arXiv Computer Vision
Feature-Space Smoothing: Certified Robustness of Deep Representations
Read the original on arXiv Computer Vision →The Flow has not summarised this story yet — read it at arXiv Computer Vision.
Related stories
arXiv Machine Learning
Aug 4
DeepDefense: Robust Learning via Layer-Wise Gradient-Feature Alignment
arXiv:2511. 13749v2 Announce Type: replace Abstract: Deep neural networks are known to be vulnerable to adversarial perturbations, which are small, carefully crafted inputs that lead to incorrect predictions.
arXiv Machine Learning
2d ago
A Certified Robustness Framework for Backdoor Poisoning Attacks using $f$-Divergences
arXiv:2610.34934v1 Announce Type: new Abstract: Machine learning systems trained on untrusted data are vulnerable to data and backdoor poisoning attacks, in which an adversary corrupts training and t...
Hugging Face Trending Papers
Jun 2
Investigating Adversarial Robustness of Multi-modal Large Language Models
Multi-modal Large Language Models (MLLMs) achieve strong performance on vision-language tasks, but incorporating visual inputs through a vision encoder (e. g.
arXiv Computer Vision
Sep 7
FSPGD: Rethinking Black-box Attacks on Semantic Segmentation
FSPGD introduces a feature-space black-box attack for semantic segmentation that targets intermediate representations rather than just output logits. The method uses a dual loss: an external loss to disrupt cross-model feature alignment and an internal loss to reduce consistency among same-class instances. Experiments on Pascal VOC 2012 and Cityscapes show that FSPGD outperforms existing logit-level and segmentation-specific attacks across CNN and Transformer backbones, and its adversarial examples improve robustness when used for training.
arXiv Computer Vision
Oct 22
Adversarially Robust Few-Shot Anomaly Detection with Vision Foundation Models
Vision foundation models such as DINOv2 enable strong few‑shot anomaly detection (FSAD) using a frozen backbone and a non‑parametric k‑nearest‑neighbor (k‑NN) scorer. The paper introduces a white‑box attack framework for k‑NN memory‑bank detectors and proposes an adversarially robust FSAD method that is training‑free with respect to the backbone. The defense combines a PatchShift input augmentation and a FeaturePurifier residual MLP, achieving significant gains in image‑level AUROC (~27%) and pixel‑level PRO (~51%) on MVTec‑AD, VisA, and MPDD while maintaining clean accuracy within 3%. whyItMatters:"The work addresses the previously unstudied few‑shot regime for robust anomaly detection, providing a practical, training‑free defense that matches full‑shot adversarially‑trained baselines and improves performance under adversarial attacks."
arXiv Machine Learning
Jun 2
Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness
arXiv:2606. 01746v1 Announce Type: cross Abstract: Modern neural networks are highly susceptible to adversarial perturbations.