{"authors":[{"id":"orcid_______::1d759d4f48892e627622432a84b2b801","fullName":"Giorgio Piras","name":null,"surname":null,"rank":1,"pid":{"id":{"scheme":"orcid","value":"0000-0001-8225-6138"},"provenance":null}},{"id":"orcid_______::153c9b865e4d480be0745fa2c902bbc1","fullName":"Maura Pintor","name":null,"surname":null,"rank":2,"pid":{"id":{"scheme":"orcid","value":"0000-0002-1944-2875"},"provenance":null}},{"id":null,"fullName":"Ambra Demontis","name":null,"surname":null,"rank":3,"pid":{"id":{"scheme":"orcid_pending","value":"0000-0001-9318-6913"},"provenance":null}},{"id":null,"fullName":"Battista Biggio","name":null,"surname":null,"rank":4,"pid":{"id":{"scheme":"orcid_pending","value":"0000-0001-7752-509x"},"provenance":null}},{"id":null,"fullName":"Giorgio Giacinto","name":null,"surname":null,"rank":5,"pid":{"id":{"scheme":"orcid_pending","value":"0000-0002-5759-3017"},"provenance":null}},{"id":null,"fullName":"Fabio Roli","name":null,"surname":null,"rank":6,"pid":{"id":{"scheme":"orcid_pending","value":"0000-0003-4103-9190"},"provenance":null}}],"openAccessColor":"hybrid","publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"eng","label":"English"},"countries":[{"code":"IT","label":"Italy","provenance":null}],"subjects":[{"subject":{"scheme":"keyword","value":"FOS: Computer and information sciences"},"provenance":null},{"subject":{"scheme":"keyword","value":"Computer Science - Machine Learning"},"provenance":null},{"subject":{"scheme":"keyword","value":"Computer Science - Cryptography and Security"},"provenance":null},{"subject":{"scheme":"keyword","value":"Computer Vision and Pattern Recognition (cs.CV)"},"provenance":null},{"subject":{"scheme":"FOS","value":"0202 electrical engineering, electronic engineering, information engineering"},"provenance":null},{"subject":{"scheme":"keyword","value":"Computer Science - Computer Vision and Pattern Recognition"},"provenance":null},{"subject":{"scheme":"FOS","value":"02 engineering and technology"},"provenance":null},{"subject":{"scheme":"keyword","value":"Adversarial machine learning; Neural network pruning"},"provenance":null},{"subject":{"scheme":"keyword","value":"Cryptography and Security (cs.CR)"},"provenance":null},{"subject":{"scheme":"keyword","value":"Machine Learning (cs.LG)"},"provenance":null}],"mainTitle":"Adversarial pruning: A survey and benchmark of pruning methods for adversarial robustness","subTitle":null,"descriptions":["Recent work has proposed neural network pruning techniques to reduce the size of a network while preserving robustness against adversarial examples, i.e., well-crafted inputs inducing a misclassification. These methods, which we refer to as adversarial pruning methods, involve complex and articulated designs, making it difficult to analyze the differences and establish a fair and accurate comparison. In this work, we overcome these issues by surveying current adversarial pruning methods and proposing a novel taxonomy to categorize them based on two main dimensions: the pipeline, defining when to prune; and the specifics, defining how to prune. We then highlight the limitations of current empirical analyses and propose a novel, fair evaluation benchmark to address them. We finally conduct an empirical re-evaluation of current adversarial pruning methods and discuss the results, highlighting the shared traits of top-performing adversarial pruning methods, as well as common issues. We welcome contributions in our publicly-available benchmark at https://github.com/pralab/AdversarialPruningBenchmark","Accepted at Pattern Recognition"],"publicationDate":"2025-12-01","publisher":"Elsevier BV","embargoEndDate":"2024-09-01","sources":["Crossref","Pattern Recognition"],"formats":["application/pdf"],"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"Pattern Recognition","issnPrinted":"0031-3203","issnOnline":null,"issnLinking":null,"ep":null,"iss":null,"sp":"111788","vol":"168","edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::548781f5d2fdac141a6ede17006bb0cf","originalIds":["S0031320325004480","10.1016/j.patcog.2025.111788","50|doiboost____|ea97e74b816295e85f4a1ca6423b6dc0","50|datacite____::548781f5d2fdac141a6ede17006bb0cf","10.48550/arxiv.2409.01249","50|od________18::af861ff8a94613f158d18e61570985bc","oai:arXiv.org:2409.01249","50|dblp________::bebf917d63999dd1e64b15c0fc9287a0","50|dblp________::c1b6eab3b7afff387850a4e3ecf092ad","50|od______3705::6e8c1314c40261b60833bbe9b58aa951","oai:iris.unica.it:11584/444845","oai:iris.unige.it:11567/1250056","50|od______3710::5ea1ec512e4195dd53ecb986cf6a96d5","50|r3c4b2081b22::c596a4f25473bac7cf185049ecec0e7a","10.1016/J.PATCOG.2025.111788","50|sygma_______::ea97e74b816295e85f4a1ca6423b6dc0"],"pids":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"},{"scheme":"doi","value":"10.48550/arxiv.2409.01249"},{"scheme":"arXiv","value":"2409.01249"},{"scheme":"handle","value":"11584/444845"},{"scheme":"handle","value":"11567/1250056"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":8.0,"influence":2.7779246E-9,"popularity":7.695913E-9,"impulse":8.0,"citationClass":"C5","influenceClass":"C4","impulseClass":"C4","popularityClass":"C4"}},"projects":[{"id":"corda_____he::1c53907b78bb7a7765ce158190572b73","code":"101120393","acronym":"Sec4AI4Sec","title":"Cybersecurity for AI-Augmented Systems","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101120393"}]},{"id":"corda_____he::11de478d3259cb6c919efec4eea8ae9b","code":"101070617","acronym":"ELSA","title":"European Lighthouse on Secure and Safe AI","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101070617"}]}],"organizations":[{"legalName":"University of Genoa","acronym":"UniGe","id":"openorgs____::53df715e03d652944df3d336afe1181a","pids":[{"scheme":"PIC","value":"999976687"},{"scheme":"OrgReg","value":"IT0028"},{"scheme":"ISNI","value":"0000000121513065"},{"scheme":"Wikidata","value":"Q593321"},{"scheme":"ROR","value":"https://ror.org/0107c5v14"},{"scheme":"FundRef","value":"501100004702"},{"scheme":"mag_id","value":"83816512"},{"scheme":"fundref","value":"501100004702"},{"scheme":"wikidata","value":"Q593321"},{"scheme":"GRID","value":"grid.5606.5"},{"scheme":"OrgRef","value":"456119"}]},{"legalName":"Roma Tre University","acronym":"Roma Tre University","id":"openorgs____::afdd1b299807ddda64d049f555af214d","pids":[{"scheme":"ROR","value":"https://ror.org/05vf0dg29"},{"scheme":"GRID","value":"grid.7841.a"},{"scheme":"ISNI","value":"0000000121622106"},{"scheme":"wikidata","value":"Q2297486"},{"scheme":"OrgRef","value":"2097545"},{"scheme":"mag_id","value":"861853513"},{"scheme":"PIC","value":"999866107"},{"scheme":"FundRef","value":"100019242"},{"scheme":"mag_id","value":"119003972"},{"scheme":"GRID","value":"grid.8509.4"},{"scheme":"OrgReg","value":"IT0063"},{"scheme":"fundref","value":"100008991"},{"scheme":"fundref","value":"100019242"},{"scheme":"FundRef","value":"100008991"},{"scheme":"Wikidata","value":"Q2297486"}]},{"legalName":"Sapienza University of Rome","acronym":"Sapienza University of Rome","id":"openorgs____::cc95c10ffe6f5d37379e99d11246668e","pids":[{"scheme":"GRID","value":"grid.7841.a"},{"scheme":"PIC","value":"999987745"},{"scheme":"OrgReg","value":"IT0068"},{"scheme":"FundRef","value":"100010143"},{"scheme":"OrgRef","value":"1222318"},{"scheme":"Wikidata","value":"Q209344"},{"scheme":"wikidata","value":"Q209344"},{"scheme":"fundref","value":"100010143"},{"scheme":"FundRef","value":"501100004271"},{"scheme":"fundref","value":"501100004271"},{"scheme":"ROR","value":"https://ror.org/02be6w209"}]},{"legalName":"University of Cagliari","acronym":"University of Cagliari","id":"openorgs____::9be673852bd7263f5619812856adc52a","pids":[{"scheme":"Wikidata","value":"Q39918611"},{"scheme":"fundref","value":"501100002772"},{"scheme":"OrgReg","value":"IT0013"},{"scheme":"wikidata","value":"Q39918611"},{"scheme":"PIC","value":"999841663"},{"scheme":"GRID","value":"grid.7763.5"},{"scheme":"wikidata","value":"Q2067315"},{"scheme":"ISNI","value":"0000000417553242"},{"scheme":"OrgRef","value":"4958826"},{"scheme":"fundref","value":"100013003"},{"scheme":"Wikidata","value":"Q2067315"},{"scheme":"ROR","value":"https://ror.org/003109y17"},{"scheme":"FundRef","value":"100013003"},{"scheme":"mag_id","value":"172446870"},{"scheme":"FundRef","value":"501100002772"}]}],"communities":null,"collectedFrom":[{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"},{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"},{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"}],"license":"CC BY","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":"hybrid"},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.111788"],"publicationDate":"2025-12-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::77c2dfd78c0c4e93ed476d70bb13fba3","value":"Pattern Recognition"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"pids":[{"scheme":"doi","value":"10.48550/arxiv.2409.01249"}],"license":"CC BY","type":"Article","urls":["https://dx.doi.org/10.48550/arxiv.2409.01249"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"}},{"pids":[{"scheme":"arXiv","value":"2409.01249"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Preprint","urls":["http://arxiv.org/abs/2409.01249"],"publicationDate":"2024-09-02","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},"collectedFrom":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"}],"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.111788"],"publicationDate":"2025-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.48550/arxiv.2409.01249"}],"type":"Preprint","urls":["https://doi.org/10.48550/arXiv.2409.01249"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"pids":[{"scheme":"handle","value":"11584/444845"}],"alternateIdentifiers":[{"scheme":"urn","value":"https://hdl.handle.net/11584/444845"},{"scheme":"urn","value":"2-s2.0-105005389160"},{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"},{"scheme":"urn","value":"WOS:001502075500012"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.111788","https://hdl.handle.net/11584/444845"],"publicationDate":"2025-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"},"collectedFrom":{"key":"opendoar____::2cfa3753d6a524711acb5fce38eeca1a","value":"Archivio istituzionale della ricerca - Università di Cagliari"}},{"pids":[{"scheme":"handle","value":"11567/1250056"}],"alternateIdentifiers":[{"scheme":"urn","value":"2-s2.0-105005389160"},{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"},{"scheme":"urn","value":"https://hdl.handle.net/11567/1250056"},{"scheme":"urn","value":"WOS:001502075500012"}],"accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1016/j.patcog.2025.111788","https://hdl.handle.net/11567/1250056"],"publicationDate":"2025-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},"collectedFrom":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"}],"type":"Article","urls":["http://dx.doi.org/10.1016/J.PATCOG.2025.111788"],"publicationDate":"2025-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::77c2dfd78c0c4e93ed476d70bb13fba3","value":"Pattern Recognition"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1016/j.patcog.2025.111788"}],"license":"Elsevier TDM","accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["http://dx.doi.org/10.1016/j.patcog.2025.111788"],"refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::1c53907b78bb7a7765ce158190572b73","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk:repository","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"Cybersecurity for AI-Augmented Systems","code":"101120393","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-10-01","endDate":"2026-09-30"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::11de478d3259cb6c919efec4eea8ae9b","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"European Lighthouse on Secure and Safe AI","code":"101070617","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2022-09-01","endDate":"2026-08-31"}],"otherTitles":null,"inDiamondJournal":false,"green":true,"isGreen":true,"isInDiamondJournal":false}