{"total":83,"rows":[{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2409.17874","title":"DarkSAM: Fooling Segment Anything Model to Segment Nothing","created":"2024-09-26","cited_by_count":32,"area":null},{"id":"2201.01850","title":"On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Driving","created":"2022-01-05","cited_by_count":30,"area":null},{"id":"2302.06378","title":"Semantic Image Segmentation: Two Decades of Research","created":"2023-02-13","cited_by_count":27,"area":null},{"id":"2112.09151","title":"TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations","created":"2021-12-16","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2103.16255","title":"Towards Understanding Adversarial Robustness of Optical Flow Networks","created":"2021-03-30","cited_by_count":15,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2412.16651","title":"PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2101.03924","title":"The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing","created":"2021-01-11","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2407.03386","title":"Visual Robustness Benchmark for Visual Question Answering (VQA)","created":"2024-07-03","cited_by_count":12,"area":null},{"id":"2207.08044","title":"DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking","created":"2022-07-17","cited_by_count":11,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2309.03774","title":"Deep Learning Safety Concerns in Automated Driving Perception","created":"2023-09-07","cited_by_count":10,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2310.17436","title":"Uncertainty-weighted Loss Functions for Improved Adversarial Attacks on Semantic Segmentation","created":"2023-10-26","cited_by_count":9,"area":null},{"id":"2405.10360","title":"Adversarial Robustness Guarantees for Quantum Classifiers","created":"2024-05-16","cited_by_count":9,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2108.04584","title":"UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attacks","created":"2021-08-10","cited_by_count":7,"area":null},{"id":"2212.07773","title":"Runtime Monitoring for Out-of-Distribution Detection in Object Detection Neural Networks","created":"2022-12-15","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2207.05729","title":"Physical Passive Patch Adversarial Attacks on Visual Odometry Systems","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2207.07032","title":"Adversarial Attacks on Monocular Pose Estimation","created":"2022-07-14","cited_by_count":6,"area":null},{"id":"2404.02585","title":"Unsegment Anything by Simulating Deformation","created":"2024-04-03","cited_by_count":6,"area":null},{"id":"2303.12054","title":"Influencer Backdoor Attack on Semantic Segmentation","created":"2023-03-21","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2305.12825","title":"Uncertainty-based Detection of Adversarial Attacks in Semantic Segmentation","created":"2023-05-22","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2311.14450","title":"Segment (Almost) Nothing: Prompt-Agnostic Adversarial Attacks on Segmentation Models","created":"2023-11-24","cited_by_count":5,"area":null},{"id":"2111.12305","title":"Thundernna: a white box adversarial attack","created":"2021-11-24","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2307.16572","title":"Transferable Attack for Semantic Segmentation","created":"2023-07-31","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2203.16130","title":"Sensor Data Validation and Driving Safety in Autonomous Driving Systems","created":"2022-03-30","cited_by_count":3,"area":null},{"id":"2208.10773","title":"Adversarial Vulnerability of Temporal Feature Networks for Object Detection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2303.00200","title":"Feature Extraction Matters More: Universal Deepfake Disruption through Attacking Ensemble Feature Extractors","created":"2023-03-01","cited_by_count":3,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2309.03215","title":"Explainable and Trustworthy Traffic Sign Detection for Safe Autonomous Driving: An Inductive Logic Programming Approach","created":"2023-08-30","cited_by_count":3,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2207.02963","title":"The Weaknesses of Adversarial Camouflage in Overhead Imagery","created":"2022-07-06","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2506.11892","title":"Attention-based Adversarial Robust Distillation in Radio Signal Classifications for Low-Power IoT Devices","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2104.00139","title":"Adversarial Heart Attack: Neural Networks Fooled to Segment Heart Symbols in Chest X-Ray Images","created":"2021-03-31","cited_by_count":1,"area":null},{"id":"2106.15998","title":"Single-Step Adversarial Training for Semantic Segmentation","created":"2021-06-30","cited_by_count":1,"area":null},{"id":"2111.08954","title":"Tracklet-Switch Adversarial Attack against Pedestrian Multi-Object Tracking Trackers","created":"2021-11-17","cited_by_count":1,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2205.10539","title":"On the Feasibility and Generality of Patch-based Adversarial Attacks on Semantic Segmentation Problems","created":"2022-05-21","cited_by_count":1,"area":null},{"id":"2208.11436","title":"Trace and Detect Adversarial Attacks on CNNs using Feature Response Maps","created":"2022-08-24","cited_by_count":1,"area":null},{"id":"2210.15997","title":"Universal Adversarial Directions","created":"2022-10-28","cited_by_count":1,"area":null},{"id":"2306.14217","title":"On Evaluating the Adversarial Robustness of Semantic Segmentation Models","created":"2023-06-25","cited_by_count":1,"area":null},{"id":"2401.09624","title":"MITS-GAN: Safeguarding Medical Imaging from Tampering with Generative Adversarial Networks","created":"2024-01-17","cited_by_count":1,"area":null},{"id":"2407.09150","title":"Evaluating the Adversarial Robustness of Semantic Segmentation: Trying Harder Pays Off","created":"2024-07-12","cited_by_count":1,"area":null},{"id":"2408.10021","title":"Detecting Adversarial Attacks in Semantic Segmentation via Uncertainty Estimation: A Deep Analysis","created":"2024-08-19","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2511.22237","title":"Creating Blank Canvas Against AI-enabled Image Forgery","created":"2025-11-27","cited_by_count":1,"area":null},{"id":"2106.07428","title":"Audio Attacks and Defenses against AED Systems -- A Practical Study","created":"2021-06-14","cited_by_count":0,"area":null},{"id":"2107.04749","title":"Resilience of Autonomous Vehicle Object Category Detection to Universal Adversarial Perturbations","created":"2021-07-10","cited_by_count":0,"area":null},{"id":"2111.01093","title":"Correlation between image quality metrics of magnetic resonance images and the neural network segmentation accuracy","created":"2021-11-01","cited_by_count":0,"area":null},{"id":"2207.05137","title":"Towards Effective Multi-Label Recognition Attacks via Knowledge Graph Consistency","created":"2022-07-11","cited_by_count":0,"area":null},{"id":"2210.16451","title":"Robust Boosting Forests with Richer Deep Feature Hierarchy","created":"2022-10-29","cited_by_count":0,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2312.11510","title":"QuadAttack: A Quadratic Programming Approach to Ordered Top-K Attacks","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2401.11224","title":"Susceptibility of Adversarial Attack on Medical Image Segmentation Models","created":"2024-01-20","cited_by_count":0,"area":null},{"id":"2407.18436","title":"A Model for Combinatorial Dictionary Learning and Inference","created":"2024-07-26","cited_by_count":0,"area":null},{"id":"2410.21443","title":"TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors","created":"2024-10-28","cited_by_count":0,"area":null},{"id":"2603.20777","title":"OmniPatch: A Universal Adversarial Patch for ViT-CNN Cross-Architecture Transfer in Semantic Segmentation","created":"2026-03-21","cited_by_count":0,"area":null},{"id":"2607.27465","title":"IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks","created":"2026-07-29","cited_by_count":0,"area":null}],"next_cursor":null}