Adaptive Causal Alignment for High-Confidence Adversarial Training
Not on the map. Why?
Abstract (arXiv)
Inverse adversarial training leverages high-confidence predictions to stabilize robust learning, yet we uncover a critical paradox: high confidence often stems from overfitting to non-causal background correlations rather than intrinsic object semantics. Our investigation reveals that visual context functions as a dual-natured signal, serving as either a necessary supportive prior or a spurious confounder. This insight renders existing blind suppression strategies flawed, as they inevitably lead to severe Feature Loss. To resolve this, we propose High-Confidence Causally Aligned Training (HICAT), a unified framework that establishes a Semantic Equilibrium. Operating on a ``Measure-Debias-Align'' pipeline, HICAT integrates a Learnable Background-Bias Estimator (LBBE) to adaptively diagnose context utility. Guided by this diagnosis, an Adaptive Debiasing mechanism performs surgical logit rectification, complemented by a geometrically grounded Foreground Logit Orthogonal Enhancement (FLOE) loss to enforce rigorous feature disentanglement. Extensive experiments on CIFAR-10, CIFAR-100, and ImageNet-1K demonstrate that HICAT consistently improves over matched baselines across diverse architectures (CNNs and ViTs) while significantly reducing the robust generalization gap.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 52 of its 73 references that are in the map. First posted on arXiv 2 Jun 2026.
Builds on
52 of 73 references.
References · 52
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2014Going Deeper with Convolutionscited by 4,241
- 2016Wide Residual Networkscited by 3,070
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
38 more
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 939
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
- 2019Adversarial Training for Free!cited by 643
- 2019Unlabeled Data Improves Adversarial Robustnesscited by 416
- 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 343
- 2019Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attackcited by 334
- 2017Defense against Adversarial Attacks Using High-Level Representation Guided Denoisercited by 329
- 2019SOLO: Segmenting Objects by Locationscited by 289
- 2016Learning from Simulated and Unsupervised Images through Adversarial Trainingcited by 288
- 2019Simple Black-box Adversarial Attackscited by 251
- 2021Improving Robustness using Generated Datacited by 234
- 2023Better Diffusion Models Further Improve Adversarial Trainingcited by 208
- 2023Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Modelscited by 79
- 2018Adversarial vulnerability for any classifiercited by 78
- 2022When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecturecited by 64
- 2020Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defensescited by 62
- 2023CFA: Class-wise Calibrated Fair Adversarial Trainingcited by 53
- 2020Unadversarial Examples: Designing Objects for Robust Visioncited by 45
- 2024Revisiting Adversarial Training at Scalecited by 33
- 2018Universal Perturbation Attack Against Image Retrievalcited by 32
- 2019Adversarial Attack Generation Empowered by Min-Max Optimizationcited by 32
- 2023Spatial-frequency channels, shape bias, and adversarial robustnesscited by 28
- 2023WAT: Improve the Worst-class Robustness in Adversarial Trainingcited by 27
- 2022Fast Adversarial Training with Adaptive Step Sizecited by 25
- 2025OBS-Diff: Accurate Pruning For Diffusion Models in One-Shotcited by 19
- 2023Feature Separation and Recalibration for Adversarial Robustnesscited by 16
- 2022Information-Theoretic Bias Reduction via Causal View of Spurious Correlationcited by 15
- 2025On Denoising Walking Videos for Gait Recognitioncited by 14
- 2024ASAM: Boosting Segment Anything Model with Adversarial Tuningcited by 12
- 2024Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinementcited by 9
- 2023Causal Analysis for Robust Interpretability of Neural Networkscited by 8
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attackscited by 7
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignmentcited by 5
- 2021Regional Adversarial Training for Better Robust Generalizationcited by 4
- 2026EarlyTom: Early Token Compression Completes Fast Video Understandingcited by 4
- 2024Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustnesscited by 3
50 most cited of 52 All 52 (JSON)
Built on by
Not cited yet.