{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-defense/papers/3","list_of":"/task/adversarial-defense","task":"Adversarial Defense","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":3,"pages_in_order":5,"rows_per_page":100,"rows":[201,300],"of":403,"counts":{"archive_papers_tagged":403,"with_a_code_link":216,"where_syntology_ran_a_sample":66,"not_listed_spam_title":0,"listed":403,"listed_where_code_ran":66,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":51,"every_run_a_failure_of_syntologys_instrument":15,"listed_with_a_run_with_no_instrument_failure":51,"listed_every_run_a_failure_of_syntologys_instrument":15,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-defense","prev":"/task/adversarial-defense/papers/2","next":"/task/adversarial-defense/papers/4","papers":[{"url":"/paper/is-ami-attacks-meet-interpretability-robust","slug":"is-ami-attacks-meet-interpretability-robust","title":"Is AmI (Attacks Meet Interpretability) Robust to Adversarial Examples?","date":"2019-02-06","arxiv_id":"1902.02322","repositories_listed":1,"syntology":null},{"url":"/paper/image-super-resolution-as-a-defense-against","slug":"image-super-resolution-as-a-defense-against","title":"Image Super-Resolution as a Defense Against Adversarial Attacks","date":"2019-01-07","arxiv_id":"1901.01677","repositories_listed":1,"syntology":null},{"url":"/paper/ppd-permutation-phase-defense-against","slug":"ppd-permutation-phase-defense-against","title":"PPD: Permutation Phase Defense Against Adversarial Examples in Deep Learning","date":"2018-12-25","arxiv_id":"1812.10049","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-defense-of-image-classification","slug":"adversarial-defense-of-image-classification","title":"Adversarial Defense of Image Classification Using a Variational Auto-Encoder","date":"2018-12-07","arxiv_id":"1812.02891","repositories_listed":1,"syntology":null},{"url":"/paper/max-margin-adversarial-mma-training-direct","slug":"max-margin-adversarial-mma-training-direct","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","date":"2018-12-06","arxiv_id":"1812.02637","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-defense-by-stratified","slug":"adversarial-defense-by-stratified","title":"Adversarial Defense by Stratified Convolutional Sparse Coding","date":"2018-11-30","arxiv_id":"1812.00037","repositories_listed":1,"syntology":null},{"url":"/paper/parametric-noise-injection-trainable","slug":"parametric-noise-injection-trainable","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","date":"2018-11-22","arxiv_id":"1811.09310","repositories_listed":1,"syntology":{"n":8,"n_ran":6,"n_constructed":0,"n_ran_checked":6,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":3,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/parametric-noise-injection-trainable#ran","syntology_url":"https://syntology.ai/paper/1811.09310","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1811.09310"}},"official":{"repos":["elliothe/CVPR_2019_PNI"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/adv-bnn-improved-adversarial-defense-through","slug":"adv-bnn-improved-adversarial-defense-through","title":"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network","date":"2018-10-01","arxiv_id":"1810.01279","repositories_listed":1,"syntology":{"n":4,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/adv-bnn-improved-adversarial-defense-through#ran","syntology_url":"https://syntology.ai/paper/1810.01279","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1810.01279"}},"official":{"repos":["xuanqing94/BayesianDefense"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/caad-2018-generating-transferable-adversarial","slug":"caad-2018-generating-transferable-adversarial","title":"CAAD 2018: Generating Transferable Adversarial Examples","date":"2018-09-29","arxiv_id":"1810.01268","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-defense-via-data-dependent","slug":"adversarial-defense-via-data-dependent","title":"Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization","date":"2018-09-23","arxiv_id":"1809.08516","repositories_listed":1,"syntology":null},{"url":"/paper/a-game-based-approximate-verification-of-deep","slug":"a-game-based-approximate-verification-of-deep","title":"A Game-Based Approximate Verification of Deep Neural Networks with Provable Guarantees","date":"2018-07-10","arxiv_id":"1807.03571","repositories_listed":1,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/a-game-based-approximate-verification-of-deep#ran","syntology_url":"https://syntology.ai/paper/1807.03571","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1807.03571"}},"official":{"repos":["TrustAI/DeepGame"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/stochastic-activation-pruning-for-robust","slug":"stochastic-activation-pruning-for-robust","title":"Stochastic Activation Pruning for Robust Adversarial Defense","date":"2018-03-05","arxiv_id":"1803.01442","repositories_listed":1,"syntology":null},{"url":"/paper/are-generative-classifiers-more-robust-to","slug":"are-generative-classifiers-more-robust-to","title":"Are Generative Classifiers More Robust to Adversarial Attacks?","date":"2018-02-19","arxiv_id":"1802.06552","repositories_listed":1,"syntology":{"n":2,"n_ran":0,"n_constructed":0,"n_ran_checked":0,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"0 ran · 2 unverified","sample_list":"/paper/are-generative-classifiers-more-robust-to#ran","syntology_url":"https://syntology.ai/paper/1802.06552","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1802.06552"}},"official":{"repos":["deepgenerativeclassifier/DeepBayes"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":[]}}},{"url":"/paper/characterizing-adversarial-subspaces-using","slug":"characterizing-adversarial-subspaces-using","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","date":"2018-01-08","arxiv_id":"1801.02613","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/characterizing-adversarial-subspaces-using#ran","syntology_url":"https://syntology.ai/paper/1801.02613","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1801.02613"}},"official":{"repos":["xingjunm/lid_adversarial_subspace_detection"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/countering-adversarial-images-using-input","slug":"countering-adversarial-images-using-input","title":"Countering Adversarial Images using Input Transformations","date":"2017-10-31","arxiv_id":"1711.00117","repositories_listed":1,"syntology":null},{"url":"/paper/adversarial-playground-a-visualization-suite","slug":"adversarial-playground-a-visualization-suite","title":"Adversarial-Playground: A Visualization Suite Showing How Adversarial Examples Fool Deep Learning","date":"2017-08-01","arxiv_id":"1708.00807","repositories_listed":1,"syntology":null},{"url":null,"slug":"active-adversarial-noise-suppression-for","title":"Active Adversarial Noise Suppression for Image Forgery Localization","date":"2025-06-15","arxiv_id":"2506.12871","repositories_listed":0,"syntology":null},{"url":null,"slug":"sylva-tailoring-personalized-adversarial","title":"Sylva: Tailoring Personalized Adversarial Defense in Pre-trained Models via Collaborative Fine-tuning","date":"2025-06-04","arxiv_id":"2506.05402","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarially-robust-ai-generated-image","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","date":"2025-05-28","arxiv_id":"2505.22604","repositories_listed":0,"syntology":null},{"url":null,"slug":"are-classical-deep-neural-networks-weakly","title":"Are classical deep neural networks weakly adversarially robust?","date":"2025-05-28","arxiv_id":"2506.02016","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-framework-for-adversarial-analysis-of","title":"A Framework for Adversarial Analysis of Decision Support Systems Prior to Deployment","date":"2025-05-27","arxiv_id":"2505.21414","repositories_listed":0,"syntology":null},{"url":null,"slug":"edgeagentx-a-novel-framework-for-agentic-ai","title":"EdgeAgentX: A Novel Framework for Agentic AI at the Edge in Military Communication Networks","date":"2025-05-24","arxiv_id":"2505.18457","repositories_listed":0,"syntology":null},{"url":null,"slug":"hydra-an-agentic-reasoning-approach-for","title":"Hydra: An Agentic Reasoning Approach for Enhancing Adversarial Robustness and Mitigating Hallucinations in Vision-Language Models","date":"2025-04-19","arxiv_id":"2504.14395","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-knowledge-guided-adversarial-defense-for","title":"A Knowledge-guided Adversarial Defense for Resisting Malicious Visual Manipulation","date":"2025-04-11","arxiv_id":"2504.08411","repositories_listed":0,"syntology":null},{"url":null,"slug":"adpo-enhancing-the-adversarial-robustness-of","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","date":"2025-04-02","arxiv_id":"2504.01735","repositories_listed":0,"syntology":null},{"url":null,"slug":"leveraging-generalizability-of-image-to-image","title":"Leveraging Generalizability of Image-to-Image Translation for Enhanced Adversarial Defense","date":"2025-04-02","arxiv_id":"2504.01399","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-deep-reinforcement-learning-in","title":"Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks","date":"2025-03-26","arxiv_id":"2503.20844","repositories_listed":0,"syntology":null},{"url":null,"slug":"class-conditional-neural-polarizer-a","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","date":"2025-02-23","arxiv_id":"2502.18520","repositories_listed":0,"syntology":null},{"url":null,"slug":"shieldlearner-a-new-paradigm-for-jailbreak","title":"ShieldLearner: A New Paradigm for Jailbreak Attack Defense in LLMs","date":"2025-02-16","arxiv_id":"2502.13162","repositories_listed":0,"syntology":null},{"url":null,"slug":"how-vulnerable-is-my-policy-adversarial","title":"How vulnerable is my policy? Adversarial attacks on modern behavior cloning policies","date":"2025-02-06","arxiv_id":"2502.03698","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-masked-autoencoder-purifier-with","title":"Adversarial Masked Autoencoder Purifier with Defense Transferability","date":"2025-01-28","arxiv_id":"2501.16904","repositories_listed":0,"syntology":null},{"url":null,"slug":"gradient-free-adversarial-purification-with","title":"Gradient-Free Adversarial Purification with Diffusion Models","date":"2025-01-23","arxiv_id":"2501.13336","repositories_listed":0,"syntology":null},{"url":null,"slug":"double-visual-defense-adversarial-pre","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","date":"2025-01-16","arxiv_id":"2501.09446","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-a-constructive-framework-for-control","title":"Towards a constructive framework for control theory","date":"2025-01-04","arxiv_id":"2501.02267","repositories_listed":0,"syntology":null},{"url":null,"slug":"proactive-adversarial-defense-harnessing","title":"Proactive Adversarial Defense: Harnessing Prompt Tuning in Vision-Language Models to Detect Unseen Backdoored Images","date":"2024-12-11","arxiv_id":"2412.08755","repositories_listed":0,"syntology":null},{"url":null,"slug":"defensive-dual-masking-for-robust-adversarial","title":"Defensive Dual Masking for Robust Adversarial Defense","date":"2024-12-10","arxiv_id":"2412.07078","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-real-time-defense-against-object-vanishing","title":"A Real-Time Defense Against Object Vanishing Adversarial Patch Attacks for Object Detection in Autonomous Vehicles","date":"2024-12-09","arxiv_id":"2412.06215","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-transferability-in-deep-denoising","title":"Adversarial Transferability in Deep Denoising Models: Theoretical Insights and Robustness Enhancement via Out-of-Distribution Typical Set Sampling","date":"2024-12-08","arxiv_id":"2412.05943","repositories_listed":0,"syntology":null},{"url":null,"slug":"sustainable-self-evolution-adversarial","title":"Sustainable Self-evolution Adversarial Training","date":"2024-12-03","arxiv_id":"2412.02270","repositories_listed":0,"syntology":null},{"url":null,"slug":"test-time-adversarial-defense-with-opposite","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","date":"2024-10-22","arxiv_id":"2410.16805","repositories_listed":0,"syntology":null},{"url":null,"slug":"perseus-leveraging-common-data-patterns-with","title":"Perseus: Leveraging Common Data Patterns with Curriculum Learning for More Robust Graph Neural Networks","date":"2024-10-16","arxiv_id":"2410.12425","repositories_listed":0,"syntology":null},{"url":null,"slug":"the-good-the-bad-and-the-ugly-watermarks","title":"The Good, the Bad and the Ugly: Watermarks, Transferable Attacks and Adversarial Defenses","date":"2024-10-11","arxiv_id":"2410.08864","repositories_listed":0,"syntology":null},{"url":null,"slug":"secure-video-quality-assessment-resisting","title":"Secure Video Quality Assessment Resisting Adversarial Attacks","date":"2024-10-09","arxiv_id":"2410.06866","repositories_listed":0,"syntology":null},{"url":null,"slug":"cloud-adversarial-example-generation-for","title":"Cloud Adversarial Example Generation for Remote Sensing Image Classification","date":"2024-09-21","arxiv_id":"2409.14240","repositories_listed":0,"syntology":null},{"url":null,"slug":"bypassing-darcy-defense-indistinguishable","title":"Bypassing DARCY Defense: Indistinguishable Universal Adversarial Triggers","date":"2024-09-05","arxiv_id":"2409.03183","repositories_listed":0,"syntology":null},{"url":null,"slug":"certified-causal-defense-with-generalizable","title":"Certified Causal Defense with Generalizable Robustness","date":"2024-08-28","arxiv_id":"2408.15451","repositories_listed":0,"syntology":null},{"url":null,"slug":"tart-boosting-clean-accuracy-through-tangent","title":"TART: Boosting Clean Accuracy Through Tangent Direction Guided Adversarial Training","date":"2024-08-27","arxiv_id":"2408.14728","repositories_listed":0,"syntology":null},{"url":null,"slug":"privacy-preserving-universal-adversarial","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","date":"2024-08-20","arxiv_id":"2408.10647","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-image-classification-defensive","title":"Robust Image Classification: Defensive Strategies against FGSM and PGD Adversarial Attacks","date":"2024-08-20","arxiv_id":"2408.13274","repositories_listed":0,"syntology":null},{"url":null,"slug":"2408-00329","title":"OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack","date":"2024-08-01","arxiv_id":"2408.00329","repositories_listed":0,"syntology":null},{"url":null,"slug":"deep-adversarial-defense-against-multilevel","title":"Deep Adversarial Defense Against Multilevel-Lp Attacks","date":"2024-07-12","arxiv_id":"2407.09251","repositories_listed":0,"syntology":null},{"url":null,"slug":"l-p-norm-distortion-efficient-adversarial","title":"$L_p$-norm Distortion-Efficient Adversarial Attack","date":"2024-07-03","arxiv_id":"2407.03115","repositories_listed":0,"syntology":null},{"url":null,"slug":"graphmu-repairing-robustness-of-graph-neural","title":"GraphMU: Repairing Robustness of Graph Neural Networks via Machine Unlearning","date":"2024-06-19","arxiv_id":"2406.13499","repositories_listed":0,"syntology":null},{"url":null,"slug":"mirrorcheck-efficient-adversarial-defense-for","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","date":"2024-06-13","arxiv_id":"2406.09250","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-evasion-attack-efficiency-against","title":"Adversarial Evasion Attack Efficiency against Large Language Models","date":"2024-06-12","arxiv_id":"2406.08050","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploiting-global-graph-homophily-for","title":"Talos: A More Effective and Efficient Adversarial Defense for GNN Models Based on the Global Homophily of Graphs","date":"2024-06-06","arxiv_id":"2406.03833","repositories_listed":0,"syntology":null},{"url":null,"slug":"leveraging-many-to-many-relationships-for","title":"Multimodal Adversarial Defense for Vision-Language Models by Leveraging One-To-Many Relationships","date":"2024-05-29","arxiv_id":"2405.18770","repositories_listed":0,"syntology":null},{"url":null,"slug":"large-language-model-sentinel-advancing","title":"Large Language Model Sentinel: LLM Agent for Adversarial Purification","date":"2024-05-24","arxiv_id":"2405.20770","repositories_listed":0,"syntology":null},{"url":null,"slug":"adaptive-batch-normalization-networks-for","title":"Adaptive Batch Normalization Networks for Adversarial Robustness","date":"2024-05-20","arxiv_id":"2405.11708","repositories_listed":0,"syntology":null},{"url":null,"slug":"causal-perception-inspired-representation","title":"Causal Perception Inspired Representation Learning for Trustworthy Image Quality Assessment","date":"2024-04-30","arxiv_id":"2404.19567","repositories_listed":0,"syntology":null},{"url":null,"slug":"aed-pada-improving-generalizability-of","title":"AED-PADA:Improving Generalizability of Adversarial Example Detection via Principal Adversarial Domain Adaptation","date":"2024-04-19","arxiv_id":"2404.12635","repositories_listed":0,"syntology":null},{"url":null,"slug":"struggle-with-adversarial-defense-try","title":"Struggle with Adversarial Defense? Try Diffusion","date":"2024-04-12","arxiv_id":"2404.08273","repositories_listed":0,"syntology":null},{"url":null,"slug":"meta-invariance-defense-towards-generalizable","title":"Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks","date":"2024-04-04","arxiv_id":"2404.03340","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-and-dimensionality-in","title":"Adversarial Attacks and Dimensionality in Text Classifiers","date":"2024-04-03","arxiv_id":"2404.02660","repositories_listed":0,"syntology":null},{"url":null,"slug":"defense-without-forgetting-continual","title":"Defense without Forgetting: Continual Adversarial Defense with Anisotropic & Isotropic Pseudo Replay","date":"2024-04-02","arxiv_id":"2404.01828","repositories_listed":0,"syntology":null},{"url":null,"slug":"ensemble-adversarial-defense-via-integration","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","date":"2024-03-25","arxiv_id":"2403.16405","repositories_listed":0,"syntology":null},{"url":null,"slug":"subspace-defense-discarding-adversarial","title":"Subspace Defense: Discarding Adversarial Perturbations by Learning a Subspace for Clean Signals","date":"2024-03-24","arxiv_id":"2403.16176","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-teacher-for-cross-domain","title":"Adversarial Defense Teacher for Cross-Domain Object Detection under Poor Visibility Conditions","date":"2024-03-23","arxiv_id":"2403.15786","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-infrared-geometry-using-geometry","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","date":"2024-03-06","arxiv_id":"2403.03674","repositories_listed":0,"syntology":null},{"url":null,"slug":"enhancing-the-immunity-of-mixture-of-experts","title":"Enhancing the \"Immunity\" of Mixture-of-Experts Networks for Adversarial Defense","date":"2024-02-29","arxiv_id":"2402.18787","repositories_listed":0,"syntology":null},{"url":null,"slug":"enhancing-tracking-robustness-with-auxiliary","title":"Enhancing Tracking Robustness with Auxiliary Adversarial Defense Networks","date":"2024-02-28","arxiv_id":"2402.17976","repositories_listed":0,"syntology":null},{"url":null,"slug":"mge-a-training-free-and-efficient-model","title":"MGE: A Training-Free and Efficient Model Generation and Enhancement Scheme","date":"2024-02-27","arxiv_id":"2402.17486","repositories_listed":0,"syntology":null},{"url":null,"slug":"rethinking-invariance-regularization-in","title":"Rethinking Invariance Regularization in Adversarial Training to Improve Robustness-Accuracy Trade-off","date":"2024-02-22","arxiv_id":"2402.14648","repositories_listed":0,"syntology":null},{"url":null,"slug":"two-heads-are-better-than-one-boosting-graph","title":"Two Heads Are Better Than One: Boosting Graph Sparse Training via Semantic and Topological Awareness","date":"2024-02-02","arxiv_id":"2402.01242","repositories_listed":0,"syntology":null},{"url":null,"slug":"fast-adversarial-training-against-textual","title":"Fast Adversarial Training against Textual Adversarial Attacks","date":"2024-01-23","arxiv_id":"2401.12461","repositories_listed":0,"syntology":null},{"url":null,"slug":"ar-gan-generative-adversarial-network-based","title":"AR-GAN: Generative Adversarial Network-Based Defense Method Against Adversarial Attacks on the Traffic Sign Classification System of Autonomous Vehicles","date":"2023-12-31","arxiv_id":"2401.14232","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-infrared-curves-an-attack-on","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","date":"2023-12-21","arxiv_id":"2312.14217","repositories_listed":0,"syntology":null},{"url":null,"slug":"efficient-key-based-adversarial-defense-for","title":"Efficient Key-Based Adversarial Defense for ImageNet by Using Pre-trained Model","date":"2023-11-28","arxiv_id":"2311.16577","repositories_listed":0,"syntology":null},{"url":null,"slug":"mad-meta-adversarial-defense-benchmark","title":"MAD: Meta Adversarial Defense Benchmark","date":"2023-09-18","arxiv_id":"2309.09776","repositories_listed":0,"syntology":null},{"url":null,"slug":"deep-nonparametric-convexified-filtering-for","title":"Deep Nonparametric Convexified Filtering for Computational Photography, Image Synthesis and Adversarial Defense","date":"2023-09-13","arxiv_id":"2309.06724","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-adversarial-defense-by-tensor","title":"Robust Adversarial Defense by Tensor Factorization","date":"2023-09-03","arxiv_id":"2309.01077","repositories_listed":0,"syntology":null},{"url":null,"slug":"atwm-defense-against-adversarial-malware","title":"ATWM: Defense against adversarial malware based on adversarial training","date":"2023-07-11","arxiv_id":"2307.05095","repositories_listed":0,"syntology":null},{"url":null,"slug":"rethinking-adversarial-training-with-a-simple","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","date":"2023-06-13","arxiv_id":"2306.07613","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-black-box-adversarial-example","title":"Towards Black-box Adversarial Example Detection: A Data Reconstruction-based Method","date":"2023-06-03","arxiv_id":"2306.02021","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-aware-deep-learning-system-based","title":"Adversarial-Aware Deep Learning System based on a Secondary Classical Machine Learning Verification Approach","date":"2023-06-01","arxiv_id":"2306.00314","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-amendment-is-the-only-force","title":"Adversarial Amendment is the Only Force Capable of Transforming an Enemy into a Friend","date":"2023-05-18","arxiv_id":"2305.10766","repositories_listed":0,"syntology":null},{"url":null,"slug":"releasing-inequlity-phenomena-in-l-infty","title":"Releasing Inequality Phenomena in $L_{\\infty}$-Adversarial Training via Input Gradient Distillation","date":"2023-05-16","arxiv_id":"2305.09305","repositories_listed":0,"syntology":null},{"url":null,"slug":"reactive-perturbation-defocusing-for-textual","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","date":"2023-05-06","arxiv_id":"2305.04067","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-robust-deep-equilibrium-models","title":"Lyapunov-Stable Deep Equilibrium Models","date":"2023-04-25","arxiv_id":"2304.12707","repositories_listed":0,"syntology":null},{"url":null,"slug":"otjr-optimal-transport-meets-optimal-jacobian","title":"Bridging Optimal Transport and Jacobian Regularization by Optimal Trajectory for Enhanced Adversarial Defense","date":"2023-03-21","arxiv_id":"2303.11793","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-and-defenses-in-machine","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","date":"2023-03-11","arxiv_id":"2303.06302","repositories_listed":0,"syntology":null},{"url":null,"slug":"immune-defense-a-novel-adversarial-defense","title":"Immune Defense: A Novel Adversarial Defense Mechanism for Preventing the Generation of Adversarial Examples","date":"2023-03-08","arxiv_id":"2303.04502","repositories_listed":0,"syntology":null},{"url":null,"slug":"robustpdm-designing-robust-predictive","title":"RobustPdM: Designing Robust Predictive Maintenance against Adversarial Attacks","date":"2023-01-25","arxiv_id":"2301.10822","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-susceptibility-and-robustness-of-time","title":"On the Susceptibility and Robustness of Time Series Models through Adversarial Attack and Defense","date":"2023-01-09","arxiv_id":"2301.03703","repositories_listed":0,"syntology":null},{"url":null,"slug":"multi-head-uncertainty-inference-for","title":"Multi-head Uncertainty Inference for Adversarial Attack Detection","date":"2022-12-20","arxiv_id":"2212.10006","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-and-defences-for-skin","title":"Adversarial Attacks and Defences for Skin Cancer Classification","date":"2022-12-13","arxiv_id":"2212.06822","repositories_listed":0,"syntology":null},{"url":null,"slug":"general-adversarial-defense-against-black-box","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","date":"2022-12-11","arxiv_id":"2212.05387","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-via-neural-oscillation","title":"Adversarial Defense via Neural Oscillation inspired Gradient Masking","date":"2022-11-04","arxiv_id":"2211.02223","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-boosting-forests-with-richer-deep","title":"Robust Boosting Forests with Richer Deep Feature Hierarchy","date":"2022-10-29","arxiv_id":"2210.16451","repositories_listed":0,"syntology":null},{"url":null,"slug":"boosting-adversarial-robustness-from-the","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","date":"2022-10-11","arxiv_id":"2210.05118","repositories_listed":0,"syntology":null}],"record_sha256":"aa6213b431863992f942322a4712f6bf70810e5fc864425f33b66ba4e8b9a7ea","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}