mlsanityData to 7 Oct 2026

The Power of Many: Synergistic Unification of Diverse Augmentations for Efficient Adversarial Robustness

arXiv 2508.03213 ↗First posted 5 Aug 2025cs.CV cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Adversarial perturbations pose a significant threat to deep learning models. Adversarial Training (AT), the predominant defense method, faces challenges of high computational costs and a degradation in standard performance. While data augmentation offers an alternative path, existing techniques either yield limited robustness gains or incur substantial training overhead. Therefore, developing a defense mechanism that is both highly efficient and strongly robust is of paramount importance.In this work, we first conduct a systematic analysis of existing augmentation techniques, revealing that the synergy among diverse strategies -- rather than any single method -- is crucial for enhancing robustness. Based on this insight, we propose the Universal Adversarial Augmenter (UAA) framework, which is characterized by its plug-and-play nature and training efficiency. UAA decouples the expensive perturbation generation process from model training by pre-computing a universal transformation offline, which is then used to efficiently generate unique adversarial perturbations for each sample during training.Extensive experiments conducted on multiple benchmarks validate the effectiveness of UAA. The results demonstrate that UAA establishes a new state-of-the-art (SOTA) for data-augmentation-based adversarial defense strategies , without requiring the online generation of adversarial examples during training. This framework provides a practical and efficient pathway for building robust models,Our code is available in the supplementary materials.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 28 of its 36 references that are in the map. First posted on arXiv 5 Aug 2025.

Builds on

28 of 36 references.

References · 28

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  6. 2016Wide Residual Networkscited by 3,057
  7. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  8. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
  9. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  10. 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
  11. 2016Adversarial examples in the physical worldcited by 1,762
  12. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
16 more
  1. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  2. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  3. 2017Random Erasing Data Augmentationcited by 1,235
  4. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  5. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  6. 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
  7. 2017One pixel attack for fooling deep neural networkscited by 579
  8. 2020Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixupcited by 260
  9. 2024DiffuseMix: Label-Preserving Data Augmentation with Diffusion Modelscited by 78
  10. 2020Wavelet Integrated CNNs for Noise-Robust Image Classificationcited by 60
  11. 2017Geometric robustness of deep networks: analysis and improvementcited by 45
  12. 2022A Unified Analysis of Mixed Sample Data Augmentation: A Loss Function Perspectivecited by 27
  13. 2020Improving Calibration through the Relationship with Adversarial Robustnesscited by 26
  14. 2023Improving Generalization in Visual Reinforcement Learning via Conflict-aware Gradient Agreement Augmentationcited by 13
  15. 2024Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinementcited by 9
  16. 2025TAET: Two-Stage Adversarial Equalization Training on Long-Tailed Distributionscited by 6

Built on by

Not cited yet.