Optimism in the Face of Adversity: Understanding and Improving Deep Learning through Adversarial Robustness
Not on the map. Why?
Abstract (arXiv)
Driven by massive amounts of data and important advances in computational resources, new deep learning systems have achieved outstanding results in a large spectrum of applications. Nevertheless, our current theoretical understanding on the mathematical foundations of deep learning lags far behind its empirical success. Towards solving the vulnerability of neural networks, however, the field of adversarial robustness has recently become one of the main sources of explanations of our deep models. In this article, we provide an in-depth review of the field of adversarial robustness in deep learning, and give a self-contained introduction to its main notions. But, in contrast to the mainstream pessimistic perspective of adversarial robustness, we focus on the main positive aspects that it entails. We highlight the intuitive connection between adversarial examples and the geometry of deep neural networks, and eventually explore how the geometric study of adversarial examples can serve as a powerful tool to understand deep learning. Furthermore, we demonstrate the broad applicability of adversarial robustness, providing an overview of the main emerging applications of adversarial robustness beyond security. The goal of this article is to provide readers with a set of new perspectives to understand deep learning, and to supply them with intuitive tools and insights on how to use adversarial robustness to improve it.
Key facts. Cited by 28 papers in the map (data through 7 Oct 2026). First posted on arXiv 19 Oct 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 6; 2023: 9; 2024: 3; 2025: 2; 2026: 2.
28 papers.
Sort:
By area:
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 218
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2021Adversarial Example Detection for DNN Models: A Review and Experimental Comparisoncited by 51
- 2022On the benefits of knowledge distillation for adversarial robustnesscited by 17
- 2022Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defensecited by 14
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmeticcited by 14
- 2021Local Competition and Stochasticity for Adversarial Robustness in Deep Learningcited by 12
- 2023TransFool: An Adversarial Attack against Neural Machine Translation Modelscited by 12
- 2023Conditional Generative Models are Provably Robust: Pointwise Guarantees for Bayesian Inverse Problemscited by 12
- 2023Targeted Adversarial Attacks against Neural Machine Translationcited by 10
- 2021A neural anisotropic view of underspecification in deep learningcited by 6
- 2021Improving filling level classification with adversarial trainingcited by 5
16 more
- 2022Catastrophic overfitting can be induced with discriminative non-robust featurescited by 2
- 2025On the Interaction of Compressibility and Adversarial Robustnesscited by 2
- 2021Bio-inspired Robustness: A Reviewcited by 1
- 2021Simple black-box universal adversarial attacks on medical image classification based on deep neural networkscited by 1
- 2022Robustness and invariance properties of image classifierscited by 1
- 2023Adversarial training with informed data selectioncited by 1
- 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptionscited by 1
- 2023A Relaxed Optimization Approach for Adversarial Attacks against Neural Machine Translation Modelscited by 1
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATRcited by 1
- 2024S4ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attackcited by 1
- 2026Fortifying Time Series: DTW-Certified Robust Anomaly Detectioncited by 1
- 2022Adversarial Detection by Approximation of Ensemble Boundarycited by 0
- 2023A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inferencecited by 0
- 2023Revisiting and Advancing Adversarial Training Through A Simple Baselinecited by 0
- 2025Adversarial generalization of unfolding (model-based) networkscited by 0
- 2026Cross-Modal Attention Acts as a Frequency Filter: Why Verbose Prompts Improve Robustness in Vision-Language Modelscited by 0
- 2026Cross-Modal Attention Acts as a Frequency Filter: Why Verbose Prompts Improve Robustness in Vision-Language Models17 Sep 2026
- 2026Fortifying Time Series: DTW-Certified Robust Anomaly Detection8 May 2026
- 2025Adversarial generalization of unfolding (model-based) networks18 Sep 2025
- 2025On the Interaction of Compressibility and Adversarial Robustness23 Jul 2025
- 2024S4ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack13 Oct 2024
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmetic9 Jul 2024
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR30 Jan 2024
- 2023A Relaxed Optimization Approach for Adversarial Attacks against Neural Machine Translation Models14 Jun 2023
- 2023Revisiting and Advancing Adversarial Training Through A Simple Baseline13 Jun 2023
- 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptions12 Jun 2023
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Models22 May 2023
- 2023A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference31 Mar 2023
16 more
- 2023Conditional Generative Models are Provably Robust: Pointwise Guarantees for Bayesian Inverse Problems28 Mar 2023
- 2023Targeted Adversarial Attacks against Neural Machine Translation2 Mar 2023
- 2023TransFool: An Adversarial Attack against Neural Machine Translation Models2 Feb 2023
- 2023Adversarial training with informed data selection7 Jan 2023
- 2022Adversarial Detection by Approximation of Ensemble Boundary18 Nov 2022
- 2022Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense11 Sep 2022
- 2022Robustness and invariance properties of image classifiers30 Aug 2022
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networks27 Jul 2022
- 2022Catastrophic overfitting can be induced with discriminative non-robust features16 Jun 2022
- 2022On the benefits of knowledge distillation for adversarial robustness14 Mar 2022
- 2021Simple black-box universal adversarial attacks on medical image classification based on deep neural networks11 Aug 2021
- 2021Adversarial Example Detection for DNN Models: A Review and Experimental Comparison1 May 2021
- 2021A neural anisotropic view of underspecification in deep learning29 Apr 2021
- 2021Bio-inspired Robustness: A Review16 Mar 2021
- 2021Improving filling level classification with adversarial training8 Feb 2021
- 2021Local Competition and Stochasticity for Adversarial Robustness in Deep Learning4 Jan 2021
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 218
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2021Adversarial Example Detection for DNN Models: A Review and Experimental Comparisoncited by 51
- 2022On the benefits of knowledge distillation for adversarial robustnesscited by 17
- 2022Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defensecited by 14
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmeticcited by 14
- 2021Local Competition and Stochasticity for Adversarial Robustness in Deep Learningcited by 12
- 2023TransFool: An Adversarial Attack against Neural Machine Translation Modelscited by 12
- 2023Conditional Generative Models are Provably Robust: Pointwise Guarantees for Bayesian Inverse Problemscited by 12
- 2023Targeted Adversarial Attacks against Neural Machine Translationcited by 10
- 2021A neural anisotropic view of underspecification in deep learningcited by 6
- 2021Improving filling level classification with adversarial trainingcited by 5
12 most cited of 27 All 27 (JSON)
- 2026Fortifying Time Series: DTW-Certified Robust Anomaly Detection8 May 2026
- 2025Adversarial generalization of unfolding (model-based) networks18 Sep 2025
- 2025On the Interaction of Compressibility and Adversarial Robustness23 Jul 2025
- 2024S4ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack13 Oct 2024
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmetic9 Jul 2024
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR30 Jan 2024
- 2023A Relaxed Optimization Approach for Adversarial Attacks against Neural Machine Translation Models14 Jun 2023
- 2023Revisiting and Advancing Adversarial Training Through A Simple Baseline13 Jun 2023
- 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptions12 Jun 2023
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Models22 May 2023
- 2023A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference31 Mar 2023
- 2023Conditional Generative Models are Provably Robust: Pointwise Guarantees for Bayesian Inverse Problems28 Mar 2023
12 newest of 27 All 27 (JSON)