Augmented Lagrangian Adversarial Attacks
Not on the map. Why?
Abstract (arXiv)
Adversarial attack algorithms are dominated by penalty methods, which are slow in practice, or more efficient distance-customized methods, which are heavily tailored to the properties of the distance considered. We propose a white-box attack algorithm to generate minimally perturbed adversarial examples based on Augmented Lagrangian principles. We bring several algorithmic modifications, which have a crucial effect on performance. Our attack enjoys the generality of penalty methods and the computational efficiency of distance-customized algorithms, and can be readily used for a wide set of distances. We compare our attack to state-of-the-art methods on three datasets and several models, and consistently obtain competitive performances with similar or lower computational complexity.
Key facts. Cited by 28 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Nov 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 6; 2023: 7; 2024: 7; 2025: 3; 2026: 2.
28 papers.
Sort:
By area:
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2021Mind the box: l1-APGD for sparse adversarial attacks on image classifierscited by 50
- 2023IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AIcited by 32
- 2024Robust Calibration of Large Vision-Language Adapterscited by 28
- 2021Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifierscited by 23
- 2022Proximal Splitting Adversarial Attacks for Semantic Segmentationcited by 23
- 2023Generative Watermarking Against Unauthorized Subject-Driven Image Synthesiscited by 21
- 2024Unified Physical-Digital Face Attack Detectioncited by 17
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examplescited by 14
- 2022Class Adaptive Network Calibrationcited by 13
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2024σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examplescited by 7
16 more
- 2022On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Errorcited by 6
- 2023LEAP: Efficient and Automated Test Method for NLP Softwarecited by 6
- 2023A Review of Adversarial Attacks in Computer Visioncited by 5
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuningcited by 5
- 2022Robust-by-Design Classification via Unitary-Gradient Neural Networkscited by 4
- 2021Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Trainingcited by 3
- 2024Class and Region-Adaptive Constraints for Network Calibrationcited by 2
- 2025Web Artifact Attacks Disrupt Vision Language Modelscited by 2
- 2022Provable Robust Saliency-based Explanationscited by 1
- 2023Revisiting DeepFool: generalization and improvementcited by 1
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentationcited by 1
- 2022Adversarial Lagrangian Integrated Contrastive Embedding for Limited Size Datasetscited by 0
- 2023Robust Ranking Explanationscited by 0
- 2024Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Themcited by 0
- 2026Class Adaptive Conformal Trainingcited by 0
- 2026Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluationcited by 0
- 2026Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation22 Jul 2026
- 2026Class Adaptive Conformal Training14 Jan 2026
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentation3 Dec 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2025Web Artifact Attacks Disrupt Vision Language Models17 Mar 2025
- 2024Robust Calibration of Large Vision-Language Adapters18 Jul 2024
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples30 Apr 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024Class and Region-Adaptive Constraints for Network Calibration19 Mar 2024
- 2024σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examples2 Feb 2024
- 2024Unified Physical-Digital Face Attack Detection31 Jan 2024
- 2024Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them22 Jan 2024
16 more
- 2023IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI30 Oct 2023
- 2023LEAP: Efficient and Automated Test Method for NLP Software22 Aug 2023
- 2023A Review of Adversarial Attacks in Computer Vision15 Aug 2023
- 2023Robust Ranking Explanations8 Jul 2023
- 2023Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis13 Jun 2023
- 2023Revisiting DeepFool: generalization and improvement22 Mar 2023
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models8 Feb 2023
- 2022Provable Robust Saliency-based Explanations28 Dec 2022
- 2022Class Adaptive Network Calibration28 Nov 2022
- 2022Adversarial Lagrangian Integrated Contrastive Embedding for Limited Size Datasets6 Oct 2022
- 2022Robust-by-Design Classification via Unitary-Gradient Neural Networks9 Sep 2022
- 2022Proximal Splitting Adversarial Attacks for Semantic Segmentation14 Jun 2022
- 2022On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Error4 Jan 2022
- 2021Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifiers26 May 2021
- 2021Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training29 Mar 2021
- 2021Mind the box: l1-APGD for sparse adversarial attacks on image classifiers1 Mar 2021
- 2025Web Artifact Attacks Disrupt Vision Language Modelscited by 2
- 2025Web Artifact Attacks Disrupt Vision Language Models17 Mar 2025
- 2021Mind the box: l1-APGD for sparse adversarial attacks on image classifierscited by 50
- 2024Robust Calibration of Large Vision-Language Adapterscited by 28
- 2021Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifierscited by 23
- 2022Proximal Splitting Adversarial Attacks for Semantic Segmentationcited by 23
- 2024Unified Physical-Digital Face Attack Detectioncited by 17
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examplescited by 14
- 2022Class Adaptive Network Calibrationcited by 13
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Cluescited by 8
- 2024σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examplescited by 7
- 2022On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Errorcited by 6
- 2023LEAP: Efficient and Automated Test Method for NLP Softwarecited by 6
- 2023A Review of Adversarial Attacks in Computer Visioncited by 5
12 most cited of 24 All 24 (JSON)
- 2026Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation22 Jul 2026
- 2026Class Adaptive Conformal Training14 Jan 2026
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentation3 Dec 2025
- 2025Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning19 May 2025
- 2024Robust Calibration of Large Vision-Language Adapters18 Jul 2024
- 2024AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples30 Apr 2024
- 2024Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues12 Apr 2024
- 2024Class and Region-Adaptive Constraints for Network Calibration19 Mar 2024
- 2024σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examples2 Feb 2024
- 2024Unified Physical-Digital Face Attack Detection31 Jan 2024
- 2024Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them22 Jan 2024
- 2023LEAP: Efficient and Automated Test Method for NLP Software22 Aug 2023
12 newest of 24 All 24 (JSON)