Torchattacks: A PyTorch Repository for Adversarial Attacks
Not on the map. Why?
Abstract (arXiv)
Torchattacks is a PyTorch library that contains adversarial attacks to generate adversarial examples and to verify the robustness of deep learning models. The code can be found at https://github.com/Harry24k/adversarial-attacks-pytorch.
Key facts. Cited by 156 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Sep 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 26; 2023: 41; 2024: 36; 2025: 24; 2026: 15.
156 papers.
Sort:
By area:
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attackscited by 89
- 2023AntifakePrompt: Prompt-Tuned Vision-Language Models are Fake Image Detectorscited by 64
- 2022LyaNet: A Lyapunov Framework for Training Neural ODEscited by 43
- 2023Data Augmentation Alone Can Improve Adversarial Trainingcited by 43
- 2024Elucidating the Design Space of Dataset Condensationcited by 40
- 2023BiRT: Bio-inspired Replay in Vision Transformers for Continual Learningcited by 25
- 2024On the Duality Between Sharpness-Aware Minimization and Adversarial Trainingcited by 24
- 2022Out-Of-Distribution Detection Is Not All You Needcited by 23
- 2022You Only Cut Once: Boosting Data Augmentation with a Single Cutcited by 22
- 2022Understanding and Combating Robust Overfitting via Input Loss Landscape Analysis and Regularizationcited by 22
- 2024TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Modelscited by 22
- 2022Pixle: a fast and effective black-box attack based on rearranging pixelscited by 20
38 more
- 2025FreezeVLA: Action-Freezing Attacks against Vision-Language-Action Modelscited by 19
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2021k-Mixup Regularization for Deep Learning via Optimal Transportcited by 14
- 2023Differentially Private Sharpness-Aware Trainingcited by 14
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examplescited by 14
- 2021Adversarial Visual Robustness by Causal Interventioncited by 13
- 2021Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistencycited by 12
- 2024Scaling Laws for Task-Optimized Models of the Primate Visual Ventral Streamcited by 12
- 2021Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attackscited by 11
- 2023Projected Randomized Smoothing for Certified Adversarial Robustnesscited by 11
- 2023Improving Adversarial Transferability via Model Alignmentcited by 10
- 2024Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imagingcited by 10
- 2021Benchmarking the Accuracy and Robustness of Feedback Alignment Algorithmscited by 9
- 2023Exploring the Effect of Multi-step Ascent in Sharpness-Aware Minimizationcited by 9
- 2023DeepfakeArt Challenge: A Benchmark Dataset for Generative AI Art Forgery and Data Poisoning Detectioncited by 9
- 2021Well-classified Examples are Underestimated in Classification with Deep Neural Networkscited by 8
- 2022Understanding the effect of sparsity on neural networks robustnesscited by 8
- 2022Adversarial Purification with the Manifold Hypothesiscited by 8
- 2024Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimizationcited by 8
- 2023Adversarially Robust Spiking Neural Networks Through Conversioncited by 7
- 2024LoRID: Low-Rank Iterative Diffusion for Adversarial Purificationcited by 7
- 2022FedDef: Defense Against Gradient Leakage in Federated Learning-based Network Intrusion Detection Systemscited by 6
- 2023New Adversarial Image Detection Based on Sentiment Analysiscited by 6
- 2023Causality-Aided Trade-off Analysis for Machine Learning Fairnesscited by 6
- 2023Frequency Domain Adversarial Training for Robust Volumetric Medical Segmentationcited by 6
- 2023Assessing Robustness via Score-Based Adversarial Image Generationcited by 6
- 2023Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairlycited by 6
- 2021All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelinescited by 5
- 2022Exact Spectral Norm Regularization for Neural Networkscited by 5
- 2022Fairness Increases Adversarial Vulnerabilitycited by 5
- 2023Improved Adversarial Training Through Adaptive Instance-wise Loss Smoothingcited by 5
- 2023Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferabilitycited by 5
- 2024AnyPattern: Towards In-context Image Copy Detectioncited by 5
- 2024Improving the Transferability of Adversarial Examples by Feature Augmentationcited by 5
- 2025NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusioncited by 5
- 2022Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINOcited by 4
- 2022Understanding Adversarial Robustness of Vision Transformers via Cauchy Problemcited by 4
- 2023GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Taskscited by 4
50 most cited of 156 All 156 (JSON)
- 2026SAM-on-the-Curve: Sharpness-Aware Mode Connectivity for Robust Weight-Space Interpolation15 Sep 2026
- 2026Neuron Activation-based Computation of Logical Explanations for Deep Neural Networks12 Sep 2026
- 2026Test Case Prioritization for DNNs via Neural Collapse Instability22 Jul 2026
- 2026A Classifier-Agnostic Zero-Shot Adversarial Attack Detection via CLIP29 Jun 2026
- 2026The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks21 Jun 2026
- 2026Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models4 Jun 2026
- 2026A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs1 Jun 2026
- 2026Updating the standard neuron model in artificial neural networks19 May 2026
- 2026TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models17 May 2026
- 2026Low Rank Adaptation for Adversarial Perturbation30 Apr 2026
- 2026QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuits13 Apr 2026
- 2026Emotion Diffusion Classifier with Adaptive Margin Discrepancy Training for Facial Expression Recognition31 Mar 2026
38 more
- 2026A Comparative Study of Adversarial Robustness in CNN and CNN-ANFIS Architectures2 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026Deepfake detectors are DUMB: A benchmark to assess adversarial training robustness under transferability constraints9 Jan 2026
- 2025Multi-Layer Confidence Scoring for Detection of Out-of-Distribution Samples, Adversarial Attacks, and In-Distribution Misclassifications22 Dec 2025
- 2025Optimizing Distributional Geometry Alignment with Optimal Transport for Generative Dataset Distillation29 Nov 2025
- 2025H-SPLID: HSIC-based Saliency Preserving Latent Information Decomposition23 Oct 2025
- 2025Learning Aligned Stability in Neural ODEs Reconciling Accuracy with Robustness26 Sep 2025
- 2025Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuits24 Sep 2025
- 2025FreezeVLA: Action-Freezing Attacks against Vision-Language-Action Models24 Sep 2025
- 2025A Modern Look at Simplicity Bias in Image Classification Tasks13 Sep 2025
- 2025FedAPT: Federated Adversarial Prompt Tuning for Vision-Language Models3 Sep 2025
- 2025Sharpness-Aware Geometric Defense for Robust Out-Of-Distribution Detection24 Aug 2025
- 2025DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples18 Aug 2025
- 2025Canonical Latent Representations in Conditional Diffusion Models11 Jun 2025
- 2025NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion27 May 2025
- 2025FlowPure: Continuous Normalizing Flows for Adversarial Purification19 May 2025
- 2025How to Backdoor Image Knowledge Distillation30 Apr 2025
- 2025Human Aligned Compression for Robust Models16 Apr 2025
- 2025Beyond Accuracy: What Matters in Designing Well-Behaved Image Classification Models?21 Mar 2025
- 2025On the Robustness Tradeoff in Fine-Tuning19 Mar 2025
- 2025Robustness Tokens: Towards Adversarial Robustness of Transformers13 Mar 2025
- 2025LLM-Safety Evaluations Lack Robustness4 Mar 2025
- 2025Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability24 Feb 2025
- 2025Alignment and Adversarial Robustness: Are More Human-Like Models More Secure?17 Feb 2025
- 2025PAR-AdvGAN: Improving Adversarial Attack Capability with Progressive Auto-Regression AdvGAN16 Feb 2025
- 2025Topological Signatures of Adversaries in Multimodal Alignments29 Jan 2025
- 2025Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges27 Jan 2025
- 2024RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses30 Dec 2024
- 2024Adversarial Robustness of Bottleneck Injected Deep Neural Networks for Task-Oriented Communication13 Dec 2024
- 2024TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models20 Nov 2024
- 2024BEARD: Benchmarking the Adversarial Robustness for Dataset Distillation14 Nov 2024
- 2024Scaling Laws for Task-Optimized Models of the Primate Visual Ventral Stream8 Nov 2024
- 2024Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging7 Nov 2024
- 2024Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimization6 Nov 2024
- 2024Complexity Matters: Effective Dimensionality as a Measure for Adversarial Robustness24 Oct 2024
- 2024Low-Rank Adversarial PGD Attack16 Oct 2024
- 2024Towards Generalized Certified Robustness with Multi-Norm Training3 Oct 2024
- 2024Improving Fast Adversarial Training via Self-Knowledge Guidance26 Sep 2024
50 newest of 156 All 156 (JSON)
- 2024LoRID: Low-Rank Iterative Diffusion for Adversarial Purificationcited by 7
- 2023DiffDefense: Defending against Adversarial Attacks via Diffusion Modelscited by 2
- 2024Deceptive Diffusion: Generating Synthetic Adversarial Examplescited by 2
- 2025FlowPure: Continuous Normalizing Flows for Adversarial Purificationcited by 2
- 2024Ablation Based Counterfactualscited by 1
- 2025Canonical Latent Representations in Conditional Diffusion Modelscited by 0
- 2026Emotion Diffusion Classifier with Adaptive Margin Discrepancy Training for Facial Expression Recognitioncited by 0
- 2026Emotion Diffusion Classifier with Adaptive Margin Discrepancy Training for Facial Expression Recognition31 Mar 2026
- 2025Canonical Latent Representations in Conditional Diffusion Models11 Jun 2025
- 2025FlowPure: Continuous Normalizing Flows for Adversarial Purification19 May 2025
- 2024LoRID: Low-Rank Iterative Diffusion for Adversarial Purification12 Sep 2024
- 2024Deceptive Diffusion: Generating Synthetic Adversarial Examples28 Jun 2024
- 2024Ablation Based Counterfactuals12 Jun 2024
- 2023DiffDefense: Defending against Adversarial Attacks via Diffusion Models7 Sep 2023
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attackscited by 89
- 2023AntifakePrompt: Prompt-Tuned Vision-Language Models are Fake Image Detectorscited by 64
- 2024TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Modelscited by 22
- 2025FedAPT: Federated Adversarial Prompt Tuning for Vision-Language Modelscited by 1
- 2026Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Modelscited by 1
- 2026TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Modelscited by 0
- 2026Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models4 Jun 2026
- 2026TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models17 May 2026
- 2025FedAPT: Federated Adversarial Prompt Tuning for Vision-Language Models3 Sep 2025
- 2024TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models20 Nov 2024
- 2023On the Robustness of Large Multimodal Models Against Image Adversarial Attacks6 Dec 2023
- 2023AntifakePrompt: Prompt-Tuned Vision-Language Models are Fake Image Detectors26 Oct 2023
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2023Improving Adversarial Transferability via Model Alignmentcited by 10
- 2025LLM-Safety Evaluations Lack Robustness4 Mar 2025
- 2023Improving Adversarial Transferability via Model Alignment30 Nov 2023
- 2022LyaNet: A Lyapunov Framework for Training Neural ODEscited by 43
- 2023Data Augmentation Alone Can Improve Adversarial Trainingcited by 43
- 2024Elucidating the Design Space of Dataset Condensationcited by 40
- 2023BiRT: Bio-inspired Replay in Vision Transformers for Continual Learningcited by 25
- 2024On the Duality Between Sharpness-Aware Minimization and Adversarial Trainingcited by 24
- 2022Out-Of-Distribution Detection Is Not All You Needcited by 23
- 2022You Only Cut Once: Boosting Data Augmentation with a Single Cutcited by 22
- 2022Understanding and Combating Robust Overfitting via Input Loss Landscape Analysis and Regularizationcited by 22
- 2022Pixle: a fast and effective black-box attack based on rearranging pixelscited by 20
- 2021k-Mixup Regularization for Deep Learning via Optimal Transportcited by 14
- 2023Differentially Private Sharpness-Aware Trainingcited by 14
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examplescited by 14
12 most cited of 137 All 137 (JSON)
- 2026SAM-on-the-Curve: Sharpness-Aware Mode Connectivity for Robust Weight-Space Interpolation15 Sep 2026
- 2026Neuron Activation-based Computation of Logical Explanations for Deep Neural Networks12 Sep 2026
- 2026Test Case Prioritization for DNNs via Neural Collapse Instability22 Jul 2026
- 2026A Classifier-Agnostic Zero-Shot Adversarial Attack Detection via CLIP29 Jun 2026
- 2026The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks21 Jun 2026
- 2026A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs1 Jun 2026
- 2026Updating the standard neuron model in artificial neural networks19 May 2026
- 2026Low Rank Adaptation for Adversarial Perturbation30 Apr 2026
- 2026QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuits13 Apr 2026
- 2026A Comparative Study of Adversarial Robustness in CNN and CNN-ANFIS Architectures2 Feb 2026
- 2026Deepfake detectors are DUMB: A benchmark to assess adversarial training robustness under transferability constraints9 Jan 2026
- 2025Multi-Layer Confidence Scoring for Detection of Out-of-Distribution Samples, Adversarial Attacks, and In-Distribution Misclassifications22 Dec 2025
12 newest of 137 All 137 (JSON)