{"total":82,"rows":[{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2203.08519","title":"Towards Practical Certifiable Patch Defense with Vision Transformer","created":"2022-03-16","cited_by_count":44,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29,"area":null},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2103.08860","title":"Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches","created":"2021-03-16","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2110.15629","title":"Attacking Video Recognition Models with Bullet-Screen Comments","created":"2021-10-29","cited_by_count":16,"area":null},{"id":"2209.05980","title":"Certified Defences Against Adversarial Patch Attacks on Semantic Segmentation","created":"2022-09-13","cited_by_count":16,"area":null},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15,"area":null},{"id":"2108.05075","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","created":"2021-08-11","cited_by_count":13,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2204.13004","title":"Defending Person Detection Against Adversarial Patch Attack by using Universal Defensive Frame","created":"2022-04-27","cited_by_count":9,"area":null},{"id":"2206.04365","title":"CARLA-GeAR: a Dataset Generator for a Systematic Evaluation of Adversarial Robustness of Vision Models","created":"2022-06-09","cited_by_count":8,"area":null},{"id":"2102.05241","title":"Detecting Localized Adversarial Examples: A Generic Approach using Critical Region Analysis","created":"2021-02-10","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2310.17403","title":"Detection Defenses: An Empty Promise against Adversarial Patch Attacks on Optical Flow","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2402.06249","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","created":"2024-02-09","cited_by_count":6,"area":null},{"id":"2406.10285","title":"I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors","created":"2024-06-12","cited_by_count":5,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2410.19863","title":"Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2503.06276","title":"Exploring Adversarial Transferability between Kolmogorov-arnold Networks","created":"2025-03-08","cited_by_count":4,"area":null},{"id":"2208.09195","title":"Real-Time Robust Video Object Detection System Against Physical-World Adversarial Attacks","created":"2022-08-19","cited_by_count":3,"area":null},{"id":"2305.17000","title":"DistriBlock: Identifying adversarial audio samples by leveraging characteristics of the output distribution","created":"2023-05-26","cited_by_count":3,"area":null},{"id":"2306.16131","title":"Distributional Modeling for Location-Aware Adversarial Patches","created":"2023-06-28","cited_by_count":3,"area":null},{"id":"2308.11822","title":"PatchBackdoor: Backdoor Attack against Deep Neural Networks without Model Modification","created":"2023-08-22","cited_by_count":3,"area":null},{"id":"2311.11191","title":"Attention-Based Real-Time Defenses for Physical Adversarial Attacks in Vision Applications","created":"2023-11-19","cited_by_count":3,"area":null},{"id":"2311.17339","title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition","created":"2023-11-29","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2405.07668","title":"CrossCert: A Cross-Checking Detection Approach to Patch Robustness Certification for Deep Learning Models","created":"2024-05-13","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2506.23581","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2308.00452","title":"A Majority Invariant Approach to Patch Robustness Certification for Deep Learning Models","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2205.08989","title":"Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing","created":"2022-05-18","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2305.10929","title":"Architecture-agnostic Iterative Black-box Certified Defense against Adversarial Patches","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2306.15451","title":"Advancing Adversarial Training by Injecting Booster Signal","created":"2023-06-27","cited_by_count":1,"area":null},{"id":"2307.14242","title":"Defending Adversarial Patches via Joint Region Localizing and Inpainting","created":"2023-07-26","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2312.00173","title":"Fool the Hydra: Adversarial Attacks against Multi-view Object Detection Systems","created":"2023-11-30","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2408.04181","title":"EdgeShield: A Universal and Efficient Edge Computing Framework for Robust AI","created":"2024-08-08","cited_by_count":1,"area":null},{"id":"2411.10029","title":"Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2505.24703","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","created":"2025-05-30","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2507.18484","title":"Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments","created":"2025-07-24","cited_by_count":1,"area":null},{"id":"2509.03179","title":"AutoDetect: Designing an Autoencoder-based Detection Method for Poisoning Attacks on Object Detection Applications in the Military Domain","created":"2025-09-03","cited_by_count":1,"area":null},{"id":"2510.04245","title":"Concept-Based Masking: A Patch-Agnostic Defense Against Adversarial Patch Attacks","created":"2025-10-05","cited_by_count":1,"area":null},{"id":"2510.17322","title":"A Single Set of Adversarial Clothes Breaks Multiple Defense Methods in the Physical World","created":"2025-10-20","cited_by_count":1,"area":null},{"id":"2311.01563","title":"Assist Is Just as Important as the Goal: Image Resurfacing to Aid Model's Robust Prediction","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2505.16318","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2507.23335","title":"Scalable and Precise Patch Robustness Certification for Deep Learning Models with Top-k Predictions","created":"2025-07-31","cited_by_count":0,"area":null},{"id":"2508.10946","title":"IPG: Incremental Patch Generation for Generalized Adversarial Patch Training","created":"2025-08-13","cited_by_count":0,"area":null},{"id":"2601.00367","title":"PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2603.12688","title":"STRAP-ViT: Segregated Tokens with Randomized -- Transformations for Defense against Adversarial Patches in ViTs","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2604.10715","title":"Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition","created":"2026-04-12","cited_by_count":0,"area":null},{"id":"2607.21243","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null},{"id":"2610.16012","title":"Adversarial Robustness of Camera-Radar Sensor Fusion for Autonomous Driving","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}