{"total":54,"rows":[{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2106.15277","title":"EPMF: Efficient Perception-aware Multi-sensor Fusion for 3D Semantic Segmentation","created":"2021-06-21","cited_by_count":59,"area":null},{"id":"2101.09054","title":"Adversarial Laws of Large Numbers and Optimal Regret in Online Classification","created":"2021-01-22","cited_by_count":39,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2103.16148","title":"Class-Aware Robust Adversarial Training for Object Detection","created":"2021-03-30","cited_by_count":27,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2105.10843","title":"Exploring Robustness of Unsupervised Domain Adaptation in Semantic Segmentation","created":"2021-05-23","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2111.10759","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","created":"2021-11-21","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2208.13058","title":"Adversarial Robustness for Tabular Data through Cost and Utility Awareness","created":"2022-08-27","cited_by_count":15,"area":null},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14,"area":null},{"id":"2102.04150","title":"Exploiting epistemic uncertainty of the deep learning models to generate adversarial samples","created":"2021-02-08","cited_by_count":13,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2112.11937","title":"Adversarial Deep Reinforcement Learning for Improving the Robustness of Multi-agent Autonomous Driving Policies","created":"2021-12-22","cited_by_count":10,"area":"driving"},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2101.06092","title":"Black-box Adversarial Attacks in Autonomous Vehicle Technology","created":"2021-01-15","cited_by_count":9,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2605.02900","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","created":"2026-03-28","cited_by_count":7,"area":"safety"},{"id":"2109.04565","title":"TENET: Temporal CNN with Attention for Anomaly Detection in Automotive Cyber-Physical Systems","created":"2021-09-09","cited_by_count":6,"area":null},{"id":"2103.00345","title":"End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering","created":"2021-02-27","cited_by_count":5,"area":null},{"id":"2103.07640","title":"Generating Unrestricted Adversarial Examples via Three Parameters","created":"2021-03-13","cited_by_count":5,"area":null},{"id":"2304.02847","title":"Robustmix: Improving Robustness by Regularizing the Frequency Bias of Deep Nets","created":"2023-04-06","cited_by_count":4,"area":null},{"id":"2203.10930","title":"An integrated Auto Encoder-Block Switching defense approach to prevent adversarial attacks","created":"2022-03-11","cited_by_count":3,"area":null},{"id":"2411.18776","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2508.17674","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models","created":"2025-08-25","cited_by_count":3,"area":"agents"},{"id":"2203.00150","title":"Explaining RADAR features for detecting spoofing attacks in Connected Autonomous Vehicles","created":"2022-03-01","cited_by_count":2,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2402.02554","title":"DeSparsify: Adversarial Attack Against Token Sparsification Mechanisms in Vision Transformers","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2501.02147","title":"Exploring Secure Machine Learning Through Payload Injection and FGSM Attacks on ResNet-50","created":"2025-01-04","cited_by_count":2,"area":null},{"id":"2107.04435","title":"Learning to Detect Adversarial Examples Based on Class Scores","created":"2021-07-09","cited_by_count":1,"area":null},{"id":"2108.09713","title":"Robustness-via-Synthesis: Robust Training with Generative Adversarial Perturbations","created":"2021-08-22","cited_by_count":1,"area":null},{"id":"2202.07342","title":"Unreasonable Effectiveness of Last Hidden Layer Activations for Adversarial Robustness","created":"2022-02-15","cited_by_count":1,"area":null},{"id":"2311.12722","title":"Attacking Motion Planners Using Adversarial Perception Errors","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2107.04749","title":"Resilience of Autonomous Vehicle Object Category Detection to Universal Adversarial Perturbations","created":"2021-07-10","cited_by_count":0,"area":null},{"id":"2109.02362","title":"Comparing the Machine Readability of Traffic Sign Pictograms in Austria and Germany","created":"2021-09-06","cited_by_count":0,"area":null},{"id":"2405.11629","title":"Searching Realistic-Looking Adversarial Objects For Autonomous Driving Systems","created":"2024-05-19","cited_by_count":0,"area":"mllm"},{"id":"2407.17312","title":"Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patches","created":"2024-07-24","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2506.00661","title":"Elytra: A Flexible Framework for Securing Large Vision Systems","created":"2025-05-31","cited_by_count":0,"area":null},{"id":"2506.08255","title":"SHIELD: Secure Hypernetworks for Incremental Expansion Learning Defense","created":"2025-06-09","cited_by_count":0,"area":null},{"id":"2511.07755","title":"Filtered-ViT: A Robust Defense Against Multiple Adversarial Patch Attacks","created":"2025-11-11","cited_by_count":0,"area":null},{"id":"2602.10160","title":"AD$^2$: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","created":"2026-02-10","cited_by_count":0,"area":"driving"}],"next_cursor":null}