Adversarial Momentum-Contrastive Pre-Training
Not on the map. Why?
Abstract (arXiv)
Recently proposed adversarial self-supervised learning methods usually require big batches and long training epochs to extract robust features, which will bring heavy computational overhead on platforms with limited resources. In order to help the network learn more powerful feature representations in smaller batches and fewer epochs, this paper proposes a novel adversarial momentum contrastive learning method, which introduces two memory banks corresponding to clean samples and adversarial samples, respectively. These memory banks can be dynamically incorporated into the training process to track invariant features among historical mini-batches. Compared with the previous adversarial pre-training model, our method achieves superior performance with smaller batch size and less training epochs. In addition, the model outperforms some state-of-the-art supervised defensive methods on multiple benchmark datasets after being fine-tuned on downstream classification tasks.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). First posted on arXiv 24 Dec 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 4; 2023: 1; 2024: 1; 2025: 1.
10 papers.
- 2021Mind the box: l1-APGD for sparse adversarial attacks on image classifierscited by 51
- 2022Spurious Features Everywhere -- Large-Scale Detection of Harmful Spurious Features in ImageNetcited by 41
- 2021Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifierscited by 23
- 2022Decoupled Adversarial Contrastive Learning for Self-supervised Adversarial Robustnesscited by 20
- 2023Black-box Targeted Adversarial Attack on Segment Anything (SAM)cited by 13
- 2022Fast AdvPropcited by 6
- 2021Adaptive Feature Alignment for Adversarial Trainingcited by 3
- 2025FastDINOv2: Frequency Based Curriculum Learning Improves Robustness and Training Speedcited by 3
- 2022ARIA: Adversarially Robust Image Attribution for Content Provenancecited by 1
- 2024Towards Understanding Dual BN In Hybrid Adversarial Trainingcited by 0
- 2025FastDINOv2: Frequency Based Curriculum Learning Improves Robustness and Training Speed4 Jul 2025
- 2024Towards Understanding Dual BN In Hybrid Adversarial Training28 Mar 2024
- 2023Black-box Targeted Adversarial Attack on Segment Anything (SAM)16 Oct 2023
- 2022Spurious Features Everywhere -- Large-Scale Detection of Harmful Spurious Features in ImageNet9 Dec 2022
- 2022Decoupled Adversarial Contrastive Learning for Self-supervised Adversarial Robustness22 Jul 2022
- 2022Fast AdvProp21 Apr 2022
- 2022ARIA: Adversarially Robust Image Attribution for Content Provenance25 Feb 2022
- 2021Adaptive Feature Alignment for Adversarial Training31 May 2021
- 2021Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifiers26 May 2021
- 2021Mind the box: l1-APGD for sparse adversarial attacks on image classifiers1 Mar 2021