{"total":80,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2307.16851","title":"Towards Trustworthy and Aligned Machine Learning: A Data-centric Survey with Causality Perspectives","created":"2023-07-31","cited_by_count":30,"area":"alignment"},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2311.08819","title":"Frequency Domain-based Dataset Distillation","created":"2023-11-15","cited_by_count":28,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2202.11287","title":"LPF-Defense: 3D Adversarial Defense based on Frequency Analysis","created":"2022-02-23","cited_by_count":10,"area":null},{"id":"2401.09673","title":"Artwork Protection Against Neural Style Transfer Using Locally Adaptive Adversarial Color Attack","created":"2024-01-18","cited_by_count":10,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2403.19254","title":"Imperceptible Protection against Style Imitation from Diffusion Models","created":"2024-03-28","cited_by_count":9,"area":"diffusion"},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7,"area":"diffusion"},{"id":"2207.06196","title":"Interactive Machine Learning: A State of the Art Review","created":"2022-07-13","cited_by_count":6,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2511.00143","title":"BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing","created":"2025-10-31","cited_by_count":5,"area":null},{"id":"2203.13779","title":"Origins of Low-dimensional Adversarial Perturbations","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2210.11407","title":"Similarity of Neural Architectures using Adversarial Attack Transferability","created":"2022-10-20","cited_by_count":4,"area":null},{"id":"2304.02847","title":"Robustmix: Improving Robustness by Regularizing the Frequency Bias of Deep Nets","created":"2023-04-06","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2312.06199","title":"Towards Transferable Adversarial Attacks with Centralized Perturbation","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2101.09324","title":"Generating Black-Box Adversarial Examples in Sparse Domain","created":"2021-01-22","cited_by_count":2,"area":null},{"id":"2111.01215","title":"Gradient Frequency Modulation for Visually Explaining Video Understanding Models","created":"2021-11-01","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2605.21541","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","created":"2026-05-20","cited_by_count":2,"area":"mllm"},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2108.04979","title":"Simple black-box universal adversarial attacks on medical image classification based on deep neural networks","created":"2021-08-11","cited_by_count":1,"area":null},{"id":"2110.00623","title":"Calibrated Adversarial Training","created":"2021-10-01","cited_by_count":1,"area":null},{"id":"2203.07138","title":"Adversarial amplitude swap towards robust image classifiers","created":"2022-03-14","cited_by_count":1,"area":null},{"id":"2203.09849","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","created":"2022-03-18","cited_by_count":1,"area":null},{"id":"2305.10856","title":"Spatial-Frequency Discriminability for Revealing Adversarial Perturbations","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2402.12072","title":"Robustness and Exploration of Variational and Machine Learning Approaches to Inverse Problems: An Overview","created":"2024-02-19","cited_by_count":1,"area":null},{"id":"2403.00942","title":"Resilience of Entropy Model in Distributed Neural Networks","created":"2024-03-01","cited_by_count":1,"area":null},{"id":"2408.07944","title":"Training Spatial-Frequency Visual Prompts and Probabilistic Clusters for Accurate Black-Box Transfer Learning","created":"2024-08-15","cited_by_count":1,"area":null},{"id":"2408.08489","title":"DFT-Based Adversarial Attack Detection in MRI Brain Imaging: Enhancing Diagnostic Accuracy in Alzheimer's Case Studies","created":"2024-08-16","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2507.16052","title":"Disrupting Semantic and Abstract Features for Better Adversarial Transferability","created":"2025-07-21","cited_by_count":1,"area":null},{"id":"2508.06325","title":"Anti-Tamper Protection for Unauthorized Individual Image Generation","created":"2025-08-05","cited_by_count":1,"area":null},{"id":"2512.21019","title":"Efficient and Robust Video Defense Framework against 3D-field Personalized Talking Face","created":"2025-12-24","cited_by_count":1,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2203.04405","title":"Art-Attack: Black-Box Adversarial Attack via Evolutionary Art","created":"2022-03-07","cited_by_count":0,"area":null},{"id":"2203.09790","title":"Towards Robust 2D Convolution for Reliable Visual Recognition","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2210.01257","title":"Testing predictions of representation cost theory with CNNs","created":"2022-10-03","cited_by_count":0,"area":null},{"id":"2303.05828","title":"Adapting Contrastive Language-Image Pretrained (CLIP) Models for Out-of-Distribution Detection","created":"2023-03-10","cited_by_count":0,"area":null},{"id":"2304.07261","title":"Frequency Decomposition to Tap the Potential of Single Domain for Generalization","created":"2023-04-14","cited_by_count":0,"area":null},{"id":"2305.08439","title":"Exploiting Frequency Spectrum of Adversarial Images for General Robustness","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2306.02639","title":"Evaluating robustness of support vector machines with the Lagrangian dual approach","created":"2023-06-05","cited_by_count":0,"area":null},{"id":"2307.12622","title":"Phase Matching for Out-of-Distribution Generalization","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2408.12670","title":"Leveraging Information Consistency in Frequency and Spatial Domain for Adversarial Attacks","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2510.03245","title":"Frequency-Aware Model Parameter Explorer: A new attribution method for improving explainability","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2602.06578","title":"Exploring Sparsity and Smoothness of Arbitrary Lp Norms in Adversarial Attacks","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2604.16424","title":"Safety, Security, and Cognitive Risks in State-Space Models: A Systematic Threat Analysis with Spectral, Stateful, and Capacity Attacks","created":"2026-04-04","cited_by_count":0,"area":"ssm"},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2605.27689","title":"Test-Time Collective Action: Proxy-Based Perturbations for Correcting Algorithmic Harms","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.26099","title":"Lilith: Backdoor Generalization under Training-Inference Trigger Shift","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2608.21114","title":"CIVA: Critic-Induced Value-Subspace Attacks on Visual World-Model Agents","created":"2026-08-21","cited_by_count":0,"area":"wm"}],"next_cursor":null}