{"total":67,"rows":[{"id":"2101.06549","title":"AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles","created":"2021-01-16","cited_by_count":137,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75,"area":null},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2312.09558","title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World","created":"2023-12-15","cited_by_count":25,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2110.13939","title":"CausalAF: Causal Autoregressive Flow for Safety-Critical Driving Scenario Generation","created":"2021-10-26","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2101.10747","title":"Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models","created":"2021-01-26","cited_by_count":14,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2106.04569","title":"Simulated Adversarial Testing of Face Recognition Models","created":"2021-06-08","cited_by_count":10,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2508.05855","title":"Safety of Embodied Navigation: A Survey","created":"2025-08-07","cited_by_count":10,"area":null},{"id":"2104.11101","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","created":"2021-04-22","cited_by_count":8,"area":null},{"id":"2310.18494","title":"Knowledge-based in silico models and dataset for the comparative evaluation of mammography AI for a range of breast characteristics, lesion conspicuities and doses","created":"2023-10-27","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2402.03973","title":"A comparison between humans and AI at recognizing objects in unusual poses","created":"2024-02-06","cited_by_count":7,"area":null},{"id":"2406.14599","title":"Stylebreeder: Exploring and Democratizing Artistic Styles through Text-to-Image Models","created":"2024-06-20","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2102.00798","title":"Landmark Breaker: Obstructing DeepFake By Disturbing Landmark Extraction","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2312.15826","title":"Adversarial Item Promotion on Visually-Aware Recommender Systems by Guided Diffusion","created":"2023-12-25","cited_by_count":5,"area":"diffusion"},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2102.05334","title":"Enhancing Real-World Adversarial Patches through 3D Modeling of Complex Target Scenes","created":"2021-02-10","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2202.03651","title":"Causal Scene BERT: Improving object detection by searching for challenging groups of data","created":"2022-02-08","cited_by_count":3,"area":null},{"id":"2202.12162","title":"Measuring CLEVRness: Blackbox testing of Visual Reasoning Models","created":"2022-02-24","cited_by_count":3,"area":"lr"},{"id":"2210.05667","title":"Human Body Measurement Estimation with Adversarial Augmentation","created":"2022-10-11","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2406.16935","title":"Benchmarking Out-of-Distribution Generalization Capabilities of DNN-based Encoding Models for the Ventral Visual Cortex","created":"2024-06-16","cited_by_count":3,"area":null},{"id":"2411.09749","title":"RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering","created":"2024-11-14","cited_by_count":3,"area":null},{"id":"2511.14440","title":"Learning to See Through a Baby's Eyes: Early Visual Diets Enable Robust Visual Intelligence in Humans and Machines","created":"2025-11-18","cited_by_count":3,"area":null},{"id":"2101.09324","title":"Generating Black-Box Adversarial Examples in Sparse Domain","created":"2021-01-22","cited_by_count":2,"area":null},{"id":"2109.08465","title":"Messing Up 3D Virtual Environments: Transferable Adversarial 3D Objects","created":"2021-09-17","cited_by_count":2,"area":null},{"id":"2111.08973","title":"Generating Unrestricted 3D Adversarial Point Clouds","created":"2021-11-17","cited_by_count":2,"area":null},{"id":"2206.07802","title":"Improving generalization by mimicking the human visual diet","created":"2022-06-15","cited_by_count":2,"area":null},{"id":"2106.04066","title":"Semantically Adversarial Scenario Generation with Explicit Knowledge Guidance","created":"2021-06-08","cited_by_count":1,"area":null},{"id":"2109.05695","title":"PAT: Pseudo-Adversarial Training For Detecting Adversarial Videos","created":"2021-09-13","cited_by_count":1,"area":null},{"id":"2111.04371","title":"Geometrically Adaptive Dictionary Attack on Face Recognition","created":"2021-11-08","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2304.09358","title":"Investigating the Nature of 3D Generalization in Deep Neural Networks","created":"2023-04-19","cited_by_count":1,"area":null},{"id":"2309.05810","title":"SHIFT3D: Synthesizing Hard Inputs For Tricking 3D Detectors","created":"2023-09-11","cited_by_count":1,"area":null},{"id":"2410.00990","title":"Lipschitz-Driven Noise Robustness in VQ-AE for High-Frequency Texture Repair in ID-Specific Talking Heads","created":"2024-10-01","cited_by_count":1,"area":null},{"id":"2505.22499","title":"SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectors","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2511.17362","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","created":"2025-11-21","cited_by_count":1,"area":null},{"id":"2105.00622","title":"Physical world assistive signals for deep neural network classifiers -- neither defense nor attack","created":"2021-05-03","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2504.14423","title":"Adversarial Attack for RGB-Event based Visual Object Tracking","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2510.06952","title":"OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2603.04913","title":"Beyond the Patch: Exploring Vulnerabilities of Visuomotor Policies via Viewpoint-Consistent 3D Adversarial Object","created":"2026-03-05","cited_by_count":0,"area":null}],"next_cursor":null}