{"total":72,"rows":[{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75,"area":null},{"id":"2105.01984","title":"Software Engineering for AI-Based Systems: A Survey","created":"2021-05-05","cited_by_count":69,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2207.13129","title":"LGV: Boosting Adversarial Example Transferability from Large Geometric Vicinity","created":"2022-07-26","cited_by_count":39,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2102.12967","title":"A statistical framework for efficient out of distribution detection in deep neural networks","created":"2021-02-25","cited_by_count":28,"area":null},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25,"area":null},{"id":"2202.05953","title":"Open-set Adversarial Defense with Clean-Adversarial Mutual Learning","created":"2022-02-12","cited_by_count":21,"area":null},{"id":"2108.00968","title":"Robust Semantic Segmentation with Superpixel-Mix","created":"2021-08-02","cited_by_count":19,"area":null},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2112.01723","title":"Adversarial Attacks against a Satellite-borne Multispectral Cloud Detector","created":"2021-12-03","cited_by_count":11,"area":null},{"id":"2207.08044","title":"DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking","created":"2022-07-17","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2112.14299","title":"DeepAdversaries: Examining the Robustness of Deep Learning Models for Galaxy Morphology Classification","created":"2021-12-28","cited_by_count":10,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2103.13905","title":"StyleLess layer: Improving robustness for real-world driving","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2110.10444","title":"Moir\\'e Attack (MA): A New Potential Risk of Screen Photos","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2302.11049","title":"Framework for Certification of AI-Based Systems","created":"2023-02-21","cited_by_count":4,"area":null},{"id":"2405.15984","title":"Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learning","created":"2024-05-24","cited_by_count":4,"area":"rag"},{"id":"2410.19863","title":"Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2509.16950","title":"Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving","created":"2025-09-21","cited_by_count":4,"area":"safety"},{"id":"2102.02885","title":"Adversarial Robustness Study of Convolutional Neural Network for Lumbar Disk Shape Reconstruction from MR images","created":"2021-02-04","cited_by_count":3,"area":null},{"id":"2102.05334","title":"Enhancing Real-World Adversarial Patches through 3D Modeling of Complex Target Scenes","created":"2021-02-10","cited_by_count":3,"area":null},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2111.12197","title":"Fixed Points in Cyber Space: Rethinking Optimal Evasion Attacks in the Age of AI-NIDS","created":"2021-11-23","cited_by_count":3,"area":null},{"id":"2208.14302","title":"A Black-Box Attack on Optical Character Recognition Systems","created":"2022-08-30","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2109.12838","title":"MUTEN: Boosting Gradient-Based Adversarial Attacks via Mutant-Based Ensembles","created":"2021-09-27","cited_by_count":2,"area":null},{"id":"2201.11105","title":"Do You See What I See? Capabilities and Limits of Automated Multimedia Content Analysis","created":"2021-12-15","cited_by_count":2,"area":null},{"id":"2204.10046","title":"Testing robustness of predictions of trained classifiers against naturally occurring perturbations","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2303.12363","title":"Distribution-restrained Softmax Loss for the Model Robustness","created":"2023-03-22","cited_by_count":2,"area":null},{"id":"2310.11104","title":"Local Lipschitz Constant Computation of ReLU-FNNs: Upper Bound Computation with Exactness Verification","created":"2023-10-17","cited_by_count":2,"area":null},{"id":"2505.22798","title":"Efficient Preimage Approximation for Neural Network Certification","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2205.10539","title":"On the Feasibility and Generality of Patch-based Adversarial Attacks on Semantic Segmentation Problems","created":"2022-05-21","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2301.07520","title":"Adversarial AI in Insurance: Pervasiveness and Resilience","created":"2023-01-17","cited_by_count":1,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2309.17348","title":"Intrinsic Biologically Plausible Adversarial Robustness","created":"2023-09-29","cited_by_count":1,"area":null},{"id":"2505.16263","title":"All You Need is \"Leet\": Evading Hate-speech Detection AI","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2105.14638","title":"DAAIN: Detection of Anomalous and Adversarial Input using Normalizing Flows","created":"2021-05-30","cited_by_count":0,"area":null},{"id":"2106.09982","title":"Towards interpreting computer vision based on transformation invariant optimization","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2203.10290","title":"Adversarial Defense via Image Denoising with Chaotic Encryption","created":"2022-03-19","cited_by_count":0,"area":null},{"id":"2207.02845","title":"Automating the Design and Development of Gradient Descent Trained Expert System Networks","created":"2022-07-04","cited_by_count":0,"area":null},{"id":"2212.04107","title":"Re-purposing Perceptual Hashing based Client Side Scanning for Physical Surveillance","created":"2022-12-08","cited_by_count":0,"area":null},{"id":"2306.07768","title":"Area is all you need: repeatable elements make stronger adversarial attacks","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2310.05336","title":"GReAT: A Graph Regularized Adversarial Training Method","created":"2023-10-09","cited_by_count":0,"area":null},{"id":"2310.08772","title":"Investigating the Robustness and Properties of Detection Transformers (DETR) Toward Difficult Images","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2407.09441","title":"The $\\mu\\mathcal{G}$ Language for Programming Graph Neural Networks","created":"2024-07-12","cited_by_count":0,"area":null},{"id":"2412.03028","title":"Specification Generation for Neural Networks in Systems","created":"2024-12-04","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2504.00038","title":"Revisiting the Relationship between Adversarial and Clean Training: Why Clean Training Can Make Adversarial Training Better","created":"2025-03-30","cited_by_count":0,"area":null},{"id":"2506.00661","title":"Elytra: A Flexible Framework for Securing Large Vision Systems","created":"2025-05-31","cited_by_count":0,"area":null},{"id":"2604.02457","title":"Street-Legal Physical-World Adversarial Rim for License Plates","created":"2026-04-02","cited_by_count":0,"area":null},{"id":"2604.03753","title":"Spatiotemporal-Aware Bit-Flip Injection on DNN-based Advanced Driver Assistance Systems (extended version)","created":"2026-04-04","cited_by_count":0,"area":null},{"id":"2604.12418","title":"RACF: A Resilient Autonomous Car Framework with Object Distance Correction","created":"2026-04-14","cited_by_count":0,"area":null},{"id":"2604.20833","title":"AVISE: Framework for Evaluating the Security of AI Systems","created":"2026-04-22","cited_by_count":0,"area":"safety"},{"id":"2605.06357","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2606.10371","title":"Test-time Adversarial Takeover: A Real-time Hijacking Interface against Robotic Diffusion Policies","created":"2026-06-09","cited_by_count":0,"area":"diffusion"},{"id":"2608.02806","title":"Fast Object Removal Attacks on Safety-Critical Video-based Perception Systems","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2610.06814","title":"TAPDreamer: Transferable Adversarial Patches for World Action Models","created":"2026-10-05","cited_by_count":0,"area":"wm"}],"next_cursor":null}