{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-defense/papers/4","list_of":"/task/adversarial-defense","task":"Adversarial Defense","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":4,"pages_in_order":5,"rows_per_page":100,"rows":[301,400],"of":403,"counts":{"archive_papers_tagged":403,"with_a_code_link":216,"where_syntology_ran_a_sample":66,"not_listed_spam_title":0,"listed":403,"listed_where_code_ran":66,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":51,"every_run_a_failure_of_syntologys_instrument":15,"listed_with_a_run_with_no_instrument_failure":51,"listed_every_run_a_failure_of_syntologys_instrument":15,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-defense","prev":"/task/adversarial-defense/papers/3","next":"/task/adversarial-defense/papers/5","papers":[{"url":null,"slug":"weakly-supervised-invariant-representation","title":"Weakly Supervised Invariant Representation Learning Via Disentangling Known and Unknown Nuisance Factors","date":"2022-09-15","arxiv_id":"2209.06827","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-multi-objective-memetic-algorithm-for-auto","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","date":"2022-08-15","arxiv_id":"2208.06984","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-encryption-method-of-convmixer-models","title":"An Encryption Method of ConvMixer Models without Performance Degradation","date":"2022-07-25","arxiv_id":"2207.11939","repositories_listed":0,"syntology":null},{"url":null,"slug":"rethinking-textual-adversarial-defense-for","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","date":"2022-07-21","arxiv_id":"2208.10251","repositories_listed":0,"syntology":null},{"url":null,"slug":"masked-spatial-spectral-autoencoders-are","title":"Masked Spatial-Spectral Autoencoders Are Excellent Hyperspectral Defenders","date":"2022-07-16","arxiv_id":"2207.07803","repositories_listed":0,"syntology":null},{"url":null,"slug":"improved-and-interpretable-defense-to","title":"Jacobian Norm with Selective Input Gradient Regularization for Improved and Interpretable Adversarial Defense","date":"2022-07-09","arxiv_id":"2207.13036","repositories_listed":0,"syntology":null},{"url":null,"slug":"advsmo-black-box-adversarial-attack-by","title":"AdvSmo: Black-box Adversarial Attack by Smoothing Linear Structure of Texture","date":"2022-06-22","arxiv_id":"2206.10988","repositories_listed":0,"syntology":null},{"url":null,"slug":"landscape-learning-for-neural-network","title":"Landscape Learning for Neural Network Inversion","date":"2022-06-17","arxiv_id":"2206.09027","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-mask-based-adversarial-defense-scheme","title":"A Mask-Based Adversarial Defense Scheme","date":"2022-04-21","arxiv_id":"2204.11837","repositories_listed":0,"syntology":null},{"url":null,"slug":"dad-data-free-adversarial-defense-at-test","title":"DAD: Data-free Adversarial Defense at Test Time","date":"2022-04-04","arxiv_id":"2204.01568","repositories_listed":0,"syntology":null},{"url":null,"slug":"rebuild-and-ensemble-exploring-defense-1","title":"Text Adversarial Purification as Defense against Adversarial Attacks","date":"2022-03-27","arxiv_id":"2203.14207","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-via-image-denoising-with","title":"Adversarial Defense via Image Denoising with Chaotic Encryption","date":"2022-03-19","arxiv_id":"2203.10290","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-survey-in-adversarial-defences-and","title":"A Survey of Adversarial Defences and Robustness in NLP","date":"2022-03-12","arxiv_id":"2203.06414","repositories_listed":0,"syntology":null},{"url":null,"slug":"searching-for-robust-neural-architectures-via","title":"$A^{3}D$: A Platform of Searching for Robust Neural Architectures and Efficient Adversarial Attacks","date":"2022-03-07","arxiv_id":"2203.03128","repositories_listed":0,"syntology":null},{"url":null,"slug":"detection-of-word-adversarial-examples-in","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","date":"2022-03-03","arxiv_id":"2203.01677","repositories_listed":0,"syntology":null},{"url":null,"slug":"scale-invariant-adversarial-attack-for","title":"Scale-Invariant Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","date":"2022-01-29","arxiv_id":"2201.12527","repositories_listed":0,"syntology":null},{"url":null,"slug":"detection-of-word-adversarial-examples-in-nlp","title":"Detection of Word Adversarial Examples in NLP: Benchmark and Baseline via Robust Density Estimation","date":"2022-01-16","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"invertible-image-dataset-protection","title":"Invertible Image Dataset Protection","date":"2021-12-29","arxiv_id":"2112.14420","repositories_listed":0,"syntology":null},{"url":null,"slug":"class-disentanglement-and-applications-in","title":"Class-Disentanglement and Applications in Adversarial Detection and Defense","date":"2021-12-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"detection-of-adversarial-examples-in-nlp","title":"Detection of Adversarial Examples in NLP: Benchmark and Baseline via Robust Density Estimation","date":"2021-11-16","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"rebuild-and-ensemble-exploring-defense","title":"Rebuild and Ensemble: Exploring Defense Against Text Adversaries","date":"2021-11-16","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-adversarial-defense-with-self","title":"Improving Adversarial Defense with Self-supervised Test-time Fine-tuning","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"modeling-adversarial-noise-for-adversarial","title":"Modeling Adversarial Noise for Adversarial Defense","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-achieving-adversarial-robustness","title":"Towards Achieving Adversarial Robustness Beyond Perceptual Limits","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"treated-towards-universal-defense-against","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","date":"2021-09-13","arxiv_id":"2109.06176","repositories_listed":0,"syntology":null},{"url":null,"slug":"going-beyond-neural-architecture-search-with","title":"Neural Ensemble Search via Bayesian Sampling","date":"2021-09-06","arxiv_id":"2109.02533","repositories_listed":0,"syntology":null},{"url":null,"slug":"delving-into-deep-image-prior-for-adversarial","title":"Delving into Deep Image Prior for Adversarial Defense: A Novel Reconstruction-based Defense Framework","date":"2021-07-31","arxiv_id":"2108.00180","repositories_listed":0,"syntology":null},{"url":null,"slug":"aid-purifier-a-light-auxiliary-network-for","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","date":"2021-07-14","arxiv_id":"2107.06456","repositories_listed":0,"syntology":null},{"url":null,"slug":"self-supervised-iterative-contextual","title":"NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations","date":"2021-06-22","arxiv_id":"2106.11644","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-white-box-robustness-of-pre","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","date":"2021-06-10","arxiv_id":"2106.05453","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-for-automatic-speaker-1","title":"Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning","date":"2021-06-01","arxiv_id":"2106.00273","repositories_listed":0,"syntology":null},{"url":null,"slug":"adaptive-feature-alignment-for-adversarial","title":"Adaptive Feature Alignment for Adversarial Training","date":"2021-05-31","arxiv_id":"2105.15157","repositories_listed":0,"syntology":null},{"url":null,"slug":"demotivate-adversarial-defense-in-remote","title":"Demotivate adversarial defense in remote sensing","date":"2021-05-28","arxiv_id":"2105.13902","repositories_listed":0,"syntology":null},{"url":null,"slug":"stochastic-shield-a-probabilistic-approach","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","date":"2021-05-13","arxiv_id":"2105.06512","repositories_listed":0,"syntology":null},{"url":null,"slug":"evaluating-deception-detection-model","title":"Evaluating Deception Detection Model Robustness To Linguistic Variation","date":"2021-04-23","arxiv_id":"2104.11729","repositories_listed":0,"syntology":null},{"url":null,"slug":"improved-autoregressive-modeling-with-1","title":"Improved Autoregressive Modeling with Distribution Smoothing","date":"2021-03-28","arxiv_id":"2103.15089","repositories_listed":0,"syntology":null},{"url":null,"slug":"internal-wasserstein-distance-for-adversarial","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","date":"2021-03-13","arxiv_id":"2103.07598","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-global-adversarial-robustness","title":"Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN","date":"2021-03-08","arxiv_id":"2103.04513","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-hierarchical-adversarial-robustness-1","title":"Improving Hierarchical Adversarial Robustness of Deep Neural Networks","date":"2021-02-17","arxiv_id":"2102.09012","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-adversarial-resilient-deep-neural","title":"Towards Adversarial-Resilient Deep Neural Networks for False Data Injection Attack Detection in Power Grids","date":"2021-02-17","arxiv_id":"2102.09057","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-for-automatic-speaker","title":"Adversarial defense for automatic speaker verification by cascaded self-supervised learning models","date":"2021-02-14","arxiv_id":"2102.07047","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-android-malware-detection-system","title":"Robust Android Malware Detection System against Adversarial Attacks using Q-Learning","date":"2021-01-27","arxiv_id":"2101.12031","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-comprehensive-evaluation-framework-for-deep","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","date":"2021-01-24","arxiv_id":"2101.09617","repositories_listed":0,"syntology":null},{"url":null,"slug":"heating-up-decision-boundaries-isocapacitory-1","title":"Heating up decision boundaries: isocapacitory saturation, adversarial scenarios and generalization bounds","date":"2021-01-15","arxiv_id":"2101.06061","repositories_listed":0,"syntology":null},{"url":null,"slug":"untargeted-targeted-and-universal-adversarial","title":"Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series","date":"2021-01-13","arxiv_id":"2101.05639","repositories_listed":0,"syntology":null},{"url":null,"slug":"the-vulnerability-of-semantic-segmentation","title":"The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing","date":"2021-01-11","arxiv_id":"2101.03924","repositories_listed":0,"syntology":null},{"url":null,"slug":"ensemble-based-adversarial-defense-using","title":"Ensemble-based Adversarial Defense Using Diversified Distance Mapping","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"exploiting-safe-spots-in-neural-networks-for","title":"Exploiting Safe Spots in Neural Networks for Preemptive Robustness and Out-of-Distribution Detection","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"general-adversarial-defense-via-pixel-level","title":"General Adversarial Defense via Pixel Level and Feature Level Distribution Alignment","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"layer-wise-adversarial-defense-an-ode","title":"Layer-wise Adversarial Defense: An ODE Perspective","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"perceptual-adversarial-robustness","title":"Perceptual Adversarial Robustness: Generalizable Defenses Against Unforeseen Threat Models","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"sad-saliency-adversarial-defense-without","title":"SAD: Saliency Adversarial Defense without Adversarial Training","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"target-training-tricking-adversarial-attacks","title":"Target Training: Tricking Adversarial Attacks to Fail","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"rails-a-robust-adversarial-immune-inspired","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","date":"2020-12-18","arxiv_id":"2012.10485","repositories_listed":0,"syntology":null},{"url":null,"slug":"from-a-fourier-domain-perspective-on","title":"From a Fourier-Domain Perspective on Adversarial Examples to a Wiener Filter Defense for Semantic Segmentation","date":"2020-12-02","arxiv_id":"2012.01558","repositories_listed":0,"syntology":null},{"url":null,"slug":"faceguard-a-self-supervised-defense-against","title":"FaceGuard: A Self-Supervised Defense Against Adversarial Face Images","date":"2020-11-28","arxiv_id":"2011.14218","repositories_listed":0,"syntology":null},{"url":null,"slug":"self-gradient-networks","title":"Self-Gradient Networks","date":"2020-11-18","arxiv_id":"2011.09364","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-for-deep-speaker","title":"Adversarial defense for deep speaker recognition using hybrid adversarial training","date":"2020-10-30","arxiv_id":"2010.16038","repositories_listed":0,"syntology":null},{"url":null,"slug":"wavetransform-crafting-adversarial-examples","title":"WaveTransform: Crafting Adversarial Examples via Input Decomposition","date":"2020-10-29","arxiv_id":"2010.15773","repositories_listed":0,"syntology":null},{"url":null,"slug":"attack-agnostic-adversarial-defense-via","title":"Attack Agnostic Adversarial Defense via Visual Imperceptible Bound","date":"2020-10-25","arxiv_id":"2010.13247","repositories_listed":0,"syntology":null},{"url":null,"slug":"benchmarking-adversarial-attacks-and-defenses","title":"Benchmarking adversarial attacks and defenses for time-series data","date":"2020-08-30","arxiv_id":"2008.13261","repositories_listed":0,"syntology":null},{"url":null,"slug":"likelihood-landscapes-a-unifying-principle","title":"Likelihood Landscapes: A Unifying Principle Behind Many Adversarial Defenses","date":"2020-08-25","arxiv_id":"2008.11300","repositories_listed":0,"syntology":null},{"url":null,"slug":"manifold-projection-for-adversarial-defense","title":"Manifold Projection for Adversarial Defense on Face Recognition","date":"2020-08-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":"/paper/cassandra-detecting-trojaned-networks-from","slug":"cassandra-detecting-trojaned-networks-from","title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations","date":"2020-07-28","arxiv_id":"2007.14433","repositories_listed":0,"syntology":null},{"url":null,"slug":"anomaly-detection-in-unsupervised","title":"Anomaly Detection in Unsupervised Surveillance Setting Using Ensemble of Multimodal Data with Adversarial Defense","date":"2020-07-17","arxiv_id":"2007.10812","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-by-latent-style","title":"Adversarial Defense by Latent Style Transformations","date":"2020-06-17","arxiv_id":"2006.09701","repositories_listed":0,"syntology":null},{"url":null,"slug":"tricking-adversarial-attacks-to-fail","title":"Tricking Adversarial Attacks To Fail","date":"2020-06-08","arxiv_id":"2006.04504","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploring-the-role-of-input-and-output-layers","title":"Exploring the role of Input and Output Layers of a Deep Neural Network in Adversarial Defense","date":"2020-06-02","arxiv_id":"2006.01408","repositories_listed":0,"syntology":null},{"url":null,"slug":"revisiting-role-of-autoencoders-in","title":"Revisiting Role of Autoencoders in Adversarial Settings","date":"2020-05-21","arxiv_id":"2005.10750","repositories_listed":0,"syntology":null},{"url":null,"slug":"encryption-inspired-adversarial-defense-for","title":"Encryption Inspired Adversarial Defense for Visual Classification","date":"2020-05-16","arxiv_id":"2005.07998","repositories_listed":0,"syntology":null},{"url":null,"slug":"class-aware-domain-adaptation-for-improving","title":"Class-Aware Domain Adaptation for Improving Adversarial Robustness","date":"2020-05-10","arxiv_id":"2005.04564","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-machine-learning-an","title":"Adversarial Attacks and Defenses: An Interpretation Perspective","date":"2020-04-23","arxiv_id":"2004.11488","repositories_listed":0,"syntology":null},{"url":null,"slug":"physically-realizable-adversarial-examples","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","date":"2020-04-01","arxiv_id":"2004.00543","repositories_listed":0,"syntology":null},{"url":null,"slug":"mimicgan-robust-projection-onto-image","title":"MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking","date":"2019-12-16","arxiv_id":"1912.07748","repositories_listed":0,"syntology":null},{"url":null,"slug":"improved-detection-of-adversarial-attacks-via-1","title":"MadNet: Using a MAD Optimization for Defending Against Adversarial Attacks","date":"2019-11-03","arxiv_id":"1911.00870","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-via-local-flatness","title":"Adversarial Defense via Local Flatness Regularization","date":"2019-10-27","arxiv_id":"1910.12165","repositories_listed":0,"syntology":null},{"url":null,"slug":"enforcing-linearity-in-dnn-succours","title":"Enforcing Linearity in DNN succours Robustness and Adversarial Image Generation","date":"2019-10-17","arxiv_id":"1910.08108","repositories_listed":0,"syntology":null},{"url":null,"slug":"defensive-tensorization-randomized-tensor","title":"Defensive Tensorization: Randomized Tensor Parametrization for Robust Neural Networks","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"simple-and-effective-stochastic-neural","title":"Simple and Effective Stochastic Neural Networks","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"universal-learning-approach-for-adversarial","title":"Universal Learning Approach for Adversarial Defense","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"training-robust-deep-neural-networks-via","title":"Training Robust Deep Neural Networks via Adversarial Noise Propagation","date":"2019-09-19","arxiv_id":"1909.09034","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-adversarial-attacks-by-3","title":"Defending Against Adversarial Attacks by Suppressing the Largest Eigenvalue of Fisher Information Matrix","date":"2019-09-13","arxiv_id":"1909.06137","repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-adversarial-robustness-using","title":"Towards Model-Agnostic Adversarial Defenses using Adversarially Trained Autoencoders","date":"2019-09-12","arxiv_id":"1909.05921","repositories_listed":0,"syntology":null},{"url":"/paper/adversarial-robustness-through-local","slug":"adversarial-robustness-through-local","title":"Adversarial Robustness through Local Linearization","date":"2019-07-04","arxiv_id":"1907.02610","repositories_listed":0,"syntology":null},{"url":null,"slug":"comment-on-adv-bnn-improved-adversarial","title":"Comment on \"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network\"","date":"2019-07-01","arxiv_id":"1907.00895","repositories_listed":0,"syntology":null},{"url":null,"slug":"brain-mr-image-segmentation-in-small-dataset","title":"Brain MR Image Segmentation in Small Dataset with Adversarial Defense and Task Reorganization","date":"2019-06-25","arxiv_id":"1906.10400","repositories_listed":0,"syntology":null},{"url":null,"slug":"improved-adversarial-robustness-via-logit","title":"Improved Adversarial Robustness via Logit Regularization Methods","date":"2019-06-10","arxiv_id":"1906.03749","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-examples-for-electrocardiograms","title":"Adversarial Examples for Electrocardiograms","date":"2019-05-13","arxiv_id":"1905.05163","repositories_listed":0,"syntology":null},{"url":null,"slug":"190503679","title":"Adversarial Defense Framework for Graph Neural Network","date":"2019-05-09","arxiv_id":"1905.03679","repositories_listed":0,"syntology":null},{"url":null,"slug":"pixel-redrawn-for-a-robust-adversarial","title":"Pixel Redrawn For A Robust Adversarial Defense","date":"2019-05-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-defense-through-network-profiling","title":"Adversarial Defense Through Network Profiling Based Path Extraction","date":"2019-04-17","arxiv_id":"1904.08089","repositories_listed":0,"syntology":null},{"url":null,"slug":"l-1-norm-double-backpropagation-adversarial","title":"L 1-norm double backpropagation adversarial defense","date":"2019-03-05","arxiv_id":"1903.01715","repositories_listed":0,"syntology":null},{"url":"/paper/puvae-a-variational-autoencoder-to-purify","slug":"puvae-a-variational-autoencoder-to-purify","title":"PuVAE: A Variational Autoencoder to Purify Adversarial Examples","date":"2019-03-02","arxiv_id":"1903.00585","repositories_listed":0,"syntology":null},{"url":null,"slug":"attention-please-adversarial-defense-via","title":"Attention, Please! Adversarial Defense via Activation Rectification and Preservation","date":"2018-11-24","arxiv_id":"1811.09831","repositories_listed":0,"syntology":null},{"url":null,"slug":"mimicgan-corruption-mimicking-for-blind-image","title":"MimicGAN: Corruption-Mimicking for Blind Image Recovery & Adversarial Defense","date":"2018-11-20","arxiv_id":"1811.08484","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-to-defense-by-learning-to-attack","title":"Learning to Defend by Learning to Attack","date":"2018-11-03","arxiv_id":"1811.01213","repositories_listed":0,"syntology":null},{"url":null,"slug":"efficient-two-step-adversarial-defense-for","title":"Efficient Two-Step Adversarial Defense for Deep Neural Networks","date":"2018-10-08","arxiv_id":"1810.03739","repositories_listed":0,"syntology":null},{"url":null,"slug":"characterizing-audio-adversarial-examples","title":"Characterizing Audio Adversarial Examples Using Temporal Dependency","date":"2018-09-28","arxiv_id":"1809.10875","repositories_listed":0,"syntology":null},{"url":null,"slug":"defense-against-adversarial-attacks-with-saak","title":"Defense Against Adversarial Attacks with Saak Transform","date":"2018-08-06","arxiv_id":"1808.01785","repositories_listed":0,"syntology":null},{"url":null,"slug":"customizing-an-adversarial-example-generator","title":"Customizing an Adversarial Example Generator with Class-Conditional GANs","date":"2018-06-27","arxiv_id":"1806.10496","repositories_listed":0,"syntology":null}],"record_sha256":"67b44d5e891d36e5312d164ebad57c26577998bc95b50acd30de2e22ed3a92c5","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}