Learning with a Strong Adversary
Not on the map. Why?
Abstract (arXiv)
The robustness of neural networks to intended perturbations has recently attracted significant attention. In this paper, we propose a new method, learning with a strong adversary, that learns robust classifiers from supervised data. The proposed method takes finding adversarial examples as an intermediate step. A new and simple way of finding adversarial examples is presented and experimentally shown to be efficient. Experimental results demonstrate that resulting learning method greatly improves the robustness of the classification models produced.
Key facts. Cited by 68 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Nov 2015.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 27; 2022: 18; 2023: 13; 2024: 6; 2025: 4.
68 papers.
Sort:
By area:
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2021Partial success in closing the gap between human and machine visioncited by 185
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2021Relating Adversarially Robust Generalization to Flat Minimacited by 57
- 2021Constrained Learning with Non-Convex Lossescited by 42
- 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
- 2021A Review of Formal Methods applied to Machine Learningcited by 33
- 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
- 2021The Role of Explainability in Assuring Safety of Machine Learning in Healthcarecited by 26
- 2021Adversarial Attacks on Deep Models for Financial Transaction Recordscited by 24
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
38 more
- 2022Fairify: Fairness Verification of Neural Networkscited by 22
- 2022Pixle: a fast and effective black-box attack based on rearranging pixelscited by 20
- 2023Regularization properties of adversarially-trained linear regressioncited by 17
- 2022Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Trainingcited by 15
- 2021Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfittingcited by 14
- 2021A Person Re-identification Data Augmentation Method with Adversarial Defense Effectcited by 13
- 2023Adversarial Training Should Be Cast as a Non-Zero-Sum Gamecited by 13
- 2022Analysis and Extensions of Adversarial Training for Video Classificationcited by 11
- 2021Morphence: Moving Target Defense Against Adversarial Examplescited by 9
- 2021Perceptually Constrained Adversarial Attackscited by 7
- 2021Adversarial Learning with Cost-Sensitive Classescited by 6
- 2021Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practicecited by 6
- 2021Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Acceleratorscited by 6
- 2021Towards Adversarial Patch Analysis and Certified Defense against Crowd Countingcited by 6
- 2023Optimization and Optimizers for Adversarial Robustnesscited by 6
- 2023Aux-Drop: Handling Haphazard Inputs in Online Learning Using Auxiliary Dropoutscited by 5
- 2025Adversarial Training for Defense Against Label Poisoning Attackscited by 5
- 2021Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptionscited by 4
- 2021Practical Convex Formulation of Robust One-hidden-layer Neural Network Trainingcited by 4
- 2022Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundariescited by 4
- 2023Input margins can predict generalization toocited by 4
- 2024AMA-LSTM: Pioneering Robust and Fair Financial Audio Analysis for Stock Volatility Predictioncited by 4
- 2021Towards Speeding up Adversarial Training in Latent Spacescited by 3
- 2021Adversarial Robustness Study of Convolutional Neural Network for Lumbar Disk Shape Reconstruction from MR imagescited by 3
- 2022Learning Less Generalizable Patterns with an Asymmetrically Trained Double Classifier for Better Test-Time Adaptationcited by 3
- 2021Simpler Certified Radius Maximization by Propagating Covariancescited by 2
- 2022Memory Defense: More Robust Classification via a Memory-Masking Autoencodercited by 2
- 2022Rethinking Machine Learning Robustness via its Link with the Out-of-Distribution Problemcited by 2
- 2022Adversarial Fine-tune with Dynamically Regulated Adversarycited by 2
- 2022Surprises in adversarially-trained linear regressioncited by 2
- 2022Morphence-2.0: Evasion-Resilient Moving Target Defense Powered by Out-of-Distribution Detectioncited by 2
- 2024Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Modelscited by 2
- 2021Improving Adversarial Robustness for Free with Snapshot Ensemblecited by 1
- 2021Quantifying and Understanding Adversarial Examples in Discrete Input Spacescited by 1
- 2021Robust Upper Bounds for Adversarial Trainingcited by 1
- 2022Downlink Power Allocation in Massive MIMO via Deep Learning: Adversarial Attacks and Trainingcited by 1
- 2022On the Relationship Between Adversarial Robustness and Decision Region in Deep Neural Networkscited by 1
- 2022Provable Robust Saliency-based Explanationscited by 1
50 most cited of 68 All 68 (JSON)
- 2025A New Type of Adversarial Examples22 Oct 2025
- 2025Robustifying Diffusion-Denoised Smoothing Against Covariate Shift13 Sep 2025
- 2025A stochastic smoothing framework for nonconvex-nonconcave minEmax problems with applications to Wasserstein distributionally robust optimization24 Feb 2025
- 2025Adversarial Training for Defense Against Label Poisoning Attacks24 Feb 2025
- 2024Adversarially robust generalization theory via Jacobian regularization for deep neural networks17 Dec 2024
- 2024Err on the Side of Texture: Texture Bias on Real Data13 Dec 2024
- 2024Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Models8 Oct 2024
- 2024OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack1 Aug 2024
- 2024AMA-LSTM: Pioneering Robust and Fair Financial Audio Analysis for Stock Volatility Prediction3 Jul 2024
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems11 Jan 2024
- 2023Towards Improving Robustness Against Common Corruptions in Object Detectors Using Adversarial Contrastive Learning14 Nov 2023
- 2023Regularization properties of adversarially-trained linear regression16 Oct 2023
38 more
- 2023Input margins can predict generalization too29 Aug 2023
- 2023Can We Rely on AI?29 Aug 2023
- 2023A reading survey on adversarial machine learning: Adversarial attacks and their understanding7 Aug 2023
- 2023Robust Ranking Explanations8 Jul 2023
- 2023Adversarial Training Should Be Cast as a Non-Zero-Sum Game19 Jun 2023
- 2023Adversarial Defenses via Vector Quantization23 May 2023
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses18 May 2023
- 2023Adversarial Amendment is the Only Force Capable of Transforming an Enemy into a Friend18 May 2023
- 2023Improving Defensive Distillation using Teacher Assistant14 May 2023
- 2023Optimization and Optimizers for Adversarial Robustness23 Mar 2023
- 2023Aux-Drop: Handling Haphazard Inputs in Online Learning Using Auxiliary Dropouts9 Mar 2023
- 2022Provable Robust Saliency-based Explanations28 Dec 2022
- 2022Fairify: Fairness Verification of Neural Networks8 Dec 2022
- 2022Learning Less Generalizable Patterns with an Asymmetrically Trained Double Classifier for Better Test-Time Adaptation17 Oct 2022
- 2022A Novel Plug-and-Play Approach for Adversarially Robust Generalization19 Aug 2022
- 2022Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries18 Aug 2022
- 2022On the Relationship Between Adversarial Robustness and Decision Region in Deep Neural Networks7 Jul 2022
- 2022Analysis and Extensions of Adversarial Training for Video Classification16 Jun 2022
- 2022Morphence-2.0: Evasion-Resilient Moving Target Defense Powered by Out-of-Distribution Detection15 Jun 2022
- 2022Downlink Power Allocation in Massive MIMO via Deep Learning: Adversarial Attacks and Training14 Jun 2022
- 2022Surprises in adversarially-trained linear regression25 May 2022
- 2022Adversarial Fine-tune with Dynamically Regulated Adversary28 Apr 2022
- 2022Adversarial Patterns: Building Robust Android Malware Classifiers4 Mar 2022
- 2022Learning Representations Robust to Group Shifts and Adversarial Examples18 Feb 2022
- 2022Rethinking Machine Learning Robustness via its Link with the Out-of-Distribution Problem18 Feb 2022
- 2022Adversarial Attacks and Defense Methods for Power Quality Recognition11 Feb 2022
- 2022Memory Defense: More Robust Classification via a Memory-Masking Autoencoder5 Feb 2022
- 2022Pixle: a fast and effective black-box attack based on rearranging pixels4 Feb 2022
- 2022Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Training6 Jan 2022
- 2021Robust Upper Bounds for Adversarial Training17 Dec 2021
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning16 Dec 2021
- 2021Quantifying and Understanding Adversarial Examples in Discrete Input Spaces12 Dec 2021
- 2021Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting7 Oct 2021
- 2021Improving Adversarial Robustness for Free with Snapshot Ensemble7 Oct 2021
- 2021The Role of Explainability in Assuring Safety of Machine Learning in Healthcare1 Sep 2021
- 2021Morphence: Moving Target Defense Against Adversarial Examples31 Aug 2021
- 2021Adversarial Attacks on Deep Models for Financial Transaction Records15 Jun 2021
- 2021Partial success in closing the gap between human and machine vision14 Jun 2021
50 newest of 68 All 68 (JSON)
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2021Partial success in closing the gap between human and machine visioncited by 185
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2021Relating Adversarially Robust Generalization to Flat Minimacited by 57
- 2021Constrained Learning with Non-Convex Lossescited by 42
- 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
- 2021A Review of Formal Methods applied to Machine Learningcited by 33
- 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
- 2021The Role of Explainability in Assuring Safety of Machine Learning in Healthcarecited by 26
- 2021Adversarial Attacks on Deep Models for Financial Transaction Recordscited by 24
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
12 most cited of 67 All 67 (JSON)
- 2025A New Type of Adversarial Examples22 Oct 2025
- 2025A stochastic smoothing framework for nonconvex-nonconcave minEmax problems with applications to Wasserstein distributionally robust optimization24 Feb 2025
- 2025Adversarial Training for Defense Against Label Poisoning Attacks24 Feb 2025
- 2024Adversarially robust generalization theory via Jacobian regularization for deep neural networks17 Dec 2024
- 2024Err on the Side of Texture: Texture Bias on Real Data13 Dec 2024
- 2024Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Models8 Oct 2024
- 2024OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack1 Aug 2024
- 2024AMA-LSTM: Pioneering Robust and Fair Financial Audio Analysis for Stock Volatility Prediction3 Jul 2024
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems11 Jan 2024
- 2023Towards Improving Robustness Against Common Corruptions in Object Detectors Using Adversarial Contrastive Learning14 Nov 2023
- 2023Regularization properties of adversarially-trained linear regression16 Oct 2023
- 2023Input margins can predict generalization too29 Aug 2023
12 newest of 67 All 67 (JSON)