{"total":130,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2106.03310","title":"Zero-Shot Knowledge Distillation from a Decision-Based Black-Box Model","created":"2021-06-07","cited_by_count":37,"area":"distill"},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2407.01606","title":"On Discrete Prompt Optimization for Diffusion Models","created":"2024-06-27","cited_by_count":29,"area":"diffusion"},{"id":"2204.00491","title":"FrequencyLowCut Pooling -- Plug & Play against Catastrophic Overfitting","created":"2022-04-01","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2103.02927","title":"QAIR: Practical Query-efficient Black-Box Attacks for Image Retrieval","created":"2021-03-04","cited_by_count":22,"area":null},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2108.13872","title":"Reinforcement Learning Based Sparse Black-box Adversarial Attack on Video Recognition Models","created":"2021-08-29","cited_by_count":12,"area":null},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12,"area":"diffusion"},{"id":"2602.17155","title":"Powering Up Zeroth-Order Training via Subspace Gradient Orthogonalization","created":"2026-02-19","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2112.05282","title":"RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit","created":"2021-12-10","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2207.08044","title":"DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking","created":"2022-07-17","cited_by_count":11,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2103.05248","title":"Practical Relative Order Attack in Deep Ranking","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2401.15335","title":"L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks","created":"2024-01-27","cited_by_count":8,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2602.15001","title":"Boundary Point Jailbreaking of Black-Box LLMs","created":"2026-02-16","cited_by_count":8,"area":"safety"},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2510.16794","title":"Black-box Optimization of LLM Outputs by Asking for Directions","created":"2025-10-19","cited_by_count":7,"area":"safety"},{"id":"2102.05198","title":"Statistical Inference for Polyak-Ruppert Averaged Zeroth-order Stochastic Gradient Algorithm","created":"2021-02-10","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2402.05493","title":"Investigating White-Box Attacks for On-Device Models","created":"2024-02-08","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2307.01390","title":"Adversarial Learning in Real-World Fraud Detection: Challenges and Perspectives","created":"2023-07-03","cited_by_count":5,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2106.15357","title":"Multi-stage Optimization based Adversarial Training","created":"2021-06-26","cited_by_count":4,"area":null},{"id":"2305.18439","title":"Alteration-free and Model-agnostic Origin Attribution of Generated Images","created":"2023-05-29","cited_by_count":4,"area":null},{"id":"2208.10688","title":"Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2312.16364","title":"Robustness Verification for Knowledge-Based Logic of Risky Driving Scenes","created":"2023-12-27","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2102.11935","title":"Non-Singular Adversarial Robustness of Neural Networks","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2210.08472","title":"Object-Attentional Untargeted Adversarial Attack","created":"2022-10-16","cited_by_count":2,"area":null},{"id":"2211.08384","title":"Universal Distributional Decision-based Black-box Adversarial Attack with Reinforcement Learning","created":"2022-11-15","cited_by_count":2,"area":null},{"id":"2211.09273","title":"Privacy against Real-Time Speech Emotion Detection via Acoustic Adversarial Evasion of Machine Learning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2309.03702","title":"DiffDefense: Defending against Adversarial Attacks via Diffusion Models","created":"2023-09-07","cited_by_count":2,"area":"diffusion"},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2403.15603","title":"Forward Learning for Gradient-based Black-box Saliency Map Generation","created":"2024-03-22","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2404.15881","title":"Steal Now and Attack Later: Evaluating Robustness of Object Detection against Black-box Adversarial Attacks","created":"2024-04-24","cited_by_count":2,"area":null},{"id":"2507.12107","title":"Non-Adaptive Adversarial Face Generation","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2106.02732","title":"BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization","created":"2021-06-04","cited_by_count":1,"area":null},{"id":"2109.10770","title":"Exploring Adversarial Examples for Efficient Active Learning in Machine Learning Classifiers","created":"2021-09-22","cited_by_count":1,"area":null},{"id":"2112.02819","title":"Finding Deviated Behaviors of the Compressed DNN Models for Image Classifications","created":"2021-12-06","cited_by_count":1,"area":null},{"id":"2112.06063","title":"MedAttacker: Exploring Black-Box Adversarial Attacks on Risk Prediction Models in Healthcare","created":"2021-12-11","cited_by_count":1,"area":null},{"id":"2202.12512","title":"MUC-driven Feature Importance Measurement and Adversarial Analysis for Random Forest","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2203.09849","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","created":"2022-03-18","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2307.00274","title":"Common Knowledge Learning for Generating Transferable Adversarial Examples","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2309.06438","title":"Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks","created":"2023-09-12","cited_by_count":1,"area":null},{"id":"2310.10036","title":"Evading Detection Actively: Toward Anti-Forensics against Forgery Localization","created":"2023-10-16","cited_by_count":1,"area":null},{"id":"2311.12722","title":"Attacking Motion Planners Using Adversarial Perception Errors","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2402.10527","title":"Assessing biomedical knowledge robustness in large language models by query-efficient sampling attacks","created":"2024-02-16","cited_by_count":1,"area":null},{"id":"2504.01228","title":"TenAd: A Tensor-based Low-rank Black Box Adversarial Attack for Video Classification","created":"2025-04-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null}],"next_cursor":"100"}