{"total":94,"rows":[{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2102.10707","title":"A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization","created":"2021-02-21","cited_by_count":46,"area":null},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2205.13412","title":"Physical-World Optical Adversarial Attacks on 3D Face Recognition","created":"2022-05-26","cited_by_count":23,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2110.02929","title":"Adversarial Attacks on Spiking Convolutional Neural Networks for Event-based Vision","created":"2021-10-06","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2206.03178","title":"Fooling Explanations in Text Classifiers","created":"2022-06-07","cited_by_count":13,"area":null},{"id":"2403.10935","title":"Understanding Robustness of Visual State Space Models for Image Classification","created":"2024-03-16","cited_by_count":12,"area":null},{"id":"2401.05217","title":"Exploring Vulnerabilities of No-Reference Image Quality Assessment Models: A Query-Based Black-Box Method","created":"2024-01-10","cited_by_count":10,"area":null},{"id":"2501.03562","title":"Rethinking Adversarial Attacks in Reinforcement Learning from Policy Distribution Perspective","created":"2025-01-07","cited_by_count":10,"area":"deeprl"},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2403.19254","title":"Imperceptible Protection against Style Imitation from Diffusion Models","created":"2024-03-28","cited_by_count":9,"area":"diffusion"},{"id":"2503.03272","title":"Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients","created":"2025-03-05","cited_by_count":9,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2211.16040","title":"AdvMask: A Sparse Adversarial Attack Based Data Augmentation Method for Image Classification","created":"2022-11-29","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7,"area":"diffusion"},{"id":"2503.13994","title":"TarPro: Targeted Protection against Malicious Image Editing","created":"2025-03-18","cited_by_count":7,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2204.09397","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2106.12074","title":"Reachability Analysis of Convolutional Neural Networks","created":"2021-06-22","cited_by_count":4,"area":null},{"id":"2205.01493","title":"On the uncertainty principle of neural networks","created":"2022-05-03","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2402.10983","title":"Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of Conjugate Variables in System Attacks","created":"2024-02-16","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2105.01403","title":"An Overview of Laser Injection against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":3,"area":null},{"id":"2106.01618","title":"Transferable Adversarial Examples for Anchor Free Object Detection","created":"2021-06-03","cited_by_count":3,"area":null},{"id":"2108.13930","title":"EG-Booster: Explanation-Guided Booster of ML Evasion Attacks","created":"2021-08-31","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2207.02087","title":"Learning to Accelerate Approximate Methods for Solving Integer Programming via Early Fixing","created":"2022-07-05","cited_by_count":3,"area":null},{"id":"2210.15446","title":"LP-BFGS attack: An adversarial attack based on the Hessian with limited pixels","created":"2022-10-26","cited_by_count":3,"area":null},{"id":"2301.11457","title":"Attacking Important Pixels for Anchor-free Detectors","created":"2023-01-26","cited_by_count":3,"area":null},{"id":"2212.07495","title":"SAIF: Sparse Adversarial and Imperceptible Attack Framework","created":"2022-12-14","cited_by_count":2,"area":null},{"id":"2402.10470","title":"Theoretical Understanding of Learning from Adversarial Perturbations","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2406.10933","title":"Improving Adversarial Robustness via Decoupled Visual Representation Masking","created":"2024-06-16","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2110.03124","title":"Improving Adversarial Robustness for Free with Snapshot Ensemble","created":"2021-10-07","cited_by_count":1,"area":null},{"id":"2112.04154","title":"SNEAK: Synonymous Sentences-Aware Adversarial Attack on Natural Language Video Localization","created":"2021-12-08","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2206.00489","title":"Attack-Agnostic Adversarial Detection","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2206.00772","title":"On the reversibility of adversarial attacks","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2310.00503","title":"Black-box Attacks on Image Activity Prediction and its Natural Language Explanations","created":"2023-09-30","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2402.01227","title":"STAA-Net: A Sparse and Transferable Adversarial Attack for Speech Emotion Recognition","created":"2024-02-02","cited_by_count":1,"area":null},{"id":"2408.01139","title":"Interpreting Global Perturbation Robustness of Image Models using Axiomatic Spectral Importance Decomposition","created":"2024-08-02","cited_by_count":1,"area":null},{"id":"2409.13163","title":"Hidden Activations Are Not Enough: A General Approach to Neural Network Predictions","created":"2024-09-20","cited_by_count":1,"area":null},{"id":"2502.00834","title":"Boosting Adversarial Robustness and Generalization with Dictionary Structure","created":"2025-02-02","cited_by_count":1,"area":null},{"id":"2503.16271","title":"Rethinking Robustness in Machine Learning: A Posterior Agreement Approach","created":"2025-03-20","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2505.06299","title":"Input-Specific and Universal Adversarial Attack Generation for Spiking Neural Networks in the Spiking Domain","created":"2025-05-07","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2510.16637","title":"A Versatile Framework for Designing Group-Sparse Adversarial Attacks","created":"2025-10-18","cited_by_count":1,"area":null},{"id":"2512.06185","title":"SPOOF: Simple Pixel Operations for Out-of-Distribution Fooling","created":"2025-12-05","cited_by_count":1,"area":null},{"id":"2605.16651","title":"Right Predictions, Misleading Explanations: On the Vulnerability of Vision-Language Model Explanations","created":"2026-05-15","cited_by_count":1,"area":"mllm"},{"id":"2102.01194","title":"A Statistician Teaches Deep Learning","created":"2021-01-29","cited_by_count":0,"area":null},{"id":"2106.01615","title":"Imperceptible Adversarial Examples for Fake Image Detection","created":"2021-06-03","cited_by_count":0,"area":null},{"id":"2202.07421","title":"Adversarial Attacks and Defense Methods for Power Quality Recognition","created":"2022-02-11","cited_by_count":0,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2203.09756","title":"AutoAdversary: A Pixel Pruning Method for Sparse Adversarial Attack","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2302.11757","title":"Open-World Object Detection via Discriminative Class Prototype Learning","created":"2023-02-23","cited_by_count":0,"area":null},{"id":"2303.18131","title":"AdvCheck: Characterizing Adversarial Examples via Local Gradient Checking","created":"2023-03-25","cited_by_count":0,"area":null},{"id":"2309.11462","title":"AudioFool: Fast, Universal and synchronization-free Cross-Domain Attack on Speech Recognition","created":"2023-09-20","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2409.01413","title":"Probabilistic Iterative Hard Thresholding for Sparse Learning","created":"2024-09-02","cited_by_count":0,"area":null},{"id":"2409.19619","title":"Discerning the Chaos: Detecting Adversarial Perturbations while Disentangling Intentional from Unintentional Noises","created":"2024-09-29","cited_by_count":0,"area":null},{"id":"2411.16162","title":"Sparse patches adversarial attacks via extrapolating point-wise information","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2502.21041","title":"Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2506.05402","title":"Lorica: A Synergistic Fine-Tuning Framework for Advancing Personalized Adversarial Robustness","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2510.26981","title":"Fine-Grained Iterative Adversarial Attacks with Limited Computation Budget","created":"2025-10-30","cited_by_count":0,"area":null},{"id":"2603.28568","title":"XSPA: Crafting Imperceptible X-Shaped Sparse Adversarial Perturbations for Transferable Attacks on VLMs","created":"2026-03-30","cited_by_count":0,"area":"mllm"},{"id":"2607.06109","title":"RoME: Robust Mixture of Low-Rank Experts against Multiple Adversarial Perturbations","created":"2026-07-07","cited_by_count":0,"area":"moe"},{"id":"2608.06912","title":"Fast LapSum: Exact Differentiable Top-$k$ at Million Scale","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.11285","title":"SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.19351","title":"Uncovering the Limits of Proof Sharing for Neural Networks","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}