Unadversarial Examples: Designing Objects for Robust Vision
Not on the map. Why?
Abstract (arXiv)
We study a class of realistic computer vision settings wherein one can influence the design of the objects being recognized. We develop a framework that leverages this capability to significantly improve vision models' performance and robustness. This framework exploits the sensitivity of modern machine learning algorithms to input perturbations in order to design "robust objects," i.e., objects that are explicitly optimized to be confidently detected or classified. We demonstrate the efficacy of the framework on a wide variety of vision-based tasks ranging from standard benchmarks, to (in-simulation) robotics, to real-world experiments. Our code can be found at https://git.io/unadversarial .
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). First posted on arXiv 22 Dec 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 15; 2023: 10; 2024: 8; 2025: 2; 2026: 3.
45 papers.
Sort:
By area:
- 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
- 2022Truth Serum: Poisoning Machine Learning Models to Reveal Their Secretscited by 94
- 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspectivecited by 86
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 58
- 2022Visual Prompting for Adversarial Robustnesscited by 33
- 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 24
- 2022The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Trainingcited by 22
- 2022Defensive Patches for Robust Recognition in the Physical Worldcited by 20
- 2021"Adversarial Examples" for Proof-of-Learningcited by 19
- 2023The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attackscited by 15
- 2022Evolution of Neural Tangent Kernels under Benign and Adversarial Trainingcited by 14
33 more
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyondcited by 14
- 2022Can Adversarial Training Be Manipulated By Non-Robust Features?cited by 12
- 2024Tri-Level Navigator: LLM-Empowered Tri-Level Learning for Time Series OOD Generalizationcited by 12
- 2021Simulated Adversarial Testing of Face Recognition Modelscited by 10
- 2022Squeeze Training for Adversarial Robustnesscited by 10
- 2023Adversarial Examples in the Physical World: A Surveycited by 10
- 2022Task Bias in Vision-Language Modelscited by 8
- 2022Breaking Correlation Shift via Conditional Invariant Regularizercited by 7
- 2022Physical Passive Patch Adversarial Attacks on Visual Odometry Systemscited by 6
- 2025Generalizing vision-language models to novel domains: A comprehensive surveycited by 6
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Allycited by 5
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignmentcited by 5
- 2021Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attackscited by 4
- 2021Amicable Aid: Perturbing Images to Improve Classification Performancecited by 3
- 2023Model Monitoring and Robustness of In-Use Machine Learning Models: Quantifying Data Distribution Shifts Using Population Stability Indexcited by 3
- 2023A Plug-and-Play Defensive Perturbation for Copyright Protection of DNN-based Applicationscited by 3
- 2023Uncovering the Hidden Cost of Model Compressioncited by 3
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
- 2024L-WISE: Boosting Human Visual Category Learning Through Model-Based Image Selection and Enhancementcited by 2
- 2025ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Modelscited by 2
- 2023NSA: Naturalistic Support Artifact to Boost Network Confidencecited by 1
- 2024On the low-shot transferability of [V]-Mambacited by 1
- 2024Domain Adaptive Diabetic Retinopathy Grading with Model Absence and Flowing Datacited by 1
- 2021Improving Robustness with Image Filteringcited by 0
- 2022Adversarial Attack Against Image-Based Localization Neural Networkscited by 0
- 2022Building Resilience to Out-of-Distribution Visual Data via Input Optimization and Model Finetuningcited by 0
- 2023Area is all you need: repeatable elements make stronger adversarial attackscited by 0
- 2023Universal Perturbation-based Secret Key-Controlled Data Hidingcited by 0
- 2024Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attackscited by 0
- 2024RED: Robust Environmental Designcited by 0
- 2026Rectifying Adversarial Examples Using Their Vulnerabilitiescited by 0
- 2026Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Modelscited by 0
- 2026Adaptive Causal Alignment for High-Confidence Adversarial Trainingcited by 0
- 2026Adaptive Causal Alignment for High-Confidence Adversarial Training2 Jun 2026
- 2026Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Models7 Apr 2026
- 2026Rectifying Adversarial Examples Using Their Vulnerabilities1 Jan 2026
- 2025ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models30 Oct 2025
- 2025Generalizing vision-language models to novel domains: A comprehensive survey23 Jun 2025
- 2024L-WISE: Boosting Human Visual Category Learning Through Model-Based Image Selection and Enhancement12 Dec 2024
- 2024Domain Adaptive Diabetic Retinopathy Grading with Model Absence and Flowing Data2 Dec 2024
- 2024RED: Robust Environmental Design26 Nov 2024
- 2024Tri-Level Navigator: LLM-Empowered Tri-Level Learning for Time Series OOD Generalization9 Oct 2024
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment12 Aug 2024
- 2024On the low-shot transferability of [V]-Mamba15 Mar 2024
33 more
- 2024Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks7 Feb 2024
- 2023Universal Perturbation-based Secret Key-Controlled Data Hiding3 Nov 2023
- 2023Adversarial Examples in the Physical World: A Survey1 Nov 2023
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally5 Oct 2023
- 2023Uncovering the Hidden Cost of Model Compression29 Aug 2023
- 2023NSA: Naturalistic Support Artifact to Boost Network Confidence27 Jul 2023
- 2023Area is all you need: repeatable elements make stronger adversarial attacks13 Jun 2023
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond1 Jun 2023
- 2023The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks23 May 2023
- 2023A Plug-and-Play Defensive Perturbation for Copyright Protection of DNN-based Applications20 Apr 2023
- 2023Model Monitoring and Robustness of In-Use Machine Learning Models: Quantifying Data Distribution Shifts Using Population Stability Index1 Feb 2023
- 2022Task Bias in Vision-Language Models8 Dec 2022
- 2022Building Resilience to Out-of-Distribution Visual Data via Input Optimization and Model Finetuning29 Nov 2022
- 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspective21 Nov 2022
- 2022The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training1 Nov 2022
- 2022Evolution of Neural Tangent Kernels under Benign and Adversarial Training21 Oct 2022
- 2022Visual Prompting for Adversarial Robustness12 Oct 2022
- 2022Adversarial Attack Against Image-Based Localization Neural Networks11 Oct 2022
- 2022A Survey on Physical Adversarial Attack in Computer Vision28 Sep 2022
- 2022Breaking Correlation Shift via Conditional Invariant Regularizer14 Jul 2022
- 2022Physical Passive Patch Adversarial Attacks on Visual Odometry Systems11 Jul 2022
- 2022Squeeze Training for Adversarial Robustness23 May 2022
- 2022Defensive Patches for Robust Recognition in the Physical World13 Apr 2022
- 2022Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets31 Mar 2022
- 2022Exploring Visual Prompts for Adapting Large-Scale Models31 Mar 2022
- 2022Can Adversarial Training Be Manipulated By Non-Robust Features?31 Jan 2022
- 2021Improving Robustness with Image Filtering21 Dec 2021
- 2021Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks10 Dec 2021
- 2021Amicable Aid: Perturbing Images to Improve Classification Performance9 Dec 2021
- 2021"Adversarial Examples" for Proof-of-Learning21 Aug 2021
- 2021Simulated Adversarial Testing of Face Recognition Models8 Jun 2021
- 2021Improved OOD Generalization via Adversarial Training and Pre-training24 May 2021
- 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training9 Feb 2021
- 2022Task Bias in Vision-Language Modelscited by 8
- 2025Generalizing vision-language models to novel domains: A comprehensive surveycited by 6
- 2025Generalizing vision-language models to novel domains: A comprehensive survey23 Jun 2025
- 2022Task Bias in Vision-Language Models8 Dec 2022
- 2024On the low-shot transferability of [V]-Mambacited by 1
- 2024On the low-shot transferability of [V]-Mamba15 Mar 2024
- 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
- 2022Truth Serum: Poisoning Machine Learning Models to Reveal Their Secretscited by 94
- 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspectivecited by 86
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 58
- 2022Visual Prompting for Adversarial Robustnesscited by 33
- 2022A Survey on Physical Adversarial Attack in Computer Visioncited by 24
- 2022The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Trainingcited by 22
- 2022Defensive Patches for Robust Recognition in the Physical Worldcited by 20
- 2021"Adversarial Examples" for Proof-of-Learningcited by 19
- 2023The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attackscited by 15
- 2022Evolution of Neural Tangent Kernels under Benign and Adversarial Trainingcited by 14
12 most cited of 40 All 40 (JSON)
- 2026Adaptive Causal Alignment for High-Confidence Adversarial Training2 Jun 2026
- 2026Rectifying Adversarial Examples Using Their Vulnerabilities1 Jan 2026
- 2024L-WISE: Boosting Human Visual Category Learning Through Model-Based Image Selection and Enhancement12 Dec 2024
- 2024Domain Adaptive Diabetic Retinopathy Grading with Model Absence and Flowing Data2 Dec 2024
- 2024RED: Robust Environmental Design26 Nov 2024
- 2024Tri-Level Navigator: LLM-Empowered Tri-Level Learning for Time Series OOD Generalization9 Oct 2024
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment12 Aug 2024
- 2024Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks7 Feb 2024
- 2023Universal Perturbation-based Secret Key-Controlled Data Hiding3 Nov 2023
- 2023Adversarial Examples in the Physical World: A Survey1 Nov 2023
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally5 Oct 2023
12 newest of 40 All 40 (JSON)