Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally
Not on the map. Why?
Abstract (arXiv)
Deep Neural Networks (DNNs) have been the driving force behind many of the recent advances in machine learning. However, research has shown that DNNs are vulnerable to adversarial examples -- input samples that have been perturbed to force DNN-based models to make errors. As a result, Adversarial Machine Learning (AdvML) has gained a lot of attention, and researchers have investigated these vulnerabilities in various settings and modalities. In addition, DNNs have also been found to incorporate embedded bias and often produce unexplainable predictions, which can result in anti-social AI applications. The emergence of new AI technologies that leverage Large Language Models (LLMs), such as ChatGPT and GPT-4, increases the risk of producing anti-social applications at scale. AdvML for Social Good (AdvML4G) is an emerging field that repurposes the AdvML bug to invent pro-social applications. Regulators, practitioners, and researchers should collaborate to encourage the development of pro-social applications and hinder the development of anti-social ones. In this work, we provide the first comprehensive review of the emerging field of AdvML4G. This paper encompasses a taxonomy that highlights the emergence of AdvML4G, a discussion of the differences and similarities between AdvML4G and AdvML, a taxonomy covering social good-related concepts and aspects, an exploration of the motivations behind the emergence of AdvML4G at the intersection of ML4G and AdvML, and an extensive summary of the works that utilize AdvML4G as an auxiliary tool for innovating pro-social applications. Finally, we elaborate upon various challenges and open research issues that require significant attention from the research community.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 80 of its 131 references that are in the map. First posted on arXiv 5 Oct 2023.
Builds on
80 of 131 references.
References · 80
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
38 more
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,089
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
- 2016Adversarial Machine Learning at Scalecited by 936
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 776
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 678
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2016Stealing Machine Learning Models via Prediction APIscited by 619
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2018The UCR Time Series Archivecited by 431
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
- 2018Actionable Recourse in Linear Classificationcited by 328
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 316
- 2020Input-Aware Dynamic Backdoor Attackcited by 313
- 2023Poisoning Web-Scale Training Datasets is Practicalcited by 290
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
- 2018Explanations based on the Missing: Towards Contrastive Explanations with Pertinent Negativescited by 262
- 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 197
- 2020Counterfactual Explanations and Algorithmic Recourses for Machine Learning: A Reviewcited by 174
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
- 2019Learning Model-Agnostic Counterfactual Explanations for Tabular Datacited by 146
- 2021Anti-Adversarially Manipulated Attributions for Weakly and Semi-Supervised Semantic Segmentationcited by 134
- 2018Adversarial Reprogramming of Neural Networkscited by 116
- 2021LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognitioncited by 94
- 2021Voice2Series: Reprogramming Acoustic Models for Time Series Classificationcited by 91
- 2019Wasserstein Adversarial Examples via Projected Sinkhorn Iterationscited by 89
- 2020Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resourcescited by 83
- 2020Secure and Robust Machine Learning for Healthcare: A Surveycited by 80
- 2020Radioactive data: tracing through trainingcited by 67
- 2022Model Reprogramming: Resource-Efficient Cross-Domain Machine Learningcited by 64
- 2021Socially Responsible AI Algorithms: Issues, Purposes, and Challengescited by 56
- 2022"Real Attackers Don't Compute Gradients": Bridging the Gap Between Adversarial ML Research and Practicecited by 56
- 2021Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysiscited by 52
- 2020Optimizing Molecules using Efficient Queries from Property Evaluationscited by 50
- 2020Unadversarial Examples: Designing Objects for Robust Visioncited by 45
- 2021Data Poisoning Won't Save You From Facial Recognitioncited by 45
- 2022Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack via Adversarial Perceptual-aware Perturbationscited by 39
50 most cited of 80 All 80 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 4; 2026: 1.
6 papers.
- 2024Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensicscited by 13
- 2025A Survey on Proactive Defense Strategies Against Misinformation in Large Language Modelscited by 6
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecyclecited by 2
- 2025Catastrophic Overfitting, Entropy Gap and Participation Ratio: A Noiseless lp Norm Solution for Fast Adversarial Trainingcited by 1
- 2025Fast Adversarial Training against Sparse Attacks Requires Loss Smoothingcited by 0
- 2025Measuring the Impact of Student Gaming Behaviors on Learner Modelingcited by 0
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle5 Aug 2026
- 2025Measuring the Impact of Student Gaming Behaviors on Learner Modeling21 Dec 2025
- 2025A Survey on Proactive Defense Strategies Against Misinformation in Large Language Models5 Jul 2025
- 2025Catastrophic Overfitting, Entropy Gap and Participation Ratio: A Noiseless lp Norm Solution for Fast Adversarial Training5 May 2025
- 2025Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing28 Feb 2025
- 2024Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics27 Apr 2024