Evaluating Robustness of Deep Image Super-Resolution against Adversarial Attacks
Not on the map. Why?
Abstract (arXiv)
Single-image super-resolution aims to generate a high-resolution version of a low-resolution image, which serves as an essential component in many computer vision applications. This paper investigates the robustness of deep learning-based super-resolution methods against adversarial attacks, which can significantly deteriorate the super-resolved images without noticeable distortion in the attacked low-resolution images. It is demonstrated that state-of-the-art deep super-resolution methods are highly vulnerable to adversarial attacks. Different levels of robustness of different methods are analyzed theoretically and experimentally. We also present analysis on transferability of attacks, and feasibility of targeted attacks and universal attacks.
Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). First posted on arXiv 12 Apr 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 10; 2022: 9; 2023: 7; 2024: 6; 2025: 4; 2026: 1.
37 papers.
Sort:
By area:
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyondcited by 48
- 2021Fast Certified Robust Training with Short Warmupcited by 45
- 2022Imaging through the Atmosphere using Turbulence Mitigation Transformercited by 31
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
- 2023Physics-Driven Turbulence Image Restoration with Stochastic Refinementcited by 24
- 2022CaDM: Codec-aware Diffusion Modeling for Neural-enhanced Video Streamingcited by 23
- 2022Learning to Immunize Images for Tamper Localization and Self-Recoverycited by 19
- 2021Center Smoothing: Certified Robustness for Networks with Structured Outputscited by 18
- 2022Towards Adversarially Robust Deep Image Denoisingcited by 13
- 2022Reasons for the Superiority of Stochastic Estimators over Deterministic Ones: Robustness, Consistency and Perceptual Qualitycited by 13
25 more
- 2021From Image to Imuge: Immunized Image Generationcited by 11
- 2022Robust Real-World Image Super-Resolution against Adversarial Attackscited by 11
- 2023On the unreasonable vulnerability of transformers for image restoration -- and an easy fixcited by 11
- 2021Generalized Real-World Super-Resolution through Adversarial Robustnesscited by 9
- 2021Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attackscited by 8
- 2021RAILS: A Robust Adversarial Immune-inspired Learning Systemcited by 8
- 2023Learning Provably Robust Estimators for Inverse Problems via Jitteringcited by 8
- 2022On Adversarial Robustness of Deep Image Deblurringcited by 7
- 2023The Perception-Robustness Tradeoff in Deterministic Image Restorationcited by 7
- 2024Towards Robust Image Stitching: An Adaptive Resistance Learning against Compatible Attackscited by 6
- 2023Adversarial Robustness in Unsupervised Machine Learning: A Systematic Reviewcited by 3
- 2025Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolutioncited by 3
- 2024Perceptual Fairness in Image Restorationcited by 2
- 2023Inter-frame Accelerate Attack against Video Interpolation Modelscited by 1
- 2024Evaluating Adversarial Robustness of Low dose CT Recoverycited by 1
- 2024Robustness and Exploration of Variational and Machine Learning Approaches to Inverse Problems: An Overviewcited by 1
- 2024Universal Robustness via Median Randomized Smoothing for Real-World Super-Resolutioncited by 1
- 2025Quaternion-Hadamard Network: A Novel Defense Against Adversarial Attacks with a New Datasetcited by 1
- 2025BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolutioncited by 1
- 2021Kernel Adversarial Learning for Real-world Image Super-resolutioncited by 0
- 2022Robust Unpaired Single Image Super-Resolution of Facescited by 0
- 2023When Measures are Unreliable: Imperceptible Adversarial Perturbations toward Top-k Multi-Label Learningcited by 0
- 2024Adversarial Purification and Fine-tuning for Robust UDC Image Restorationcited by 0
- 2025On Inverse Problems, Parameter Estimation, and Domain Generalizationcited by 0
- 2026RefSR-Adv: Adversarial Attack on Reference-based Image Super-Resolution Modelscited by 0
- 2026RefSR-Adv: Adversarial Attack on Reference-based Image Super-Resolution Models3 Jan 2026
- 2025On Inverse Problems, Parameter Estimation, and Domain Generalization6 Jun 2025
- 2025BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolution21 May 2025
- 2025Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution6 Mar 2025
- 2025Quaternion-Hadamard Network: A Novel Defense Against Adversarial Attacks with a New Dataset12 Feb 2025
- 2024Universal Robustness via Median Randomized Smoothing for Real-World Super-Resolution23 May 2024
- 2024Perceptual Fairness in Image Restoration22 May 2024
- 2024Towards Robust Image Stitching: An Adaptive Resistance Learning against Compatible Attacks25 Feb 2024
- 2024Adversarial Purification and Fine-tuning for Robust UDC Image Restoration21 Feb 2024
- 2024Robustness and Exploration of Variational and Machine Learning Approaches to Inverse Problems: An Overview19 Feb 2024
- 2024Evaluating Adversarial Robustness of Low dose CT Recovery18 Feb 2024
- 2023The Perception-Robustness Tradeoff in Deterministic Image Restoration14 Nov 2023
25 more
- 2023When Measures are Unreliable: Imperceptible Adversarial Perturbations toward Top-k Multi-Label Learning27 Jul 2023
- 2023On the unreasonable vulnerability of transformers for image restoration -- and an easy fix25 Jul 2023
- 2023Learning Provably Robust Estimators for Inverse Problems via Jittering24 Jul 2023
- 2023Physics-Driven Turbulence Image Restoration with Stochastic Refinement20 Jul 2023
- 2023Adversarial Robustness in Unsupervised Machine Learning: A Systematic Review1 Jun 2023
- 2023Inter-frame Accelerate Attack against Video Interpolation Models11 May 2023
- 2022Reasons for the Superiority of Stochastic Estimators over Deterministic Ones: Robustness, Consistency and Perceptual Quality16 Nov 2022
- 2022CaDM: Codec-aware Diffusion Modeling for Neural-enhanced Video Streaming15 Nov 2022
- 2022Learning to Immunize Images for Tamper Localization and Self-Recovery28 Oct 2022
- 2022On Adversarial Robustness of Deep Image Deblurring5 Oct 2022
- 2022Robust Real-World Image Super-Resolution against Adversarial Attacks31 Jul 2022
- 2022Imaging through the Atmosphere using Turbulence Mitigation Transformer13 Jul 2022
- 2022Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond31 Mar 2022
- 2022Robust Unpaired Single Image Super-Resolution of Faces22 Jan 2022
- 2022Towards Adversarially Robust Deep Image Denoising12 Jan 2022
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning16 Dec 2021
- 2021From Image to Imuge: Immunized Image Generation27 Oct 2021
- 2021Generalized Real-World Super-Resolution through Adversarial Robustness25 Aug 2021
- 2021Advances in adversarial attacks and defenses in computer vision: A survey1 Aug 2021
- 2021RAILS: A Robust Adversarial Immune-inspired Learning System27 Jun 2021
- 2021Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks30 Apr 2021
- 2021Kernel Adversarial Learning for Real-world Image Super-resolution19 Apr 2021
- 2021Fast Certified Robust Training with Short Warmup31 Mar 2021
- 2021Center Smoothing: Certified Robustness for Networks with Structured Outputs19 Feb 2021
- 2021Recent Advances in Adversarial Training for Adversarial Robustness2 Feb 2021
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2022Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyondcited by 48
- 2021Fast Certified Robust Training with Short Warmupcited by 45
- 2022Imaging through the Atmosphere using Turbulence Mitigation Transformercited by 31
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
- 2023Physics-Driven Turbulence Image Restoration with Stochastic Refinementcited by 24
- 2022Learning to Immunize Images for Tamper Localization and Self-Recoverycited by 19
- 2021Center Smoothing: Certified Robustness for Networks with Structured Outputscited by 18
- 2022Towards Adversarially Robust Deep Image Denoisingcited by 13
- 2022Reasons for the Superiority of Stochastic Estimators over Deterministic Ones: Robustness, Consistency and Perceptual Qualitycited by 13
- 2021From Image to Imuge: Immunized Image Generationcited by 11
12 most cited of 36 All 36 (JSON)
- 2026RefSR-Adv: Adversarial Attack on Reference-based Image Super-Resolution Models3 Jan 2026
- 2025On Inverse Problems, Parameter Estimation, and Domain Generalization6 Jun 2025
- 2025BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolution21 May 2025
- 2025Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution6 Mar 2025
- 2025Quaternion-Hadamard Network: A Novel Defense Against Adversarial Attacks with a New Dataset12 Feb 2025
- 2024Universal Robustness via Median Randomized Smoothing for Real-World Super-Resolution23 May 2024
- 2024Perceptual Fairness in Image Restoration22 May 2024
- 2024Towards Robust Image Stitching: An Adaptive Resistance Learning against Compatible Attacks25 Feb 2024
- 2024Adversarial Purification and Fine-tuning for Robust UDC Image Restoration21 Feb 2024
- 2024Robustness and Exploration of Variational and Machine Learning Approaches to Inverse Problems: An Overview19 Feb 2024
- 2024Evaluating Adversarial Robustness of Low dose CT Recovery18 Feb 2024
- 2023The Perception-Robustness Tradeoff in Deterministic Image Restoration14 Nov 2023
12 newest of 36 All 36 (JSON)