Skip to content
context only
Benchmarks: thin evidence
Time to repro: a few days
1 risk flag

Results & Benchmarks

Freshness tier: cold
Direct + Inferred Evidence
Provably Robust Defense Against Adversarial Patches
ImageNet
Accuracy
95.0
Source: paper fulltext
Provably Robust Defense Against Adversarial Patches
CIFAR-10
Accuracy
99.6
Source: paper fulltext
Adversarial robustness
ImageNet
Accuracy
54.6
Source: paper fulltext
Adversarial robustness
CIFAR-10
Accuracy
95.0
Source: paper fulltext
Provably Robust Defense Against Adversarial Patches
different datasets
Accuracy
76.1
Source: paper fulltext

Benchmark evidence drill-down

6 findings

Audit each benchmark finding before selecting an implementation path. Evidence refs map to the disclosure section below.

Task Dataset Metric Value Source Evidence refs
Provably Robust Defense Against Adversarial Patches ImageNet Accuracy 95.0 paper-derived No explicit refs
Provably Robust Defense Against Adversarial Patches CIFAR-10 Accuracy 99.6 paper-derived No explicit refs
Adversarial robustness ImageNet Accuracy 54.6 paper-derived No explicit refs
Adversarial robustness CIFAR-10 Accuracy 95.0 paper-derived No explicit refs
Provably Robust Defense Against Adversarial Patches different datasets Accuracy 76.1 paper-derived No explicit refs
Adversarial robustness Mask-BN-17 Accuracy 13.3 paper-derived No explicit refs

PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking is the primary contribution described in this paper.

Implementation Evidence Summary

Confidence: low

inspire-group/PatchGuard is the closest maintained adjacent implementation (Title overlap with paper keywords (100%)). It is not paper-verified; validate algorithm and evaluation setup against the paper before trusting reported metrics. Community adoption signal: 74 GitHub stars.

Reproduction Risks

  • Adjacent implementations are not paper-verified
  • Recommended repository is adjacent and not paper-verified.
  • Adjacent implementation match confidence is low.

Hardware Notes

Expect multi-day setup/compute for meaningful reproduction based on current guidance.

Evidence disclosure

Evidence graph: 3 refs, 3 links.

Utility signals: depth 100/100, grounding 85/100, status high.

Implementation Status

No verified maintained repo

There is no verified maintained implementation yet. Use this baseline plan to decide whether to prototype now or defer.

  • No maintained paper-verified implementation was found; start with the closest related repositories below.
  • Compare repo methods against the paper equations/algorithm before trusting metrics.
  • Create a minimal baseline implementation from the paper and use adjacent repos as references.
Time to first repro: a few days

Reproduction readiness

No Repo
Time to first repro: days
Last checked: Jun 20, 2026

Hardware requirements

  • Expect multi-day setup/compute for meaningful reproduction based on current guidance.

No verified implementation available

  • · No maintained repository has been identified for this paper. Check adjacent implementations or HF artifacts below.

Closest related implementations

These are not paper-verified. Use them as reference points when no direct implementation is available.

Hugging Face artifacts

No trustworthy direct or curated related Hugging Face artifacts were found yet.

Continue with targeted Hugging Face searches derived from the paper title and method context:

Tip: start with models, then check datasets/spaces if you need evaluation data or demos.

Direct artifact matches are currently sparse. Use targeted Hugging Face searches to quickly locate candidate models, datasets, and demos.

Search models Search datasets Search spaces

Research context

Tasks

Provably Robust Defense Against Adversarial Patches, Adversarial robustness

Methods

None detected

Domains

None detected

Evaluation & Human Feedback Data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX

Explore Similar Papers

Jump to Paper2Code search queries derived from this paper's research context.

Provably Robust Defense Against Adversarial Patches Adversarial robustness

Need human evaluators for your AI research? Scale annotation with expert AI Trainers.

Post a Job Get a Quote