{"total":302,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2206.04011","title":"Robust Semantic Communications with Masked VQ-VAE Enabled Codebook","created":"2022-06-08","cited_by_count":56,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2107.13335","title":"WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification","created":"2021-07-28","cited_by_count":29,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2103.16148","title":"Class-Aware Robust Adversarial Training for Object Detection","created":"2021-03-30","cited_by_count":27,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2308.03979","title":"PAIF: Perception-Aware Infrared-Visible Image Fusion for Attack-Tolerant Semantic Segmentation","created":"2023-08-08","cited_by_count":26,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2109.00946","title":"Adversarial Robustness for Unsupervised Domain Adaptation","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2208.10159","title":"Prompt-Matched Semantic Segmentation","created":"2022-08-22","cited_by_count":22,"area":null},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2202.05953","title":"Open-set Adversarial Defense with Clean-Adversarial Mutual Learning","created":"2022-02-12","cited_by_count":21,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2202.04781","title":"Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios","created":"2022-02-10","cited_by_count":20,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2207.13326","title":"Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing","created":"2022-07-27","cited_by_count":16,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2206.07635","title":"AI Ethics Issues in Real World: Evidence from AI Incident Database","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2211.01361","title":"My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization","created":"2022-11-02","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2207.12203","title":"Improving Adversarial Robustness via Mutual Information Estimation","created":"2022-07-25","cited_by_count":13,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2302.12366","title":"Less is More: Data Pruning for Faster Adversarial Training","created":"2023-02-23","cited_by_count":13,"area":null},{"id":"2308.10601","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","created":"2023-08-21","cited_by_count":13,"area":null},{"id":"2102.03726","title":"Adversarial example generation with AdaBelief Optimizer and Crop Invariance","created":"2021-02-07","cited_by_count":12,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2107.06501","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","created":"2021-07-14","cited_by_count":9,"area":null},{"id":"2108.11505","title":"Generalized Real-World Super-Resolution through Adversarial Robustness","created":"2021-08-25","cited_by_count":9,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2211.10752","title":"Towards Robust Dataset Learning","created":"2022-11-19","cited_by_count":9,"area":null},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2102.02729","title":"Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review","created":"2021-02-04","cited_by_count":8,"area":null},{"id":"2109.09901","title":"Modeling Adversarial Noise for Adversarial Training","created":"2021-09-21","cited_by_count":8,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null}],"next_cursor":"100"}