{"total":73,"rows":[{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127,"area":null},{"id":"2407.13692","title":"Prover-Verifier Games improve legibility of LLM outputs","created":"2024-07-18","cited_by_count":85,"area":null},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74,"area":null},{"id":"2311.17919","title":"Visual Anagrams: Generating Multi-View Optical Illusions with Diffusion Models","created":"2023-11-29","cited_by_count":46,"area":"diffusion"},{"id":"2312.05355","title":"Neither hype nor gloom do DNNs justice","created":"2023-12-08","cited_by_count":40,"area":null},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2309.13190","title":"Spatial-frequency channels, shape bias, and adversarial robustness","created":"2023-09-22","cited_by_count":28,"area":null},{"id":"2404.11615","title":"Factorized Diffusion: Perceptual Illusions by Noise Decomposition","created":"2024-04-17","cited_by_count":23,"area":"diffusion"},{"id":"2311.06237","title":"Summon a Demon and Bind it: A Grounded Theory of LLM Red Teaming","created":"2023-11-10","cited_by_count":21,"area":"safety"},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2111.07505","title":"A Survey on AI Assurance","created":"2021-11-15","cited_by_count":16,"area":null},{"id":"2204.05151","title":"Metaethical Perspectives on 'Benchmarking' AI Ethics","created":"2022-04-11","cited_by_count":12,"area":null},{"id":"2204.12301","title":"Designing Perceptual Puzzles by Differentiating Probabilistic Programs","created":"2022-04-26","cited_by_count":12,"area":null},{"id":"2408.05446","title":"Ensemble everything everywhere: Multi-scale aggregation for adversarial robustness","created":"2024-08-08","cited_by_count":12,"area":null},{"id":"2202.00838","title":"Finding Biological Plausibility for Adversarially Robust Features via Metameric Tasks","created":"2022-02-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2305.17023","title":"Are Deep Neural Networks Adequate Behavioural Models of Human Visual Perception?","created":"2023-05-26","cited_by_count":10,"area":null},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2203.06649","title":"Joint rotational invariance and adversarial training of a dual-stream Transformer yields state of the art Brain-Score for Area V4","created":"2022-03-08","cited_by_count":7,"area":null},{"id":"2306.03229","title":"Adversarial alignment: Breaking the trade-off between the strength of an attack and its relevance to human perception","created":"2023-06-05","cited_by_count":7,"area":null},{"id":"2105.09685","title":"Simple Transparent Adversarial Examples","created":"2021-05-20","cited_by_count":6,"area":null},{"id":"2306.06075","title":"DeepSeaNet: Improving Underwater Object Detection using EfficientDet","created":"2023-05-26","cited_by_count":6,"area":null},{"id":"2308.06887","title":"Robustified ANNs Reveal Wormholes Between Human Category Percepts","created":"2023-08-14","cited_by_count":6,"area":null},{"id":"2311.08662","title":"Evaluating Concurrent Robustness of Language Models Across Diverse Challenge Sets","created":"2023-11-15","cited_by_count":6,"area":null},{"id":"2312.15826","title":"Adversarial Item Promotion on Visually-Aware Recommender Systems by Guided Diffusion","created":"2023-12-25","cited_by_count":5,"area":"diffusion"},{"id":"2206.07282","title":"Human Eyes Inspired Recurrent Neural Networks are More Robust Against Adversarial Noises","created":"2022-06-15","cited_by_count":4,"area":null},{"id":"2206.11228","title":"Adversarially trained neural representations may already be as robust as corresponding biological neural representations","created":"2022-06-19","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2303.01300","title":"Compensating for Sensing Failures via Delegation in Human-AI Hybrid Systems","created":"2023-03-02","cited_by_count":4,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2205.09037","title":"Empirical Advocacy of Bio-inspired Models for Robust Image Recognition","created":"2022-05-18","cited_by_count":3,"area":null},{"id":"2205.10117","title":"DDDM: a Brain-Inspired Framework for Robust Classification","created":"2022-05-01","cited_by_count":3,"area":null},{"id":"2402.05605","title":"Optimizing Delegation in Collaborative Human-AI Hybrid Teams","created":"2024-02-08","cited_by_count":3,"area":null},{"id":"2109.04300","title":"Energy Attack: On Transferring Adversarial Examples","created":"2021-09-09","cited_by_count":2,"area":null},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2208.00539","title":"Is current research on adversarial robustness addressing the right problem?","created":"2022-07-31","cited_by_count":2,"area":null},{"id":"2209.00525","title":"Complexity of Representations in Deep Learning","created":"2022-09-01","cited_by_count":2,"area":null},{"id":"2212.10006","title":"Multi-head Uncertainty Inference for Adversarial Attack Detection","created":"2022-12-20","cited_by_count":2,"area":null},{"id":"2409.03458","title":"Non-Uniform Illumination Attack for Fooling Convolutional Neural Networks","created":"2024-09-05","cited_by_count":2,"area":null},{"id":"2507.09227","title":"PanoDiff-SR: Synthesizing Dental Panoramic Radiographs using Diffusion and Super-resolution","created":"2025-07-12","cited_by_count":2,"area":null},{"id":"2103.09265","title":"Bio-inspired Robustness: A Review","created":"2021-03-16","cited_by_count":1,"area":null},{"id":"2107.02842","title":"Immuno-mimetic Deep Neural Networks (Immuno-Net)","created":"2021-06-27","cited_by_count":1,"area":null},{"id":"2108.06871","title":"Data Efficient Human Intention Prediction: Leveraging Neural Network Verification and Expert Guidance","created":"2021-08-16","cited_by_count":1,"area":null},{"id":"2112.04033","title":"Image classifiers can not be made robust to small perturbations","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2212.00006","title":"Operationalizing Specifications, In Addition to Test Sets for Evaluating Constrained Generative Models","created":"2022-11-19","cited_by_count":1,"area":null},{"id":"2303.00077","title":"Beyond the limitations of any imaginable mechanism: large language models and psycholinguistics","created":"2023-02-28","cited_by_count":1,"area":null},{"id":"2306.08238","title":"Maestro: A Gamified Platform for Teaching AI Robustness","created":"2023-06-14","cited_by_count":1,"area":null},{"id":"2401.09900","title":"XAI-Enhanced Semantic Segmentation Models for Visual Quality Inspection","created":"2024-01-18","cited_by_count":1,"area":null},{"id":"2409.03646","title":"Limited but consistent gains in adversarial robustness by co-training object recognition models with human EEG","created":"2024-09-05","cited_by_count":1,"area":null},{"id":"2504.20310","title":"A Cryptographic Perspective on Mitigation vs. Detection in Machine Learning","created":"2025-04-28","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2507.18484","title":"Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments","created":"2025-07-24","cited_by_count":1,"area":null},{"id":"2602.11244","title":"Stress Tests REVEAL Fragile Temporal and Visual Grounding in Video-Language Models","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2103.11774","title":"Clustered Hierarchical Anomaly and Outlier Detection Algorithms","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2208.01456","title":"A comment on Guo et al. [arXiv:2206.11228]","created":"2022-08-02","cited_by_count":0,"area":null},{"id":"2305.08929","title":"AF2-Mutation: Adversarial Sequence Mutations against AlphaFold2 on Protein Tertiary Structure Prediction","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2309.16878","title":"Investigating Human-Identifiable Features Hidden in Adversarial Perturbations","created":"2023-09-28","cited_by_count":0,"area":null},{"id":"2311.12819","title":"Fixing the problems of deep neural networks will require better training data and learning algorithms","created":"2023-09-26","cited_by_count":0,"area":null},{"id":"2401.11543","title":"How Robust Are Energy-Based Models Trained With Equilibrium Propagation?","created":"2024-01-21","cited_by_count":0,"area":null},{"id":"2411.15925","title":"Making Images from Images: Interleaving Denoising and Transformation","created":"2024-11-24","cited_by_count":0,"area":null},{"id":"2501.05962","title":"Effective faking of verbal deception detection with target-aligned adversarial attacks","created":"2025-01-10","cited_by_count":0,"area":null},{"id":"2507.14909","title":"The Endless Tuning. An Artificial Intelligence Design To Avoid Human Replacement and Trace Back Responsibilities","created":"2025-07-20","cited_by_count":0,"area":null},{"id":"2509.23333","title":"Targeted perturbations reveal brain-like local coding axes in robustified, but not standard, ANN-based brain models","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2603.30032","title":"Covertly improving intelligibility with data-driven adaptations of speech timing","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.14200","title":"Retina gap junctions support the robust perception by warping neural representational geometries along the visual hierarchy","created":"2026-04-03","cited_by_count":0,"area":null},{"id":"2607.03215","title":"Builder, Defender, Breaker: Measurable Independence and Bounded Autonomy When Generative Models Build, Defend and Test Software","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2607.22722","title":"A New Kind of Adversarial Example: Measuring the Human-Model Gap, and Its Relationship to OOD Detection","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.11938","title":"Does Target Alignment Mean Target Recovery? An Evidence-Ladder Study of Adversarial Claims on Contrastive Encoders","created":"2026-10-08","cited_by_count":0,"area":"mllm"}],"next_cursor":null}