Adversarial Attacks on ML Defense Models Competition
Not on the map. Why?
Abstract (arXiv)
Due to the vulnerability of deep neural networks (DNNs) to adversarial examples, a large number of defense techniques have been proposed to alleviate this problem in recent years. However, the progress of building more robust models is usually hampered by the incomplete or incorrect robustness evaluation. To accelerate the research on reliable evaluation of adversarial robustness of the current defense models in image classification, the TSAIL group at Tsinghua University and the Alibaba Security group organized this competition along with a CVPR 2021 workshop on adversarial machine learning (https://aisecure-workshop.github.io/amlcvpr2021/). The purpose of this competition is to motivate novel attack algorithms to evaluate adversarial robustness more effectively and reliably. The participants were encouraged to develop stronger white-box attack algorithms to find the worst-case robustness of different defenses. This competition was conducted on an adversarial robustness evaluation platform -- ARES (https://github.com/thu-ml/ares), and is held on the TianChi platform (https://tianchi.aliyun.com/competition/entrance/531847/introduction) as one of the series of AI Security Challengers Program. After the competition, we summarized the results and established a new adversarial robustness benchmark at https://ml.cs.tsinghua.edu.cn/ares-bench/, which allows users to upload adversarial attack algorithms and defense models for evaluation.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 41 of its 56 references that are in the map. First posted on arXiv 15 Oct 2021.
Builds on
41 of 56 references.
References · 41
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 4,993
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
29 more
- 2016Universal adversarial perturbationscited by 774
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2019Adversarial Training for Free!cited by 638
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2020On Adaptive Attacks to Adversarial Example Defensescited by 547
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
- 2019Unlabeled Data Improves Adversarial Robustnesscited by 415
- 2017Mitigating Adversarial Effects Through Randomizationcited by 382
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2017Defense against Adversarial Attacks Using High-Level Representation Guided Denoisercited by 329
- 2018Feature Denoising for Improving Adversarial Robustnesscited by 312
- 2020Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examplescited by 275
- 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
- 2019Improving Adversarial Robustness via Promoting Ensemble Diversitycited by 213
- 2020Bag of Tricks for Adversarial Trainingcited by 199
- 2018MMA Training: Direct Input Space Margin Maximization through Adversarial Trainingcited by 171
- 2019Are Labels Required for Improving Adversarial Robustness?cited by 162
- 2020Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuningcited by 152
- 2020Self-Adaptive Training: beyond Empirical Risk Minimizationcited by 126
- 2020Boosting Adversarial Training with Hypersphere Embeddingcited by 97
- 2019Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Trainingcited by 95
- 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
- 2018Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attackscited by 48
- 2019An Alternative Surrogate Loss for PGD-based Adversarial Testingcited by 45
- 2021Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networkscited by 31
- 2021LAFEAT: Piercing Through Adversarial Defenses with Latent Featurescited by 24
- 2021BDD4BNN: A BDD-based Quantitative Analysis Framework for Binarized Neural Networkscited by 17
- 2021Attack as Defense: Characterizing Adversarial Examples using Robustnesscited by 14
Built on by
Citing papers per year: 2022: 2; 2023: 0; 2024: 0; 2025: 1.
3 papers.