{"total":251,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2103.08896","title":"Anti-Adversarially Manipulated Attributions for Weakly and Semi-Supervised Semantic Segmentation","created":"2021-03-16","cited_by_count":134,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2110.11417","title":"HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noise","created":"2021-10-06","cited_by_count":65,"area":null},{"id":"2211.09773","title":"T-SEA: Transfer-based Self-Ensemble Attack on Object Detection","created":"2022-11-16","cited_by_count":59,"area":null},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2203.16931","title":"Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond","created":"2022-03-31","cited_by_count":48,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2103.13886","title":"Robust and Accurate Object Detection via Adversarial Learning","created":"2021-03-23","cited_by_count":42,"area":null},{"id":"2304.06719","title":"RoboBEV: Towards Robust Bird's Eye View Perception under Corruptions","created":"2023-04-13","cited_by_count":42,"area":null},{"id":"2405.17426","title":"Benchmarking and Improving Bird's Eye View Perception Robustness in Autonomous Driving","created":"2024-05-27","cited_by_count":41,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2303.17297","title":"Understanding the Robustness of 3D Object Detection with Bird's-Eye-View Representations in Autonomous Driving","created":"2023-03-30","cited_by_count":37,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2201.01850","title":"On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Driving","created":"2022-01-05","cited_by_count":30,"area":null},{"id":"2210.00933","title":"Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loop","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2103.16148","title":"Class-Aware Robust Adversarial Training for Object Detection","created":"2021-03-30","cited_by_count":27,"area":null},{"id":"2302.06378","title":"Semantic Image Segmentation: Two Decades of Research","created":"2023-02-13","cited_by_count":27,"area":null},{"id":"2112.09151","title":"TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations","created":"2021-12-16","cited_by_count":26,"area":null},{"id":"2103.15326","title":"Fooling LiDAR Perception via Adversarial Trajectory Perturbation","created":"2021-03-29","cited_by_count":25,"area":null},{"id":"2206.07179","title":"Proximal Splitting Adversarial Attacks for Semantic Segmentation","created":"2022-06-14","cited_by_count":23,"area":null},{"id":"2201.08619","title":"Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World","created":"2022-01-21","cited_by_count":22,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20,"area":null},{"id":"2202.04781","title":"Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios","created":"2022-02-10","cited_by_count":20,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2103.12469","title":"RPATTACK: Refined Patch Attack on General Object Detectors","created":"2021-03-23","cited_by_count":18,"area":null},{"id":"2112.03223","title":"Context-Aware Transfer Attacks for Object Detection","created":"2021-12-06","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2103.14211","title":"MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakes","created":"2021-03-26","cited_by_count":17,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2412.16955","title":"NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors","created":"2024-12-22","cited_by_count":17,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2301.10766","title":"On the Adversarial Robustness of Camera-based 3D Object Detection","created":"2023-01-25","cited_by_count":15,"area":null},{"id":"2304.07875","title":"The Segment Anything foundation model achieves favorable brain tumor autosegmentation accuracy on MRI to support radiotherapy treatment planning","created":"2023-04-16","cited_by_count":15,"area":null},{"id":"2107.04263","title":"Towards Robust General Medical Image Segmentation","created":"2021-07-09","cited_by_count":14,"area":null},{"id":"2107.07449","title":"Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving","created":"2021-07-15","cited_by_count":14,"area":null},{"id":"2308.12857","title":"Fast Adversarial Training with Smooth Convergence","created":"2023-08-24","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2204.04890","title":"Anti-Adversarially Manipulated Attributions for Weakly Supervised Semantic Segmentation and Object Localization","created":"2022-04-11","cited_by_count":12,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2207.08044","title":"DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking","created":"2022-07-17","cited_by_count":11,"area":null},{"id":"2209.09117","title":"Part-Based Models Improve Adversarial Robustness","created":"2022-09-15","cited_by_count":11,"area":null},{"id":"2304.14614","title":"Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection","created":"2023-04-28","cited_by_count":11,"area":null},{"id":"2405.01636","title":"Explainable AI (XAI) in Image Segmentation in Medicine, Industry, and Beyond: A Survey","created":"2024-05-02","cited_by_count":11,"area":null},{"id":"2405.07595","title":"Environmental Matching Attack Against Unmanned Aerial Vehicles Object Detection","created":"2024-05-13","cited_by_count":11,"area":null},{"id":"2103.05232","title":"Stabilized Medical Image Attacks","created":"2021-03-09","cited_by_count":10,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2210.16140","title":"Localized Randomized Smoothing for Collective Robustness Certification","created":"2022-10-28","cited_by_count":10,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2101.06092","title":"Black-box Adversarial Attacks in Autonomous Vehicle Technology","created":"2021-01-15","cited_by_count":9,"area":null},{"id":"2107.03050","title":"Controlled Caption Generation for Images Through Adversarial Attacks","created":"2021-07-07","cited_by_count":9,"area":null},{"id":"2108.11505","title":"Generalized Real-World Super-Resolution through Adversarial Robustness","created":"2021-08-25","cited_by_count":9,"area":null},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2309.13857","title":"Adversarial Attacks on Video Object Segmentation with Hard Region Discovery","created":"2023-09-25","cited_by_count":9,"area":null},{"id":"2310.17436","title":"Uncertainty-weighted Loss Functions for Improved Adversarial Attacks on Semantic Segmentation","created":"2023-10-26","cited_by_count":9,"area":null},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2102.02729","title":"Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review","created":"2021-02-04","cited_by_count":8,"area":null},{"id":"2109.15177","title":"You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors","created":"2021-09-30","cited_by_count":8,"area":null},{"id":"2209.02339","title":"TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World","created":"2022-09-06","cited_by_count":8,"area":null},{"id":"2302.06060","title":"Threatening Patch Attacks on Object Detection in Optical Remote Sensing Images","created":"2023-02-13","cited_by_count":8,"area":null},{"id":"2308.05985","title":"TrajPAC: Towards Robustness Verification of Pedestrian Trajectory Prediction Models","created":"2023-08-11","cited_by_count":8,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2103.13598","title":"Recent Advances in Large Margin Learning","created":"2021-03-25","cited_by_count":7,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2108.04584","title":"UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attacks","created":"2021-08-10","cited_by_count":7,"area":null},{"id":"2108.09929","title":"SegMix: Co-occurrence Driven Mixup for Semantic Segmentation and Adversarial Robustness","created":"2021-08-23","cited_by_count":7,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2207.07032","title":"Adversarial Attacks on Monocular Pose Estimation","created":"2022-07-14","cited_by_count":6,"area":null},{"id":"2210.03429","title":"Adversarially Robust Prototypical Few-shot Segmentation with Neural-ODEs","created":"2022-10-07","cited_by_count":6,"area":null}],"next_cursor":"100"}