对抗鲁棒论文趋势 2023–2026
对抗样本与防御
统计范围:NeurIPS、ICLR、ICML、CVPR 四个会议,2023–2026 年,共 1,291 篇被归入该主题的论文。
主要结论
- 对抗鲁棒论文从 2023 年的 313 篇增长到 2026 年的 317 篇,三年间扩大到约 1.0 倍。
- NeurIPS 是发对抗鲁棒论文最多的会议,2023–2026 年共 422 篇,占四个会议总量的 33%。
- 交叉方向里涨得最快的是对齐与安全:同时属于两个主题的论文从 2023 年的 13 篇增至 2026 年的 56 篇。
- 在「安全与可信」的 5 个主题里,它的 2026 年论文数排第 1;同组增长最快的水印是 9.3 倍,对抗鲁棒是 1.0 倍。
各会议论文数
按年份和会议统计
| 年份 | NeurIPS | ICLR | ICML | CVPR | 合计 |
|---|---|---|---|---|---|
| 2023 | 100 | 79 | 60 | 74 | 313 |
| 2024 | 131 | 70 | 73 | 60 | 334 |
| 2025 | 110 | 88 | 85 | 44 | 327 |
| 2026 | 81 | 94 | 93 | 49 | 317 |
代表论文
按年份和会议均匀挑选,方便快速看到每一届的样貌
- NeurIPS 2026A Little Robustness Is All You Need: Leveraging Predictions for Contextual Optimization
- ICML 2026Bias in Zeroth-Order Normal Estimation for Decision-Based Attacks
- ICLR 2026CERTIFIED VS. EMPIRICAL ADVERSARIAL ROBUSTNESS VIA HYBRID CONVOLUTIONS WITH ATTENTION STOCHASTICITY
- CVPR 2026A Combination of Noise and Bilateral Filters Achieve Supralinear and
- NeurIPS 2025A Unified Approach to Submodular Maximization Under Noise
- ICML 2025Adversarial Perturbations Are Formed by Iteratively Learning Linear Combinations of the Right Singular Vectors of the Adversarial Jacobian
- ICLR 2025$\sigma$-zero: Gradient-based Optimization of $\ell_0$-norm Adversarial Examples
- CVPR 2025A Unified, Resilient, and Explainable Adversarial Patch Detector
- NeurIPS 2024A StrongREJECT for Empty Jailbreaks
- ICML 2024Adversarial Attacks on Combinatorial Multi-Armed Bandits
- ICLR 2024An LLM can Fool Itself: A Prompt-Based Adversarial Attack
- CVPR 2024Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization
- NeurIPS 2023A Closer Look at the Robustness of Contrastive Language-Image Pre-Training (CLIP)
- ICML 2023A Law of Robustness beyond Isoperimetry
- ICLR 2023A law of adversarial risk, interpolation, and label noise
- CVPR 2023Adversarial Normalization: I Can Visualize Everything (ICE)
- NeurIPS 2026A Regularization-Based Approach to Public Belief State Search for Adversarial Games
- ICML 2026CaliDist: Calibrating Large Language Models via Behavioral Robustness to Distraction
- ICLR 2026Conformal Robustness Control: A New Strategy for Robust Decision
- CVPR 2026A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large
全部对抗鲁棒论文
共 1,290 篇,第 13 / 26 页
- NeurIPS 2025No-Regret Learning Under Adversarial Resource Constraints: A Spending Plan Is All You Need!
- NeurIPS 2025On the Optimality of the Median-of-Means Estimator under Adversarial Contamination
- NeurIPS 2025On the Robustness of Transformers against Context Hijacking for Linear Classification
- NeurIPS 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks
- NeurIPS 2025Optimal Control for Transformer Architectures: Enhancing Generalization, Robustness and Efficiency
- NeurIPS 2025OSTAR: Optimized Statistical Text-classifier with Adversarial Resistance
- NeurIPS 2025Parameter-free Algorithms for the Stochastically Extended Adversarial Model
- NeurIPS 2025PCA++: How Uniformity Induces Robustness to Background Noise in Contrastive Learning
- NeurIPS 2025Regret Bounds for Adversarial Contextual Bandits with General Function Approximation and Delayed Feedback
- NeurIPS 2025ReliabilityRAG: Effective and Provably Robust Defense for RAG-based Web-Search
- NeurIPS 2025Remarkable Robustness of LLMs: Stages of Inference?
- NeurIPS 2025Reverse Engineering Human Preferences with Reinforcement Learning
- NeurIPS 2025Robust Equilibria in Continuous Games: From Strategic to Dynamic Robustness
- NeurIPS 2025Robust learning of halfspaces under log-concave marginals
- NeurIPS 2025Robust Satisficing Gaussian Process Bandits Under Adversarial Attacks
- NeurIPS 2025Robust SuperAlignment: Weak-to-Strong Robustness Generalization for Vision-Language Models
- NeurIPS 2025Robustifying Learning-Augmented Caching Efficiently without Compromising 1-Consistency
- NeurIPS 2025Robustness in Both Domains: CLIP Needs a Robust Text Encoder
- NeurIPS 2025Sample Complexity of Distributionally Robust Average-Reward Reinforcement Learning
- NeurIPS 2025Scalable Neural Network Geometric Robustness Validation via Hölder Optimisation
- NeurIPS 2025Scaling Data-Driven Probabilistic Robustness Analysis for Semantic Segmentation Neural Networks
- NeurIPS 2025SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations
- NeurIPS 2025Self-Refining Language Model Anonymizers via Adversarial Distillation
- NeurIPS 2025Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence
- NeurIPS 2025Statistical Analysis of an Adversarial Bayesian Weak Supervision Method
- NeurIPS 2025Stochastic Shortest Path with Sparse Adversarial Costs
- NeurIPS 2025Taming Adversarial Constraints in CMDPs
- NeurIPS 2025The Cost of Compression: Tight Quadratic Black-Box Attacks on Sketches for $\ell_2$ Norm Estimation
- NeurIPS 2025The Cost of Robustness: Tighter Bounds on Parameter Complexity for Robust Memorization in ReLU Nets
- NeurIPS 2025The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition
- NeurIPS 2025The Good, the Bad and the Ugly: Meta-Analysis of Watermarks, Transferable Attacks and Adversarial Defenses
- NeurIPS 2025The Impact of Coreset Selection on Spurious Correlations and Group Robustness
- NeurIPS 2025The Implicit Bias of Structured State Space Models Can Be Poisoned With Clean Labels
- NeurIPS 2025The Right to Red-Team: Adversarial AI Literacy as a Civic Imperative in K-12 Education
- NeurIPS 2025The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples
- NeurIPS 2025Theoretical Guarantees for the Retention of Strict Nash Equilibria by Coevolutionary Algorithms
- NeurIPS 2025Transstratal Adversarial Attack: Compromising Multi-Layered Defenses in Text-to-Image Models
- NeurIPS 2025Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuits
- NeurIPS 2025Understanding and Improving Fast Adversarial Training against $l_0$ Bounded Perturbations
- NeurIPS 2025Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2
- NeurIPS 2025Vulnerable Data-Aware Adversarial Training
- NeurIPS 2025When Are Concepts Erased From Diffusion Models?
- NeurIPS 2025When Does Closeness in Distribution Imply Representational Similarity? An Identifiability Perspective
- CVPR 20241-Lipschitz Layers Compared: Memory Speed and Certifiable Robustness
- CVPR 2024A Bayesian Approach to OOD Robustness in Image Classification
- CVPR 2024ACT-Diffusion: Efficient Adversarial Consistency Training for One-step Diffusion Models
- CVPR 2024Adversarial Backdoor Attack by Naturalistic Data Poisoning on Trajectory Prediction in Autonomous Driving
- CVPR 2024Adversarial Distillation Based on Slack Matching and Attribution Region Alignment
- CVPR 2024Adversarial Score Distillation: When score distillation meets GAN
- CVPR 2024ASAM: Boosting Segment Anything Model with Adversarial Tuning
在 Claude、Cursor 里直接问这个趋势
接上 Paperlist MCP 后,写综述、挑方向或准备投稿时,不用离开对话框就能拿到这页的数字:每年各会议的论文数、增长倍数、涨得最快的子方向和代表论文,AI 会按你的问题整理。
可以直接复制这句话问 AI
用 paperlist 查对抗鲁棒在 NeurIPS 2023–2026 的论文趋势,哪一年涨得最快?
AI 会调用的工具:get_topic_stats {"topic": "adversarial-robustness"}
常见问题
- 2023–2026 年四大会议一共有多少篇对抗鲁棒论文?
- 共 1,291 篇,按年份分别是 2023 年 313 篇、2024 年 334 篇、2025 年 327 篇、2026 年 317 篇。
- NeurIPS 2026 有多少篇对抗鲁棒论文?
- NeurIPS 2026 有 81 篇对抗鲁棒论文,上一届是 110 篇。
- ICLR 2026 有多少篇对抗鲁棒论文?
- ICLR 2026 有 94 篇对抗鲁棒论文,上一届是 88 篇。
- ICML 2026 有多少篇对抗鲁棒论文?
- ICML 2026 有 93 篇对抗鲁棒论文,上一届是 85 篇。
- CVPR 2026 有多少篇对抗鲁棒论文?
- CVPR 2026 有 49 篇对抗鲁棒论文,上一届是 44 篇。
- 哪个会议的对抗鲁棒论文最多?
- NeurIPS,2023–2026 年共 422 篇。