{"total":134,"rows":[{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2112.09151","title":"TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations","created":"2021-12-16","cited_by_count":26,"area":null},{"id":"2101.06639","title":"Removing Undesirable Feature Contributions Using Out-of-Distribution Data","created":"2021-01-17","cited_by_count":23,"area":null},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2202.03195","title":"More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2109.12343","title":"Beyond Robustness: A Taxonomy of Approaches towards Resilient Multi-Robot Systems","created":"2021-09-25","cited_by_count":12,"area":null},{"id":"2202.12587","title":"Local Intensity Order Transformation for Robust Curvilinear Object Segmentation","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2411.17957","title":"DiffVax: Optimization-Free Image Immunization Against Diffusion-Based Editing","created":"2024-11-27","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2105.07553","title":"Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing","created":"2021-05-17","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2206.04881","title":"Enhancing Clean Label Backdoor Attack with Two-phase Specific Triggers","created":"2022-06-10","cited_by_count":7,"area":null},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2408.05941","title":"Multimodal Large Language Models for Phishing Webpage Detection and Identification","created":"2024-08-12","cited_by_count":7,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2406.03303","title":"Learning Visual Prompts for Guiding the Attention of Vision Transformers","created":"2024-06-05","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2205.02414","title":"Subverting Fair Image Search with Generative Adversarial Perturbations","created":"2022-05-05","cited_by_count":5,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2209.09883","title":"Leveraging Local Patch Differences in Multi-Object Scenes for Generative Adversarial Attacks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2302.12252","title":"Boosting Adversarial Transferability using Dynamic Cues","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2402.08648","title":"Generating Universal Adversarial Perturbations for Quantum Classifiers","created":"2024-02-13","cited_by_count":5,"area":null},{"id":"2209.13113","title":"FG-UAP: Feature-Gathering Universal Adversarial Perturbation","created":"2022-09-27","cited_by_count":4,"area":null},{"id":"2210.15392","title":"LeNo: Adversarial Robust Salient Object Detection Networks with Learnable Noise","created":"2022-10-27","cited_by_count":4,"area":null},{"id":"2212.03095","title":"Interpretation of Neural Networks is Susceptible to Universal Adversarial Perturbations","created":"2022-11-30","cited_by_count":4,"area":null},{"id":"2408.00117","title":"Certifying Robustness of Learning-Based Keypoint Detection and Pose Estimation Methods","created":"2024-07-31","cited_by_count":4,"area":null},{"id":"2409.13349","title":"ID-Guard: A Universal Framework for Combating Facial Manipulation via Breaking Identification","created":"2024-09-20","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2501.01106","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","created":"2025-01-02","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2106.10989","title":"ImageNet Pre-training also Transfers Non-Robustness","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2110.07460","title":"IB-GAN: A Unified Approach for Multivariate Time Series Classification under Class Imbalance","created":"2021-10-14","cited_by_count":3,"area":null},{"id":"2110.08256","title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness","created":"2021-10-13","cited_by_count":3,"area":null},{"id":"2303.10594","title":"AdaptGuard: Defending Against Universal Attacks for Model Adaptation","created":"2023-03-19","cited_by_count":3,"area":null},{"id":"2311.17087","title":"Rethinking Mixup for Improving the Adversarial Transferability","created":"2023-11-28","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2407.12292","title":"Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2411.19005","title":"Locally-Focused Face Representation for Sketch-to-Image Generation Using Noise-Induced Refinement","created":"2024-11-28","cited_by_count":3,"area":null},{"id":"2502.21048","title":"Data-free Universal Adversarial Perturbation with Pseudo-semantic Prior","created":"2025-02-28","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2309.01620","title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2408.01715","title":"Joint Universal Adversarial Perturbations with Interpretations","created":"2024-08-03","cited_by_count":2,"area":null},{"id":"2505.10983","title":"GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models","created":"2025-05-16","cited_by_count":2,"area":null},{"id":"2607.05522","title":"Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Control","created":"2026-07-06","cited_by_count":2,"area":null},{"id":"2105.15057","title":"Dominant Patterns: Critical Features Hidden in Deep Neural Networks","created":"2021-05-31","cited_by_count":1,"area":null},{"id":"2108.04979","title":"Simple black-box universal adversarial attacks on medical image classification based on deep neural networks","created":"2021-08-11","cited_by_count":1,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2210.15997","title":"Universal Adversarial Directions","created":"2022-10-28","cited_by_count":1,"area":null},{"id":"2211.15510","title":"Localized Shortcut Removal","created":"2022-11-24","cited_by_count":1,"area":null},{"id":"2305.12881","title":"Building an Invisible Shield for Your Portrait against Deepfakes","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2305.12906","title":"Latent Magic: An Investigation into Adversarial Examples Crafted in the Semantic Latent Space","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2310.11093","title":"SODA: Robust Training of Test-Time Data Adaptors","created":"2023-10-17","cited_by_count":1,"area":null},{"id":"2311.16577","title":"Efficient Key-Based Adversarial Defense for ImageNet by Using Pre-trained Model","created":"2023-11-28","cited_by_count":1,"area":null}],"next_cursor":"100"}