{"total":59,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2102.10454","title":"On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning","created":"2021-02-20","cited_by_count":29,"area":null},{"id":"2202.12451","title":"Human-Centered Concept Explanations for Neural Networks","created":"2022-02-25","cited_by_count":23,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2306.07591","title":"I See Dead People: Gray-Box Adversarial Attack on Image-To-Text Models","created":"2023-06-13","cited_by_count":17,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15,"area":null},{"id":"2211.14860","title":"Foiling Explanations in Deep Neural Networks","created":"2022-11-27","cited_by_count":14,"area":null},{"id":"2108.06895","title":"Interpreting Attributions and Interactions of Adversarial Attacks","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13,"area":null},{"id":"2112.05282","title":"RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit","created":"2021-12-10","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2302.05294","title":"MoreauGrad: Sparse and Robust Interpretation of Neural Networks via Moreau Envelope","created":"2023-01-08","cited_by_count":5,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2209.08647","title":"Why Deep Surgical Models Fail?: Revisiting Surgical Action Triplet Recognition through the Lens of Robustness","created":"2022-09-18","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2207.02087","title":"Learning to Accelerate Approximate Methods for Solving Integer Programming via Early Fixing","created":"2022-07-05","cited_by_count":3,"area":null},{"id":"2304.14601","title":"Improve Video Representation with Temporal Adversarial Augmentation","created":"2023-04-28","cited_by_count":3,"area":null},{"id":"2312.06199","title":"Towards Transferable Adversarial Attacks with Centralized Perturbation","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2102.11935","title":"Non-Singular Adversarial Robustness of Neural Networks","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2203.05403","title":"Robustness Analysis of Classification Using Recurrent Neural Networks with Perturbed Sequential Input","created":"2022-03-10","cited_by_count":2,"area":null},{"id":"2212.07495","title":"SAIF: Sparse Adversarial and Imperceptible Attack Framework","created":"2022-12-14","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2202.12512","title":"MUC-driven Feature Importance Measurement and Adversarial Analysis for Random Forest","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2303.07474","title":"Can Adversarial Examples Be Parsed to Reveal Victim Model Information?","created":"2023-03-13","cited_by_count":1,"area":null},{"id":"2303.11552","title":"Boosting Verified Training for Robust Image Classifications via Abstraction","created":"2023-03-21","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2510.16637","title":"A Versatile Framework for Designing Group-Sparse Adversarial Attacks","created":"2025-10-18","cited_by_count":1,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2103.07364","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-03-12","cited_by_count":0,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2112.13551","title":"Learning Robust and Lightweight Model through Separable Structured Transformations","created":"2021-12-27","cited_by_count":0,"area":null},{"id":"2205.02116","title":"Optimizing One-pixel Black-box Adversarial Attacks","created":"2022-04-30","cited_by_count":0,"area":null},{"id":"2306.15656","title":"SparseOptimizer: Sparsify Language Models through Moreau-Yosida Regularization and Accelerate via Compiler Co-design","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2401.16766","title":"Detection and Recovery Against Deep Neural Network Fault Injection Attacks Based on Contrastive Learning","created":"2024-01-30","cited_by_count":0,"area":null},{"id":"2505.16583","title":"Training on Plausible Counterfactuals Removes Spurious Correlations","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2512.08038","title":"SSplain: Sparse and Smooth Explainer for Retinopathy of Prematurity Classification","created":"2025-12-08","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.04652","title":"Pareto-Improving Adversarial Attacks with Primal-Dual Regularization","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}