{"total":78,"rows":[{"id":"2206.02618","title":"Generalized Federated Learning via Sharpness Aware Minimization","created":"2022-06-06","cited_by_count":144,"area":null},{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2203.13214","title":"A Perturbation-Constrained Adversarial Attack for Evaluating the Robustness of Optical Flow","created":"2022-03-24","cited_by_count":16,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2106.13997","title":"The Feasibility and Inevitability of Stealth Attacks","created":"2021-06-26","cited_by_count":12,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2208.09336","title":"Dispersed Pixel Perturbation-based Imperceptible Backdoor Trigger for Image Classifier Models","created":"2022-08-19","cited_by_count":7,"area":null},{"id":"2105.07334","title":"Real-time Detection of Practical Universal Adversarial Perturbations","created":"2021-05-16","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2304.11432","title":"Universal Adversarial Backdoor Attacks to Fool Vertical Federated Learning in Cloud-Edge Collaboration","created":"2023-04-22","cited_by_count":6,"area":null},{"id":"2310.16499","title":"Data Optimization in Deep Learning: A Survey","created":"2023-10-25","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2102.06747","title":"Realizable Universal Adversarial Perturbations for Malware","created":"2021-02-12","cited_by_count":5,"area":null},{"id":"2207.04308","title":"Dynamic Time Warping based Adversarial Framework for Time-Series Domain","created":"2022-07-09","cited_by_count":5,"area":null},{"id":"2212.09082","title":"On the Connection between Invariant Learning and Adversarial Training for Out-of-Distribution Generalization","created":"2022-12-18","cited_by_count":5,"area":null},{"id":"2402.02028","title":"Unlearnable Examples For Time Series","created":"2024-02-03","cited_by_count":5,"area":null},{"id":"2104.10459","title":"Jacobian Regularization for Mitigating Universal Adversarial Perturbations","created":"2021-04-21","cited_by_count":4,"area":null},{"id":"2204.08726","title":"Jacobian Ensembles Improve Robustness Trade-offs to Adversarial Attacks","created":"2022-04-19","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2212.03095","title":"Interpretation of Neural Networks is Susceptible to Universal Adversarial Perturbations","created":"2022-11-30","cited_by_count":4,"area":null},{"id":"2309.08204","title":"One-stage Modality Distillation for Incomplete Multimodal Learning","created":"2023-09-15","cited_by_count":4,"area":null},{"id":"2403.11833","title":"SSCAE -- Semantic, Syntactic, and Context-aware natural language Adversarial Examples generator","created":"2024-03-18","cited_by_count":4,"area":null},{"id":"2405.16918","title":"The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2206.12169","title":"AdAUC: End-to-end Adversarial AUC Optimization Against Long-tail Problems","created":"2022-06-24","cited_by_count":3,"area":null},{"id":"2208.10773","title":"Adversarial Vulnerability of Temporal Feature Networks for Object Detection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2302.06912","title":"Regret-Based Defense in Adversarial Reinforcement Learning","created":"2023-02-14","cited_by_count":3,"area":null},{"id":"2303.10594","title":"AdaptGuard: Defending Against Universal Attacks for Model Adaptation","created":"2023-03-19","cited_by_count":3,"area":null},{"id":"2306.02618","title":"Enhance Diffusion to Improve Robust Generalization","created":"2023-06-05","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2502.21048","title":"Data-free Universal Adversarial Perturbation with Pseudo-semantic Prior","created":"2025-02-28","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2107.11921","title":"Compensation Learning","created":"2021-07-26","cited_by_count":2,"area":null},{"id":"2202.08532","title":"Mitigating Closed-model Adversarial Examples with Bayesian Neural Modeling for Enhanced End-to-End Speech Recognition","created":"2022-02-17","cited_by_count":2,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2405.19179","title":"Model Agnostic Defense against Adversarial Patch Attacks on Object Detection in Unmanned Aerial Vehicles","created":"2024-05-29","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2106.15776","title":"Local Reweighting for Adversarial Training","created":"2021-06-30","cited_by_count":1,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2210.15997","title":"Universal Adversarial Directions","created":"2022-10-28","cited_by_count":1,"area":null},{"id":"2308.13541","title":"Adversarial Collaborative Filtering for Free","created":"2023-08-20","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2404.13621","title":"Attack on Scene Flow using Point Clouds","created":"2024-04-21","cited_by_count":1,"area":null},{"id":"2405.09176","title":"Cross-Input Certified Training for Universal Perturbations","created":"2024-05-15","cited_by_count":1,"area":null},{"id":"2410.11290","title":"Backdoor Attack on Vertical Federated Graph Neural Network Learning","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2412.09954","title":"$\\textrm{A}^{\\textrm{2}}$RNet: Adversarial Attack Resilient Network for Robust Infrared and Visible Image Fusion","created":"2024-12-13","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2505.21322","title":"Assured Autonomy with Neuro-Symbolic Perception","created":"2025-05-27","cited_by_count":1,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2208.12511","title":"Lower Difficulty and Better Robustness: A Bregman Divergence Perspective for Adversarial Training","created":"2022-08-26","cited_by_count":0,"area":null},{"id":"2308.02369","title":"Universal Defensive Underpainting Patch: Making Your Text Invisible to Optical Character Recognition","created":"2023-08-04","cited_by_count":0,"area":null},{"id":"2312.16339","title":"Universal Pyramid Adversarial Training for Improved ViT Performance","created":"2023-12-26","cited_by_count":0,"area":null},{"id":"2408.03892","title":"MORTAR: A Model-based Runtime Action Repair Framework for AI-enabled Cyber-Physical Systems","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2510.15699","title":"Constrained Adversarial Perturbation","created":"2025-10-17","cited_by_count":0,"area":null},{"id":"2511.18562","title":"Ensuring Calibration Robustness in Split Conformal Prediction Under Adversarial Attacks","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2606.00738","title":"SORA: Free Second-Order Attacks in Fast Adversarial Training","created":"2026-05-30","cited_by_count":0,"area":null}],"next_cursor":null}