{"total":89,"rows":[{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2105.14944","title":"The effectiveness of feature attribution methods and its correlation with automatic evaluation scores","created":"2021-05-31","cited_by_count":88,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2204.00993","title":"Improving Vision Transformers by Revisiting High-frequency Components","created":"2022-04-03","cited_by_count":76,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2203.15859","title":"NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Models","created":"2022-03-29","cited_by_count":50,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2102.03726","title":"Adversarial example generation with AdaBelief Optimizer and Crop Invariance","created":"2021-02-07","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2104.12679","title":"Impact of Spatial Frequency Based Constraints on Adversarial Robustness","created":"2021-04-26","cited_by_count":8,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2104.09172","title":"Direction-Aggregated Attack for Transferable Adversarial Examples","created":"2021-04-19","cited_by_count":6,"area":null},{"id":"2207.05327","title":"Certified Adversarial Robustness via Anisotropic Randomized Smoothing","created":"2022-07-12","cited_by_count":6,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2204.02887","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2022-04-06","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2203.10183","title":"RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression","created":"2022-03-18","cited_by_count":4,"area":null},{"id":"2203.13479","title":"Enhancing Transferability of Adversarial Examples with Spatial Momentum","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2310.12708","title":"Generating Robust Adversarial Examples against Online Social Networks (OSNs)","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2101.04321","title":"Random Transformation of Image Brightness for Adversarial Attack","created":"2021-01-12","cited_by_count":3,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2505.21181","title":"Boosting Adversarial Transferability via High-Frequency Augmentation and Hierarchical-Gradient Fusion","created":"2025-05-27","cited_by_count":3,"area":null},{"id":"2103.07595","title":"Learning Defense Transformers for Counterattacking Adversarial Examples","created":"2021-03-13","cited_by_count":2,"area":null},{"id":"2104.05255","title":"Improving Online Performance Prediction for Semantic Segmentation","created":"2021-04-12","cited_by_count":2,"area":null},{"id":"2106.02867","title":"Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness","created":"2021-06-05","cited_by_count":2,"area":null},{"id":"2106.13394","title":"Countering Adversarial Examples: Combining Input Transformation and Noisy Training","created":"2021-06-25","cited_by_count":2,"area":null},{"id":"2502.16545","title":"Multi-Target Federated Backdoor Attack Based on Feature Aggregation","created":"2025-02-23","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2511.08937","title":"Boosting Adversarial Transferability via Ensemble Non-Attention","created":"2025-11-12","cited_by_count":2,"area":null},{"id":"2104.06377","title":"Mitigating Adversarial Attack for Compute-in-Memory Accelerator Utilizing On-chip Finetune","created":"2021-04-13","cited_by_count":1,"area":null},{"id":"2202.02892","title":"Lossy Compression of Noisy Data for Private and Data-Efficient Learning","created":"2022-02-07","cited_by_count":1,"area":null},{"id":"2303.10078","title":"Fuzziness-tuned: Improving the Transferability of Adversarial Examples","created":"2023-03-17","cited_by_count":1,"area":null},{"id":"2306.15451","title":"Advancing Adversarial Training by Injecting Booster Signal","created":"2023-06-27","cited_by_count":1,"area":null},{"id":"2401.14232","title":"AR-GAN: Generative Adversarial Network-Based Defense Method Against Adversarial Attacks on the Traffic Sign Classification System of Autonomous Vehicles","created":"2023-12-31","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.04853","title":"From Pixels to Trajectory: Universal Adversarial Example Detection via Temporal Imprints","created":"2025-03-06","cited_by_count":1,"area":null},{"id":"2508.05689","title":"Boosting Adversarial Transferability via Residual Perturbation Attack","created":"2025-08-06","cited_by_count":1,"area":null},{"id":"2510.27245","title":"Trans-defense: Transformer-based Denoiser for Adversarial Defense with Spatial-Frequency Domain Representation","created":"2025-10-31","cited_by_count":1,"area":null},{"id":"2511.00411","title":"Enhancing Adversarial Transferability by Balancing Exploration and Exploitation with Gradient-Guided Sampling","created":"2025-11-01","cited_by_count":1,"area":null},{"id":"2103.02781","title":"Structure-Preserving Progressive Low-rank Image Completion for Defending Adversarial Attacks","created":"2021-03-04","cited_by_count":0,"area":null},{"id":"2110.07801","title":"Adversarial Purification through Representation Disentanglement","created":"2021-10-15","cited_by_count":0,"area":null},{"id":"2112.13060","title":"Fight Perturbations with Perturbations: Defending Adversarial Attacks via Neuron Influence","created":"2021-12-24","cited_by_count":0,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2212.08341","title":"Adversarial Example Defense via Perturbation Grading Strategy","created":"2022-12-16","cited_by_count":0,"area":null},{"id":"2303.04502","title":"Immune Defense: A Novel Adversarial Defense Mechanism for Preventing the Generation of Adversarial Examples","created":"2023-03-08","cited_by_count":0,"area":null},{"id":"2307.02828","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2023-07-06","cited_by_count":0,"area":null},{"id":"2406.14232","title":"Enhancing robustness of data-driven SHM models: adversarial training with circle loss","created":"2024-06-20","cited_by_count":0,"area":null},{"id":"2408.05745","title":"Improving Adversarial Transferability with Neighbourhood Gradient Information","created":"2024-08-11","cited_by_count":0,"area":null},{"id":"2504.12644","title":"Quantum Computing Supported Adversarial Attack-Resilient Autonomous Vehicle Perception Module for Traffic Sign Classification","created":"2025-04-17","cited_by_count":0,"area":null},{"id":"2603.00266","title":"Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimization","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2604.10715","title":"Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition","created":"2026-04-12","cited_by_count":0,"area":null}],"next_cursor":null}