atlas

Research map / Adversarial robustness and security / Black-box and transfer attacks

Understanding and Improving Ensemble Adversarial Defense

NeurIPS 2023 · Adversarial robustness and security › Black-box and transfer attacks · approach: Robustness benchmarks and defenses · 8 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Add iGAT to ADPADP · CIFAR-10, PGDaccuracy (%): 39.63 -> 46.27Helped
Add iGAT to ADPADP · CIFAR-10, AutoAttackaccuracy (%): 35.53 -> 40.36Helped
Add iGAT to DVERGEDVERGE · CIFAR-100, PGDaccuracy (%): 20.04 -> 23.20Helped
Add iGAT to DVERGEDVERGE · CIFAR-100, AutoAttackaccuracy (%): 17.27 -> 18.59Helped
Add iGAT to SoESoE · CIFAR-10, natural imagesaccuracy (%): 82.19 -> 81.05Hurt
Assign global adversarial examples to the lowest-scoring base classifier (ablation)iGAT_ADP · CIFAR-10, PGDaccuracy (%): 46.25 -> 41.31Hurt
Replace soft ranking-based distribution with uniform random assignment (ablation)iGAT_ADP · CIFAR-10, PGDaccuracy (%): 46.25 -> 42.60Hurt
Replace soft probabilistic distribution with hard assignment (ablation)iGAT_ADP · CIFAR-10, PGDaccuracy (%): 46.25 -> 44.21Hurt
Remove misclassification regularization (ablation)iGAT_ADP · CIFAR-10, PGDaccuracy (%): 46.25 -> 42.32Hurt

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy