---
title: Evaluating Adversarial Robustness: A Comparison Of FGSM, Carlini-Wagner Attacks, And The Role of Distillation as Defense Mechanism
url: https://www.ml-quant.com/papers/arxiv/2404.04245/
site: ML-Quant (https://www.ml-quant.com)
updated: 2026-09-26
license: Summaries CC BY 4.0; links go to the original sources
index: https://www.ml-quant.com/llms.txt
identifier: arXiv:2404.04245
source_url: https://arxiv.org/abs/2404.04245
featured: 2024-04-10
citations: 3
topic: ML & AI Methods
---


# Evaluating Adversarial Robustness: A Comparison Of FGSM, Carlini-Wagner Attacks, And The Role of Distillation as Defense Mechanism

The study investigates adversarial attacks on Deep Neural Networks for image classification, highlighting the Fast Gradient Sign Method and the Carlini-Wagner approach, and suggests defensive distillation as a defense, effective against FGSM but vulnerable to CW attacks.

- Source: https://arxiv.org/abs/2404.04245
- Identifier: arXiv:2404.04245
- Released: 2024-04-05
- First featured: Quant Letter No. 44 (2024-04-10): https://www.ml-quant.com/issues/2024-04-10/
- Citations (Semantic Scholar): 3
- Published in: not yet
- Topic: ML & AI Methods

## Related

- [Edge Directionality Improves Learning on Heterophilic Graphs](https://www.ml-quant.com/papers/arxiv/2305.10498/): The study presents Directed Graph Neural Network (Dir-GNN), a new deep learning framework for directed graphs that surpasses traditional models in heterophilic benchmarks.
- [Modular Duality in Deep Learning](https://www.ml-quant.com/papers/arxiv/2410.21265/): The article presents a new theory of modular dualization for general neural networks, providing a theoretical basis for fast and scalable training algorithms, potentially leading to a new generation of optimizers for neural architectures.
- [Can overfitted deep neural networks in adversarial training generalize? - An approximation viewpoint](https://www.ml-quant.com/papers/arxiv/2401.13624/): The study offers a theoretical insight into the robust overfitting issue in adversarial training on over-parameterized deep neural networks (DNNs), showing that overfitting can be avoided and a robust generalization gap is unavoidable, with the model capacity requirement depending on the target function's smoothness.
- [GraphCNNpred: A stock market indices prediction using a Graph based deep learning system](https://www.ml-quant.com/papers/arxiv/2407.03760/): Stock Prediction: The paper introduces a graph neural network-based convolutional neural network model for predicting stock market prices, using custom feature engineering on diverse data sources.
- [Topological Generalization Bounds for Discrete-Time Stochastic Optimization Algorithms](https://www.ml-quant.com/papers/arxiv/2407.08723/): The research proposes a new set of topology-based complexity notions that correlate with the generalization gap in deep neural networks, offering a computationally efficient way to predict generalization without test data, and surpassing existing topological bounds across various datasets and models.
- [Weight Block Sparsity: Training, Compilation, and AI Engine Accelerators](https://www.ml-quant.com/papers/arxiv/2407.09453/): The paper proposes a system that applies weight block sparsity in Deep Neural Networks, halving the weight with minimal accuracy loss and doubling the speed of inference.