{"total":36,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2112.04764","title":"3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection","created":"2021-12-09","cited_by_count":43,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2105.02468","title":"Relative stability toward diffeomorphisms indicates performance in deep nets","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2301.12456","title":"Towards Verifying the Geometric Robustness of Large-scale Neural Networks","created":"2023-01-29","cited_by_count":11,"area":null},{"id":"2103.16493","title":"Enabling Data Diversity: Efficient Automatic Augmentation via Regularized Adversarial Training","created":"2021-03-30","cited_by_count":10,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2108.02502","title":"Imperceptible Adversarial Examples by Spatial Chroma-Shift","created":"2021-08-05","cited_by_count":7,"area":null},{"id":"2404.10727","title":"How Deep Networks Learn Sparse and Hierarchical Data: the Sparse Random Hierarchy Model","created":"2024-04-16","cited_by_count":7,"area":null},{"id":"2103.07640","title":"Generating Unrestricted Adversarial Examples via Three Parameters","created":"2021-03-13","cited_by_count":5,"area":null},{"id":"2210.01506","title":"How deep convolutional neural networks lose spatial information with training","created":"2022-10-04","cited_by_count":5,"area":null},{"id":"2111.12971","title":"Natural & Adversarial Bokeh Rendering via Circle-of-Confusion Predictive Network","created":"2021-11-25","cited_by_count":4,"area":null},{"id":"2306.00353","title":"Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective","created":"2023-06-01","cited_by_count":4,"area":null},{"id":"2308.15479","title":"3D Adversarial Augmentations for Robust Out-of-Domain Predictions","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2405.16918","title":"The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2205.11142","title":"Stability of the scattering transform for deformations with minimal regularity","created":"2022-05-23","cited_by_count":3,"area":null},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2103.07595","title":"Learning Defense Transformers for Counterattacking Adversarial Examples","created":"2021-03-13","cited_by_count":2,"area":null},{"id":"2105.08269","title":"Sparta: Spatially Attentive and Adversarially Robust Activation","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2203.05006","title":"Resource-Efficient Invariant Networks: Exponential Gains by Unrolled Optimization","created":"2022-03-09","cited_by_count":2,"area":null},{"id":"2206.05289","title":"Localized adversarial artifacts for compressed sensing MRI","created":"2022-06-10","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2412.18815","title":"Distortion-Aware Adversarial Attacks on Bounding Boxes of Object Detectors","created":"2024-12-25","cited_by_count":1,"area":null},{"id":"2601.10587","title":"Adversarial Evasion Attacks on Computer Vision using SHAP Values","created":"2026-01-15","cited_by_count":0,"area":null}],"next_cursor":null}