{"total":146,"rows":[{"id":"2101.06549","title":"AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehicles","created":"2021-01-16","cited_by_count":137,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2302.12822","title":"Automatic Prompt Augmentation and Selection with Chain-of-Thought from Labeled Data","created":"2023-02-24","cited_by_count":119,"area":"lr"},{"id":"2204.13683","title":"KING: Generating Safety-Critical Driving Scenarios for Robust Imitation via Kinematics Gradients","created":"2022-04-28","cited_by_count":96,"area":"driving"},{"id":"2310.02025","title":"DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training","created":"2023-10-03","cited_by_count":76,"area":null},{"id":"2201.08531","title":"Black-box Prompt Learning for Pre-trained Language Models","created":"2022-01-21","cited_by_count":70,"area":null},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25,"area":null},{"id":"2107.10110","title":"On the Convergence of Prior-Guided Zeroth-Order Optimization Algorithms","created":"2021-07-21","cited_by_count":23,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2301.00896","title":"Efficient Robustness Assessment via Adversarial Spatial-Temporal Focus on Videos","created":"2023-01-03","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2102.08168","title":"Just Noticeable Difference for Deep Machine Vision","created":"2021-02-16","cited_by_count":19,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2110.02516","title":"Attack as the Best Defense: Nullifying Image-to-image Translation GANs via Limit-aware Adversarial Attack","created":"2021-10-06","cited_by_count":15,"area":null},{"id":"2102.04150","title":"Exploiting epistemic uncertainty of the deep learning models to generate adversarial samples","created":"2021-02-08","cited_by_count":13,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12,"area":"diffusion"},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2403.06014","title":"Hard-label based Small Query Black-box Adversarial Attack","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2302.04477","title":"An End-to-End Framework for Marketing Effectiveness Optimization under Budget Constraint","created":"2023-02-09","cited_by_count":9,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2101.02115","title":"Adversarial Robustness by Design through Analog Computing and Synthetic Gradients","created":"2021-01-06","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2403.11397","title":"Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization","created":"2024-03-18","cited_by_count":7,"area":null},{"id":"2411.13553","title":"AI-generated Image Detection: Passive or Watermark?","created":"2024-11-20","cited_by_count":7,"area":"safety"},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2312.15901","title":"Black-Box Tuning of Vision-Language Models with Effective Gradient Approximation","created":"2023-12-26","cited_by_count":6,"area":"mllm"},{"id":"2402.05493","title":"Investigating White-Box Attacks for On-Device Models","created":"2024-02-08","cited_by_count":6,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2106.15357","title":"Multi-stage Optimization based Adversarial Training","created":"2021-06-26","cited_by_count":4,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2209.04920","title":"Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognition","created":"2022-09-11","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2310.09795","title":"AFLOW: Developing Adversarial Examples under Extremely Noise-limited Settings","created":"2023-10-15","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2105.03237","title":"Mini-batch graphs for robust image classification","created":"2021-04-22","cited_by_count":3,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2503.01734","title":"Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning","created":"2025-03-03","cited_by_count":3,"area":"deeprl"},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2108.04217","title":"ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients","created":"2021-07-06","cited_by_count":2,"area":null},{"id":"2109.04300","title":"Energy Attack: On Transferring Adversarial Examples","created":"2021-09-09","cited_by_count":2,"area":null},{"id":"2205.07466","title":"Robust Representation via Dynamic Feature Aggregation","created":"2022-05-16","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2210.08472","title":"Object-Attentional Untargeted Adversarial Attack","created":"2022-10-16","cited_by_count":2,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2406.03017","title":"DifAttack++: Query-Efficient Black-Box Adversarial Attack via Hierarchical Disentangled Feature Space in Cross-Domain","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2410.15889","title":"Model Mimic Attack: Knowledge Distillation for Provably Transferable Adversarial Examples","created":"2024-10-21","cited_by_count":2,"area":"distill"},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2506.24048","title":"Consensus-based optimization for closed-box adversarial attacks and a connection to evolution strategies","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2509.24171","title":"Model Correlation Detection via Random Selection Probing","created":"2025-09-29","cited_by_count":2,"area":"mllm"},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2106.02732","title":"BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization","created":"2021-06-04","cited_by_count":1,"area":null},{"id":"2111.04371","title":"Geometrically Adaptive Dictionary Attack on Face Recognition","created":"2021-11-08","cited_by_count":1,"area":null},{"id":"2202.07342","title":"Unreasonable Effectiveness of Last Hidden Layer Activations for Adversarial Robustness","created":"2022-02-15","cited_by_count":1,"area":null},{"id":"2203.09849","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","created":"2022-03-18","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2309.02159","title":"The Adversarial Implications of Variable-Time Inference","created":"2023-09-05","cited_by_count":1,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null}],"next_cursor":"100"}