{"total":148,"rows":[{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2203.15859","title":"NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Models","created":"2022-03-29","cited_by_count":50,"area":null},{"id":"2102.04373","title":"Partition-based formulations for mixed-integer optimization of trained ReLU neural networks","created":"2021-02-08","cited_by_count":39,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2110.03109","title":"Consistent Counterfactuals for Deep Models","created":"2021-10-06","cited_by_count":37,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2102.00837","title":"Machine learning pipeline for battery state of health estimation","created":"2021-02-01","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2211.03769","title":"Are AlphaZero-like Agents Robust to Adversarial Perturbations?","created":"2022-11-07","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2103.06297","title":"TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attack","created":"2021-03-10","cited_by_count":12,"area":null},{"id":"2112.09025","title":"Deep Reinforcement Learning Policies Learn Shared Adversarial Features Across MDPs","created":"2021-12-16","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2206.01034","title":"Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","created":"2022-06-02","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2111.05391","title":"Statistical Perspectives on Reliability of Artificial Intelligence Systems","created":"2021-11-09","cited_by_count":10,"area":null},{"id":"2402.19322","title":"Verification of Neural Networks' Global Robustness","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2107.09225","title":"Discriminator-Free Generative Adversarial Attack","created":"2021-07-20","cited_by_count":8,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2203.04453","title":"Machine Learning in NextG Networks via Generative Adversarial Networks","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2102.07140","title":"Perceptually Constrained Adversarial Attacks","created":"2021-02-14","cited_by_count":7,"area":null},{"id":"2306.05873","title":"Detecting Adversarial Directions in Deep Reinforcement Learning to Make Robust Decisions","created":"2023-06-09","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2503.13994","title":"TarPro: Targeted Protection against Malicious Image Editing","created":"2025-03-18","cited_by_count":7,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2211.14669","title":"Game Theoretic Mixed Experts for Combinational Adversarial Machine Learning","created":"2022-11-26","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2102.11586","title":"Adversarial Examples Detection beyond Image Space","created":"2021-02-23","cited_by_count":5,"area":null},{"id":"2207.07797","title":"CARBEN: Composite Adversarial Robustness Benchmark","created":"2022-07-16","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2307.01390","title":"Adversarial Learning in Real-World Fraud Detection: Challenges and Perspectives","created":"2023-07-03","cited_by_count":5,"area":null},{"id":"2402.03317","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","created":"2024-01-02","cited_by_count":5,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2211.12990","title":"Adversarial Attacks are a Surprisingly Strong Baseline for Poisoning Few-Shot Meta-Learners","created":"2022-11-23","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2506.04650","title":"Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instruction","created":"2025-06-05","cited_by_count":4,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2204.11531","title":"VITA: A Multi-Source Vicinal Transfer Augmentation Method for Out-of-Distribution Generalization","created":"2022-04-25","cited_by_count":3,"area":null},{"id":"2208.04065","title":"Optimistic Optimisation of Composite Objective with Exponentiated Update","created":"2022-08-08","cited_by_count":3,"area":null},{"id":"2210.15446","title":"LP-BFGS attack: An adversarial attack based on the Hessian with limited pixels","created":"2022-10-26","cited_by_count":3,"area":null},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2303.07003","title":"Review on the Feasibility of Adversarial Evasion Attacks and Defenses for Network Intrusion Detection Systems","created":"2023-03-13","cited_by_count":3,"area":null},{"id":"2307.08551","title":"On the Fly Neural Style Smoothing for Risk-Averse Domain Generalization","created":"2023-07-17","cited_by_count":3,"area":null},{"id":"2308.08160","title":"Benchmarking Adversarial Robustness of Compressed Deep Learning Models","created":"2023-08-16","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2102.11502","title":"Oriole: Thwarting Privacy against Trustworthy Deep Learning Models","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2102.11935","title":"Non-Singular Adversarial Robustness of Neural Networks","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2105.08620","title":"Adversarial Examples Detection with Bayesian Neural Network","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2107.03759","title":"Analytically Tractable Hidden-States Inference in Bayesian Neural Networks","created":"2021-07-08","cited_by_count":2,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2204.13853","title":"Detecting Textual Adversarial Examples Based on Distributional Characteristics of Data Representations","created":"2022-04-29","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2304.09875","title":"GREAT Score: Global Robustness Evaluation of Adversarial Perturbation using Generative Models","created":"2023-04-19","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2401.09574","title":"Towards Scalable and Robust Model Versioning","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2505.10983","title":"GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models","created":"2025-05-16","cited_by_count":2,"area":null},{"id":"2507.03450","title":"Evaluating the Evaluators: Trust in Adversarial Robustness Tests","created":"2025-07-04","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2101.11766","title":"Improving Neural Network Robustness through Neighborhood Preserving Layers","created":"2021-01-28","cited_by_count":1,"area":null},{"id":"2103.04513","title":"Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN","created":"2021-03-08","cited_by_count":1,"area":null},{"id":"2106.10252","title":"Less is More: Feature Selection for Adversarial Robustness with Compressive Counter-Adversarial Attacks","created":"2021-06-18","cited_by_count":1,"area":null},{"id":"2107.09804","title":"Using Undervolting as an On-Device Defense Against Adversarial Machine Learning Attacks","created":"2021-07-20","cited_by_count":1,"area":null},{"id":"2111.08701","title":"Interpretability Aware Model Training to Improve Robustness against Out-of-Distribution Magnetic Resonance Images in Alzheimer's Disease Classification","created":"2021-11-15","cited_by_count":1,"area":null},{"id":"2111.10291","title":"Meta Adversarial Perturbations","created":"2021-11-19","cited_by_count":1,"area":null},{"id":"2111.15160","title":"Mitigating Adversarial Attacks by Distributing Different Copies to Different Users","created":"2021-11-30","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null}],"next_cursor":"100"}