{"total":167,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2111.09571","title":"Person Re-identification Method Based on Color Attack and Joint Defence","created":"2021-11-18","cited_by_count":56,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2306.07713","title":"Robustness of SAM: Segment Anything Under Corruptions and Beyond","created":"2023-06-13","cited_by_count":31,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2109.09032","title":"JEM++: Improved Techniques for Training JEM","created":"2021-09-19","cited_by_count":28,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2112.08691","title":"Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning","created":"2021-12-16","cited_by_count":25,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2403.20142","title":"StegoGAN: Leveraging Steganography for Non-Bijective Image-to-Image Translation","created":"2024-03-29","cited_by_count":18,"area":null},{"id":"2103.14211","title":"MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakes","created":"2021-03-26","cited_by_count":17,"area":null},{"id":"2209.07959","title":"Towards Bridging the Performance Gaps of Joint Energy-based Models","created":"2022-09-16","cited_by_count":15,"area":null},{"id":"2107.07449","title":"Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving","created":"2021-07-15","cited_by_count":14,"area":null},{"id":"2101.08783","title":"A Person Re-identification Data Augmentation Method with Adversarial Defense Effect","created":"2021-01-21","cited_by_count":13,"area":null},{"id":"2310.10010","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","created":"2023-10-16","cited_by_count":13,"area":null},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2303.01734","title":"AdvART: Adversarial Art for Camouflaged Object Detection Attacks","created":"2023-03-03","cited_by_count":12,"area":null},{"id":"2308.03108","title":"SAAM: Stealthy Adversarial Attack on Monocular Depth Estimation","created":"2023-08-06","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2208.00428","title":"Robust Real-World Image Super-Resolution against Adversarial Attacks","created":"2022-07-31","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2303.01351","title":"APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation","created":"2023-03-02","cited_by_count":10,"area":null},{"id":"2101.03042","title":"Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective","created":"2021-01-08","cited_by_count":9,"area":null},{"id":"2109.14205","title":"On Brightness Agnostic Adversarial Examples Against Face Recognition Systems","created":"2021-09-29","cited_by_count":9,"area":null},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2102.04450","title":"Noise Optimization for Artificial Neural Networks","created":"2021-02-06","cited_by_count":7,"area":null},{"id":"2102.05241","title":"Detecting Localized Adversarial Examples: A Generic Approach using Critical Region Analysis","created":"2021-02-10","cited_by_count":7,"area":null},{"id":"2102.07140","title":"Perceptually Constrained Adversarial Attacks","created":"2021-02-14","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2112.07921","title":"Temporal Shuffling for Defending Deep Action Recognition Models against Adversarial Attacks","created":"2021-12-15","cited_by_count":7,"area":null},{"id":"2109.05820","title":"Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator","created":"2021-09-13","cited_by_count":6,"area":null},{"id":"2406.05810","title":"ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":6,"area":null},{"id":"2503.19791","title":"SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation","created":"2025-03-25","cited_by_count":6,"area":null},{"id":"2508.07402","title":"ForensicsSAM: Toward Robust and Unified Image Forgery Detection and Localization Resisting to Adversarial Attack","created":"2025-08-10","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2206.04762","title":"Data-Efficient Double-Win Lottery Tickets from Robust Pre-training","created":"2022-06-09","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2404.06957","title":"Adversarial purification for no-reference image-quality metrics: applicability study and new methods","created":"2024-04-10","cited_by_count":5,"area":null},{"id":"2404.10790","title":"Multimodal Attack Detection for Action Recognition Models","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2504.04858","title":"Don't Lag, RAG: Training-Free Adversarial Detection Using RAG","created":"2025-04-07","cited_by_count":5,"area":null},{"id":"2103.00250","title":"Effective Universal Unrestricted Adversarial Attacks using a MOE Approach","created":"2021-02-27","cited_by_count":4,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2110.10444","title":"Moir\\'e Attack (MA): A New Potential Risk of Screen Photos","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2407.02424","title":"A Pattern Language for Machine Learning Tasks","created":"2024-07-02","cited_by_count":4,"area":null},{"id":"2504.08906","title":"Robust SAM: On the Adversarial Robustness of Vision Foundation Models","created":"2025-04-11","cited_by_count":4,"area":null},{"id":"2105.04003","title":"Efficiency-driven Hardware Optimization for Adversarially Robust Neural Networks","created":"2021-05-09","cited_by_count":3,"area":null},{"id":"2106.01618","title":"Transferable Adversarial Examples for Anchor Free Object Detection","created":"2021-06-03","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2109.12772","title":"Distributionally Robust Multiclass Classification and Applications in Deep Image Classifiers","created":"2021-09-27","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2301.11457","title":"Attacking Important Pixels for Anchor-free Detectors","created":"2023-01-26","cited_by_count":3,"area":null},{"id":"2309.01104","title":"Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection","created":"2023-09-03","cited_by_count":3,"area":null},{"id":"2311.17339","title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition","created":"2023-11-29","cited_by_count":3,"area":null},{"id":"2312.01679","title":"Adversarial Medical Image with Hierarchical Feature Hiding","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2312.13628","title":"Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples","created":"2023-12-21","cited_by_count":3,"area":null},{"id":"2405.05502","title":"Towards Accurate and Robust Architectures via Neural Architecture Search","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2410.07081","title":"JPEG Inspired Deep Learning","created":"2024-10-09","cited_by_count":3,"area":null},{"id":"2510.12468","title":"MS-GAGA: Metric-Selective Guided Adversarial Generation Attack","created":"2025-10-14","cited_by_count":3,"area":null},{"id":"2604.01618","title":"Tex3D: Objects as Attack Surfaces via Adversarial 3D Textures for Vision-Language-Action Models","created":"2026-04-02","cited_by_count":3,"area":null},{"id":"2101.09451","title":"Error Diffusion Halftoning Against Adversarial Examples","created":"2021-01-23","cited_by_count":2,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2106.13394","title":"Countering Adversarial Examples: Combining Input Transformation and Noisy Training","created":"2021-06-25","cited_by_count":2,"area":null},{"id":"2107.09502","title":"Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features","created":"2021-07-19","cited_by_count":2,"area":null},{"id":"2206.05542","title":"Surround-View Cameras based Holistic Visual Perception for Automated Driving","created":"2022-06-11","cited_by_count":2,"area":null},{"id":"2212.14049","title":"Differentiable Search of Accurate and Robust Architectures","created":"2022-12-28","cited_by_count":2,"area":null},{"id":"2304.07822","title":"A Random-patch based Defense Strategy Against Physical Attacks for Face Recognition Systems","created":"2023-04-16","cited_by_count":2,"area":null},{"id":"2304.12486","title":"Evaluating Adversarial Robustness on Document Image Classification","created":"2023-04-24","cited_by_count":2,"area":null},{"id":"2405.03884","title":"BadFusion: 2D-Oriented Backdoor Attacks against 3D Object Detection","created":"2024-05-06","cited_by_count":2,"area":null},{"id":"2409.02485","title":"Adversarial Attacks on Machine Learning-Aided Visualizations","created":"2024-09-04","cited_by_count":2,"area":null},{"id":"2412.02479","title":"OODFace: Benchmarking Robustness of Face Recognition under Common Corruptions and Appearance Variations","created":"2024-12-03","cited_by_count":2,"area":null},{"id":"2508.14699","title":"Foe for Fraud: Transferable Adversarial Attacks in Credit Card Fraud Detection","created":"2025-08-20","cited_by_count":2,"area":null},{"id":"2512.01934","title":"Physical ID-Transfer Attacks against Multi-Object Tracking via Adversarial Trajectory","created":"2025-12-01","cited_by_count":2,"area":null}],"next_cursor":"100"}