---
title: "Adversarial robustness research: papers and trends"
description: "From 2017 to 2026 (so far), the keyword “adversarial robustness” appeared in 740 papers in the tracked journals, most of them in AI (669), information systems (56) and operations research (10)."
url: https://scholar4ai.com/keywords/adversarial-robustness
markdown_url: https://scholar4ai.com/keywords/adversarial-robustness.md
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
share_text: "From 2017 to 2026 (so far), the keyword “adversarial robustness” appeared in 740 papers in the tracked journals, most of them in AI (669), information systems (56) and operations research (10). (as of 2026-11-05)"
data_url: https://scholar4ai.com/data/rankings.json
updated: 2026-11-05T06:02:37+09:00
window: 2026-10-07 to 2026-11-05
source: OpenAlex (CC0)
---

# Papers on “adversarial robustness”

[Browse research topics](https://scholar4ai.com/keywords/directory.md)

Research on “adversarial robustness” in the 480 tracked journals: papers per year and category, the journals, institutions and countries publishing it, the keywords studied with it and its most-cited papers. It is not among the most frequent keywords of the last 30 days, so this page has no list of its latest papers.

Back to the ranking: https://scholar4ai.com/rankings/keywords.md

## Key findings

- From 2017 to 2026 (so far), the keyword “adversarial robustness” appeared in 740 papers in the tracked journals, most of them in AI (669), information systems (56) and operations research (10).
- 155 of them were published in 2025, against 4 in 2017.
- Since 2023, the institutions with the most of these papers were Chinese Academy of Sciences (28), Tsinghua University (18) and Harbin Institute of Technology (16).
- The journals publishing most of them were Neural Networks (53), Pattern Recognition (51) and IEEE Transactions on Pattern Analysis and Machine Intelligence (50).
- The most-cited of them is “Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization” (International Journal of Computer Vision, 2019), with 6,898 citations.

## Papers per year

*Papers per publication year and category*

| Category | 2017 | 2018 | 2019 | 2020 | 2021 | 2022 | 2023 | 2024 | 2025 | 2026 (so far) |
|---|---:|---:|---:|---:|---:|---:|---:|---:|---:|---:|
| [AI](https://scholar4ai.com/categories/ai.md) | 3 | 1 | 10 | 27 | 42 | 80 | 84 | 122 | 143 | 157 |
| [Information Systems](https://scholar4ai.com/categories/information-systems.md) | 0 | 0 | 2 | 3 | 3 | 11 | 15 | 10 | 6 | 6 |
| [Operations Research](https://scholar4ai.com/categories/operations-research.md) | 1 | 0 | 0 | 0 | 0 | 1 | 1 | 2 | 4 | 1 |
| [Statistics](https://scholar4ai.com/categories/statistics.md) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 2 | 1 |
| [Higher Education and Research](https://scholar4ai.com/categories/higher-education-and-research.md) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| All categories | 4 | 1 | 12 | 30 | 45 | 92 | 100 | 135 | 155 | 166 |

## Where the papers come from

*Journals with the most papers, since 2023*

| # | Journal | Papers |
|---:|---|---:|
| 1 | [Neural Networks](https://scholar4ai.com/journals/neural-networks.md) | 53 |
| 2 | [Pattern Recognition](https://scholar4ai.com/journals/pattern-recognition.md) | 51 |
| 3 | [IEEE Transactions on Pattern Analysis and Machine Intelligence](https://scholar4ai.com/journals/ieee-transactions-on-pattern-analysis-and-machine-intelligence.md) | 50 |
| 4 | [Expert Systems with Applications](https://scholar4ai.com/journals/expert-systems-with-applications.md) | 49 |
| 5 | [Information Sciences](https://scholar4ai.com/journals/information-sciences.md) | 36 |
| 6 | [Computers & Security](https://scholar4ai.com/journals/computers-security.md) | 36 |
| 7 | [IEEE Transactions on Neural Networks and Learning Systems](https://scholar4ai.com/journals/ieee-transactions-on-neural-networks-and-learning-systems.md) | 34 |
| 8 | [Knowledge-Based Systems](https://scholar4ai.com/journals/knowledge-based-systems.md) | 33 |
| 9 | [Neural Computing and Applications](https://scholar4ai.com/journals/neural-computing-and-applications.md) | 24 |
| 10 | [International Journal of Computer Vision](https://scholar4ai.com/journals/international-journal-of-computer-vision.md) | 23 |

*Institutions with the most papers, since 2023*

| # | Institution | Papers |
|---:|---|---:|
| 1 | [Chinese Academy of Sciences](https://scholar4ai.com/institutions/chinese-academy-of-sciences.md) | 28 |
| 2 | [Tsinghua University](https://scholar4ai.com/institutions/tsinghua-university.md) | 18 |
| 3 | [Harbin Institute of Technology](https://scholar4ai.com/institutions/harbin-institute-of-technology.md) | 16 |
| 4 | [Nanyang Technological University](https://scholar4ai.com/institutions/nanyang-technological-university.md) | 16 |
| 5 | [South China University of Technology](https://scholar4ai.com/institutions/south-china-university-of-technology.md) | 16 |
| 6 | [Beihang University](https://scholar4ai.com/institutions/beihang-university.md) | 15 |
| 7 | [National University of Defense Technology](https://scholar4ai.com/institutions/national-university-of-defense-technology.md) | 15 |
| 8 | [Peng Cheng Laboratory](https://scholar4ai.com/institutions/peng-cheng-laboratory.md) | 15 |
| 9 | [University of Chinese Academy of Sciences](https://scholar4ai.com/institutions/university-of-chinese-academy-of-sciences.md) | 15 |
| 10 | [Sichuan University](https://scholar4ai.com/institutions/sichuan-university.md) | 14 |

*Countries with the most papers, since 2023*

| # | Country | Papers |
|---:|---|---:|
| 1 | China | 350 |
| 2 | United States | 62 |
| 3 | United Kingdom | 42 |
| 4 | Australia | 33 |
| 5 | Hong Kong | 32 |
| 6 | Singapore | 32 |
| 7 | Italy | 25 |
| 8 | India | 23 |
| 9 | South Korea | 21 |
| 10 | Germany | 17 |

*Keywords with the most papers, since 2023*

| # | Keyword | Papers |
|---:|---|---:|
| 1 | adversarial training | 107 |
| 2 | [adversarial attacks](https://scholar4ai.com/keywords/adversarial-attacks.md) | 106 |
| 3 | adversarial examples | 71 |
| 4 | black-box attacks | 53 |
| 5 | [image classification](https://scholar4ai.com/keywords/image-classification.md) | 47 |
| 6 | [deep neural network](https://scholar4ai.com/keywords/deep-neural-network.md) | 39 |
| 7 | adversarial defense | 37 |
| 8 | backdoor attacks | 35 |
| 9 | [graph neural networks](https://scholar4ai.com/keywords/graph-neural-networks.md) | 32 |

## Most-cited papers

*Most-cited papers since 2017*

| # | Citations | Per month | Title | Journal | Published | Authors |
|---:|---:|---:|---|---|---|---|
| 1 | 6,898 | 81.3 | [Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization](https://doi.org/10.1007/s11263-019-01228-7) | [International Journal of Computer Vision](https://scholar4ai.com/journals/international-journal-of-computer-vision.md) | 2019-10-11 | Ramprasaath R. Selvaraju, Michael Cogswell, Abhishek Das et al. |
| 2 | 827 | 11.9 | [Salient Object Detection in the Deep Learning Era: An In-Depth Survey](https://doi.org/10.1109/tpami.2021.3051099) | [IEEE Transactions on Pattern Analysis and Machine Intelligence](https://scholar4ai.com/journals/ieee-transactions-on-pattern-analysis-and-machine-intelligence.md) | 2021-01-13 | Wenguan Wang, Qiuxia Lai, Huazhu Fu et al. |
| 3 | 548 | 11.5 | [Privacy and Robustness in Federated Learning: Attacks and Defenses](https://doi.org/10.1109/tnnls.2022.3216981) | [IEEE Transactions on Neural Networks and Learning Systems](https://scholar4ai.com/journals/ieee-transactions-on-neural-networks-and-learning-systems.md) | 2022-11-10 | Lingjuan Lyu, Han Yu, Xingjun Ma et al. |
| 4 | 506 | 10.2 | [Interpretable deep learning: interpretation, interpretability, trustworthiness, and beyond](https://doi.org/10.1007/s10115-022-01756-8) | [Knowledge and Information Systems](https://scholar4ai.com/journals/knowledge-and-information-systems.md) | 2022-09-14 | Xuhong Li, Haoyi Xiong, Xingjian Li et al. |
| 5 | 288 | 2.6 | [Analysis of classifiers’ robustness to adversarial perturbations](https://doi.org/10.1007/s10994-017-5663-3) | [Machine Learning](https://scholar4ai.com/journals/machine-learning.md) | 2017-08-25 | Alhussein Fawzi, Omar Fawzi, Pascal Frossard B |

## Cite this page

Scholar4AI. (2026). Papers on “adversarial robustness”. Journal and Conference Research Rankings. Retrieved November 5, 2026, from https://scholar4ai.com/keywords/adversarial-robustness

```bibtex
@misc{scholar4ai-keywords-adversarial-robustness,
  author = {{Scholar4AI}},
  title = {Papers on “adversarial robustness”},
  year = {2026},
  howpublished = {\url{https://scholar4ai.com/keywords/adversarial-robustness}},
  urldate = {2026-11-05},
  note = {Journal and Conference Research Rankings; data from OpenAlex (CC0); licensed CC BY-NC 4.0}
}
```

License: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/).