{"total":233,"rows":[{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2102.07364","title":"Intermediate Layer Optimization for Inverse Problems using Deep Generative Models","created":"2021-02-15","cited_by_count":70,"area":null},{"id":"2209.02128","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","created":"2022-09-05","cited_by_count":69,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2203.01584","title":"Fairness-aware Adversarial Perturbation Towards Bias Mitigation for Deployed Deep Models","created":"2022-03-03","cited_by_count":47,"area":null},{"id":"2208.08831","title":"Discovering Bugs in Vision Models using Off-the-shelf Image Generation and Captioning","created":"2022-08-18","cited_by_count":45,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2112.04764","title":"3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection","created":"2021-12-09","cited_by_count":43,"area":null},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2303.15441","title":"Zero-shot Model Diagnosis","created":"2023-03-27","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2104.02726","title":"Creativity and Machine Learning: A Survey","created":"2021-04-06","cited_by_count":21,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2101.05509","title":"Transformer-based Language Model Fine-tuning Methods for COVID-19 Fake News Detection","created":"2021-01-14","cited_by_count":15,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2107.12085","title":"Learning to Adversarially Blur Visual Object Tracking","created":"2021-07-26","cited_by_count":14,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2302.12366","title":"Less is More: Data Pruning for Faster Adversarial Training","created":"2023-02-23","cited_by_count":13,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2309.13609","title":"Vulnerabilities in Video Quality Assessment Models: The Challenge of Adversarial Attacks","created":"2023-09-24","cited_by_count":12,"area":null},{"id":"2111.05468","title":"Sparse Adversarial Video Attacks with Spatial Transformations","created":"2021-11-10","cited_by_count":11,"area":null},{"id":"2208.01819","title":"Adversarial Camouflage for Node Injection Attack on Graphs","created":"2022-08-03","cited_by_count":11,"area":null},{"id":"2103.16493","title":"Enabling Data Diversity: Efficient Automatic Augmentation via Regularized Adversarial Training","created":"2021-03-30","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2202.08393","title":"Robust Reinforcement Learning via Genetic Curriculum","created":"2022-02-17","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2411.17957","title":"DiffVax: Optimization-Free Image Immunization Against Diffusion-Based Editing","created":"2024-11-27","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2202.07260","title":"Learning Disentangled Behaviour Patterns for Wearable-based Human Activity Recognition","created":"2022-02-15","cited_by_count":9,"area":null},{"id":"2105.07553","title":"Prototype-supervised Adversarial Network for Targeted Attack of Deep Hashing","created":"2021-05-17","cited_by_count":8,"area":null},{"id":"2107.09225","title":"Discriminator-Free Generative Adversarial Attack","created":"2021-07-20","cited_by_count":8,"area":null},{"id":"2201.04011","title":"Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition","created":"2022-01-11","cited_by_count":8,"area":null},{"id":"2211.15897","title":"Learning Antidote Data to Individual Unfairness","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2304.04386","title":"Generating Adversarial Attacks in the Latent Space","created":"2023-04-10","cited_by_count":8,"area":null},{"id":"2308.05985","title":"TrajPAC: Towards Robustness Verification of Pedestrian Trajectory Prediction Models","created":"2023-08-11","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2105.04839","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","created":"2021-05-11","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2208.09336","title":"Dispersed Pixel Perturbation-based Imperceptible Backdoor Trigger for Image Classifier Models","created":"2022-08-19","cited_by_count":7,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2403.11397","title":"Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization","created":"2024-03-18","cited_by_count":7,"area":null},{"id":"2103.10229","title":"Explainable Adversarial Attacks in Deep Neural Networks Using Activation Profiles","created":"2021-03-18","cited_by_count":6,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2112.07076","title":"Real-Time Neural Voice Camouflage","created":"2021-12-14","cited_by_count":6,"area":null},{"id":"2204.12050","title":"Self-recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks","created":"2022-04-26","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2402.15959","title":"Towards Robust Image Stitching: An Adaptive Resistance Learning against Compatible Attacks","created":"2024-02-25","cited_by_count":6,"area":null},{"id":"2409.10071","title":"Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation","created":"2024-09-16","cited_by_count":6,"area":null},{"id":"2106.01617","title":"Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout","created":"2021-06-03","cited_by_count":5,"area":null},{"id":"2203.01516","title":"Ad2Attack: Adaptive Adversarial Attack on Real-Time UAV Tracking","created":"2022-03-03","cited_by_count":5,"area":null},{"id":"2205.00210","title":"Software Testing for Machine Learning","created":"2022-04-30","cited_by_count":5,"area":null},{"id":"2207.04209","title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain","created":"2022-07-09","cited_by_count":5,"area":null}],"next_cursor":"100"}