Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning
Not on the map. Why?
Abstract (arXiv)
Adversarial examples causing evasive predictions are widely used to evaluate and improve the robustness of machine learning models. However, current studies focus on supervised learning tasks, relying on the ground-truth data label, a targeted objective, or supervision from a trained classifier. In this paper, we propose a framework of generating adversarial examples for unsupervised models and demonstrate novel applications to data augmentation. Our framework exploits a mutual information neural estimator as an information-theoretic similarity measure to generate adversarial examples without supervision. We propose a new MinMax algorithm with provable convergence guarantees for efficient generation of unsupervised adversarial examples. Our framework can also be extended to supervised adversarial examples. When using unsupervised adversarial examples as a simple plug-in data augmentation tool for model retraining, significant improvements are consistently observed across different unsupervised tasks and datasets, including data reconstruction, representation learning, and contrastive learning. Our results show novel methods and considerable advantages in studying and improving unsupervised machine learning via adversarial examples.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 31 of its 40 references that are in the map. First posted on arXiv 2 Mar 2021.
Builds on
31 of 40 references.
References · 31
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018Demystifying MMD GANscited by 1,268
- 2018Learning deep representations by mutual information estimation and maximizationcited by 1,265
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 918
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
- 2018Robustness May Be at Odds with Accuracycited by 873
19 more
- 2018MINE: Mutual Information Neural Estimationcited by 680
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
- 2019Unlabeled Data Improves Adversarial Robustnesscited by 415
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2015Adversarial Autoencoderscited by 359
- 2019S4L: Self-Supervised Semi-Supervised Learningcited by 335
- 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 181
- 2018Disentangling Adversarial Robustness and Generalizationcited by 171
- 2019Are Labels Required for Improving Adversarial Robustness?cited by 162
- 2018Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Modelscited by 135
- 2019Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Trainingcited by 95
- 2020Contrastive Learning with Adversarial Examplescited by 91
- 2019Concrete Autoencoders for Differentiable Feature Selection and Reconstructioncited by 90
- 2019Hybrid Block Successive Approximation for One-Sided Non-Convex Min-Max Problems: Algorithms and Applicationscited by 55
- 2020Non-convex Min-Max Optimization: Applications, Challenges, and Recent Theoretical Advancescited by 37
- 2020Learning Adversarially Robust Representations via Worst-Case Mutual Information Maximizationcited by 6
- 2018Unsupervised representation learning using convolutional and stacked auto-encoders: a domain and cross-domain feature space analysiscited by 5
Built on by
Citing papers per year: 2021: 1; 2022: 1; 2023: 6; 2024: 6; 2025: 2.
16 papers.
Sort:
- 2022Holistic Adversarial Robustness of Deep Learning Modelscited by 11
- 2023Improving the Robustness of Transformer-based Large Language Models with Dynamic Attentioncited by 10
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Allycited by 5
- 2025Just as Humans Need Vaccines, So Do Models: Model Immunization to Combat Falsehoodscited by 3
- 2023Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identificationcited by 2
- 2021Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognitioncited by 0
- 2023Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adaptercited by 0
- 2023GMTR: Graph Matching Transformerscited by 0
- 2023DarkShot: Lighting Dark Images with Low-Compute and High-Qualitycited by 0
- 2024TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processingcited by 0
- 2024TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networkscited by 0
- 2024T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Imagecited by 0
4 more
- 2024Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithmscited by 0
- 2024Towards General Deepfake Detection with Dynamic Curriculumcited by 0
- 2024Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphscited by 0
- 2025Mask6D: Masked Pose Priors For 6D Object Pose Estimationcited by 0
- 2025Mask6D: Masked Pose Priors For 6D Object Pose Estimation9 Jul 2025
- 2025Just as Humans Need Vaccines, So Do Models: Model Immunization to Combat Falsehoods23 May 2025
- 2024Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs17 Oct 2024
- 2024Towards General Deepfake Detection with Dynamic Curriculum15 Oct 2024
- 2024Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms30 Aug 2024
- 2024T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image20 Mar 2024
- 2024TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks6 Jan 2024
- 2024TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing6 Jan 2024
- 2023DarkShot: Lighting Dark Images with Low-Compute and High-Quality28 Dec 2023
- 2023Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification12 Dec 2023
- 2023Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention29 Nov 2023
- 2023GMTR: Graph Matching Transformers14 Nov 2023
4 more
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally5 Oct 2023
- 2023Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter18 Sep 2023
- 2022Holistic Adversarial Robustness of Deep Learning Models15 Feb 2022
- 2021Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognition5 Jun 2021
- 2022Holistic Adversarial Robustness of Deep Learning Modelscited by 11
- 2023Improving the Robustness of Transformer-based Large Language Models with Dynamic Attentioncited by 10
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Allycited by 5
- 2025Just as Humans Need Vaccines, So Do Models: Model Immunization to Combat Falsehoodscited by 3
- 2023Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identificationcited by 2
- 2021Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognitioncited by 0
- 2023Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adaptercited by 0
- 2023GMTR: Graph Matching Transformerscited by 0
- 2023DarkShot: Lighting Dark Images with Low-Compute and High-Qualitycited by 0
- 2024TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processingcited by 0
- 2024TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networkscited by 0
- 2024T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Imagecited by 0
12 most cited of 16 All 16 (JSON)
- 2025Mask6D: Masked Pose Priors For 6D Object Pose Estimation9 Jul 2025
- 2025Just as Humans Need Vaccines, So Do Models: Model Immunization to Combat Falsehoods23 May 2025
- 2024Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs17 Oct 2024
- 2024Towards General Deepfake Detection with Dynamic Curriculum15 Oct 2024
- 2024Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms30 Aug 2024
- 2024T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image20 Mar 2024
- 2024TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks6 Jan 2024
- 2024TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing6 Jan 2024
- 2023DarkShot: Lighting Dark Images with Low-Compute and High-Quality28 Dec 2023
- 2023Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification12 Dec 2023
- 2023Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention29 Nov 2023
- 2023GMTR: Graph Matching Transformers14 Nov 2023
12 newest of 16 All 16 (JSON)