benchmark arXiv Feb 2, 2026 · 9w ago
Kaaustaaub Shankar, Bharadwaj Dogga, Kelly Cohen · University of Cincinnati
Benchmarks adversarial robustness of neuro-fuzzy CNN hybrids under PGD and Square attacks, finding architecture-dependent effects
Input Manipulation Attack vision
Convolutional Neural Networks (CNNs) achieve strong image classification performance but lack interpretability and are vulnerable to adversarial attacks. Neuro-fuzzy hybrids such as DCNFIS replace fully connected CNN classifiers with Adaptive Neuro-Fuzzy Inference Systems (ANFIS) to improve interpretability, yet their robustness remains underexplored. This work compares standard CNNs (ConvNet, VGG, ResNet18) with their ANFIS-augmented counterparts on MNIST, Fashion-MNIST, CIFAR-10, and CIFAR-100 under gradient-based (PGD) and gradient-free (Square) attacks. Results show that ANFIS integration does not consistently improve clean accuracy and has architecture-dependent effects on robustness: ResNet18-ANFIS exhibits improved adversarial robustness, while VGG-ANFIS often underperforms its baseline. These findings suggest that neuro-fuzzy augmentation can enhance robustness in specific architectures but is not universally beneficial.
cnn traditional_ml University of Cincinnati
ML Security Papers