{"total":380,"rows":[{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167,"area":null},{"id":"2310.19156","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","created":"2023-10-29","cited_by_count":159,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2111.09571","title":"Person Re-identification Method Based on Color Attack and Joint Defence","created":"2021-11-18","cited_by_count":56,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2205.13574","title":"Pruning has a disparate impact on model accuracy","created":"2022-05-26","cited_by_count":44,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2501.19361","title":"We're Different, We're the Same: Creative Homogeneity Across LLMs","created":"2025-01-31","cited_by_count":42,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2207.13129","title":"LGV: Boosting Adversarial Example Transferability from Large Geometric Vicinity","created":"2022-07-26","cited_by_count":39,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2303.11470","title":"Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking","created":"2023-03-20","cited_by_count":37,"area":null},{"id":"2303.17297","title":"Understanding the Robustness of 3D Object Detection with Bird's-Eye-View Representations in Autonomous Driving","created":"2023-03-30","cited_by_count":37,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2110.05922","title":"Trivial or impossible -- dichotomous data difficulty masks model differences (on ImageNet and beyond)","created":"2021-10-12","cited_by_count":35,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2405.19074","title":"Resurrecting Old Classes with New Data for Exemplar-Free Continual Learning","created":"2024-05-29","cited_by_count":33,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2308.09861","title":"Black-box Adversarial Attacks against Dense Retrieval Models: A Multi-view Contrastive Learning Method","created":"2023-08-19","cited_by_count":29,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2207.04343","title":"Explaining Chest X-ray Pathologies in Natural Language","created":"2022-07-09","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2102.07788","title":"Universal Adversarial Examples and Perturbations for Quantum Classifiers","created":"2021-02-15","cited_by_count":23,"area":null},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23,"area":null},{"id":"2102.06905","title":"Mixed Nash Equilibria in the Adversarial Examples Game","created":"2021-02-13","cited_by_count":22,"area":null},{"id":"2110.05626","title":"Parameterizing Activation Functions for Adversarial Robustness","created":"2021-10-11","cited_by_count":22,"area":null},{"id":"2112.01156","title":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","created":"2021-12-02","cited_by_count":22,"area":null},{"id":"2112.14337","title":"Closer Look at the Transferability of Adversarial Examples: How They Fool Different Models Differently","created":"2021-12-29","cited_by_count":22,"area":null},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2210.05577","title":"What Can the Neural Tangent Kernel Tell Us About Adversarial Robustness?","created":"2022-10-11","cited_by_count":21,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2403.07937","title":"Speech Robust Bench: A Robustness Benchmark For Speech Recognition","created":"2024-03-08","cited_by_count":21,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2207.10825","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2308.08925","title":"A White-Box False Positive Adversarial Attack Method on Contrastive Loss Based Offline Handwritten Signature Verification Models","created":"2023-08-17","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2104.04107","title":"FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systems","created":"2021-04-08","cited_by_count":14,"area":null},{"id":"2211.14860","title":"Foiling Explanations in Deep Neural Networks","created":"2022-11-27","cited_by_count":14,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2212.11408","title":"Adaptive and Dynamic Multi-Resolution Hashing for Pairwise Summations","created":"2022-12-21","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2101.11310","title":"Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling","created":"2021-01-27","cited_by_count":13,"area":null},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2203.16536","title":"Recent improvements of ASR models in the face of adversarial attacks","created":"2022-03-29","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2204.11075","title":"Smart App Attack: Hacking Deep Learning Models in Android Apps","created":"2022-04-23","cited_by_count":12,"area":null},{"id":"2410.08503","title":"Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Data","created":"2024-10-11","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2101.12090","title":"Adversarial Attacks on Deep Learning Based Power Allocation in a Massive MIMO Network","created":"2021-01-28","cited_by_count":11,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2106.00221","title":"Concurrent Adversarial Learning for Large-Batch Training","created":"2021-06-01","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2204.04063","title":"Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2206.03353","title":"Improving Adversarial Robustness by Putting More Regularizations on Less Robust Samples","created":"2022-06-07","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2109.00542","title":"Shared Certificates for Neural Network Verification","created":"2021-09-01","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null}],"next_cursor":"100"}