Adversarial Robustness papers, 2023–2026

Key findings

• Adversarial Robustness went from 313 papers in 2023 to 317 in 2026, roughly 1.0x in three years.
• NeurIPS publishes the most Adversarial Robustness work: 422 papers from 2023 to 2026, 33% of the four-venue total.
• The fastest-growing overlap is with Alignment and Safety: papers tagged with both rose from 13 in 2023 to 56 in 2026.
• Among the 5 topics under Security and Trust, it ranks #1 by 2026 paper count; the fastest grower in the group, Watermarking, is up 9.3x versus 1.0x here.

Representative papers

Spread across years and venues so every edition shows up

• NeurIPS 2026A Little Robustness Is All You Need: Leveraging Predictions for Contextual Optimization
• ICML 2026Bias in Zeroth-Order Normal Estimation for Decision-Based Attacks
• ICLR 2026CERTIFIED VS. EMPIRICAL ADVERSARIAL ROBUSTNESS VIA HYBRID CONVOLUTIONS WITH ATTENTION STOCHASTICITY
• CVPR 2026A Combination of Noise and Bilateral Filters Achieve Supralinear and
• NeurIPS 2025A Unified Approach to Submodular Maximization Under Noise
• ICML 2025Adversarial Perturbations Are Formed by Iteratively Learning Linear Combinations of the Right Singular Vectors of the Adversarial Jacobian
• ICLR 2025$\sigma$-zero: Gradient-based Optimization of $\ell_0$-norm Adversarial Examples
• CVPR 2025A Unified, Resilient, and Explainable Adversarial Patch Detector
• NeurIPS 2024A StrongREJECT for Empty Jailbreaks
• ICML 2024Adversarial Attacks on Combinatorial Multi-Armed Bandits
• ICLR 2024An LLM can Fool Itself: A Prompt-Based Adversarial Attack
• CVPR 2024Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization
• NeurIPS 2023A Closer Look at the Robustness of Contrastive Language-Image Pre-Training (CLIP)
• ICML 2023A Law of Robustness beyond Isoperimetry
• ICLR 2023A law of adversarial risk, interpolation, and label noise
• CVPR 2023Adversarial Normalization: I Can Visualize Everything (ICE)
• NeurIPS 2026A Regularization-Based Approach to Public Belief State Search for Adversarial Games
• ICML 2026CaliDist: Calibrating Large Language Models via Behavioral Robustness to Distraction
• ICLR 2026Conformal Robustness Control: A New Strategy for Robust Decision
• CVPR 2026A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large

All Adversarial Robustness papers

1,290 papers, page 14 of 26

651. CVPR 2024Attack To Defend: Exploiting Adversarial Attacks for Detecting Poisoned Models
652. CVPR 2024Boosting Adversarial Training via Fisher-Rao Norm-based Regularization
653. CVPR 2024Boosting Adversarial Transferability by Block Shuffle and Rotation
654. CVPR 2024CausalPC: Improving the Robustness of Point Cloud Classification by Causal Effect Identification
655. CVPR 2024DAP: A Dynamic Adversarial Patch for Evading Person Detectors
656. CVPR 2024Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization
657. CVPR 2024Defense without Forgetting: Continual Adversarial Defense with Anisotropic & Isotropic Pseudo Replay
658. CVPR 2024DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection
659. CVPR 2024Dispel Darkness for Better Fusion: A Controllable Visual Enhancer based on Cross-modal Conditional Adversarial Learning
660. CVPR 2024Ensemble Diversity Facilitates Adversarial Transferability
661. CVPR 2024ExMap: Leveraging Explainability Heatmaps for Unsupervised Group Robustness to Spurious Correlations
662. CVPR 2024Focus on Hiders: Exploring Hidden Threats for Enhancing Adversarial Training
663. CVPR 2024Friendly Sharpness-Aware Minimization
664. CVPR 2024Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds
665. CVPR 2024Improving Transferable Targeted Adversarial Attacks with Model Self-Enhancement
666. CVPR 2024Incorporating Geo-Diverse Knowledge into Prompting for Increased Geographical Robustness in Object Recognition
667. CVPR 2024Infrared Adversarial Car Stickers
668. CVPR 2024Initialization Matters for Adversarial Transfer Learning
669. CVPR 2024Label-Efficient Group Robustness via Out-of-Distribution Concept Curation
670. CVPR 2024Language-Driven Anchors for Zero-Shot Adversarial Robustness
671. CVPR 2024Learning to Transform Dynamically for Better Adversarial Transferability
672. CVPR 2024MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model
673. CVPR 2024MMCert: Provable Defense against Adversarial Attacks to Multi-modal Models
674. CVPR 2024Model Inversion Robustness: Can Transfer Learning Help?
675. CVPR 2024NAPGuard: Towards Detecting Naturalistic Adversarial Patches
676. CVPR 2024On the Robustness of Language Guidance for Low-Level Vision Tasks: Findings from Depth Estimation
677. CVPR 2024On the Robustness of Large Multimodal Models Against Image Adversarial Attacks
678. CVPR 2024One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models
679. CVPR 2024PAD: Patch-Agnostic Defense against Adversarial Patch Attacks
680. CVPR 2024PeerAiD: Improving Adversarial Distillation from a Specialized Peer Tutor
681. CVPR 2024Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving
682. CVPR 2024Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness
683. CVPR 2024Revisiting Adversarial Training at Scale
684. CVPR 2024Revisiting Adversarial Training Under Long-Tailed Distributions
685. CVPR 2024Robust Distillation via Untargeted and Targeted Intermediate Adversarial Samples
686. CVPR 2024Robust Image Denoising through Adversarial Frequency Mixup
687. CVPR 2024Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM
688. CVPR 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Models
689. CVPR 2024Semantic-Aware Multi-Label Adversarial Attacks
690. CVPR 2024SlowFormer: Adversarial Attack on Compute and Energy Consumption of Efficient Vision Transformers
691. CVPR 2024Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement
692. CVPR 2024Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning
693. CVPR 2024Structure-Guided Adversarial Training of Diffusion Models
694. CVPR 2024Structured Gradient-based Interpretations via Norm-Regularized Adversarial Training
695. CVPR 2024Towards Fairness-Aware Adversarial Learning
696. CVPR 2024Towards Robust 3D Pose Transfer with Adversarial Learning
697. CVPR 2024Towards Transferable Targeted 3D Adversarial Attack in the Physical World
698. CVPR 2024Towards Understanding and Improving Adversarial Robustness of Vision Transformers
699. CVPR 2024Transferable Structural Sparse Adversarial Attack Via Exact Group Sparsity Training
700. CVPR 2024Unexplored Faces of Robustness and Out-of-Distribution: Covariate Shifts in Environment and Sensor Domains

FAQ

How many Adversarial Robustness papers were published at NeurIPS, ICLR, ICML and CVPR from 2023 to 2026?

1,291 in total: 313 in 2023, 334 in 2024, 327 in 2025, 317 in 2026.

How many Adversarial Robustness papers are at NeurIPS 2026?

NeurIPS 2026 has 81 Adversarial Robustness papers, versus 110 the year before.

How many Adversarial Robustness papers are at ICLR 2026?

ICLR 2026 has 94 Adversarial Robustness papers, versus 88 the year before.

How many Adversarial Robustness papers are at ICML 2026?

ICML 2026 has 93 Adversarial Robustness papers, versus 85 the year before.

How many Adversarial Robustness papers are at CVPR 2026?

CVPR 2026 has 49 Adversarial Robustness papers, versus 44 the year before.

Which conference publishes the most Adversarial Robustness papers?

NeurIPS, with 422 papers from 2023 to 2026.