{"total":17,"rows":[{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2108.11673","title":"Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference","created":"2021-08-26","cited_by_count":13,"area":null},{"id":"2202.03930","title":"If a Human Can See It, So Should Your System: Reliability Requirements for Machine Vision Components","created":"2022-02-08","cited_by_count":11,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2406.16342","title":"Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness","created":"2024-06-24","cited_by_count":7,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2110.13980","title":"Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directions","created":"2021-10-26","cited_by_count":4,"area":null},{"id":"2111.01080","title":"ZeBRA: Precisely Destroying Neural Networks with Zero-Data Based Repeated Bit Flip Attack","created":"2021-11-01","cited_by_count":3,"area":null},{"id":"2407.06807","title":"A Hybrid Training-time and Run-time Defense Against Adversarial Attacks in Modulation Classification","created":"2024-07-09","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2309.07106","title":"Hardening RGB-D Object Recognition Systems against Adversarial Patch Attacks","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2411.15222","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2108.10217","title":"Deep Bayesian Image Set Classification: A Defence Approach against Adversarial Attacks","created":"2021-08-23","cited_by_count":0,"area":null},{"id":"2302.08973","title":"Measuring Equality in Machine Learning Security Defenses: A Case Study in Speech Recognition","created":"2023-02-17","cited_by_count":0,"area":null},{"id":"2402.13287","title":"Manipulating hidden-Markov-model inferences by corrupting batch data","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2509.22060","title":"Decoding Deception: Understanding Automatic Speech Recognition Vulnerabilities in Evasion and Poisoning Attacks","created":"2025-09-26","cited_by_count":0,"area":null}],"next_cursor":null}