{"total":274,"rows":[{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2103.11943","title":"BERT: A Review of Applications in Natural Language Processing and Understanding","created":"2021-03-22","cited_by_count":109,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2110.12976","title":"Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks","created":"2021-10-25","cited_by_count":91,"area":null},{"id":"2303.11717","title":"A Complete Survey on Generative AI (AIGC): Is ChatGPT from GPT-4 to GPT-5 All You Need?","created":"2023-03-21","cited_by_count":84,"area":null},{"id":"2111.02813","title":"WaveFake: A Data Set to Facilitate Audio Deepfake Detection","created":"2021-11-04","cited_by_count":78,"area":null},{"id":"2106.06663","title":"TDGIA:Effective Injection Attacks on Graph Neural Networks","created":"2021-06-12","cited_by_count":67,"area":null},{"id":"2206.09682","title":"SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles","created":"2022-06-20","cited_by_count":66,"area":"driving"},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2101.08286","title":"Can stable and accurate neural networks be computed? -- On the barriers of deep learning and Smale's 18th problem","created":"2021-01-20","cited_by_count":53,"area":null},{"id":"2102.10707","title":"A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization","created":"2021-02-21","cited_by_count":46,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2107.14569","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","created":"2021-07-30","cited_by_count":44,"area":null},{"id":"2103.03344","title":"WaveGuard: Understanding and Mitigating Audio Adversarial Examples","created":"2021-03-04","cited_by_count":40,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2210.17004","title":"Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitution","created":"2022-10-31","cited_by_count":28,"area":null},{"id":"2304.14535","title":"Deep Transfer Learning for Automatic Speech Recognition: Towards Better Generalization","created":"2023-04-27","cited_by_count":28,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2503.11751","title":"reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs","created":"2025-03-14","cited_by_count":25,"area":"alignment"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2104.02000","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","created":"2021-04-05","cited_by_count":23,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2211.03117","title":"Going In Style: Audio Backdoors Through Stylistic Transformations","created":"2022-11-06","cited_by_count":21,"area":null},{"id":"2409.09272","title":"SafeEar: Content Privacy-Preserving Audio Deepfake Detection","created":"2024-09-14","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.10306","title":"Omnidirectional Information Gathering for Knowledge Transfer-based Audio-Visual Navigation","created":"2023-08-20","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2208.11613","title":"Unrestricted Black-box Adversarial Attack Using GAN with Limited Queries","created":"2022-08-24","cited_by_count":18,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2102.07047","title":"Adversarial defense for automatic speaker verification by cascaded self-supervised learning models","created":"2021-02-14","cited_by_count":16,"area":null},{"id":"2106.00273","title":"Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning","created":"2021-06-01","cited_by_count":16,"area":null},{"id":"2109.06098","title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks","created":"2021-09-13","cited_by_count":16,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2203.16536","title":"Recent improvements of ASR models in the face of adversarial attacks","created":"2022-03-29","cited_by_count":13,"area":null},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2304.05370","title":"Overload: Latency Attacks on Object Detection for Edge Devices","created":"2023-04-11","cited_by_count":13,"area":null},{"id":"2508.15407","title":"When Audio and Text Disagree: Revealing Text Bias in Large Audio-Language Models","created":"2025-08-21","cited_by_count":13,"area":null},{"id":"2106.07868","title":"Voting for the right answer: Adversarial defense for speaker verification","created":"2021-06-15","cited_by_count":12,"area":null},{"id":"2111.06979","title":"Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2405.06134","title":"Muting Whisper: A Universal Acoustic Adversarial Attack on Speech Foundation Models","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2210.17316","title":"There is more than one kind of robustness: Fooling Whisper with adversarial examples","created":"2022-10-26","cited_by_count":11,"area":null},{"id":"2101.03263","title":"SyReNN: A Tool for Analyzing Deep Neural Networks","created":"2021-01-09","cited_by_count":10,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2104.02757","title":"Exploring Targeted Universal Adversarial Perturbations to End-to-end ASR Models","created":"2021-04-06","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2306.06359","title":"NeRFool: Uncovering the Vulnerability of Generalizable Neural Radiance Fields against Adversarial Perturbations","created":"2023-06-10","cited_by_count":10,"area":null},{"id":"2306.07655","title":"Malafide: a novel adversarial convolutive noise attack against deepfake and spoofing detection systems","created":"2023-06-13","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2110.09843","title":"AequeVox: Automated Fairness Testing of Speech Recognition Systems","created":"2021-10-19","cited_by_count":9,"area":null},{"id":"2202.13490","title":"Limitations of Deep Learning for Inverse Problems on Digital Hardware","created":"2022-02-28","cited_by_count":9,"area":null},{"id":"2308.00319","title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack","created":"2023-08-01","cited_by_count":9,"area":null},{"id":"2403.02955","title":"XAI-Based Detection of Adversarial Attacks on Deepfake Detectors","created":"2024-03-05","cited_by_count":9,"area":null},{"id":"2507.06256","title":"Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World","created":"2025-07-07","cited_by_count":9,"area":null},{"id":"2104.07815","title":"A Method to Reveal Speaker Identity in Distributed ASR Training, and How to Counter It","created":"2021-04-15","cited_by_count":8,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2107.00309","title":"Adversarial Sample Detection for Speaker Verification by Neural Vocoders","created":"2021-07-01","cited_by_count":8,"area":null},{"id":"2112.10583","title":"A singular Riemannian geometry approach to Deep Neural Networks II. Reconstruction of 1-D equivalence classes","created":"2021-12-17","cited_by_count":8,"area":null},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2107.14642","title":"Practical Attacks on Voice Spoofing Countermeasures","created":"2021-07-30","cited_by_count":7,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2207.00694","title":"Efficient Adversarial Training With Data Pruning","created":"2022-07-01","cited_by_count":7,"area":null},{"id":"2411.14842","title":"Who Can Withstand Chat-Audio Attacks? An Evaluation Benchmark for Large Audio-Language Models","created":"2024-11-22","cited_by_count":7,"area":null},{"id":"2103.01276","title":"A Multiclass Boosting Framework for Achieving Fast and Provable Adversarial Robustness","created":"2021-03-01","cited_by_count":6,"area":null},{"id":"2105.10707","title":"Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems","created":"2021-05-22","cited_by_count":6,"area":null},{"id":"2108.12492","title":"Disrupting Adversarial Transferability in Deep Neural Networks","created":"2021-08-27","cited_by_count":6,"area":null},{"id":"2111.04330","title":"Characterizing the adversarial vulnerability of speech self-supervised learning","created":"2021-11-08","cited_by_count":6,"area":null},{"id":"2112.07076","title":"Real-Time Neural Voice Camouflage","created":"2021-12-14","cited_by_count":6,"area":null},{"id":"2202.00673","title":"Visualizing Automatic Speech Recognition -- Means for a Better Understanding?","created":"2022-02-01","cited_by_count":6,"area":null},{"id":"2207.05729","title":"Physical Passive Patch Adversarial Attacks on Visual Odometry Systems","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2305.17440","title":"Modeling Adversarial Attack on Pre-trained Language Models as Sequential Decision Making","created":"2023-05-27","cited_by_count":6,"area":null},{"id":"2308.12882","title":"LCANets++: Robust Audio Classification using Multi-layer Neural Networks with Lateral Competition","created":"2023-08-23","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2408.09300","title":"Malacopula: adversarial automatic speaker verification attacks using a neural-based generalised Hammerstein model","created":"2024-08-17","cited_by_count":6,"area":null},{"id":"2503.08801","title":"Enhanced Estimation Techniques for Certified Radii in Randomized Smoothing","created":"2025-03-11","cited_by_count":6,"area":null},{"id":"2505.14286","title":"Universal Acoustic Adversarial Attacks for Flexible Control of Speech-LLMs","created":"2025-05-20","cited_by_count":6,"area":null},{"id":"2102.07164","title":"Adversarial Attack on Network Embeddings via Supervised Network Poisoning","created":"2021-02-14","cited_by_count":5,"area":null},{"id":"2106.01617","title":"Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout","created":"2021-06-03","cited_by_count":5,"area":null},{"id":"2108.10015","title":"Semantic-Preserving Adversarial Text Attacks","created":"2021-08-23","cited_by_count":5,"area":null},{"id":"2204.11304","title":"Dictionary Attacks on Speaker Verification","created":"2022-04-24","cited_by_count":5,"area":null},{"id":"2204.13172","title":"An Adversarial Attack Analysis on Malicious Advertisement URL Detection Framework","created":"2022-04-27","cited_by_count":5,"area":null},{"id":"2205.00210","title":"Software Testing for Machine Learning","created":"2022-04-30","cited_by_count":5,"area":null},{"id":"2209.01721","title":"An Adaptive Black-box Defense against Trojan Attacks (TrojDef)","created":"2022-09-05","cited_by_count":5,"area":"safety"},{"id":"2303.07199","title":"BeamAttack: Generating High-quality Textual Adversarial Examples through Beam Search and Mixed Semantic Spaces","created":"2023-03-09","cited_by_count":5,"area":null},{"id":"2306.16022","title":"Enrollment-stage Backdoor Attacks on Speaker Recognition Systems via Adversarial Ultrasound","created":"2023-06-28","cited_by_count":5,"area":"safety"},{"id":"2309.06960","title":"PhantomSound: Black-Box, Query-Efficient Audio Adversarial Attack via Split-Second Phoneme Injection","created":"2023-09-13","cited_by_count":5,"area":null},{"id":"2408.01808","title":"ALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features","created":"2024-08-03","cited_by_count":5,"area":null}],"next_cursor":"100"}