{"total":56,"rows":[{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205,"area":"diffusion"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2306.04719","title":"Don't trust your eyes: on the (un)reliability of feature visualizations","created":"2023-06-07","cited_by_count":32,"area":null},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22,"area":null},{"id":"2105.11645","title":"Feature Space Targeted Attacks by Statistic Alignment","created":"2021-05-25","cited_by_count":21,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2206.01367","title":"Adversarial Unlearning: Reducing Confidence Along Adversarial Directions","created":"2022-06-03","cited_by_count":14,"area":"safety"},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2512.07247","title":"AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing","created":"2025-12-08","cited_by_count":10,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2311.14450","title":"Segment (Almost) Nothing: Prompt-Agnostic Adversarial Attacks on Segmentation Models","created":"2023-11-24","cited_by_count":5,"area":null},{"id":"2103.10651","title":"SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2108.07033","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","created":"2021-08-16","cited_by_count":4,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2412.08969","title":"Deep Learning Model Security: Threats and Defenses","created":"2024-12-12","cited_by_count":4,"area":"safety"},{"id":"2312.01679","title":"Adversarial Medical Image with Hierarchical Feature Hiding","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2207.12545","title":"$p$-DkNN: Out-of-Distribution Detection Through Statistical Testing of Deep Representations","created":"2022-07-25","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2108.02010","title":"On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples","created":"2021-08-03","cited_by_count":1,"area":null},{"id":"2111.10969","title":"Medical Aegis: Robust adversarial protectors for medical images","created":"2021-11-22","cited_by_count":1,"area":null},{"id":"2205.14629","title":"Superclass Adversarial Attack","created":"2022-05-29","cited_by_count":1,"area":null},{"id":"2208.07464","title":"An Overview and Prospective Outlook on Robust Training and Certification of Machine Learning Models","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2306.16614","title":"Group-based Robustness: A General Framework for Customized Robustness in the Real World","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2310.19163","title":"RAIFLE: Reconstruction Attacks on Interaction-based Federated Learning with Adversarial Data Manipulation","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2409.04982","title":"2DSig-Detect: a semi-supervised framework for anomaly detection on image data using 2D-signatures","created":"2024-09-08","cited_by_count":1,"area":null},{"id":"2507.18484","title":"Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments","created":"2025-07-24","cited_by_count":1,"area":null},{"id":"2602.08136","title":"Robustness of Vision Language Models Against Split-Image Harmful Input Attacks","created":"2026-02-08","cited_by_count":1,"area":"mllm"},{"id":"2102.04836","title":"Target Training Does Adversarial Training Without Adversarial Samples","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2205.15763","title":"Exact Feature Collisions in Neural Networks","created":"2022-05-31","cited_by_count":0,"area":null},{"id":"2211.16253","title":"Advancing Deep Metric Learning Through Multiple Batch Norms And Multi-Targeted Adversarial Examples","created":"2022-11-29","cited_by_count":0,"area":null},{"id":"2306.06462","title":"Boosting Adversarial Robustness using Feature Level Stochastic Smoothing","created":"2023-06-10","cited_by_count":0,"area":null},{"id":"2406.15635","title":"DataFreeShield: Defending Adversarial Attacks without Training Data","created":"2024-06-21","cited_by_count":0,"area":null},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.18567","title":"Attacking Graph Foundation Models Through Their Shared Representation","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2609.38298","title":"It Takes Little to Rewrite Perception: Targeted Semantic Substitution in Vision-Language Models at $ε\\leq 4/255$","created":"2026-09-29","cited_by_count":0,"area":"mllm"}],"next_cursor":null}