{"total":43,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2305.11618","title":"DAP: A Dynamic Adversarial Patch for Evading Person Detectors","created":"2023-05-19","cited_by_count":40,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2108.09454","title":"\"Adversarial Examples\" for Proof-of-Learning","created":"2021-08-21","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2107.03050","title":"Controlled Caption Generation for Images Through Adversarial Attacks","created":"2021-07-07","cited_by_count":9,"area":null},{"id":"2104.11101","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","created":"2021-04-22","cited_by_count":8,"area":null},{"id":"2209.02339","title":"TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World","created":"2022-09-06","cited_by_count":8,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2105.01959","title":"Attack-agnostic Adversarial Detection on Medical Data Using Explainable Machine Learning","created":"2021-05-05","cited_by_count":7,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2104.10868","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","created":"2021-04-22","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2206.12725","title":"Empirical Evaluation of Physical Adversarial Patch Attacks Against Overhead Object Detection Models","created":"2022-06-25","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2411.18288","title":"Optimizing Multispectral Object Detection: A Bag of Tricks and Comprehensive Benchmarks","created":"2024-11-27","cited_by_count":4,"area":null},{"id":"2109.08465","title":"Messing Up 3D Virtual Environments: Transferable Adversarial 3D Objects","created":"2021-09-17","cited_by_count":2,"area":null},{"id":"2207.02963","title":"The Weaknesses of Adversarial Camouflage in Overhead Imagery","created":"2022-07-06","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2102.10534","title":"The Effects of Image Distribution and Task on Adversarial Robustness","created":"2021-02-21","cited_by_count":1,"area":null},{"id":"2111.03480","title":"DriveGuard: Robustification of Automated Driving Systems with Deep Spatio-Temporal Convolutional Autoencoder","created":"2021-11-05","cited_by_count":1,"area":null},{"id":"2205.10539","title":"On the Feasibility and Generality of Patch-based Adversarial Attacks on Semantic Segmentation Problems","created":"2022-05-21","cited_by_count":1,"area":null},{"id":"2207.10719","title":"Synthetic Dataset Generation for Adversarial Machine Learning Research","created":"2022-07-21","cited_by_count":1,"area":null},{"id":"2208.07174","title":"A Human-in-the-Middle Attack against Object Detection Systems","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2301.01223","title":"ExploreADV: Towards exploratory attack for Neural Networks","created":"2023-01-01","cited_by_count":1,"area":null},{"id":"2306.08422","title":"X-Detect: Explainable Adversarial Patch Detection for Object Detectors in Retail","created":"2023-06-14","cited_by_count":1,"area":null},{"id":"2112.11235","title":"Improving Robustness with Image Filtering","created":"2021-12-21","cited_by_count":0,"area":null},{"id":"2402.08763","title":"Enhancing Robustness of Indoor Robotic Navigation with Free-Space Segmentation Models Against Adversarial Attacks","created":"2024-02-13","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2608.20748","title":"Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer","created":"2026-08-21","cited_by_count":0,"area":null}],"next_cursor":null}