{"total":36,"rows":[{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2110.09075","title":"Boosting the Transferability of Video Adversarial Examples via Temporal Translation","created":"2021-10-18","cited_by_count":21,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2207.11694","title":"Proving Common Mechanisms Shared by Twelve Methods of Boosting Adversarial Transferability","created":"2022-07-24","cited_by_count":12,"area":null},{"id":"2204.04063","title":"Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2110.04488","title":"Demystifying the Transferability of Adversarial Attacks in Computer Networks","created":"2021-10-09","cited_by_count":9,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2503.13994","title":"TarPro: Targeted Protection against Malicious Image Editing","created":"2025-03-18","cited_by_count":7,"area":null},{"id":"2105.00433","title":"Who's Afraid of Adversarial Transferability?","created":"2021-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2106.01617","title":"Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout","created":"2021-06-03","cited_by_count":5,"area":null},{"id":"2204.02887","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2022-04-06","cited_by_count":5,"area":null},{"id":"2312.13118","title":"LRS: Enhancing Adversarial Transferability through Lipschitz Regularized Surrogate","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2108.07033","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","created":"2021-08-16","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2206.08124","title":"Using adversarial images to improve outcomes of federated learning for non-IID data","created":"2022-06-16","cited_by_count":1,"area":null},{"id":"2304.08811","title":"Towards the Transferable Audio Adversarial Attack via Ensemble Methods","created":"2023-04-18","cited_by_count":1,"area":null},{"id":"2408.15833","title":"Network transferability of adversarial patches in real-time object detection","created":"2024-08-28","cited_by_count":1,"area":null},{"id":"2508.16937","title":"NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability","created":"2025-08-23","cited_by_count":1,"area":null},{"id":"2509.18546","title":"SEGA: A Transferable Signed Ensemble Gaussian Black-Box Attack against No-Reference Image Quality Assessment Models","created":"2025-09-23","cited_by_count":1,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2307.02828","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2023-07-06","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2405.09598","title":"Properties that allow or prohibit transferability of adversarial attacks among quantized networks","created":"2024-05-15","cited_by_count":0,"area":null},{"id":"2412.16893","title":"Preventing Non-intrusive Load Monitoring Privacy Invasion: A Precise Adversarial Attack Scheme for Networked Smart Meters","created":"2024-12-22","cited_by_count":0,"area":null},{"id":"2512.17029","title":"Adversarial VR: An Open-Source Testbed for Evaluating Adversarial Robustness of VR Cybersickness Detection and Mitigation","created":"2025-12-18","cited_by_count":0,"area":null}],"next_cursor":null}