation for Trajectory Prediction","date":"2020-08-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/sparse-adversarial-attack-via-perturbation","slug":"sparse-adversarial-attack-via-perturbation","title":"Sparse Adversarial Attack via Perturbation Factorization","date":"2020-08-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/attacking-and-defending-machine-learning","slug":"attacking-and-defending-machine-learning","title":"Attacking and Defending Machine Learning Applications of Public Cloud","date":"2020-07-27","arxiv_id":"2008.02076","repositories_listed":1,"syntology":null},{"url":"/paper/exploiting-vulnerabilities-of-deep-neural","slug":"exploiting-vulnerabilities-of-deep-neural","title":"Exploiting vulnerabilities of deep neural networks for privacy protection","date":"2020-07-19","arxiv_id":"2007.09766","repositories_listed":1,"syntology":null},{"url":"/paper/semantic-equivalent-adversarial-data","slug":"semantic-equivalent-adversarial-data","title":"Semantic Equivalent Adversarial Data Augmentation for Visual Question Answering","date":"2020-07-19","arxiv_id":"2007.09592","repositories_listed":1,"syntology":null},{"url":"/paper/backdoor-learning-a-survey","slug":"backdoor-learning-a-survey","title":"Backdoor Learning: A Survey","date":"2020-07-17","arxiv_id":"2007.08745","repositories_listed":1,"syntology":null},{"url":"/paper/accelerated-stochastic-gradient-free-and","slug":"accelerated-stochastic-gradient-free-and","title":"Accelerated Stochastic Gradient-free and Projection-free Methods","date":"2020-07-16","arxiv_id":"2007.12625","repositories_listed":1,"syntology":{"n":5,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/accelerated-stochastic-gradient-free-and#ran","syntology_url":"https://syntology.ai/paper/2007.12625","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2007.12625"}},"official":{"repos":["TLMichael/Acc-SZOFW"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/advflow-inconspicuous-black-box-adversarial","slug":"advflow-inconspicuous-black-box-adversarial","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","date":"2020-07-15","arxiv_id":"2007.07435","repositories_listed":1,"syntology":{"n":7,"n_ran":7,"n_constructed":0,"n_ran_checked":4,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":3,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/advflow-inconspicuous-black-box-adversarial#ran","syntology_url":"https://syntology.ai/paper/2007.07435","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2007.07435"}},"official":{"repos":["hmdolatabadi/AdvFlow"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/miss-the-point-targeted-adversarial-attack-on","slug":"miss-the-point-targeted-adversarial-attack-on","title":"Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection","date":"2020-07-10","arxiv_id":"2007.05225","repositories_listed":1,"syntology":null},{"url":"/paper/black-box-adversarial-example-generation-with","slug":"black-box-adversarial-example-generation-with","title":"Black-box Adversarial Example Generation with Normalizing Flows","date":"2020-07-06","arxiv_id":"2007.02734","repositories_listed":1,"syntology":null},{"url":"/paper/determining-sequence-of-image-processing","slug":"determining-sequence-of-image-processing","title":"Determining Sequence of Image Processing Technique (IPT) to Detect Adversarial Attacks","date":"2020-07-01","arxiv_id":"2007.00337","repositories_listed":1,"syntology":null},{"url":"/paper/rays-a-ray-searching-method-for-hard-label","slug":"rays-a-ray-searching-method-for-hard-label","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","date":"2020-06-23","arxiv_id":"2006.12792","repositories_listed":1,"syntology":null},{"url":"/paper/differentiable-language-model-adversarial","slug":"differentiable-language-model-adversarial","title":"Differentiable Language Model Adversarial Attacks on Categorical Sequence Classifiers","date":"2020-06-19","arxiv_id":"2006.11078","repositories_listed":1,"syntology":null},{"url":"/paper/dissecting-deep-networks-into-an-ensemble-of","slug":"dissecting-deep-networks-into-an-ensemble-of","title":"REGroup: Rank-aggregating Ensemble of Generative Classifiers for Robust Predictions","date":"2020-06-18","arxiv_id":"2006.10679","repositories_listed":1,"syntology":null},{"url":"/paper/efficient-black-box-adversarial-attack-guided","slug":"efficient-black-box-adversarial-attack-guided","title":"Boosting Black-Box Attack with Partially Transferred Conditional Adversarial Distribution","date":"2020-06-15","arxiv_id":"2006.08538","repositories_listed":1,"syntology":null},{"url":"/paper/targeted-adversarial-perturbations-for","slug":"targeted-adversarial-perturbations-for","title":"Targeted Adversarial Perturbations for Monocular Depth Prediction","date":"2020-06-12","arxiv_id":"2006.08602","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-attack-vulnerability-of-medical","slug":"adversarial-attack-vulnerability-of-medical","title":"Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors","date":"2020-06-11","arxiv_id":"2006.06356","repositories_listed":1,"syntology":null},{"url":"/paper/interpolation-between-residual-and-non","slug":"interpolation-between-residual-and-non","title":"Interpolation between Residual and Non-Residual Networks","date":"2020-06-10","arxiv_id":"2006.05749","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":2,"n_ran_checked":2,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":2,"phrase":"2 ran (of which 2 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified; every one of the 2 samples that ran constructed an object rather than computing a result","sample_list":"/paper/interpolation-between-residual-and-non#ran","syntology_url":"https://syntology.ai/paper/2006.05749","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2006.05749"}},"official":null}},{"url":"/paper/pick-object-attack-type-specific-adversarial","slug":"pick-object-attack-type-specific-adversarial","title":"Pick-Object-Attack: Type-Specific Adversarial Attack for Object Detection","date":"2020-06-05","arxiv_id":"2006.03184","repositories_listed":1,"syntology":null},{"url":"/paper/benchmarking-adversarial-robustness-on-image","slug":"benchmarking-adversarial-robustness-on-image","title":"Benchmarking Adversarial Robustness on Image Classification","date":"2020-06-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/defending-and-harnessing-the-bit-flip-based","slug":"defending-and-harnessing-the-bit-flip-based","title":"Defending and Harnessing the Bit-Flip Based Adversarial Weight Attack","date":"2020-06-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/on-intrinsic-dataset-properties-for","slug":"on-intrinsic-dataset-properties-for","title":"On Intrinsic Dataset Properties for Adversarial Machine Learning","date":"2020-05-19","arxiv_id":"2005.09170","repositories_listed":1,"syntology":null},{"url":"/paper/defending-your-voice-adversarial-attack-on","slug":"defending-your-voice-adversarial-attack-on","title":"Defending Your Voice: Adversarial Attack on Voice Conversion","date":"2020-05-18","arxiv_id":"2005.08781","repositories_listed":1,"syntology":null},{"url":"/paper/universalization-of-any-adversarial-attack","slug":"universalization-of-any-adversarial-attack","title":"Universalization of any adversarial attack using very few test examples","date":"2020-05-18","arxiv_id":"2005.08632","repositories_listed":1,"syntology":null},{"url":"/paper/guarantees-on-learning-depth-2-neural","slug":"guarantees-on-learning-depth-2-neural","title":"Depth-2 Neural Networks Under a Data-Poisoning Attack","date":"2020-05-04","arxiv_id":"2005.01699","repositories_listed":1,"syntology":null},{"url":"/paper/bayesopt-adversarial-attack","slug":"bayesopt-adversarial-attack","title":"BayesOpt Adversarial Attack","date":"2020-05-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/sign-bits-are-all-you-need-for-black-box","slug":"sign-bits-are-all-you-need-for-black-box","title":"Sign Bits Are All You Need for Black-Box Attacks","date":"2020-05-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/towards-feature-space-adversarial-attack-1","slug":"towards-feature-space-adversarial-attack-1","title":"Towards Feature Space Adversarial Attack","date":"2020-04-26","arxiv_id":"2004.12385","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-attack-on-deep-learning-based","slug":"adversarial-attack-on-deep-learning-based","title":"Adversarial Attack on Deep Learning-Based Splice Localization","date":"2020-04-17","arxiv_id":"2004.08443","repositories_listed":1,"syntology":null},{"url":"/paper/extending-adversarial-attacks-to-produce","slug":"extending-adversarial-attacks-to-produce","title":"Extending Adversarial Attacks to Produce Adversarial Class Probability Distributions","date":"2020-04-14","arxiv_id":"2004.06383","repositories_listed":1,"syntology":null},{"url":"/paper/transferable-controllable-and-inconspicuous","slug":"transferable-controllable-and-inconspicuous","title":"Transferable, Controllable, and Inconspicuous Adversarial Attacks on Person Re-identification With Deep Mis-Ranking","date":"2020-04-08","arxiv_id":"2004.04199","repositories_listed":1,"syntology":{"n":3,"n_ran":2,"n_constructed":0,"n_ran_checked":2,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/transferable-controllable-and-inconspicuous#ran","syntology_url":"https://syntology.ai/paper/2004.04199","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2004.04199"}},"official":{"repos":["whj363636/Adversarial-attack-on-Person-ReID-With-Deep-Mis-Ranking"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/simaug-learning-robust-representations-from","slug":"simaug-learning-robust-representations-from","title":"SimAug: Learning Robust Representations from 3D Simulation for Pedestrian Trajectory Prediction in Unseen Cameras","date":"2020-04-04","arxiv_id":"2004.02022","repositories_listed":1,"syntology":null},{"url":"/paper/cooling-shrinking-attack-blinding-the-tracker","slug":"cooling-shrinking-attack-blinding-the-tracker","title":"Cooling-Shrinking Attack: Blinding the Tracker with Imperceptible Noises","date":"2020-03-21","arxiv_id":"2003.09595","repositories_listed":1,"syntology":null},{"url":"/paper/motion-excited-sampler-video-adversarial","slug":"motion-excited-sampler-video-adversarial","title":"Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior","date":"2020-03-17","arxiv_id":"2003.07637","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/motion-excited-sampler-video-adversarial#ran","syntology_url":"https://syntology.ai/paper/2003.07637","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2003.07637"}},"official":{"repos":["xiaofanustc/ME-Sampler"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/towards-query-efficient-black-box-adversary","slug":"towards-query-efficient-black-box-adversary","title":"Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent","date":"2020-02-18","arxiv_id":"2002.07891","repositories_listed":1,"syntology":{"n":1,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"0 ran · 1 unverified","sample_list":"/paper/towards-query-efficient-black-box-adversary#ran","syntology_url":"https://syntology.ai/paper/2002.07891","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2002.07891"}},"official":{"repos":["LinLabNEU/ZO_NGD_blackbox"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":[]}}},{"url":"/paper/stabilizing-differentiable-architecture","slug":"stabilizing-differentiable-architecture","title":"Stabilizing Differentiable Architecture Search via Perturbation-based Regularization","date":"2020-02-12","arxiv_id":"2002.05283","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/stabilizing-differentiable-architecture#ran","syntology_url":"https://syntology.ai/paper/2002.05283","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2002.05283"}},"official":{"repos":["xiangning-chen/SmoothDARTS"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":1,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/abba-saliency-regularized-motion-based","slug":"abba-saliency-regularized-motion-based","title":"Watch out! Motion is Blurring the Vision of Your Deep Neural Networks","date":"2020-02-10","arxiv_id":"2002.03500","repositories_listed":1,"syntology":null},{"url":"/paper/improving-the-adversarial-robustness-of","slug":"improving-the-adversarial-robustness-of","title":"Renofeation: A Simple Transfer Learning Method for Improved Adversarial Robustness","date":"2020-02-07","arxiv_id":"2002.02998","repositories_listed":1,"syntology":null},{"url":"/paper/robust-saliency-maps-with-decoy-enhanced","slug":"robust-saliency-maps-with-decoy-enhanced","title":"DANCE: Enhancing saliency maps using decoys","date":"2020-02-03","arxiv_id":"2002.00526","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-attack-on-community-detection-by","slug":"adversarial-attack-on-community-detection-by","title":"Adversarial Attack on Community Detection by Hiding Individuals","date":"2020-01-22","arxiv_id":"2001.07933","repositories_listed":1,"syntology":null},{"url":"/paper/fooling-detection-alone-is-not-enough","slug":"fooling-detection-alone-is-not-enough","title":"Fooling Detection Alone is Not Enough: Adversarial Attack against Multiple Object Tracking","date":"2020-01-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/damagenet-a-universal-adversarial-dataset","slug":"damagenet-a-universal-adversarial-dataset","title":"DAmageNet: A Universal Adversarial Dataset","date":"2019-12-16","arxiv_id":"1912.07160","repositories_listed":1,"syntology":{"n":13,"n_ran":8,"n_constructed":0,"n_ran_checked":8,"n_instrument":0,"n_unverified":5,"n_honours":0,"n_violates":0,"n_no_contract":8,"n_pointer_only":1,"phrase":"8 ran (of which 0 constructed an object rather than computing a result; 8 with no instrument failure: 0 honoured, 0 violated, 8 with no contract checked; 0 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/damagenet-a-universal-adversarial-dataset#ran","syntology_url":"https://syntology.ai/paper/1912.07160","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1912.07160"}},"official":null}},{"url":"/paper/scratch-that-an-evolution-based-adversarial","slug":"scratch-that-an-evolution-based-adversarial","title":"Scratch that! An Evolution-based Adversarial Attack against Neural Networks","date":"2019-12-05","arxiv_id":"1912.02316","repositories_listed":1,"syntology":null},{"url":"/paper/advpc-transferable-adversarial-perturbations","slug":"advpc-transferable-adversarial-perturbations","title":"AdvPC: Transferable Adversarial Perturbations on 3D Point Clouds","date":"2019-12-01","arxiv_id":"1912.00461","repositories_listed":1,"syntology":{"n":1,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"0 ran · 1 unverified","sample_list":"/paper/advpc-transferable-adversarial-perturbations#ran","syntology_url":"https://syntology.ai/paper/1912.00461","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1912.00461"}},"official":{"repos":["ajhamdi/AdvPC"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":[]}}},{"url":"/paper/classification-by-components-probabilistic","slug":"classification-by-components-probabilistic","title":"Classification-by-Components: Probabilistic Modeling of Reasoning over a Set of Components","date":"2019-12-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/light-weight-calibrator-a-separable-component","slug":"light-weight-calibrator-a-separable-component","title":"Light-weight Calibrator: a Separable Component for Unsupervised Domain Adaptation","date":"2019-11-28","arxiv_id":"1911.12796","repositories_listed":1,"syntology":null},{"url":"/paper/heuristic-black-box-adversarial-attacks-on","slug":"heuristic-black-box-adversarial-attacks-on","title":"Heuristic Black-box Adversarial Attacks on Video Recognition Models","date":"2019-11-21","arxiv_id":"1911.09449","repositories_listed":1,"syntology":null},{"url":"/paper/a-new-ensemble-adversarial-attack-powered-by","slug":"a-new-ensemble-adversarial-attack-powered-by","title":"A New Ensemble Adversarial Attack Powered by Long-term Gradient Memories","date":"2019-11-18","arxiv_id":"1911.07682","repositories_listed":1,"syntology":null},{"url":"/paper/black-box-adversarial-attack-with-1","slug":"black-box-adversarial-attack-with-1","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","date":"2019-11-17","arxiv_id":"1911.07140","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-examples-in-modern-machine","slug":"adversarial-examples-in-modern-machine","title":"Adversarial Examples in Modern Machine Learning: A Review","date":"2019-11-13","arxiv_id":"1911.05268","repositories_listed":1,"syntology":null},{"url":"/paper/patch-augmentation-towards-efficient-decision","slug":"patch-augmentation-towards-efficient-decision","title":"Patch augmentation: Towards efficient decision boundaries for neural networks","date":"2019-11-08","arxiv_id":"1911.07922","repositories_listed":1,"syntology":null},{"url":"/paper/who-is-real-bob-adversarial-attacks-on","slug":"who-is-real-bob-adversarial-attacks-on","title":"Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems","date":"2019-11-03","arxiv_id":"1911.01840","repositories_listed":1,"syntology":{"n":1,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"0 ran · 1 unverified","sample_list":"/paper/who-is-real-bob-adversarial-attacks-on#ran","syntology_url":"https://syntology.ai/paper/1911.01840","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1911.01840"}},"official":null}},{"url":"/paper/active-subspace-of-neural-networks-structural","slug":"active-subspace-of-neural-networks-structural","title":"Active Subspace of Neural Networks: Structural Analysis and Universal Attacks","date":"2019-10-29","arxiv_id":"1910.13025","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/active-subspace-of-neural-networks-structural#ran","syntology_url":"https://syntology.ai/paper/1910.13025","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1910.13025"}},"official":{"repos":["chunfengc/ASNet"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/open-the-boxes-of-words-incorporating-sememes","slug":"open-the-boxes-of-words-incorporating-sememes","title":"Word-level Textual Adversarial Attacking as Combinatorial Optimization","date":"2019-10-27","arxiv_id":"1910.12196","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/open-the-boxes-of-words-incorporating-sememes#ran","syntology_url":"https://syntology.ai/paper/1910.12196","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1910.12196"}},"official":{"repos":["thunlp/SememePSO-Attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/learning-to-learn-by-zeroth-order-oracle","slug":"learning-to-learn-by-zeroth-order-oracle","title":"Learning to Learn by Zeroth-Order Oracle","date":"2019-10-21","arxiv_id":"1910.09464","repositories_listed":1,"syntology":null},{"url":"/paper/enhancing-recurrent-neural-networks-with","slug":"enhancing-recurrent-neural-networks-with","title":"Improving Sequence Modeling Ability of Recurrent Neural Networks via Sememes","date":"2019-10-20","arxiv_id":"1910.08910","repositories_listed":1,"syntology":null},{"url":"/paper/spatial-aware-online-adversarial","slug":"spatial-aware-online-adversarial","title":"SPARK: Spatial-aware Online Incremental Attack Against Visual Tracking","date":"2019-10-19","arxiv_id":"1910.08681","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-patches-exploiting-contextual","slug":"adversarial-patches-exploiting-contextual","title":"Role of Spatial Context in Adversarial Robustness for Object Detection","date":"2019-09-30","arxiv_id":"1910.00068","repositories_listed":1,"syntology":{"n":7,"n_ran":5,"n_constructed":0,"n_ran_checked":5,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":0,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/adversarial-patches-exploiting-contextual#ran","syntology_url":"https://syntology.ai/paper/1910.00068","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1910.00068"}},"official":{"repos":["UMBCvision/Contextual-Adversarial-Patches"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/strong-baseline-defenses-against-clean-label","slug":"strong-baseline-defenses-against-clean-label","title":"Deep k-NN Defense against Clean-label Data Poisoning Attacks","date":"2019-09-29","arxiv_id":"1909.13374","repositories_listed":1,"syntology":null},{"url":"/paper/sign-opt-a-query-efficient-hard-label","slug":"sign-opt-a-query-efficient-hard-label","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","date":"2019-09-24","arxiv_id":"1909.10773","repositories_listed":1,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/sign-opt-a-query-efficient-hard-label#ran","syntology_url":"https://syntology.ai/paper/1909.10773","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1909.10773"}},"official":{"repos":["cmhcbb/attackbox"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/natural-language-adversarial-attacks-and","slug":"natural-language-adversarial-attacks-and","title":"Natural Language Adversarial Defense through Synonym Encoding","date":"2019-09-15","arxiv_id":"1909.06723","repositories_listed":1,"syntology":null},{"url":"/paper/an-empirical-investigation-of-randomized","slug":"an-empirical-investigation-of-randomized","title":"An Empirical Investigation of Randomized Defenses against Adversarial Attacks","date":"2019-09-12","arxiv_id":"1909.05580","repositories_listed":1,"syntology":null},{"url":"/paper/fda-feature-disruptive-attack","slug":"fda-feature-disruptive-attack","title":"FDA: Feature Disruptive Attack","date":"2019-09-10","arxiv_id":"1909.04385","repositories_listed":1,"syntology":null},{"url":"/paper/targeted-mismatch-adversarial-attack-query","slug":"targeted-mismatch-adversarial-attack-query","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","date":"2019-08-24","arxiv_id":"1908.09163","repositories_listed":1,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/targeted-mismatch-adversarial-attack-query#ran","syntology_url":"https://syntology.ai/paper/1908.09163","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1908.09163"}},"official":{"repos":["gtolias/tma"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/metaadvdet-towards-robust-detection-of","slug":"metaadvdet-towards-robust-detection-of","title":"MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks","date":"2019-08-06","arxiv_id":"1908.02199","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-self-defense-for-cycle-consistent","slug":"adversarial-self-defense-for-cycle-consistent","title":"Adversarial Self-Defense for Cycle-Consistent GANs","date":"2019-08-05","arxiv_id":"1908.01517","repositories_listed":1,"syntology":null},{"url":"/paper/the-general-black-box-attack-method-for-graph","slug":"the-general-black-box-attack-method-for-graph","title":"A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Models","date":"2019-08-04","arxiv_id":"1908.01297","repositories_listed":1,"syntology":null},{"url":"/paper/on-the-design-of-black-box-adversarial","slug":"on-the-design-of-black-box-adversarial","title":"On the Design of Black-box Adversarial Examples by Leveraging Gradient-free Optimization and Operator Splitting Method","date":"2019-07-26","arxiv_id":"1907.11684","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/on-the-design-of-black-box-adversarial#ran","syntology_url":"https://syntology.ai/paper/1907.11684","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1907.11684"}},"official":{"repos":["LinLabNEU/Blackbox_ADMM"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/generating-natural-language-adversarial-2","slug":"generating-natural-language-adversarial-2","title":"Generating Natural Language Adversarial Examples through Probability Weighted Word Saliency","date":"2019-07-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/mimic-and-fool-a-task-agnostic-adversarial","slug":"mimic-and-fool-a-task-agnostic-adversarial","title":"Mimic and Fool: A Task Agnostic Adversarial Attack","date":"2019-06-11","arxiv_id":"1906.04606","repositories_listed":1,"syntology":null},{"url":"/paper/beyond-adversarial-training-min-max","slug":"beyond-adversarial-training-min-max","title":"Adversarial Attack Generation Empowered by Min-Max Optimization","date":"2019-06-09","arxiv_id":"1906.03563","repositories_listed":1,"syntology":{"n":25,"n_ran":11,"n_constructed":0,"n_ran_checked":11,"n_instrument":0,"n_unverified":14,"n_honours":0,"n_violates":1,"n_no_contract":10,"n_pointer_only":0,"phrase":"11 ran (of which 0 constructed an object rather than computing a result; 11 with no instrument failure: 0 honoured, 1 violated, 10 with no contract checked; 0 where Syntology's instrument failed) · 14 unverified","sample_list":"/paper/beyond-adversarial-training-min-max#ran","syntology_url":"https://syntology.ai/paper/1906.03563","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1906.03563"}},"official":{"repos":["wangjksjtu/minmax-adv"],"state":"official (archive's flag): 11 ran","n_ran":11,"n_constructed":0,"n_ran_no_instrument_failure":11,"n_unverified":14,"ran_from_kinds":["official"]}}},{"url":"/paper/adversarial-examples-for-non-parametric","slug":"adversarial-examples-for-non-parametric","title":"Robustness for Non-Parametric Classification: A Generic Attack and Defense","date":"2019-06-07","arxiv_id":"1906.03310","repositories_listed":1,"syntology":{"n":4,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":3,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":4,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/adversarial-examples-for-non-parametric#ran","syntology_url":"https://syntology.ai/paper/1906.03310","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1906.03310"}},"official":{"repos":["yangarbiter/adversarial-nonparametrics"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/efficient-project-gradient-descent-for","slug":"efficient-project-gradient-descent-for","title":"Efficient Project Gradient Descent for Ensemble Adversarial Attack","date":"2019-06-07","arxiv_id":"1906.03333","repositories_listed":1,"syntology":null},{"url":"/paper/query-efficient-meta-attack-to-deep-neural","slug":"query-efficient-meta-attack-to-deep-neural","title":"Query-efficient Meta Attack to Deep Neural Networks","date":"2019-06-06","arxiv_id":"1906.02398","repositories_listed":1,"syntology":{"n":1,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"0 ran · 1 unverified","sample_list":"/paper/query-efficient-meta-attack-to-deep-neural#ran","syntology_url":"https://syntology.ai/paper/1906.02398","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1906.02398"}},"official":{"repos":["dydjw9/MetaAttack_ICLR2020"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":[]}}},{"url":"/paper/decoupling-direction-and-norm-for-efficient-1","slug":"decoupling-direction-and-norm-for-efficient-1","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","date":"2019-06-01","arxiv_id":null,"repositories_listed":1,"syntology":null},{"url":"/paper/feature-space-perturbations-yield-more","slug":"feature-space-perturbations-yield-more","title":"Feature Space Perturbations Yield More Transferable Adversarial Examples","date":"2019-06-01","arxiv_id":null,"repositories_listed":1,"syntology":null}],"record_sha256":"46feb783cd3f27f599cdb3efe11ecfb745b38bc62edd907243c3d387d000f254","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}