# A New Ensemble Adversarial Attack Powered by Long-term Gradient Memories

arXiv: https://arxiv.org/abs/1911.07682 · HTML: https://mlsanity.com/paper/1911.07682/

## Key facts

- Cited by 9 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 18 Nov 2019.

## Built on by (most cited first, 9 of 9)

- [Blackbox Attacks via Surrogate Ensemble Search](https://mlsanity.com/paper/2208.03610/) (2022)
- [Avengers Ensemble! Improving Transferability of Authorship Obfuscation](https://mlsanity.com/paper/2109.07028/) (2021)
- [Fast Adversarial Training with Noise Augmentation: A Unified Perspective on RandStart and GradAlign](https://mlsanity.com/paper/2202.05488/) (2022)
- [Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks](https://mlsanity.com/paper/2204.02887/) (2022)
- [Improving Adversarial Transferability with Scheduled Step Size and Dual Example](https://mlsanity.com/paper/2301.12968/) (2023)
- [Towards the Transferable Audio Adversarial Attack via Ensemble Methods](https://mlsanity.com/paper/2304.08811/) (2023)
- [Overcoming Adversarial Attacks for Human-in-the-Loop Applications](https://mlsanity.com/paper/2306.05952/) (2023)
- [Boosting Adversarial Transferability via Residual Perturbation Attack](https://mlsanity.com/paper/2508.05689/) (2025)
- [Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks](https://mlsanity.com/paper/2307.02828/) (2023)

## Abstract (arXiv)

Deep neural networks are vulnerable to adversarial attacks.