{"total":77,"rows":[{"id":"2101.06549","title":"AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles","created":"2021-01-16","cited_by_count":137,"area":null},{"id":"2102.07188","title":"Think Global and Act Local: Bayesian Optimisation over High-Dimensional Categorical and Mixed Search Spaces","created":"2021-02-14","cited_by_count":53,"area":null},{"id":"2102.10707","title":"A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization","created":"2021-02-21","cited_by_count":46,"area":null},{"id":"2112.03909","title":"Vehicle trajectory prediction works, but not everywhere","created":"2021-12-07","cited_by_count":39,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2304.05818","title":"Gradient-Free Textual Inversion","created":"2023-04-12","cited_by_count":29,"area":null},{"id":"2209.13679","title":"V2XP-ASG: Generating Adversarial Scenes for Vehicle-to-Everything Perception","created":"2022-09-27","cited_by_count":28,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2110.03301","title":"EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detection","created":"2021-10-07","cited_by_count":13,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2101.10102","title":"Towards Practical Robustness Analysis for DNNs based on PAC-Model Learning","created":"2021-01-25","cited_by_count":12,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2104.15064","title":"Black-box adversarial attacks using Evolution Strategies","created":"2021-04-30","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2310.03578","title":"Targeted Adversarial Attacks on Generalizable Neural Radiance Fields","created":"2023-10-05","cited_by_count":10,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2205.08589","title":"Hierarchical Distribution-Aware Testing of Deep Learning","created":"2022-05-17","cited_by_count":8,"area":null},{"id":"2206.14004","title":"On the amplification of security and privacy risks by post-hoc explanations in machine learning models","created":"2022-06-28","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2105.11593","title":"OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS","created":"2021-05-25","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2211.05249","title":"QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systems","created":"2022-11-09","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2110.13980","title":"Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directions","created":"2021-10-26","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2101.07512","title":"Attention-Guided Black-box Adversarial Attacks with Large-Scale Multiobjective Evolutionary Optimization","created":"2021-01-19","cited_by_count":3,"area":null},{"id":"2109.15160","title":"Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation","created":"2021-09-30","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2207.06282","title":"DiverGet: A Search-Based Software Testing Approach for Deep Neural Network Quantization Assessment","created":"2022-07-13","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2202.08532","title":"Mitigating Closed-model Adversarial Examples with Bayesian Neural Modeling for Enhanced End-to-End Speech Recognition","created":"2022-02-17","cited_by_count":2,"area":null},{"id":"2307.11906","title":"Unveiling Vulnerabilities in Interpretable Deep Learning Systems with Query-Efficient Black-box Attacks","created":"2023-07-21","cited_by_count":2,"area":null},{"id":"2101.07538","title":"PICA: A Pixel Correlation-based Attentional Black-box Adversarial Attack","created":"2021-01-19","cited_by_count":1,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2106.02732","title":"BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization","created":"2021-06-04","cited_by_count":1,"area":null},{"id":"2205.10539","title":"On the Feasibility and Generality of Patch-based Adversarial Attacks on Semantic Segmentation Problems","created":"2022-05-21","cited_by_count":1,"area":null},{"id":"2209.03431","title":"Physics-Guided Adversarial Machine Learning for Aircraft Systems Simulation","created":"2022-09-07","cited_by_count":1,"area":null},{"id":"2303.01245","title":"An Incremental Gray-box Physical Adversarial Attack on Neural Network Training","created":"2023-02-20","cited_by_count":1,"area":null},{"id":"2307.06496","title":"Microbial Genetic Algorithm-based Black-box Attack against Interpretable Deep Learning Systems","created":"2023-07-13","cited_by_count":1,"area":null},{"id":"2309.06438","title":"Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks","created":"2023-09-12","cited_by_count":1,"area":null},{"id":"2402.02695","title":"Exploiting Class Probabilities for Black-box Sentence-level Attacks","created":"2024-02-05","cited_by_count":1,"area":null},{"id":"2404.02696","title":"Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition","created":"2024-04-03","cited_by_count":1,"area":null},{"id":"2502.00834","title":"Boosting Adversarial Robustness and Generalization with Dictionary Structure","created":"2025-02-02","cited_by_count":1,"area":null},{"id":"2605.18919","title":"MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks","created":"2026-05-18","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2103.08031","title":"BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attacks","created":"2021-03-14","cited_by_count":0,"area":null},{"id":"2203.04405","title":"Art-Attack: Black-Box Adversarial Attack via Evolutionary Art","created":"2022-03-07","cited_by_count":0,"area":null},{"id":"2204.00103","title":"Scalable Whitebox Attacks on Tree-based Models","created":"2022-03-31","cited_by_count":0,"area":null},{"id":"2206.05015","title":"A Simple Yet Efficient Method for Adversarial Word-Substitute Attack","created":"2022-05-07","cited_by_count":0,"area":null},{"id":"2210.00292","title":"DeltaBound Attack: Efficient decision-based attack in low queries regime","created":"2022-10-01","cited_by_count":0,"area":null},{"id":"2211.07483","title":"Butterfly Effect Attack: Tiny and Seemingly Unrelated Perturbations for Object Detection","created":"2022-11-14","cited_by_count":0,"area":null},{"id":"2402.15073","title":"Cost-Adaptive Recourse Recommendation by Adaptive Preference Elicitation","created":"2024-02-23","cited_by_count":0,"area":null},{"id":"2404.05159","title":"Semantic Stealth: Adversarial Text Attacks on NLP Using Several Methods","created":"2024-04-08","cited_by_count":0,"area":null},{"id":"2404.17020","title":"Generating Minimalist Adversarial Perturbations to Test Object-Detection Models: An Adaptive Multi-Metric Evolutionary Search Approach","created":"2024-04-25","cited_by_count":0,"area":null},{"id":"2406.15635","title":"DataFreeShield: Defending Adversarial Attacks without Training Data","created":"2024-06-21","cited_by_count":0,"area":null},{"id":"2406.16609","title":"Evaluating the Robustness of Deep-Learning Algorithm-Selection Models by Evolving Adversarial Instances","created":"2024-06-24","cited_by_count":0,"area":null},{"id":"2407.03115","title":"$L_p$-norm Distortion-Efficient Adversarial Attack","created":"2024-07-03","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2407.11073","title":"SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images","created":"2024-07-13","cited_by_count":0,"area":null},{"id":"2506.20576","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2509.06459","title":"IGAff: Benchmarking Adversarial Iterative and Genetic Affine Algorithms on Deep Neural Networks","created":"2025-09-08","cited_by_count":0,"area":null},{"id":"2510.19574","title":"Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection","created":"2025-10-22","cited_by_count":0,"area":null},{"id":"2608.04559","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.13296","title":"Large-scale Testing Global Optimization Methods with Black-box Adversarial Attacks","created":"2026-08-13","cited_by_count":0,"area":null}],"next_cursor":null}