atlas

Research map / Adversarial robustness and security / Attacks on text and graphs

On Adaptive Attacks to Adversarial Example Defenses

NeurIPS 2020 · Adversarial robustness and security › Attacks on text and graphs · approach: Defenses against universal perturbations · 137 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
replace defense evaluation with adaptive PGD using smoothed gradients (k-WTA)k-WTA ResNet-18 · CIFAR-10robust accuracy: 50.0 -> 0.16Hurt
increase PGD step size by 3xEnsemble Diversity defense · CIFAR-10robust accuracy: 48\% to 26\%Hurt
increase PGD iterations to 250Ensemble Diversity defense · CIFAR-10robust accuracy: 20\% while 250 iterations reduced the accuracy to 10Hurt
repeat attack 3 times per exampleEnsemble Diversity defense · CIFAR-10robust accuracyHurt
divide logits by a large constant before attackRethinking Softmax CE defense · CIFAR-10robust accuracy: 24\%$ to $18Hurt
remove numerically unstable sigmoid/log ops and use hinge lossECC defense · CIFAR-10robust accuracyHurt
use simple consistent loss with 100 PGD iterationsEMPIR defense · CIFAR-10robust accuracyHurt

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy