The Power of Many: Synergistic Unification of Diverse Augmentations for Efficient Adversarial Robustness
Not on the map. Why?
Abstract (arXiv)
Adversarial perturbations pose a significant threat to deep learning models. Adversarial Training (AT), the predominant defense method, faces challenges of high computational costs and a degradation in standard performance. While data augmentation offers an alternative path, existing techniques either yield limited robustness gains or incur substantial training overhead. Therefore, developing a defense mechanism that is both highly efficient and strongly robust is of paramount importance.In this work, we first conduct a systematic analysis of existing augmentation techniques, revealing that the synergy among diverse strategies -- rather than any single method -- is crucial for enhancing robustness. Based on this insight, we propose the Universal Adversarial Augmenter (UAA) framework, which is characterized by its plug-and-play nature and training efficiency. UAA decouples the expensive perturbation generation process from model training by pre-computing a universal transformation offline, which is then used to efficiently generate unique adversarial perturbations for each sample during training.Extensive experiments conducted on multiple benchmarks validate the effectiveness of UAA. The results demonstrate that UAA establishes a new state-of-the-art (SOTA) for data-augmentation-based adversarial defense strategies , without requiring the online generation of adversarial examples during training. This framework provides a practical and efficient pathway for building robust models,Our code is available in the supplementary materials.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 28 of its 36 references that are in the map. First posted on arXiv 5 Aug 2025.
Builds on
28 of 36 references.
References · 28
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2016Wide Residual Networkscited by 3,057
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
- 2016Adversarial examples in the physical worldcited by 1,762
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
16 more
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2017Random Erasing Data Augmentationcited by 1,235
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2017One pixel attack for fooling deep neural networkscited by 579
- 2020Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixupcited by 260
- 2024DiffuseMix: Label-Preserving Data Augmentation with Diffusion Modelscited by 78
- 2020Wavelet Integrated CNNs for Noise-Robust Image Classificationcited by 60
- 2017Geometric robustness of deep networks: analysis and improvementcited by 45
- 2022A Unified Analysis of Mixed Sample Data Augmentation: A Loss Function Perspectivecited by 27
- 2020Improving Calibration through the Relationship with Adversarial Robustnesscited by 26
- 2023Improving Generalization in Visual Reinforcement Learning via Conflict-aware Gradient Agreement Augmentationcited by 13
- 2024Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinementcited by 9
- 2025TAET: Two-Stage Adversarial Equalization Training on Long-Tailed Distributionscited by 6
Built on by
Not cited yet.