{"total":47,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2109.09032","title":"JEM++: Improved Techniques for Training JEM","created":"2021-09-19","cited_by_count":28,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2209.07959","title":"Towards Bridging the Performance Gaps of Joint Energy-based Models","created":"2022-09-16","cited_by_count":15,"area":null},{"id":"2101.03042","title":"Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective","created":"2021-01-08","cited_by_count":9,"area":null},{"id":"2204.13004","title":"Defending Person Detection Against Adversarial Patch Attack by using Universal Defensive Frame","created":"2022-04-27","cited_by_count":9,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2308.15378","title":"On the Robustness of Object Detection Models on Aerial Images","created":"2023-08-29","cited_by_count":7,"area":null},{"id":"2105.07334","title":"Real-time Detection of Practical Universal Adversarial Perturbations","created":"2021-05-16","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2102.06747","title":"Realizable Universal Adversarial Perturbations for Malware","created":"2021-02-12","cited_by_count":5,"area":null},{"id":"2205.02414","title":"Subverting Fair Image Search with Generative Adversarial Perturbations","created":"2022-05-05","cited_by_count":5,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2103.00250","title":"Effective Universal Unrestricted Adversarial Attacks using a MOE Approach","created":"2021-02-27","cited_by_count":4,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2402.08208","title":"Inherent Diverse Redundant Safety Mechanisms for AI-based Software Elements in Automotive Applications","created":"2024-02-13","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2210.14229","title":"Causal Information Bottleneck Boosts Adversarial Robustness of Deep Neural Network","created":"2022-10-25","cited_by_count":3,"area":null},{"id":"2306.00687","title":"Adversarial Robustness in Unsupervised Machine Learning: A Systematic Review","created":"2023-06-01","cited_by_count":3,"area":null},{"id":"2103.01359","title":"Brain Programming is Immune to Adversarial Attacks: Towards Accurate and Robust Image Classification using Symbolic Learning","created":"2021-03-01","cited_by_count":2,"area":null},{"id":"2201.05071","title":"Evaluation of Neural Networks Defenses and Attacks using NDCG and Reciprocal Rank Metrics","created":"2022-01-10","cited_by_count":2,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2409.03458","title":"Non-Uniform Illumination Attack for Fooling Convolutional Neural Networks","created":"2024-09-05","cited_by_count":2,"area":null},{"id":"2103.04513","title":"Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN","created":"2021-03-08","cited_by_count":1,"area":null},{"id":"2107.04827","title":"Identifying Layers Susceptible to Adversarial Attacks","created":"2021-07-10","cited_by_count":1,"area":null},{"id":"2203.08959","title":"Robustness through Cognitive Dissociation Mitigation in Contrastive Adversarial Training","created":"2022-03-16","cited_by_count":1,"area":null},{"id":"2206.04316","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","created":"2022-06-09","cited_by_count":1,"area":null},{"id":"2210.15997","title":"Universal Adversarial Directions","created":"2022-10-28","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2305.10856","title":"Spatial-Frequency Discriminability for Revealing Adversarial Perturbations","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2306.15451","title":"Advancing Adversarial Training by Injecting Booster Signal","created":"2023-06-27","cited_by_count":1,"area":null},{"id":"2403.16176","title":"Subspace Defense: Discarding Adversarial Perturbations by Learning a Subspace for Clean Signals","created":"2024-03-24","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2106.10696","title":"Generative Model Adversarial Training for Deep Compressed Sensing","created":"2021-06-20","cited_by_count":0,"area":null},{"id":"2111.09488","title":"Attacking Deep Learning AI Hardware with Universal Adversarial Perturbation","created":"2021-11-18","cited_by_count":0,"area":null},{"id":"2201.02504","title":"Repairing Adversarial Texts through Perturbation","created":"2021-12-29","cited_by_count":0,"area":null},{"id":"2312.07245","title":"DTA: Distribution Transform-based Attack for Query-Limited Scenario","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2407.09550","title":"CAPM: Fast and Robust Verification on Maxpool-based CNN via Dual Network","created":"2024-06-27","cited_by_count":0,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null}],"next_cursor":null}