Adversarial Examples in Modern Machine Learning: A Review
Not on the map. Why?
Abstract (arXiv)
Recent research has found that many families of machine learning models are vulnerable to adversarial examples: inputs that are specifically designed to cause the target model to produce erroneous outputs. In this survey, we focus on machine learning models in the visual domain, where methods for generating and detecting such examples have been most extensively studied. We explore a variety of adversarial attack methods that apply to image-space content, real world adversarial attacks, adversarial defenses, and the transferability property of adversarial examples. We also discuss strengths and weaknesses of various methods of adversarial attack and defense. Our aim is to provide an extensive coverage of the field, furnishing the reader with an intuitive understanding of the mechanics of adversarial attack and defense mechanisms and enlarging the community of researchers studying this fundamental set of problems.
Key facts. Cited by 36 papers in the map (data through 14 Oct 2026). First posted on arXiv 13 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 9; 2022: 9; 2023: 10; 2024: 5; 2025: 0; 2026: 3.
36 papers.
Sort:
By area:
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 279
- 2022A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologiescited by 44
- 2023A Survey on Transferability of Adversarial Examples across Deep Neural Networkscited by 44
- 2022Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overviewcited by 37
- 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 25
- 2024Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Basescited by 18
- 2021Physically Consistent Neural Networks for building thermal modeling: theory and analysiscited by 17
- 2021Security and Privacy for Artificial Intelligence: Opportunities and Challengescited by 16
- 2023Physical Adversarial Attacks for Surveillance: A Surveycited by 15
- 2022On the Robustness of Bayesian Neural Networks to Adversarial Attackscited by 12
- 2023SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detectioncited by 10
- 2023Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Surveycited by 5
24 more
- 2021EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attackscited by 4
- 2024A Comprehensive Survey on the Security of Smart Grid: Challenges, Mitigations, and Future Research Opportunitiescited by 4
- 2021Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoisingcited by 3
- 2023Review on the Feasibility of Adversarial Evasion Attacks and Defenses for Network Intrusion Detection Systemscited by 3
- 2023AdvFAS: A robust face anti-spoofing framework against adversarial examplescited by 3
- 2024Arabic Synonym BERT-based Adversarial Examples for Text Classificationcited by 3
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Renderingcited by 3
- 2021Comparison of semi-supervised deep learning algorithms for audio classificationcited by 2
- 2023Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Trainingcited by 2
- 2021Localized Uncertainty Attackscited by 1
- 2021Improving Adversarial Robustness for Free with Snapshot Ensemblecited by 1
- 2022An Exploration of How Training Set Composition Bias in Machine Learning Affects Identifying Rare Objectscited by 1
- 2022An Overview and Prospective Outlook on Robust Training and Certification of Machine Learning Modelscited by 1
- 2023The Pros and Cons of Adversarial Robustnesscited by 1
- 2024ADAPT: A Game-Theoretic and Neuro-Symbolic Framework for Automated Distributed Adaptive Penetration Testingcited by 1
- 2021BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attackscited by 0
- 2022Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classificationcited by 0
- 2022Detecting and Recovering Adversarial Examples from Extracting Non-robust and Highly Predictive Adversarial Perturbationscited by 0
- 2022A study on the deviations in performance of FNNs and CNNs in the realm of grayscale adversarial imagescited by 0
- 2023Human-Imperceptible Identification with Learnable Lensless Imagingcited by 0
- 2023From text to multimodal: a survey of adversarial example generation in question answering systemscited by 0
- 2026Generating adversarial inputs for a graph neural network model of AC power flowcited by 0
- 2026Evaluation of Adversarial Robustness in Arabic Language Modelscited by 0
- 2026Correcting Learning-based Perception for Safetycited by 0
- 2026Correcting Learning-based Perception for Safety16 Aug 2026
- 2026Evaluation of Adversarial Robustness in Arabic Language Models28 Jul 2026
- 2026Generating adversarial inputs for a graph neural network model of AC power flow20 Feb 2026
- 2024Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases24 Dec 2024
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering14 Nov 2024
- 2024ADAPT: A Game-Theoretic and Neuro-Symbolic Framework for Automated Distributed Adaptive Penetration Testing31 Oct 2024
- 2024A Comprehensive Survey on the Security of Smart Grid: Challenges, Mitigations, and Future Research Opportunities10 Jul 2024
- 2024Arabic Synonym BERT-based Adversarial Examples for Text Classification5 Feb 2024
- 2023From text to multimodal: a survey of adversarial example generation in question answering systems26 Dec 2023
- 2023The Pros and Cons of Adversarial Robustness18 Dec 2023
- 2023A Survey on Transferability of Adversarial Examples across Deep Neural Networks26 Oct 2023
- 2023SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection13 Aug 2023
24 more
- 2023AdvFAS: A robust face anti-spoofing framework against adversarial examples4 Aug 2023
- 2023Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey1 Jul 2023
- 2023Physical Adversarial Attacks for Surveillance: A Survey1 May 2023
- 2023Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Training11 Apr 2023
- 2023Review on the Feasibility of Adversarial Evasion Attacks and Defenses for Network Intrusion Detection Systems13 Mar 2023
- 2023Human-Imperceptible Identification with Learnable Lensless Imaging4 Feb 2023
- 2022A Survey on Physical Adversarial Attack in Computer Vision28 Sep 2022
- 2022A study on the deviations in performance of FNNs and CNNs in the realm of grayscale adversarial images17 Sep 2022
- 2022An Overview and Prospective Outlook on Robust Training and Certification of Machine Learning Models15 Aug 2022
- 2022On the Robustness of Bayesian Neural Networks to Adversarial Attacks13 Jul 2022
- 2022An Exploration of How Training Set Composition Bias in Machine Learning Affects Identifying Rare Objects7 Jul 2022
- 2022Detecting and Recovering Adversarial Examples from Extracting Non-robust and Highly Predictive Adversarial Perturbations30 Jun 2022
- 2022Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overview15 Jun 2022
- 2022A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies26 Mar 2022
- 2022Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification11 Mar 2022
- 2021Physically Consistent Neural Networks for building thermal modeling: theory and analysis6 Dec 2021
- 2021Improving Adversarial Robustness for Free with Snapshot Ensemble7 Oct 2021
- 2021Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising12 Jul 2021
- 2021EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks12 Jul 2021
- 2021Localized Uncertainty Attacks17 Jun 2021
- 2021BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attacks14 Mar 2021
- 2021Comparison of semi-supervised deep learning algorithms for audio classification16 Feb 2021
- 2021Security and Privacy for Artificial Intelligence: Opportunities and Challenges9 Feb 2021
- 2021Recent Advances in Adversarial Training for Adversarial Robustness2 Feb 2021
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 279
- 2022A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologiescited by 44
- 2023A Survey on Transferability of Adversarial Examples across Deep Neural Networkscited by 44
- 2022Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overviewcited by 37
- 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 25
- 2021Physically Consistent Neural Networks for building thermal modeling: theory and analysiscited by 17
- 2021Security and Privacy for Artificial Intelligence: Opportunities and Challengescited by 16
- 2023Physical Adversarial Attacks for Surveillance: A Surveycited by 15
- 2022On the Robustness of Bayesian Neural Networks to Adversarial Attackscited by 12
- 2023SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detectioncited by 10
- 2023Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Surveycited by 5
- 2021EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attackscited by 4
12 most cited of 35 All 35 (JSON)
- 2026Correcting Learning-based Perception for Safety16 Aug 2026
- 2026Evaluation of Adversarial Robustness in Arabic Language Models28 Jul 2026
- 2026Generating adversarial inputs for a graph neural network model of AC power flow20 Feb 2026
- 2024RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering14 Nov 2024
- 2024ADAPT: A Game-Theoretic and Neuro-Symbolic Framework for Automated Distributed Adaptive Penetration Testing31 Oct 2024
- 2024A Comprehensive Survey on the Security of Smart Grid: Challenges, Mitigations, and Future Research Opportunities10 Jul 2024
- 2024Arabic Synonym BERT-based Adversarial Examples for Text Classification5 Feb 2024
- 2023From text to multimodal: a survey of adversarial example generation in question answering systems26 Dec 2023
- 2023The Pros and Cons of Adversarial Robustness18 Dec 2023
- 2023A Survey on Transferability of Adversarial Examples across Deep Neural Networks26 Oct 2023
- 2023SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection13 Aug 2023
- 2023AdvFAS: A robust face anti-spoofing framework against adversarial examples4 Aug 2023
12 newest of 35 All 35 (JSON)