{"total":96,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2206.13089","title":"Agreement-on-the-Line: Predicting the Performance of Neural Networks under Distribution Shift","created":"2022-06-27","cited_by_count":94,"area":null},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2110.12899","title":"No One Representation to Rule Them All: Overlapping Features of Training Methods","created":"2021-10-20","cited_by_count":58,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2204.06274","title":"Overparameterized Linear Regression under Adversarial Attacks","created":"2022-04-13","cited_by_count":21,"area":null},{"id":"2207.02036","title":"PRoA: A Probabilistic Robustness Assessment against Functional Perturbations","created":"2022-07-05","cited_by_count":19,"area":null},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2310.10807","title":"Regularization properties of adversarially-trained linear regression","created":"2023-10-16","cited_by_count":18,"area":null},{"id":"2201.02193","title":"Realistic Full-Body Anonymization with Surface-Guided GANs","created":"2022-01-06","cited_by_count":15,"area":null},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2310.10010","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","created":"2023-10-16","cited_by_count":13,"area":null},{"id":"2202.08393","title":"Robust Reinforcement Learning via Genetic Curriculum","created":"2022-02-17","cited_by_count":10,"area":null},{"id":"2211.10370","title":"Invariant Learning via Diffusion Dreamed Distribution Shifts","created":"2022-11-18","cited_by_count":10,"area":null},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2107.06501","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","created":"2021-07-14","cited_by_count":9,"area":null},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2306.03229","title":"Adversarial alignment: Breaking the trade-off between the strength of an attack and its relevance to human perception","created":"2023-06-05","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2305.17440","title":"Modeling Adversarial Attack on Pre-trained Language Models as Sequential Decision Making","created":"2023-05-27","cited_by_count":6,"area":null},{"id":"2308.12882","title":"LCANets++: Robust Audio Classification using Multi-layer Neural Networks with Lateral Competition","created":"2023-08-23","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2106.09908","title":"Light Lies: Optical Adversarial Attack","created":"2021-06-18","cited_by_count":5,"area":null},{"id":"2110.09759","title":"A Regularization Method to Improve Adversarial Robustness of Neural Networks for ECG Signal Classification","created":"2021-10-19","cited_by_count":5,"area":null},{"id":"2205.00210","title":"Software Testing for Machine Learning","created":"2022-04-30","cited_by_count":5,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2109.00936","title":"Impact of Attention on Adversarial Robustness of Image Classification Models","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2110.10444","title":"Moir\\'e Attack (MA): A New Potential Risk of Screen Photos","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2111.12971","title":"Natural & Adversarial Bokeh Rendering via Circle-of-Confusion Predictive Network","created":"2021-11-25","cited_by_count":4,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2308.07625","title":"Backpropagation Path Search On Adversarial Transferability","created":"2023-08-15","cited_by_count":4,"area":null},{"id":"2102.02885","title":"Adversarial Robustness Study of Convolutional Neural Network for Lumbar Disk Shape Reconstruction from MR images","created":"2021-02-04","cited_by_count":3,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2108.00180","title":"Delving into Deep Image Prior for Adversarial Defense: A Novel Reconstruction-based Defense Framework","created":"2021-07-31","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2306.02618","title":"Enhance Diffusion to Improve Robust Generalization","created":"2023-06-05","cited_by_count":3,"area":null},{"id":"2310.13950","title":"Adversarial Image Generation by Spatial Transformation in Perceptual Colorspaces","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2312.06199","title":"Towards Transferable Adversarial Attacks with Centralized Perturbation","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2502.14966","title":"CyberSentinel: An Emergent Threat Detection System for AI Security","created":"2025-02-20","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2204.10606","title":"Enhancing the Transferability via Feature-Momentum Adversarial Attack","created":"2022-04-22","cited_by_count":2,"area":null},{"id":"2205.12695","title":"Surprises in adversarially-trained linear regression","created":"2022-05-25","cited_by_count":2,"area":null},{"id":"2206.02158","title":"Vanilla Feature Distillation for Improving the Accuracy-Robustness Trade-Off in Adversarial Training","created":"2022-06-05","cited_by_count":2,"area":"distill"},{"id":"2208.00862","title":"Attacking Adversarial Defences by Smoothing the Loss Landscape","created":"2022-08-01","cited_by_count":2,"area":null},{"id":"2208.08677","title":"Enhancing Targeted Attack Transferability via Diversified Weight Pruning","created":"2022-08-18","cited_by_count":2,"area":null},{"id":"2301.08092","title":"RNAS-CL: Robust Neural Architecture Search by Cross-Layer Knowledge Distillation","created":"2023-01-19","cited_by_count":2,"area":"distill"},{"id":"2308.00346","title":"Dynamic ensemble selection based on Deep Neural Network Uncertainty Estimation for Adversarial Robustness","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2309.01106","title":"AdvMono3D: Advanced Monocular 3D Object Detection with Depth-Aware Robust Adversarial Training","created":"2023-09-03","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2410.18648","title":"GADT: Enhancing Transferable Adversarial Attacks through Gradient-guided Adversarial Data Transformation","created":"2024-10-24","cited_by_count":2,"area":null},{"id":"2102.12284","title":"Graphfool: Targeted Label Adversarial Attack on Graph Embedding","created":"2021-02-24","cited_by_count":1,"area":null},{"id":"2103.14172","title":"Deep-RBF Networks for Anomaly Detection in Automotive Cyber-Physical Systems","created":"2021-03-25","cited_by_count":1,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2210.02618","title":"Dynamic Stochastic Ensemble with Adversarial Robust Lottery Ticket Subnetworks","created":"2022-10-06","cited_by_count":1,"area":null},{"id":"2303.06241","title":"Do we need entire training data for adversarial training?","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2408.08489","title":"DFT-Based Adversarial Attack Detection in MRI Brain Imaging: Enhancing Diagnostic Accuracy in Alzheimer's Case Studies","created":"2024-08-16","cited_by_count":1,"area":null},{"id":"2506.19051","title":"NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysis","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2102.04836","title":"Target Training Does Adversarial Training Without Adversarial Samples","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2102.10343","title":"Measuring the Transferability of $\\ell_\\infty$ Attacks by the $\\ell_2$ Norm","created":"2021-02-20","cited_by_count":0,"area":null},{"id":"2107.02894","title":"Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2107.02895","title":"Bio-Inspired Adversarial Attack Against Deep Neural Networks","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2110.07801","title":"Adversarial Purification through Representation Disentanglement","created":"2021-10-15","cited_by_count":0,"area":null},{"id":"2206.05898","title":"Pixel to Binary Embedding Towards Robustness for CNNs","created":"2022-06-13","cited_by_count":0,"area":null},{"id":"2302.09575","title":"Stationary Point Losses for Robust Model","created":"2023-02-19","cited_by_count":0,"area":null},{"id":"2307.08955","title":"Discretization-based ensemble model for robust learning in IoT","created":"2023-07-18","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2402.11227","title":"On the Role of Similarity in Detecting Masquerading Files","created":"2024-02-17","cited_by_count":0,"area":null},{"id":"2403.16405","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2412.11168","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","created":"2024-12-15","cited_by_count":0,"area":null},{"id":"2412.14080","title":"On the Robustness of Distributed Machine Learning against Transfer Attacks","created":"2024-12-18","cited_by_count":0,"area":null},{"id":"2507.20996","title":"Improving Adversarial Robustness Through Adaptive Learning-Driven Multi-Teacher Knowledge Distillation","created":"2025-07-28","cited_by_count":0,"area":"distill"},{"id":"2602.04356","title":"Stage-wise Attention-Guided Region Sequencing for Adversarial Attacks on Large Vision-Language Models","created":"2026-02-04","cited_by_count":0,"area":"mllm"},{"id":"2603.02288","title":"AutoFFS: Adversarial Deformations for Facial Feminization Surgery Planning","created":"2026-03-02","cited_by_count":0,"area":null},{"id":"2609.38991","title":"Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2609.40031","title":"WARP: A Unified Benchmark for Invisible Image Watermarking -- Robustness and Protection Against Attacks","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}