{"total":61,"rows":[{"id":"2204.00993","title":"Improving Vision Transformers by Revisiting High-frequency Components","created":"2022-04-03","cited_by_count":76,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2107.03436","title":"Tensor Methods in Computer Vision and Deep Learning","created":"2021-07-07","cited_by_count":52,"area":null},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2107.01396","title":"Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity","created":"2021-07-03","cited_by_count":18,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2106.11865","title":"NetFense: Adversarial Defenses against Privacy Attacks on Neural Networks for Graph Data","created":"2021-06-22","cited_by_count":13,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2407.13975","title":"Personalized Privacy Protection Mask Against Unauthorized Facial Recognition","created":"2024-07-19","cited_by_count":11,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2104.12679","title":"Impact of Spatial Frequency Based Constraints on Adversarial Robustness","created":"2021-04-26","cited_by_count":8,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2205.09817","title":"MiDAS: Multi-integrated Domain Adaptive Supervision for Fake News Detection","created":"2022-05-19","cited_by_count":7,"area":null},{"id":"2207.00694","title":"Efficient Adversarial Training With Data Pruning","created":"2022-07-01","cited_by_count":7,"area":null},{"id":"2204.12050","title":"Self-recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks","created":"2022-04-26","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2110.10444","title":"Moir\\'e Attack (MA): A New Potential Risk of Screen Photos","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2503.06276","title":"Exploring Adversarial Transferability between Kolmogorov-arnold Networks","created":"2025-03-08","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2404.10789","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2502.08374","title":"AdvSwap: Covert Adversarial Perturbation with High Frequency Info-swapping for Autonomous Driving Perception","created":"2025-02-12","cited_by_count":3,"area":null},{"id":"2101.09451","title":"Error Diffusion Halftoning Against Adversarial Examples","created":"2021-01-23","cited_by_count":2,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2106.13394","title":"Countering Adversarial Examples: Combining Input Transformation and Noisy Training","created":"2021-06-25","cited_by_count":2,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2112.03615","title":"Saliency Diversified Deep Ensemble for Robustness to Adversaries","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2202.02595","title":"Memory Defense: More Robust Classification via a Memory-Masking Autoencoder","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2410.17442","title":"Detecting Adversarial Examples","created":"2024-10-22","cited_by_count":2,"area":null},{"id":"2503.06529","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","created":"2025-03-09","cited_by_count":2,"area":null},{"id":"2506.20816","title":"Universal and Efficient Detection of Adversarial Data through Nonuniform Impact on Network Layers","created":"2025-06-25","cited_by_count":2,"area":null},{"id":"2104.02155","title":"Adaptive Clustering of Robust Semantic Representations for Adversarial Image Purification","created":"2021-04-05","cited_by_count":1,"area":null},{"id":"2201.01080","title":"Towards Understanding and Harnessing the Effect of Image Transformation in Adversarial Detection","created":"2022-01-04","cited_by_count":1,"area":null},{"id":"2208.03169","title":"FBI: Fingerprinting models with Benign Inputs","created":"2022-08-05","cited_by_count":1,"area":null},{"id":"2208.08438","title":"Learning to Structure an Image with Few Colors and Beyond","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2302.00209","title":"Towards Large Certified Radius in Randomized Smoothing using Quasiconcave Optimization","created":"2023-02-01","cited_by_count":1,"area":null},{"id":"2508.00552","title":"DBLP: Noise Bridge Consistency Distillation For Efficient And Reliable Adversarial Purification","created":"2025-08-01","cited_by_count":1,"area":null},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2205.10011","title":"Constructive Interpretability with CoLabel: Corroborative Integration, Complementary Features, and Collaborative Learning","created":"2022-05-20","cited_by_count":0,"area":null},{"id":"2206.00924","title":"FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examples","created":"2022-06-02","cited_by_count":0,"area":null},{"id":"2208.11839","title":"A Perturbation Resistant Transformation and Classification System for Deep Neural Networks","created":"2022-08-25","cited_by_count":0,"area":null},{"id":"2211.09098","title":"ATEAM: Knowledge Integration from Federated Datasets for Vehicle Feature Extraction using Annotation Team of Experts","created":"2022-11-16","cited_by_count":0,"area":null},{"id":"2306.14262","title":"A Spectral Perspective towards Understanding and Improving Adversarial Robustness","created":"2023-06-25","cited_by_count":0,"area":null},{"id":"2401.03488","title":"Data-Driven Subsampling in the Presence of an Adversarial Actor","created":"2024-01-07","cited_by_count":0,"area":null},{"id":"2411.14243","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","created":"2024-11-21","cited_by_count":0,"area":null},{"id":"2511.21893","title":"Breaking the Illusion: Consensus-Based Generative Mitigation of Adversarial Illusions in Multi-Modal Embeddings","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2605.12792","title":"SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directions","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2608.29510","title":"ARMOR: Manifold-Oriented Training for Adversarially Robust Aerial Object Detection under Data Scarcity","created":"2026-08-30","cited_by_count":0,"area":null}],"next_cursor":null}