Adversarial Robustness

Ask about this topic

Overview

Adversarial robustness asks whether a model still predicts or acts reliably when an attacker makes small, strategic changes to its inputs, training data, or operating environment. Common approaches include adversarial training, which exposes models to attacks during learning; randomized smoothing and other certification methods, which provide conditional guarantees; and input purification, representation regularization, and test-time adaptation. Evaluations span image classifiers and detectors, language and multimodal models, graphs, time series, and safety-critical systems, using both empirical attacks and formal bounds. A central tension is that gains can depend on the attack, data, and deployment setting, while stronger robustness may cost clean accuracy or compute; adaptive, realistic evaluation and guarantees that match real threats remain open challenges.

Latest papers

CardsList

481 papers49 papers in the last four weeks, up 26% on the four weeks before. 0.3% of all new papers.

  1. ORBITAL: Optimization of Robust Brain--Computer Inference Through Architecture-Aware Low-Precision Compression

    Oct 26, 2026Saim Rehman, Muhammad ShafiqueAdversarial RobustnessBrain-Computer Interfaces

    eBRAIN Lab, New York University Abu Dhabi, Abu Dhabi, UAE

  2. MANTIS: Multi-Axis News Transformations for Instance-Wise Stress Testing and Worst-Case Training in Fake News Detection

    Oct 26, 2026Dexin Liu, Fan Yang, Zimu Wang +5Fake News DetectionAdversarial Robustness

    Xi’an Jiaotong-Liverpool University, Suzhou, China · University of Liverpool, Liverpool, United Kingdom · Nanjing Sibei Intelligent Technology Co., Ltd., Nanjing, China

  3. A JiT-Based Denoising Defense Method Against Adversarial Examples for Radio Signal Automatic Modulation Classification

    Oct 26, 2026Shiwei Liu, Linyuan Wang, Nuolin Sun +2Adversarial RobustnessAdversarial Purification

    Henan Key Laboratory of Imaging and Intelligent Processing, Information Engineering University, Zhengzhou 450000, China

  4. Attack logics, not outputs: Concept-based Property Attacks for Shortcut Elimination in Neural Networks

    Oct 26, 2026Raik Dankworth, Felix Mächtle, Thomas Eisenbarth +1Adversarial AttacksAdversarial Robustness

    Institute of Software Engineering and Programming Languages University of Luebeck · Institute of IT Security University of Luebeck

  5. Natural Jammers: When Non-Robust Features Become Antagonistic

    Oct 26, 2026Jiaming Zhang, Fuyao Zhang, Pengjun Xie +1Neural Network RobustnessAdversarial Robustness

    Nanyang Technological University · Alibaba Group

  6. Augmentation-Guided Adversarial Training via Local Stability-Based Sample Selection

    Oct 23, 2026Daniel Agyei Asante, Mark Tetteh, Deborah Asamoah +2Adversarial TrainingAdversarial Robustness

    Ohio University, United States · University of Nebraska Omaha, United States · University of Toronto, Canada +1

  7. Towards Adversarially Robust Multigraph Neural Networks for Financial Crime Analysis

    Oct 22, 2026Dennis Heijmans, H. Çağrı Bilgi, Rui Wang +1Adversarial AttacksAdversarial Robustness

    Delft University of Technology Delft, The Netherlands

  8. ExGrad: Beyond Suppression - Explicit Clean-Gradient Subtraction in Adversarial Training

    Oct 21, 2026Zhiyuan Ye, Xiangyu Zhou, Ji Qi +2Adversarial TrainingAdversarial Robustness

    University of Science and Technology of China · China Mobile (Suzhou) Software Technology Co., Ltd.

  9. Learning-Theoretic Foundation for General Coded Computing: The Adversarial Setting

    Oct 20, 2026Parsa Moradi, Hanzaleh Akbarinodehi, Mohammad Ali Maddah-AliAdversarial Robustness

    University of Minnesota, Twin Cities, Minneapolis, MN, USA.

  10. Exposing Vulnerability Monoculture Through Systemic Adversarial Robustness

    Oct 19, 2026Leo Elmecker-Plakolm, Lukasz Szpruch, Avishek Joey Bose +1Adversarial RobustnessAdversarial Robustness of Language Models

    Imperial College London · The University of Edinburgh · The Alan Turing Institute +1

  11. Language Guidance for Supervised Vision Training: An Empirical Study of Generalization

    Oct 19, 2026Shruthi Gowda, Nikita Jain, Elahe Arani +1OOD GeneralizationShortcut Learning

    Eindhoven University of Technology

  12. Model Exposure on One Device Endangers Others: Rethinking Edge Neural Network Security across Devices

    Oct 19, 2026Yuyang Zhang, Kangjie Chen, Yihui Jin +1Adversarial TransferabilityAdversarial Robustness

  13. Mind Your Boundaries: Boundary-Aware Model Obfuscation against Cross-node Attack

    Oct 19, 2026Yuyang Zhang, Yihui Jin, Kangjie Chen +2Adversarial RobustnessAdversarial Attacks

  14. Robust Direct Preference Optimization under Preference Label-Flip Attacks

    Oct 18, 2026Chenye Yang, Weiyu Xu, Lifeng LaiDirect Preference OptimizationAdversarial Robustness

    Department of Electrical and Computer Engineering, University of California, Davis, Davis, CA 95616, USA · Department of Electrical and Computer Engineering, University of Iowa, Iowa City, IA 52242, USA

  15. On the tradeoff between robustness and geometric accuracy in adversarial training

    Oct 16, 2026Rachel Morris, Ryan Murray, Kerrek StinsonAdversarial RobustnessRobust Classification

  16. ACR-Net: Mitigating Semantic Dominance via Contrastive Acoustic-Semantic Decoupling

    Oct 14, 2026Mengke Zhang, Yanda Shao, Tianhe Wu +1Speech Emotion RecognitionAudio-Language Model Evaluation

    Beijing University of Posts and Telecommunications, China

  17. CARD: Closing the Teacher-Student Loop for Adversarial Robustness Distillation

    Oct 14, 2026Zhi Li, Haowei Liu, Hongchen Yang +5Adversarial RobustnessAdversarial Knowledge Distillation

    Engineering Research Center of Cyberspace and School of Software and AI, Yunnan University, Kunming, China · School of Information Science and Technology, Yunnan Normal University, Kunming, China

  18. No Way To Steal My Face: Proactive Defense Against Identity-Preserving Personalized Generation

    Oct 14, 2026Lizhi Xiong, Jun Li, Ziqiang Li +2Identity-Preserving Image GenerationDiffusion-Based Image Generation

    Nanjing University of Information Science and Technology

  19. DecisionRobust: Benchmarking Robustness for JEV Style Decision Models Across Text and Vision

    Oct 13, 2026Yifan Lan, Zhongye Liu, Yurui Chang +4Adversarial RobustnessMultimodal Robustness

    The Pennsylvania State University

  20. Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion

    Oct 12, 2026Ali Javeri, Javad Hezareh, Radin Shahdaei +1Adversarial RobustnessAdversarial Attacks

    Department of Computer Engineering, Sharif University of Technology, Tehran, Iran

  21. Beyond User-Side Defenses: Image Protection in Open-Weight Diffusion Models

    Oct 12, 2026Jihye Kang, Jiwon Park, Namhyuk AhnDiffusion ModelsAdversarial Robustness

    Department of Electrical and Computer Engineering, Inha University

  22. Adversarial Robustness of Camera-Radar Sensor Fusion for Autonomous Driving

    Oct 12, 2026Ce Zhou, Yubo Wu, Khang Nguyen +3Camera-Radar FusionAdversarial Robustness

    Missouri University of Science and Technology, USA · Virginia Tech, USA · Michigan State University, USA

  23. Robust Detection of Directional Adversarial Attacks in Deep Neural Networks for Radiological Imaging

    Oct 11, 2026Tristan Malatyński, Joanna Jaworek-KorjakowskaAdversarial Example DetectionAdversarial Attacks

    AGH University of Kraków, Poland Center of Excellence in Artificial Intelligence

  24. Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification

    Oct 11, 2026Rui Zhang, Xinle Cao, Huazhen Yu +2Adversarial Example DetectionAdversarial Robustness

    Nanjing University of Aeronautics and Astronautics · The State Key Laboratory of Blockchain and Data Security, Zhejiang University · Nanjing University of Information Science and Technology

  25. Adversarial Gradient Forcing for Robust Few-Step Autoregressive Video Generation

    Oct 10, 2026Chenxi Xia, Yixuan Xu, Shan Liu +7Autoregressive Video GenerationLong-Horizon Video Generation

    Zhejiang University · Alibaba Group · Nanjing University

  26. Natural Code Transformation Confuses Agents in Vulnerability Analysis

    Oct 9, 2026Jie Zhu, Ronik Bhaskar, Heather Zheng +2AI Agent SecurityAdversarial Robustness

    University of Chicago

  27. QCLR: A Plug-in Robustification Module via Quantization for Contrastive Learning in Self-Supervised Skeleton-Based Human Action Recognition

    Oct 9, 2026Nanzhu Chen, Feixiang He, Yunfeng Diao +2Adversarial RobustnessSkeleton-Based Action Recognition

    University of Leeds, Leeds, United Kingdom · Central South University, Changsha, China · Hefei University of Technology, Hefei, China +1

  28. RobustLDS: Learning linear dynamical systems under adversarial corruptions

    Oct 8, 2026Aravinda Kanchana Ruwanpathirana, Hemant TyagiSystem IdentificationRobust Estimation

    Division of Mathematical Sciences, SPMS, NTU Singapore 637371

  29. Collaboratively Guided Adversarial Robust Distillation with Teacher-Favorable Examples

    Oct 8, 2026Zhi Li, Haowei Liu, Hongchen Yang +4Adversarial RobustnessAdversarial Knowledge Distillation

    Engineering Research Center of Cyberspace and School of Software and AI, Yunnan University, Kunming, China · School of Information Science and Technology, Yunnan Normal University, Kunming, China

  30. How Hackable Is Your Speech Quality Metric? A Corrected Protocol, a Benchmark, and What Patching Buys

    Oct 7, 2026Ali Alavi, Donald S. WilliamsonAdversarial RobustnessAdversarial Attacks

    Dept. of Computer Science and Engineering The Ohio State University