{"total":141,"rows":[{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74,"area":null},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2211.09773","title":"T-SEA: Transfer-based Self-Ensemble Attack on Object Detection","created":"2022-11-16","cited_by_count":59,"area":null},{"id":"2302.09491","title":"X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection","created":"2023-02-19","cited_by_count":59,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2103.13886","title":"Robust and Accurate Object Detection via Adversarial Learning","created":"2021-03-23","cited_by_count":42,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29,"area":null},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2103.02927","title":"QAIR: Practical Query-efficient Black-Box Attacks for Image Retrieval","created":"2021-03-04","cited_by_count":22,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2104.07395","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","created":"2021-04-15","cited_by_count":20,"area":null},{"id":"2202.04781","title":"Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios","created":"2022-02-10","cited_by_count":20,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2111.10759","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","created":"2021-11-21","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2402.15853","title":"RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation","created":"2024-02-24","cited_by_count":18,"area":null},{"id":"2101.10011","title":"They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors","created":"2021-01-25","cited_by_count":17,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2401.03582","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","created":"2024-01-07","cited_by_count":14,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2108.08421","title":"Exploiting Multi-Object Relationships for Detecting Adversarial Attacks in Complex Scenes","created":"2021-08-19","cited_by_count":12,"area":null},{"id":"2108.09891","title":"Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency","created":"2021-08-23","cited_by_count":12,"area":null},{"id":"2110.12321","title":"ADC: Adversarial attacks against object Detection that evade Context consistency checks","created":"2021-10-24","cited_by_count":12,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2206.01034","title":"Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","created":"2022-06-02","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2508.05855","title":"Safety of Embodied Navigation: A Survey","created":"2025-08-07","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2104.11101","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","created":"2021-04-22","cited_by_count":8,"area":null},{"id":"2302.06060","title":"Threatening Patch Attacks on Object Detection in Optical Remote Sensing Images","created":"2023-02-13","cited_by_count":8,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2108.07229","title":"Patch Attack Invariance: How Sensitive are Patch Attacks to 3D Pose?","created":"2021-08-16","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2105.09685","title":"Simple Transparent Adversarial Examples","created":"2021-05-20","cited_by_count":6,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2209.13353","title":"Suppress with a Patch: Revisiting Universal Adversarial Patch Attacks against Object Detection","created":"2022-09-27","cited_by_count":6,"area":null},{"id":"2211.08859","title":"Attacking Object Detector Using A Universal Targeted Label-Switch Patch","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2103.00345","title":"End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering","created":"2021-02-27","cited_by_count":5,"area":null},{"id":"2109.09889","title":"A Distance-based Anomaly Detection Framework for Deep Reinforcement Learning","created":"2021-09-21","cited_by_count":5,"area":null},{"id":"2206.13581","title":"Exact Spectral Norm Regularization for Neural Networks","created":"2022-06-27","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2206.12725","title":"Empirical Evaluation of Physical Adversarial Patch Attacks Against Overhead Object Detection Models","created":"2022-06-25","cited_by_count":4,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2410.19863","title":"Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2106.01618","title":"Transferable Adversarial Examples for Anchor Free Object Detection","created":"2021-06-03","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2203.16130","title":"Sensor Data Validation and Driving Safety in Autonomous Driving Systems","created":"2022-03-30","cited_by_count":3,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2303.09731","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","created":"2023-03-17","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2411.18776","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2204.00734","title":"SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learning","created":"2022-04-02","cited_by_count":2,"area":null},{"id":"2204.06337","title":"A Novel Approach to Train Diverse Types of Language Models for Health Mention Classification of Tweets","created":"2022-04-13","cited_by_count":2,"area":null},{"id":"2304.01441","title":"NetFlick: Adversarial Flickering Attacks on Deep Learning Based Video Compression","created":"2023-04-04","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2310.12243","title":"REVAMP: Automated Simulations of Adversarial Attacks on Arbitrary Objects in Realistic Scenes","created":"2023-10-18","cited_by_count":2,"area":null},{"id":"2507.09993","title":"3DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving","created":"2025-07-14","cited_by_count":2,"area":null},{"id":"2512.01934","title":"Physical ID-Transfer Attacks against Multi-Object Tracking via Adversarial Trajectory","created":"2025-12-01","cited_by_count":2,"area":null},{"id":"2105.07776","title":"DISCO Verification: Division of Input Space into COnvex polytopes for neural network verification","created":"2021-05-17","cited_by_count":1,"area":null},{"id":"2111.08954","title":"Tracklet-Switch Adversarial Attack against Pedestrian Multi-Object Tracking Trackers","created":"2021-11-17","cited_by_count":1,"area":null},{"id":"2202.08892","title":"Developing Imperceptible Adversarial Patches to Camouflage Military Assets From Computer Vision Enabled Technologies","created":"2022-02-17","cited_by_count":1,"area":null},{"id":"2202.12860","title":"ARIA: Adversarially Robust Image Attribution for Content Provenance","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2203.01895","title":"Improving Health Mentioning Classification of Tweets using Contrastive Adversarial Training","created":"2022-03-03","cited_by_count":1,"area":null},{"id":"2205.10539","title":"On the Feasibility and Generality of Patch-based Adversarial Attacks on Semantic Segmentation Problems","created":"2022-05-21","cited_by_count":1,"area":null},{"id":"2206.00886","title":"Watch Out for the Safety-Threatening Actors: Proactively Mitigating Safety Hazards","created":"2022-06-02","cited_by_count":1,"area":null},{"id":"2206.10809","title":"SSMI: How to Make Objects of Interest Disappear without Accessing Object Detectors?","created":"2022-06-22","cited_by_count":1,"area":null},{"id":"2207.08556","title":"A Certifiable Security Patch for Object Tracking in Self-Driving Systems via Historical Deviation Modeling","created":"2022-07-18","cited_by_count":1,"area":null},{"id":"2207.10719","title":"Synthetic Dataset Generation for Adversarial Machine Learning Research","created":"2022-07-21","cited_by_count":1,"area":null}],"next_cursor":"100"}