{"total":88,"rows":[{"id":"2102.09003","title":"Domain Impression: A Source Data Free Domain Adaptation Method","created":"2021-02-17","cited_by_count":91,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2105.10872","title":"CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes","created":"2021-05-23","cited_by_count":56,"area":"safety"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2409.17874","title":"DarkSAM: Fooling Segment Anything Model to Segment Nothing","created":"2024-09-26","cited_by_count":32,"area":null},{"id":"2101.12322","title":"Position, Padding and Predictions: A Deeper Look at Position Information in CNNs","created":"2021-01-28","cited_by_count":26,"area":null},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2107.11252","title":"Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigation","created":"2021-07-23","cited_by_count":15,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2101.03924","title":"The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing","created":"2021-01-11","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2412.08108","title":"Exploiting Vision Encoder Vulnerabilities for Universal Adversarial Perturbations on Large Vision-Language Models","created":"2024-12-11","cited_by_count":11,"area":"mllm"},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2311.10366","title":"Breaking Temporal Consistency: Generating Video Universal Adversarial Perturbations Using Image Models","created":"2023-11-17","cited_by_count":9,"area":null},{"id":"2101.06069","title":"Mining Data Impressions from Deep Models as Substitute for the Unavailable Training Data","created":"2021-01-15","cited_by_count":7,"area":"distill"},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2108.09929","title":"SegMix: Co-occurrence Driven Mixup for Semantic Segmentation and Adversarial Robustness","created":"2021-08-23","cited_by_count":7,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7,"area":"diffusion"},{"id":"2602.14679","title":"Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection","created":"2026-02-16","cited_by_count":7,"area":"diffusion"},{"id":"2105.07334","title":"Real-time Detection of Practical Universal Adversarial Perturbations","created":"2021-05-16","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2109.06363","title":"Sensor Adversarial Traits: Analyzing Robustness of 3D Object Detection Sensor Fusion Models","created":"2021-09-13","cited_by_count":5,"area":null},{"id":"2204.01276","title":"Aligning Silhouette Topology for Self-Adaptive 3D Human Pose Recovery","created":"2022-04-04","cited_by_count":5,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2311.14450","title":"Segment (Almost) Nothing: Prompt-Agnostic Adversarial Attacks on Segmentation Models","created":"2023-11-24","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2408.09839","title":"Segment-Anything Models Achieve Zero-shot Robustness in Autonomous Driving","created":"2024-08-19","cited_by_count":5,"area":null},{"id":"2103.00250","title":"Effective Universal Unrestricted Adversarial Attacks using a MOE Approach","created":"2021-02-27","cited_by_count":4,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2109.12406","title":"MINIMAL: Mining Models for Data Free Universal Adversarial Triggers","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2111.12305","title":"Thundernna: a white box adversarial attack","created":"2021-11-24","cited_by_count":4,"area":null},{"id":"2209.13113","title":"FG-UAP: Feature-Gathering Universal Adversarial Perturbation","created":"2022-09-27","cited_by_count":4,"area":null},{"id":"2310.12431","title":"SAM Meets UAP: Attacking Segment Anything Model With Universal Adversarial Perturbation","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2502.21048","title":"Data-free Universal Adversarial Perturbation with Pseudo-semantic Prior","created":"2025-02-28","cited_by_count":3,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2306.15705","title":"On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection","created":"2023-06-27","cited_by_count":2,"area":null},{"id":"2312.07338","title":"Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2105.15057","title":"Dominant Patterns: Critical Features Hidden in Deep Neural Networks","created":"2021-05-31","cited_by_count":1,"area":null},{"id":"2110.02700","title":"Reversible Attack based on Local Visual Adversarial Perturbation","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2206.00913","title":"Improving the Robustness and Generalization of Deep Neural Network with Confidence Threshold Reduction","created":"2022-06-02","cited_by_count":1,"area":null},{"id":"2306.14217","title":"On Evaluating the Adversarial Robustness of Semantic Segmentation Models","created":"2023-06-25","cited_by_count":1,"area":null},{"id":"2401.17038","title":"Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR","created":"2024-01-30","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2511.18223","title":"A Novel and Practical Universal Adversarial Perturbations against Deep Reinforcement Learning based Intrusion Detection Systems","created":"2025-11-22","cited_by_count":1,"area":null},{"id":"2601.23179","title":"Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization","created":"2026-01-30","cited_by_count":1,"area":"mllm"},{"id":"2105.14638","title":"DAAIN: Detection of Anomalous and Adversarial Input using Normalizing Flows","created":"2021-05-30","cited_by_count":0,"area":null},{"id":"2106.04392","title":"Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognition","created":"2021-06-05","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2108.04409","title":"On Procedural Adversarial Noise Attack And Defense","created":"2021-08-10","cited_by_count":0,"area":null},{"id":"2204.01099","title":"Adversarially robust segmentation models learn perceptually-aligned gradients","created":"2022-04-03","cited_by_count":0,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2309.09443","title":"Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2311.01696","title":"Universal Perturbation-based Secret Key-Controlled Data Hiding","created":"2023-11-03","cited_by_count":0,"area":null},{"id":"2311.08141","title":"GMTR: Graph Matching Transformers","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2312.16805","title":"DarkShot: Lighting Dark Images with Low-Compute and High-Quality","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.05431","title":"TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2401.05432","title":"TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2403.13663","title":"T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image","created":"2024-03-20","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2407.17312","title":"Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patches","created":"2024-07-24","cited_by_count":0,"area":null},{"id":"2408.17101","title":"Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2410.11162","title":"Towards General Deepfake Detection with Dynamic Curriculum","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2410.13409","title":"Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2503.22205","title":"Data-Free Universal Attack by Exploiting the Intrinsic Vulnerability of Deep Models","created":"2025-03-28","cited_by_count":0,"area":null},{"id":"2505.20782","title":"Towards Cross-Domain Multi-Targeted Adversarial Attacks","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2507.06486","title":"Mask6D: Masked Pose Priors For 6D Object Pose Estimation","created":"2025-07-09","cited_by_count":0,"area":null},{"id":"2601.12624","title":"Towards Robust Universal Perturbation Attacks: A Float-Coded, Penalty-Driven Evolutionary Approach","created":"2026-01-18","cited_by_count":0,"area":null},{"id":"2605.18868","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2609.30605","title":"Probabilistic Robustness-driven Universal Adversarial Perturbations with Explainability against Deep Reinforcement Learning-based Intrusion Detection System","created":"2026-09-24","cited_by_count":0,"area":"deeprl"}],"next_cursor":null}