{"total":146,"rows":[{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2103.13886","title":"Robust and Accurate Object Detection via Adversarial Learning","created":"2021-03-23","cited_by_count":42,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2305.11618","title":"DAP: A Dynamic Adversarial Patch for Evading Person Detectors","created":"2023-05-19","cited_by_count":40,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2303.17297","title":"Understanding the Robustness of 3D Object Detection with Bird's-Eye-View Representations in Autonomous Driving","created":"2023-03-30","cited_by_count":37,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2104.09789","title":"Does enhanced shape bias improve neural network robustness to common corruptions?","created":"2021-04-20","cited_by_count":32,"area":null},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2101.10011","title":"They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors","created":"2021-01-25","cited_by_count":17,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2401.03582","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","created":"2024-01-07","cited_by_count":14,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2108.08421","title":"Exploiting Multi-Object Relationships for Detecting Adversarial Attacks in Complex Scenes","created":"2021-08-19","cited_by_count":12,"area":null},{"id":"2110.12321","title":"ADC: Adversarial attacks against object Detection that evade Context consistency checks","created":"2021-10-24","cited_by_count":12,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2303.01734","title":"AdvART: Adversarial Art for Camouflaged Object Detection Attacks","created":"2023-03-03","cited_by_count":12,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2111.05391","title":"Statistical Perspectives on Reliability of Artificial Intelligence Systems","created":"2021-11-09","cited_by_count":10,"area":null},{"id":"2303.01351","title":"APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation","created":"2023-03-02","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2107.03050","title":"Controlled Caption Generation for Images Through Adversarial Attacks","created":"2021-07-07","cited_by_count":9,"area":null},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9,"area":null},{"id":"2402.01239","title":"PRIME: Protect Your Videos From Malicious Editing","created":"2024-02-02","cited_by_count":9,"area":null},{"id":"2403.02955","title":"XAI-Based Detection of Adversarial Attacks on Deepfake Detectors","created":"2024-03-05","cited_by_count":9,"area":null},{"id":"2104.11101","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","created":"2021-04-22","cited_by_count":8,"area":null},{"id":"2109.15177","title":"You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors","created":"2021-09-30","cited_by_count":8,"area":null},{"id":"2209.02339","title":"TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World","created":"2022-09-06","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2105.07334","title":"Real-time Detection of Practical Universal Adversarial Perturbations","created":"2021-05-16","cited_by_count":6,"area":null},{"id":"2105.09685","title":"Simple Transparent Adversarial Examples","created":"2021-05-20","cited_by_count":6,"area":null},{"id":"2106.05261","title":"We Can Always Catch You: Detecting Adversarial Patched Objects WITH or WITHOUT Signature","created":"2021-06-09","cited_by_count":6,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2209.13353","title":"Suppress with a Patch: Revisiting Universal Adversarial Patch Attacks against Object Detection","created":"2022-09-27","cited_by_count":6,"area":null},{"id":"2211.12624","title":"Improving Robust Generalization by Direct PAC-Bayesian Bound Minimization","created":"2022-11-22","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2102.06747","title":"Realizable Universal Adversarial Perturbations for Malware","created":"2021-02-12","cited_by_count":5,"area":null},{"id":"2103.00345","title":"End-to-end Uncertainty-based Mitigation of Adversarial Attacks to Automated Lane Centering","created":"2021-02-27","cited_by_count":5,"area":null},{"id":"2109.06363","title":"Sensor Adversarial Traits: Analyzing Robustness of 3D Object Detection Sensor Fusion Models","created":"2021-09-13","cited_by_count":5,"area":null},{"id":"2302.13570","title":"Physical Adversarial Attacks on Deep Neural Networks for Traffic Sign Recognition: A Feasibility Study","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2305.13508","title":"DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation","created":"2023-05-22","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2104.10459","title":"Jacobian Regularization for Mitigating Universal Adversarial Perturbations","created":"2021-04-21","cited_by_count":4,"area":null},{"id":"2108.07033","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","created":"2021-08-16","cited_by_count":4,"area":null},{"id":"2204.08726","title":"Jacobian Ensembles Improve Robustness Trade-offs to Adversarial Attacks","created":"2022-04-19","cited_by_count":4,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2309.15519","title":"Defending Against Physical Adversarial Patch Attacks on Infrared Human Detection","created":"2023-09-27","cited_by_count":4,"area":null},{"id":"2403.11515","title":"SSAP: A Shape-Sensitive Adversarial Patch for Comprehensive Disruption of Monocular Depth Estimation in Autonomous Navigation Applications","created":"2024-03-18","cited_by_count":4,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2507.04100","title":"Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systems","created":"2025-07-05","cited_by_count":4,"area":null},{"id":"2203.16130","title":"Sensor Data Validation and Driving Safety in Autonomous Driving Systems","created":"2022-03-30","cited_by_count":3,"area":null},{"id":"2208.10773","title":"Adversarial Vulnerability of Temporal Feature Networks for Object Detection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2302.10802","title":"A Novel Noise Injection-based Training Scheme for Better Model Robustness","created":"2023-02-17","cited_by_count":3,"area":null},{"id":"2303.09731","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","created":"2023-03-17","cited_by_count":3,"area":null},{"id":"2309.03215","title":"Explainable and Trustworthy Traffic Sign Detection for Safe Autonomous Driving: An Inductive Logic Programming Approach","created":"2023-08-30","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2411.18776","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2108.08972","title":"Application of Adversarial Examples to Physical ECG Signals","created":"2021-08-20","cited_by_count":2,"area":null},{"id":"2204.06337","title":"A Novel Approach to Train Diverse Types of Language Models for Health Mention Classification of Tweets","created":"2022-04-13","cited_by_count":2,"area":null},{"id":"2210.08472","title":"Object-Attentional Untargeted Adversarial Attack","created":"2022-10-16","cited_by_count":2,"area":null}],"next_cursor":"100"}