{"total":90,"rows":[{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2206.08575","title":"Query-Efficient and Scalable Black-Box Adversarial Attacks on Discrete Sequential Data via Bayesian Optimization","created":"2022-06-17","cited_by_count":22,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15,"area":null},{"id":"2102.01563","title":"On Robustness of Neural Semantic Parsers","created":"2021-02-02","cited_by_count":14,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2305.03655","title":"White-Box Multi-Objective Adversarial Attack on Dialogue Generation","created":"2023-05-05","cited_by_count":14,"area":null},{"id":"2101.06309","title":"Fundamental Tradeoffs in Distributionally Adversarial Training","created":"2021-01-15","cited_by_count":12,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2301.02120","title":"Reprogramming Pretrained Language Models for Protein Sequence Representation Learning","created":"2023-01-05","cited_by_count":12,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2107.03050","title":"Controlled Caption Generation for Images Through Adversarial Attacks","created":"2021-07-07","cited_by_count":9,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2203.05948","title":"Block-Sparse Adversarial Attack to Fool Transformer-Based Text Classifiers","created":"2022-03-11","cited_by_count":9,"area":null},{"id":"2209.06388","title":"TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack","created":"2022-09-14","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2303.14443","title":"No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning","created":"2023-03-25","cited_by_count":7,"area":null},{"id":"2401.12461","title":"Fast Adversarial Training against Textual Adversarial Attacks","created":"2024-01-23","cited_by_count":7,"area":null},{"id":"2104.08453","title":"R&R: Metric-guided Adversarial Sentence Generation","created":"2021-04-17","cited_by_count":6,"area":null},{"id":"2105.10707","title":"Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems","created":"2021-05-22","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2405.14646","title":"Unveiling the Achilles' Heel of NLG Evaluators: A Unified Adversarial Framework Driven by Large Language Models","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2104.08139","title":"Towards Variable-Length Textual Adversarial Attacks","created":"2021-04-16","cited_by_count":5,"area":null},{"id":"2108.10015","title":"Semantic-Preserving Adversarial Text Attacks","created":"2021-08-23","cited_by_count":5,"area":null},{"id":"2111.01528","title":"Effective and Imperceptible Adversarial Textual Attack via Multi-objectivization","created":"2021-11-02","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2109.04608","title":"Spatially Focused Attack against Spatiotemporal Graph Neural Networks","created":"2021-09-10","cited_by_count":4,"area":null},{"id":"2204.13309","title":"Improving robustness of language models from a geometry-aware perspective","created":"2022-04-28","cited_by_count":4,"area":null},{"id":"2302.00094","title":"The Impacts of Unanswerable Questions on the Robustness of Machine Reading Comprehension Models","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2303.01234","title":"Frauds Bargain Attack: Generating Adversarial Text Samples via Word Manipulation Process","created":"2023-03-01","cited_by_count":4,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2102.06800","title":"Reinforcement Learning For Data Poisoning on Graph Neural Networks","created":"2021-02-12","cited_by_count":3,"area":null},{"id":"2105.00996","title":"Robust Learning of Recurrent Neural Networks in Presence of Exogenous Noise","created":"2021-05-03","cited_by_count":3,"area":null},{"id":"2109.04385","title":"Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification","created":"2021-09-09","cited_by_count":3,"area":null},{"id":"2109.06176","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","created":"2021-09-13","cited_by_count":3,"area":null},{"id":"2212.06836","title":"Towards Efficient and Domain-Agnostic Evasion Attack with High-dimensional Categorical Inputs","created":"2022-12-13","cited_by_count":3,"area":null},{"id":"2306.02488","title":"Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacy","created":"2023-06-04","cited_by_count":3,"area":null},{"id":"2402.03477","title":"Arabic Synonym BERT-based Adversarial Examples for Text Classification","created":"2024-02-05","cited_by_count":3,"area":null},{"id":"2402.07562","title":"Discovering Universal Semantic Triggers for Text-to-Image Synthesis","created":"2024-02-12","cited_by_count":3,"area":null},{"id":"2404.09481","title":"SpamDam: Towards Privacy-Preserving and Adversary-Resistant SMS Spam Detection","created":"2024-04-15","cited_by_count":3,"area":null},{"id":"2402.12950","title":"QuanTest: Entanglement-Guided Testing of Quantum Neural Network Systems","created":"2024-02-20","cited_by_count":2,"area":null},{"id":"2406.17793","title":"Deep Learning Approaches for Detecting Adversarial Cyberbullying and Hate Speech in Social Networks","created":"2024-05-30","cited_by_count":2,"area":null},{"id":"2508.11667","title":"Guided Perturbation Sensitivity (GPS): Detecting Adversarial Text via Embedding Stability and Word Importance","created":"2025-08-06","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2112.06276","title":"Quantifying and Understanding Adversarial Examples in Discrete Input Spaces","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2208.08029","title":"A Context-Aware Approach for Textual Adversarial Attack through Probability Difference Guided Beam Search","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2304.00813","title":"Model-Agnostic Reachability Analysis on Deep Neural Networks","created":"2023-04-03","cited_by_count":1,"area":null},{"id":"2304.07980","title":"RNN-Guard: Certified Robustness Against Multi-frame Attacks for Recurrent Neural Networks","created":"2023-04-17","cited_by_count":1,"area":null},{"id":"2402.19076","title":"Pointing out the Shortcomings of Relation Extraction Models with Semantically Motivated Adversarials","created":"2024-02-29","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2106.07851","title":"Code Integrity Attestation for PLCs using Black Box Neural Network Predictions","created":"2021-06-15","cited_by_count":0,"area":null},{"id":"2107.00003","title":"Understanding Adversarial Examples Through Deep Neural Network's Response Surface and Uncertainty Regions","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2107.02895","title":"Bio-Inspired Adversarial Attack Against Deep Neural Networks","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2108.05490","title":"Attacks against Ranking Algorithms with Text Embeddings: a Case Study on Recruitment Algorithms","created":"2021-08-12","cited_by_count":0,"area":null},{"id":"2110.07462","title":"On Adversarial Vulnerability of PHM algorithms: An Initial Study","created":"2021-10-14","cited_by_count":0,"area":null},{"id":"2201.02504","title":"Repairing Adversarial Texts through Perturbation","created":"2021-12-29","cited_by_count":0,"area":null},{"id":"2211.04973","title":"Accelerating Adversarial Perturbation by 50% with Semi-backward Propagation","created":"2022-11-09","cited_by_count":0,"area":null},{"id":"2303.05575","title":"Evaluating the Robustness of Conversational Recommender Systems by Adversarial Examples","created":"2023-03-09","cited_by_count":0,"area":null},{"id":"2307.01488","title":"SCAT: Robust Self-supervised Contrastive Learning via Adversarial Training for Text Classification","created":"2023-07-04","cited_by_count":0,"area":null},{"id":"2403.01118","title":"Adversarial Testing for Visual Grounding via Image-Aware Property Reduction","created":"2024-03-02","cited_by_count":0,"area":null},{"id":"2403.14731","title":"Reversible Jump Attack to Textual Classifiers with Modification Reduction","created":"2024-03-21","cited_by_count":0,"area":null},{"id":"2404.05159","title":"Semantic Stealth: Adversarial Text Attacks on NLP Using Several Methods","created":"2024-04-08","cited_by_count":0,"area":null},{"id":"2501.05962","title":"Effective faking of verbal deception detection with target-aligned adversarial attacks","created":"2025-01-10","cited_by_count":0,"area":null},{"id":"2507.08908","title":"The Engineer's Dilemma: A Review of Establishing a Legal Framework for Integrating Machine Learning in Construction by Navigating Precedents and Industry Expectations","created":"2025-07-11","cited_by_count":0,"area":null},{"id":"2509.08225","title":"Ensemble Distribution Distillation for Self-Supervised Human Activity Recognition","created":"2025-09-10","cited_by_count":0,"area":null},{"id":"2511.11699","title":"Tighter Truncated Rectangular Prism Approximation for RNN Robustness Verification","created":"2025-11-12","cited_by_count":0,"area":null},{"id":"2512.23948","title":"DivQAT: Enhancing Robustness of Quantized Convolutional Neural Networks against Model Extraction Attacks","created":"2025-12-30","cited_by_count":0,"area":null},{"id":"2604.06289","title":"Adversarial Robustness of Time-Series Classification for Crystal Collimator Alignment","created":"2026-04-07","cited_by_count":0,"area":null}],"next_cursor":null}