{"total":35,"rows":[{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2308.16316","title":"Ten Years of Generative Adversarial Nets (GANs): A survey of the state-of-the-art","created":"2023-08-30","cited_by_count":14,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2205.13807","title":"fakeWeather: Adversarial Attacks for Deep Neural Networks Emulating Weather Conditions on the Camera Lens of Autonomous Systems","created":"2022-05-27","cited_by_count":8,"area":null},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2108.09413","title":"Integer-arithmetic-only Certified Robustness for Quantized Neural Networks","created":"2021-08-21","cited_by_count":7,"area":null},{"id":"2102.00798","title":"Landmark Breaker: Obstructing DeepFake By Disturbing Landmark Extraction","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2303.06032","title":"Exploring Adversarial Attacks on Neural Networks: An Explainable Approach","created":"2023-03-08","cited_by_count":4,"area":null},{"id":"2310.12708","title":"Generating Robust Adversarial Examples against Online Social Networks (OSNs)","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2403.04149","title":"MAP: MAsk-Pruning for Source-Free Model Intellectual Property Protection","created":"2024-03-07","cited_by_count":4,"area":null},{"id":"2407.11463","title":"Investigating Imperceptibility of Adversarial Attacks on Tabular Data: An Empirical Analysis","created":"2024-07-16","cited_by_count":4,"area":null},{"id":"2104.08422","title":"Fashion-Guided Adversarial Attack on Person Segmentation","created":"2021-04-17","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2303.06151","title":"NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks","created":"2023-03-09","cited_by_count":2,"area":null},{"id":"2510.03224","title":"Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles","created":"2025-10-03","cited_by_count":2,"area":null},{"id":"2301.01223","title":"ExploreADV: Towards exploratory attack for Neural Networks","created":"2023-01-01","cited_by_count":1,"area":null},{"id":"2407.03144","title":"Venomancer: Towards Imperceptible and Target-on-Demand Backdoor Attacks in Federated Learning","created":"2024-07-03","cited_by_count":1,"area":null},{"id":"2507.06856","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","created":"2025-07-09","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2207.08948","title":"Multi-step domain adaptation by adversarial attack to $\\mathcal{H} \\Delta \\mathcal{H}$-divergence","created":"2022-07-18","cited_by_count":0,"area":null},{"id":"2304.14888","title":"The Power of Typed Affine Decision Structures: A Case Study","created":"2023-04-28","cited_by_count":0,"area":null},{"id":"2405.03777","title":"Is ReLU Adversarially Robust?","created":"2024-05-06","cited_by_count":0,"area":null},{"id":"2412.11168","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","created":"2024-12-15","cited_by_count":0,"area":null},{"id":"2502.02290","title":"FRAUD-RLA: A new reinforcement learning adversarial attack against credit card fraud detection","created":"2025-02-04","cited_by_count":0,"area":null},{"id":"2504.02329","title":"Towards Assessing Deep Learning Test Input Generators","created":"2025-04-03","cited_by_count":0,"area":null}],"next_cursor":null}