{"total":130,"rows":[{"id":"2402.11592","title":"Revisiting Zeroth-Order Optimization for Memory-Efficient LLM Fine-Tuning: A Benchmark","created":"2024-02-18","cited_by_count":114,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2310.02025","title":"DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training","created":"2023-10-03","cited_by_count":76,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2402.15751","title":"Sparse MeZO: Less Parameters for Better Performance in Zeroth-Order LLM Fine-Tuning","created":"2024-02-24","cited_by_count":54,"area":null},{"id":"2102.07188","title":"Think Global and Act Local: Bayesian Optimisation over High-Dimensional Categorical and Mixed Search Spaces","created":"2021-02-14","cited_by_count":53,"area":null},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2410.07698","title":"Enhancing Zeroth-order Fine-tuning for Language Models with Low-rank Structures","created":"2024-10-10","cited_by_count":50,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2307.08934","title":"Multi-stage Neural Networks: Function Approximator of Machine Precision","created":"2023-07-18","cited_by_count":48,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2107.10110","title":"On the Convergence of Prior-Guided Zeroth-Order Optimization Algorithms","created":"2021-07-21","cited_by_count":23,"area":null},{"id":"2202.07261","title":"Exploring the Devil in Graph Spectral Domain for 3D Point Cloud Attacks","created":"2022-02-15","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.09082","title":"Zeroth-Order Methods for Convex-Concave Minmax Problems: Applications to Decision-Dependent Risk Minimization","created":"2021-06-16","cited_by_count":18,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2207.13326","title":"Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing","created":"2022-07-27","cited_by_count":16,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2110.02516","title":"Attack as the Best Defense: Nullifying Image-to-image Translation GANs via Limit-aware Adversarial Attack","created":"2021-10-06","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2310.03123","title":"Efficient Federated Prompt Tuning for Black-box Large Pre-trained Models","created":"2023-10-04","cited_by_count":12,"area":null},{"id":"2602.17155","title":"Powering Up Zeroth-Order Training via Subspace Gradient Orthogonalization","created":"2026-02-19","cited_by_count":12,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2402.19322","title":"Verification of Neural Networks' Global Robustness","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2403.06014","title":"Hard-label based Small Query Black-box Adversarial Attack","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2102.13184","title":"Nonlinear Projection Based Gradient Estimation for Query Efficient Blackbox Attacks","created":"2021-02-25","cited_by_count":9,"area":null},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2302.04477","title":"An End-to-End Framework for Marketing Effectiveness Optimization under Budget Constraint","created":"2023-02-09","cited_by_count":9,"area":null},{"id":"2308.07546","title":"3DHacker: Spectrum-based Decision Boundary Generation for Hard-label 3D Point Cloud Attack","created":"2023-08-15","cited_by_count":9,"area":null},{"id":"2310.05143","title":"ZooPFL: Exploring Black-box Foundation Models for Personalized Federated Learning","created":"2023-10-08","cited_by_count":9,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2202.01832","title":"Adversarially Robust Models may not Transfer Better: Sufficient Conditions for Domain Transferability from the View of Regularization","created":"2022-02-03","cited_by_count":8,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2207.06196","title":"Interactive Machine Learning: A State of the Art Review","created":"2022-07-13","cited_by_count":6,"area":null},{"id":"2210.01496","title":"Zeroth-Order Negative Curvature Finding: Escaping Saddle Points without Gradients","created":"2022-10-04","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2404.00158","title":"Fully Zeroth-Order Bilevel Programming via Gaussian Smoothing","created":"2024-03-29","cited_by_count":6,"area":null},{"id":"2104.09369","title":"Adversarial Diffusion Attacks on Graph-based Traffic Prediction Models","created":"2021-04-19","cited_by_count":5,"area":null},{"id":"2108.10451","title":"Adversarial Robustness of Deep Learning: Theory, Algorithms, and Applications","created":"2021-08-24","cited_by_count":5,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2407.07510","title":"Invisible Optical Adversarial Stripes on Traffic Sign against Autonomous Vehicles","created":"2024-07-10","cited_by_count":5,"area":null},{"id":"2411.05873","title":"Poor Man's Training on MCUs: A Memory-Efficient Quantized Back-Propagation-Free Approach","created":"2024-11-07","cited_by_count":5,"area":null},{"id":"2501.04287","title":"ElasticZO: A Memory-Efficient On-Device Learning with Combined Zeroth- and First-Order Optimization","created":"2025-01-08","cited_by_count":5,"area":null},{"id":"2101.10562","title":"Investigating the significance of adversarial attacks and their relation to interpretability for radar-based human activity recognition systems","created":"2021-01-26","cited_by_count":4,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2203.13479","title":"Enhancing Transferability of Adversarial Examples with Spatial Momentum","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2203.13779","title":"Origins of Low-dimensional Adversarial Perturbations","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2402.11168","title":"Trust Regions for Explanations via Black-Box Probabilistic Certification","created":"2024-02-17","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2501.06736","title":"ZOQO: Zero-Order Quantized Optimization","created":"2025-01-12","cited_by_count":4,"area":null},{"id":"2101.07512","title":"Attention-Guided Black-box Adversarial Attacks with Large-Scale Multiobjective Evolutionary Optimization","created":"2021-01-19","cited_by_count":3,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2109.15160","title":"Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation","created":"2021-09-30","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2210.05279","title":"Zeroth-Order Hard-Thresholding: Gradient Error vs. Expansivity","created":"2022-10-11","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2102.11935","title":"Non-Singular Adversarial Robustness of Neural Networks","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2109.04300","title":"Energy Attack: On Transferring Adversarial Examples","created":"2021-09-09","cited_by_count":2,"area":null},{"id":"2202.08532","title":"Mitigating Closed-model Adversarial Examples with Bayesian Neural Modeling for Enhanced End-to-End Speech Recognition","created":"2022-02-17","cited_by_count":2,"area":null},{"id":"2206.07126","title":"Lazy Queries Can Reduce Variance in Zeroth-order Optimization","created":"2022-06-14","cited_by_count":2,"area":null},{"id":"2210.08472","title":"Object-Attentional Untargeted Adversarial Attack","created":"2022-10-16","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2409.01282","title":"One-Index Vector Quantization Based Adversarial Attack on Image Classification","created":"2024-09-02","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2507.12107","title":"Non-Adaptive Adversarial Face Generation","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2101.07538","title":"PICA: A Pixel Correlation-based Attentional Black-box Adversarial Attack","created":"2021-01-19","cited_by_count":1,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2106.02732","title":"BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization","created":"2021-06-04","cited_by_count":1,"area":null},{"id":"2203.14607","title":"Boosting Black-Box Adversarial Attacks with Meta Learning","created":"2022-03-28","cited_by_count":1,"area":null},{"id":"2206.10073","title":"Finding Optimal Policy for Queueing Models: New Parameterization","created":"2022-06-21","cited_by_count":1,"area":null}],"next_cursor":"100"}