{"total":77,"rows":[{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2108.11168","title":"Adversarially Robust One-class Novelty Detection","created":"2021-08-25","cited_by_count":24,"area":null},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2106.05261","title":"We Can Always Catch You: Detecting Adversarial Patched Objects WITH or WITHOUT Signature","created":"2021-06-09","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2208.13838","title":"Towards Adversarial Purification using Denoising AutoEncoders","created":"2022-08-29","cited_by_count":6,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2307.10875","title":"Risk-optimized Outlier Removal for Robust 3D Point Cloud Classification","created":"2023-07-20","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2102.00921","title":"Forensicability of Deep Neural Network Inference Pipelines","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2305.01808","title":"Hamming Similarity and Graph Laplacians for Class Partitioning and Adversarial Image Detection","created":"2023-05-02","cited_by_count":4,"area":null},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2105.10101","title":"Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks","created":"2021-05-21","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2109.06176","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","created":"2021-09-13","cited_by_count":3,"area":null},{"id":"2204.05432","title":"A Simple Approach to Adversarial Robustness in Few-shot Image Classification","created":"2022-04-11","cited_by_count":3,"area":null},{"id":"2310.02544","title":"SlowFormer: Universal Adversarial Patch for Attack on Compute and Energy Efficiency of Inference Efficient Vision Transformers","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2310.03285","title":"Burning the Adversarial Bridges: Robust Windows Malware Detection Against Binary-level Mutations","created":"2023-10-05","cited_by_count":3,"area":null},{"id":"2312.01679","title":"Adversarial Medical Image with Hierarchical Feature Hiding","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2408.08205","title":"A Multi-task Adversarial Attack Against Face Authentication","created":"2024-08-15","cited_by_count":3,"area":null},{"id":"2101.01543","title":"Noise Sensitivity-Based Energy Efficient and Robust Adversary Detection in Neural Networks","created":"2021-01-05","cited_by_count":2,"area":null},{"id":"2101.09451","title":"Error Diffusion Halftoning Against Adversarial Examples","created":"2021-01-23","cited_by_count":2,"area":null},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2,"area":null},{"id":"2206.08738","title":"Detecting Adversarial Examples in Batches -- a geometrical approach","created":"2022-06-17","cited_by_count":2,"area":null},{"id":"2206.15415","title":"MEAD: A Multi-Armed Approach for Evaluation of Adversarial Examples Detectors","created":"2022-06-30","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2502.09110","title":"Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks","created":"2025-02-13","cited_by_count":2,"area":null},{"id":"2111.10969","title":"Medical Aegis: Robust adversarial protectors for medical images","created":"2021-11-22","cited_by_count":1,"area":null},{"id":"2206.00489","title":"Attack-Agnostic Adversarial Detection","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2208.11436","title":"Trace and Detect Adversarial Attacks on CNNs using Feature Response Maps","created":"2022-08-24","cited_by_count":1,"area":null},{"id":"2303.16308","title":"Provable Robustness for Streaming Models with a Sliding Window","created":"2023-03-28","cited_by_count":1,"area":null},{"id":"2305.04436","title":"Adversarial Examples Detection with Enhanced Image Difference Features based on Local Histogram Equalization","created":"2023-05-08","cited_by_count":1,"area":null},{"id":"2405.19956","title":"HOLMES: to Detect Adversarial Examples with Multiple Detectors","created":"2024-05-30","cited_by_count":1,"area":null},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2506.15988","title":"Adversarial Attacks and Detection in Visual Place Recognition for Safer Robot Navigation","created":"2025-06-19","cited_by_count":1,"area":null},{"id":"2107.00561","title":"Using Anomaly Feature Vectors for Detecting, Classifying and Warning of Outlier Adversarial Examples","created":"2021-07-01","cited_by_count":0,"area":null},{"id":"2107.02894","title":"Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2107.10480","title":"Unsupervised Detection of Adversarial Examples with Model Explanations","created":"2021-07-22","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2107.13491","title":"Models of Computational Profiles to Study the Likelihood of DNN Metamorphic Test Cases","created":"2021-07-28","cited_by_count":0,"area":null},{"id":"2108.10217","title":"Deep Bayesian Image Set Classification: A Defence Approach against Adversarial Attacks","created":"2021-08-23","cited_by_count":0,"area":null},{"id":"2109.12756","title":"A novel network training approach for open set image recognition","created":"2021-09-27","cited_by_count":0,"area":null},{"id":"2111.07035","title":"Measuring the Contribution of Multiple Model Representations in Detecting Adversarial Instances","created":"2021-11-13","cited_by_count":0,"area":null},{"id":"2111.15518","title":"Detecting Adversaries, yet Faltering to Noise? Leveraging Conditional Variational AutoEncoders for Adversary Detection in the Presence of Noisy Images","created":"2021-11-28","cited_by_count":0,"area":null},{"id":"2202.02503","title":"Adversarial Detector with Robust Classifier","created":"2022-02-05","cited_by_count":0,"area":null},{"id":"2205.07859","title":"Btech thesis report on adversarial attack detection and purification of adverserially attacked images","created":"2022-05-09","cited_by_count":0,"area":null},{"id":"2302.02347","title":"Explainable Machine Learning: The Importance of a System-Centric Perspective","created":"2023-02-05","cited_by_count":0,"area":null},{"id":"2303.15571","title":"EMShepherd: Detecting Adversarial Samples via Side-channel Leakage","created":"2023-03-27","cited_by_count":0,"area":null},{"id":"2304.04228","title":"Unsupervised Multi-Criteria Adversarial Detection in Deep Image Retrieval","created":"2023-04-09","cited_by_count":0,"area":null},{"id":"2306.12161","title":"Adversarial Attacks Neutralization via Data Set Randomization","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2309.17048","title":"On Continuity of Robust and Accurate Classifiers","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2404.12635","title":"AED-PADA:Improving Generalizability of Adversarial Example Detection via Principal Adversarial Domain Adaptation","created":"2024-04-19","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2512.03625","title":"FeatureLens: A Highly Generalizable and Interpretable Framework for Detecting Adversarial Examples Based on Image Features","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2606.28416","title":"AEGIS: A Semantic GAN and Evidential Learning Frameworkfor Robust Adversarial Detection in Vision Sensors","created":"2026-06-25","cited_by_count":0,"area":null}],"next_cursor":null}