{"total":113,"rows":[{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2203.08519","title":"Towards Practical Certifiable Patch Defense with Vision Transformer","created":"2022-03-16","cited_by_count":44,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2111.10659","title":"Are Vision Transformers Robust to Patch Perturbations?","created":"2021-11-20","cited_by_count":39,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29,"area":null},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2510.13237","title":"Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models","created":"2025-10-15","cited_by_count":22,"area":"vla"},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2209.05980","title":"Certified Defences Against Adversarial Patch Attacks on Semantic Segmentation","created":"2022-09-13","cited_by_count":16,"area":null},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2207.07347","title":"Feasibility of Inconspicuous GAN-generated Adversarial Patches against Object Detection","created":"2022-07-15","cited_by_count":13,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2301.12993","title":"Benchmarking Robustness to Adversarial Image Obfuscations","created":"2023-01-30","cited_by_count":8,"area":null},{"id":"2307.11528","title":"Improving Viewpoint Robustness for Visual Recognition via Adversarial Training","created":"2023-07-21","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2106.05997","title":"Verifying Quantized Neural Networks using SMT-Based Model Checking","created":"2021-06-10","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2209.13353","title":"Suppress with a Patch: Revisiting Universal Adversarial Patch Attacks against Object Detection","created":"2022-09-27","cited_by_count":6,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2402.06249","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","created":"2024-02-09","cited_by_count":6,"area":null},{"id":"2406.03303","title":"Learning Visual Prompts for Guiding the Attention of Vision Transformers","created":"2024-06-05","cited_by_count":6,"area":null},{"id":"2201.01621","title":"ROOM: Adversarial Machine Learning Attacks Under Real-Time Constraints","created":"2022-01-05","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2406.10285","title":"I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors","created":"2024-06-12","cited_by_count":5,"area":null},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2412.11735","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2404.09961","title":"Ti-Patch: Tiled Physical Adversarial Patch for no-reference video quality metrics","created":"2024-04-15","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2407.17797","title":"A Unified Understanding of Adversarial Vulnerability Regarding Unimodal Models and Vision-Language Pre-training Models","created":"2024-07-25","cited_by_count":4,"area":"mllm"},{"id":"2410.23461","title":"Transformation-Invariant Learning and Theoretical Guarantees for OOD Generalization","created":"2024-10-30","cited_by_count":4,"area":null},{"id":"2605.01950","title":"TRAP: Tail-aware Ranking Attack for World-Model Planning","created":"2026-05-03","cited_by_count":4,"area":"wm"},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2110.04887","title":"Adversarial Attacks in a Multi-view Setting: An Empirical Study of the Adversarial Patches Inter-view Transferability","created":"2021-10-10","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2306.16131","title":"Distributional Modeling for Location-Aware Adversarial Patches","created":"2023-06-28","cited_by_count":3,"area":null},{"id":"2308.11822","title":"PatchBackdoor: Backdoor Attack against Deep Neural Networks without Model Modification","created":"2023-08-22","cited_by_count":3,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2303.08944","title":"Agnostic Multi-Robust Learning Using ERM","created":"2023-03-15","cited_by_count":2,"area":null},{"id":"2309.07106","title":"Hardening RGB-D Object Recognition Systems against Adversarial Patch Attacks","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2408.02980","title":"Sample-agnostic Adversarial Perturbation for Vision-Language Pre-training Models","created":"2024-08-06","cited_by_count":2,"area":"mllm"},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2509.22836","title":"Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GAN","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2511.09834","title":"CertMask: Certifiable Defense Against Adversarial Patches via Theoretically Optimal Mask Coverage","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2110.02700","title":"Reversible Attack based on Local Visual Adversarial Perturbation","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2205.08989","title":"Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing","created":"2022-05-18","cited_by_count":1,"area":null},{"id":"2301.01223","title":"ExploreADV: Towards exploratory attack for Neural Networks","created":"2023-01-01","cited_by_count":1,"area":null},{"id":"2304.13919","title":"Detection of Adversarial Physical Attacks in Time-Series Image Data","created":"2023-04-27","cited_by_count":1,"area":null},{"id":"2305.10929","title":"Architecture-agnostic Iterative Black-box Certified Defense against Adversarial Patches","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2307.14242","title":"Defending Adversarial Patches via Joint Region Localizing and Inpainting","created":"2023-07-26","cited_by_count":1,"area":null},{"id":"2308.15344","title":"Imperceptible Adversarial Attack on Deep Neural Networks from Image Boundary","created":"2023-08-29","cited_by_count":1,"area":null},{"id":"2312.00173","title":"Fool the Hydra: Adversarial Attacks against Multi-view Object Detection Systems","created":"2023-11-30","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2408.04181","title":"EdgeShield: A Universal and Efficient Edge Computing Framework for Robust AI","created":"2024-08-08","cited_by_count":1,"area":null},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.07058","title":"Breaking the Limits of Quantization-Aware Defenses: QADT-R for Robustness Against Patch-Based Adversarial Attacks in QNNs","created":"2025-03-10","cited_by_count":1,"area":null},{"id":"2506.04823","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","created":"2025-06-05","cited_by_count":1,"area":null},{"id":"2507.06856","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","created":"2025-07-09","cited_by_count":1,"area":null},{"id":"2507.10265","title":"Kaleidoscopic Background Attack: Disrupting Pose Estimation with Multi-Fold Radial Symmetry Textures","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2508.01676","title":"Benchmarking Adversarial Patch Selection and Location","created":"2025-08-03","cited_by_count":1,"area":null},{"id":"2510.04245","title":"Concept-Based Masking: A Patch-Agnostic Defense Against Adversarial Patch Attacks","created":"2025-10-05","cited_by_count":1,"area":null},{"id":"2510.17322","title":"A Single Set of Adversarial Clothes Breaks Multiple Defense Methods in the Physical World","created":"2025-10-20","cited_by_count":1,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2305.09179","title":"Ortho-ODE: Enhancing Robustness and of Neural ODEs against Adversarial Attacks","created":"2023-05-16","cited_by_count":0,"area":null},{"id":"2311.01563","title":"Assist Is Just as Important as the Goal: Image Resurfacing to Aid Model's Robust Prediction","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2311.15994","title":"Adversarial Doodles: Interpretable and Human-drawable Attacks Provide Describable Insights","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2407.18251","title":"Sparse vs Contiguous Adversarial Pixel Perturbations in Multimodal Models: An Empirical Analysis","created":"2024-07-25","cited_by_count":0,"area":null},{"id":"2411.17026","title":"RED: Robust Environmental Design","created":"2024-11-26","cited_by_count":0,"area":null}],"next_cursor":"100"}