{"total":62,"rows":[{"id":"2101.05278","title":"GAN Inversion: A Survey","created":"2021-01-14","cited_by_count":367,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2106.02874","title":"RDA: Robust Domain Adaptation via Fourier Adversarial Attacking","created":"2021-06-05","cited_by_count":48,"area":null},{"id":"2208.08831","title":"Discovering Bugs in Vision Models using Off-the-shelf Image Generation and Captioning","created":"2022-08-18","cited_by_count":45,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2307.16851","title":"Towards Trustworthy and Aligned Machine Learning: A Data-centric Survey with Causality Perspectives","created":"2023-07-31","cited_by_count":30,"area":"alignment"},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2112.12982","title":"Parameter identifiability of a deep feedforward ReLU neural network","created":"2021-12-24","cited_by_count":24,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2104.15064","title":"Black-box adversarial attacks using Evolution Strategies","created":"2021-04-30","cited_by_count":11,"area":null},{"id":"2511.17448","title":"MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models","created":"2025-11-21","cited_by_count":11,"area":"mllm"},{"id":"2103.05232","title":"Stabilized Medical Image Attacks","created":"2021-03-09","cited_by_count":10,"area":null},{"id":"2304.11744","title":"SketchXAI: A First Look at Explainability for Human Sketches","created":"2023-04-23","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2105.07553","title":"Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing","created":"2021-05-17","cited_by_count":8,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2106.01617","title":"Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout","created":"2021-06-03","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2210.08363","title":"Data-Efficient Augmentation for Training Neural Networks","created":"2022-10-15","cited_by_count":4,"area":null},{"id":"2501.01106","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","created":"2025-01-02","cited_by_count":4,"area":null},{"id":"2110.08256","title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness","created":"2021-10-13","cited_by_count":3,"area":null},{"id":"2111.01080","title":"ZeBRA: Precisely Destroying Neural Networks with Zero-Data Based Repeated Bit Flip Attack","created":"2021-11-01","cited_by_count":3,"area":null},{"id":"2105.04070","title":"Robust Training Using Natural Transformation","created":"2021-05-10","cited_by_count":2,"area":null},{"id":"2206.05542","title":"Surround-View Cameras based Holistic Visual Perception for Automated Driving","created":"2022-06-11","cited_by_count":2,"area":null},{"id":"2211.03933","title":"A Hypergraph-Based Machine Learning Ensemble Network Intrusion Detection System","created":"2022-11-08","cited_by_count":2,"area":null},{"id":"2403.10330","title":"Towards Non-Adversarial Algorithmic Recourse","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2109.05695","title":"PAT: Pseudo-Adversarial Training For Detecting Adversarial Videos","created":"2021-09-13","cited_by_count":1,"area":null},{"id":"2203.05408","title":"Attacks as Defenses: Designing Robust Audio CAPTCHAs Using Attacks on Automatic Speech Recognition Systems","created":"2022-03-10","cited_by_count":1,"area":null},{"id":"2211.15510","title":"Localized Shortcut Removal","created":"2022-11-24","cited_by_count":1,"area":null},{"id":"2303.06241","title":"Do we need entire training data for adversarial training?","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2406.19941","title":"GRACE: Graph-Regularized Attentive Convolutional Entanglement with Laplacian Smoothing for Robust DeepFake Video Detection","created":"2024-06-28","cited_by_count":1,"area":null},{"id":"2504.21323","title":"How to Backdoor Image Knowledge Distillation","created":"2025-04-30","cited_by_count":1,"area":"distill"},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2107.11986","title":"Benign Adversarial Attack: Tricking Models for Goodness","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2108.02756","title":"BOSS: Bidirectional One-Shot Synthesis of Adversarial Examples","created":"2021-08-05","cited_by_count":0,"area":null},{"id":"2111.10055","title":"Towards Efficiently Evaluating the Robustness of Deep Neural Networks in IoT Systems: A GAN-based Method","created":"2021-11-19","cited_by_count":0,"area":null},{"id":"2111.15213","title":"Using a GAN to Generate Adversarial Examples to Facial Image Recognition","created":"2021-11-30","cited_by_count":0,"area":null},{"id":"2112.14420","title":"Invertible Image Dataset Protection","created":"2021-12-29","cited_by_count":0,"area":null},{"id":"2202.13755","title":"Towards Robust Stacked Capsule Autoencoder with Hybrid Adversarial Training","created":"2022-02-28","cited_by_count":0,"area":null},{"id":"2206.04793","title":"Securing AI-based Healthcare Systems using Blockchain Technology: A State-of-the-Art Systematic Literature Review and Future Research Directions","created":"2022-05-30","cited_by_count":0,"area":null},{"id":"2303.12357","title":"Wasserstein Adversarial Examples on Univariant Time Series Data","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2309.00543","title":"Curating Naturally Adversarial Datasets for Learning-Enabled Medical Cyber-Physical Systems","created":"2023-09-01","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2311.13233","title":"A Survey of Adversarial CAPTCHAs on its History, Classification and Generation","created":"2023-11-22","cited_by_count":0,"area":null},{"id":"2410.07414","title":"Bayes-Nash Generative Privacy Against Membership Inference Attacks","created":"2024-10-09","cited_by_count":0,"area":"safety"},{"id":"2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2510.00463","title":"On the Adversarial Robustness of Learning-based Conformal Novelty Detection","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2605.12937","title":"AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2608.10237","title":"Beyond Decision Boundaries: Relational Geometry Attacks on Contrastive Embedding Manifolds","created":"2026-08-10","cited_by_count":0,"area":null},{"id":"2608.12535","title":"GENADA: efficient generative time series adversarial attack framework","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2608.20748","title":"Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer","created":"2026-08-21","cited_by_count":0,"area":null}],"next_cursor":null}