{"total":144,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101,"area":"driving"},{"id":"2110.12976","title":"Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks","created":"2021-10-25","cited_by_count":91,"area":null},{"id":"2201.12296","title":"Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptions","created":"2022-01-28","cited_by_count":80,"area":null},{"id":"2101.01461","title":"PointCutMix: Regularization Strategy for Point Cloud Classification","created":"2021-01-05","cited_by_count":69,"area":null},{"id":"2206.09682","title":"SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles","created":"2022-06-20","cited_by_count":66,"area":"driving"},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2103.03046","title":"PointGuard: Provably Robust 3D Point Cloud Classification","created":"2021-03-04","cited_by_count":49,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2112.04764","title":"3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection","created":"2021-12-09","cited_by_count":43,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2103.15326","title":"Fooling LiDAR Perception via Adversarial Trajectory Perturbation","created":"2021-03-29","cited_by_count":25,"area":null},{"id":"2208.08052","title":"Imperceptible and Robust Backdoor Attack in 3D Point Cloud","created":"2022-08-17","cited_by_count":25,"area":null},{"id":"2210.15291","title":"Isometric 3D Adversarial Examples in the Physical World","created":"2022-10-27","cited_by_count":25,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2308.12113","title":"Advancements in Point Cloud Data Augmentation for Deep Learning: A Survey","created":"2023-08-23","cited_by_count":24,"area":null},{"id":"2403.05247","title":"Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds","created":"2024-03-08","cited_by_count":24,"area":null},{"id":"2205.13412","title":"Physical-World Optical Adversarial Attacks on 3D Face Recognition","created":"2022-05-26","cited_by_count":23,"area":null},{"id":"2411.16308","title":"An End-to-End Robust Point Cloud Semantic Segmentation Network with Single-Step Conditional Diffusion Models","created":"2024-11-25","cited_by_count":23,"area":"diffusion"},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2202.07261","title":"Exploring the Devil in Graph Spectral Domain for 3D Point Cloud Attacks","created":"2022-02-15","cited_by_count":19,"area":null},{"id":"2201.10937","title":"Boosting 3D Adversarial Attacks with Attacking On Frequency","created":"2022-01-26","cited_by_count":18,"area":null},{"id":"2203.14155","title":"How Do We Fail? Stress Testing Perception in Autonomous Vehicles","created":"2022-03-26","cited_by_count":18,"area":"driving"},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2203.15245","title":"Robust Structured Declarative Classifiers for 3D Point Clouds: Defending Adversarial Attacks with Implicit Gradients","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2102.03722","title":"Object Removal Attacks on LiDAR-based 3D Object Detectors","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2103.09448","title":"Adversarial Attacks on Camera-LiDAR Models for 3D Car Detection","created":"2021-03-17","cited_by_count":16,"area":null},{"id":"2103.16652","title":"Robustness Certification for Point Cloud Models","created":"2021-03-30","cited_by_count":16,"area":null},{"id":"2207.13326","title":"Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing","created":"2022-07-27","cited_by_count":16,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2111.11704","title":"Deep Point Cloud Reconstruction","created":"2021-11-23","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2207.09084","title":"Dual Adaptive Transformations for Weakly Supervised Point Cloud Segmentation","created":"2022-07-19","cited_by_count":15,"area":null},{"id":"2101.10747","title":"Towards Universal Physical Attacks On Cascaded Camera-Lidar 3D Object Detection Models","created":"2021-01-26","cited_by_count":14,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2203.03888","title":"ART-Point: Improving Rotation Robustness of Point Cloud Classifiers via Adversarial Rotation","created":"2022-03-08","cited_by_count":12,"area":null},{"id":"2508.03252","title":"Robust Single-Stage Fully Sparse 3D Object Detection via Detachable Latent Diffusion","created":"2025-08-05","cited_by_count":12,"area":"diffusion"},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2110.10354","title":"Detecting Backdoor Attacks Against Point Cloud Classifiers","created":"2021-10-20","cited_by_count":10,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2202.11287","title":"LPF-Defense: 3D Adversarial Defense based on Frequency Analysis","created":"2022-02-23","cited_by_count":10,"area":null},{"id":"2204.05687","title":"3DeformRS: Certifying Spatial Deformations on Point Clouds","created":"2022-04-12","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2309.01351","title":"Adv3D: Generating 3D Adversarial Examples for 3D Object Detection in Driving Scenarios with NeRF","created":"2023-09-04","cited_by_count":10,"area":null},{"id":"2112.13534","title":"Adversarial Attack for Asynchronous Event-based Data","created":"2021-12-27","cited_by_count":9,"area":null},{"id":"2210.05896","title":"Common Corruption Robustness of Point Cloud Detectors: Benchmark and Enhancement","created":"2022-10-12","cited_by_count":9,"area":null},{"id":"2211.12294","title":"PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples","created":"2022-11-22","cited_by_count":9,"area":null},{"id":"2308.07546","title":"3DHacker: Spectrum-based Decision Boundary Generation for Hard-label 3D Point Cloud Attack","created":"2023-08-15","cited_by_count":9,"area":null},{"id":"2211.16247","title":"Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2308.05985","title":"TrajPAC: Towards Robustness Verification of Pedestrian Trajectory Prediction Models","created":"2023-08-11","cited_by_count":8,"area":null},{"id":"2105.04839","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","created":"2021-05-11","cited_by_count":7,"area":null},{"id":"2105.09090","title":"Local Aggressive Adversarial Attacks on 3D Point Cloud","created":"2021-05-19","cited_by_count":7,"area":null},{"id":"2110.04158","title":"Explainability-Aware One Point Attack for Point Cloud Neural Networks","created":"2021-10-08","cited_by_count":7,"area":null},{"id":"2211.14207","title":"Invariance-Aware Randomized Smoothing Certificates","created":"2022-11-25","cited_by_count":7,"area":null},{"id":"2407.11011","title":"Toward Availability Attacks in 3D Point Clouds","created":"2024-06-26","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2110.03745","title":"Adversarial Attack by Limited Point Cloud Surface Modifications","created":"2021-10-07","cited_by_count":6,"area":null},{"id":"2207.05729","title":"Physical Passive Patch Adversarial Attacks on Visual Odometry Systems","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2303.01959","title":"PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees","created":"2023-03-03","cited_by_count":6,"area":null},{"id":"2307.10875","title":"Risk-optimized Outlier Removal for Robust 3D Point Cloud Classification","created":"2023-07-20","cited_by_count":6,"area":null},{"id":"2309.10431","title":"Sample-adaptive Augmentation for Point Cloud Recognition Against Real-world Corruptions","created":"2023-09-19","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2207.07539","title":"3DVerifier: Efficient Robustness Verification for 3D Point Cloud Models","created":"2022-07-15","cited_by_count":5,"area":null},{"id":"2210.08159","title":"Dynamics-aware Adversarial Attack of Adaptive Neural Networks","created":"2022-10-15","cited_by_count":5,"area":null},{"id":"2211.01093","title":"Improving transferability of 3D adversarial attacks with scale and shear transformations","created":"2022-11-02","cited_by_count":5,"area":null},{"id":"2303.11419","title":"EPiC: Ensemble of Partial Point Clouds for Robust Classification","created":"2023-03-20","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2307.16361","title":"Benchmarking and Analyzing Robust Point Cloud Recognition: Bag of Tricks for Defending Adversarial Examples","created":"2023-07-31","cited_by_count":4,"area":null},{"id":"2308.15479","title":"3D Adversarial Augmentations for Robust Out-of-Domain Predictions","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2404.02242","title":"Towards Robust 3D Pose Transfer with Adversarial Learning","created":"2024-04-02","cited_by_count":4,"area":null},{"id":"2102.05334","title":"Enhancing Real-World Adversarial Patches through 3D Modeling of Complex Target Scenes","created":"2021-02-10","cited_by_count":3,"area":null},{"id":"2112.05871","title":"On Adversarial Robustness of Point Cloud Semantic Segmentation","created":"2021-12-11","cited_by_count":3,"area":null},{"id":"2202.07453","title":"Random Walks for Adversarial Meshes","created":"2022-02-15","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2303.09731","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","created":"2023-03-17","cited_by_count":3,"area":null},{"id":"2409.20426","title":"Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles","created":"2024-09-30","cited_by_count":3,"area":null},{"id":"2109.10161","title":"3D Point Cloud Completion with Geometric-Aware Adversarial Augmentation","created":"2021-09-21","cited_by_count":2,"area":null},{"id":"2111.08973","title":"Generating Unrestricted 3D Adversarial Point Clouds","created":"2021-11-17","cited_by_count":2,"area":null},{"id":"2211.13775","title":"SAGA: Spectral Adversarial Geometric Attack on 3D Meshes","created":"2022-11-24","cited_by_count":2,"area":null},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2308.05525","title":"Robustifying Point Cloud Networks by Refocusing","created":"2023-08-10","cited_by_count":2,"area":null},{"id":"2401.00751","title":"Machine Translation Testing via Syntactic Tree Pruning","created":"2024-01-01","cited_by_count":2,"area":null},{"id":"2403.06698","title":"PCLD: Point Cloud Layerwise Diffusion for Adversarial Purification","created":"2024-03-11","cited_by_count":2,"area":null},{"id":"2410.09691","title":"Robust 3D Point Clouds Classification based on Declarative Defenders","created":"2024-10-13","cited_by_count":2,"area":null},{"id":"2411.00462","title":"Target-Guided Adversarial Point Cloud Transformer Towards Recognition Against Real-world Corruptions","created":"2024-11-01","cited_by_count":2,"area":null},{"id":"2503.00063","title":"NoPain: No-box Point Cloud Attack via Optimal Transport Singular Boundary","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2505.19820","title":"InfoCons: Identifying Interpretable Critical Concepts in Point Clouds via Information Theory","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2508.15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","created":"2025-08-21","cited_by_count":2,"area":null},{"id":"2106.04066","title":"Semantically Adversarial Scenario Generation with Explicit Knowledge Guidance","created":"2021-06-08","cited_by_count":1,"area":null},{"id":"2204.02351","title":"Test Against High-Dimensional Uncertainties: Accelerated Evaluation of Autonomous Vehicles with Deep Importance Sampling","created":"2022-04-04","cited_by_count":1,"area":null},{"id":"2209.06971","title":"PointACL:Adversarial Contrastive Learning for Robust Point Clouds Representation under Adversarial Attack","created":"2022-09-14","cited_by_count":1,"area":null},{"id":"2309.05810","title":"SHIFT3D: Synthesizing Hard Inputs For Tricking 3D Detectors","created":"2023-09-11","cited_by_count":1,"area":null}],"next_cursor":"100"}