{"total":78,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2211.09773","title":"T-SEA: Transfer-based Self-Ensemble Attack on Object Detection","created":"2022-11-16","cited_by_count":59,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2103.16148","title":"Class-Aware Robust Adversarial Training for Object Detection","created":"2021-03-30","cited_by_count":27,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2112.08691","title":"Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning","created":"2021-12-16","cited_by_count":25,"area":null},{"id":"2403.05247","title":"Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds","created":"2024-03-08","cited_by_count":24,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2207.13417","title":"Hardly Perceptible Trojan Attack against Neural Networks with Bit Flips","created":"2022-07-27","cited_by_count":22,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2411.16198","title":"Interpreting Object-level Foundation Models via Visual Precision Search","created":"2024-11-25","cited_by_count":20,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2112.03223","title":"Context-Aware Transfer Attacks for Object Detection","created":"2021-12-06","cited_by_count":18,"area":null},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2510.24195","title":"Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2","created":"2025-10-28","cited_by_count":11,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2109.15177","title":"You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors","created":"2021-09-30","cited_by_count":8,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2108.01125","title":"Hybrid Classical-Quantum Deep Learning Models for Autonomous Vehicle Traffic Image Classification Under Adversarial Attack","created":"2021-08-02","cited_by_count":6,"area":null},{"id":"2211.12624","title":"Improving Robust Generalization by Direct PAC-Bayesian Bound Minimization","created":"2022-11-22","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2310.02237","title":"Exploring Model Learning Heterogeneity for Boosting Ensemble Robustness","created":"2023-10-03","cited_by_count":6,"area":null},{"id":"2412.08099","title":"Adversarial Vulnerabilities in Large Language Models for Time Series Forecasting","created":"2024-12-11","cited_by_count":6,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2412.11471","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2508.02987","title":"Adversarial Attention Perturbations for Large Object Detection Transformers","created":"2025-08-05","cited_by_count":4,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2301.11457","title":"Attacking Important Pixels for Anchor-free Detectors","created":"2023-01-26","cited_by_count":3,"area":null},{"id":"2302.10802","title":"A Novel Noise Injection-based Training Scheme for Better Model Robustness","created":"2023-02-17","cited_by_count":3,"area":null},{"id":"2303.00284","title":"To Make Yourself Invisible with Adversarial Semantic Contours","created":"2023-03-01","cited_by_count":3,"area":null},{"id":"2311.17087","title":"Rethinking Mixup for Improving the Adversarial Transferability","created":"2023-11-28","cited_by_count":3,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2309.01106","title":"AdvMono3D: Advanced Monocular 3D Object Detection with Depth-Aware Robust Adversarial Training","created":"2023-09-03","cited_by_count":2,"area":null},{"id":"2508.15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","created":"2025-08-21","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2205.04638","title":"Using Frequency Attention to Make Adversarial Patch Powerful Against Person Detector","created":"2022-05-10","cited_by_count":1,"area":null},{"id":"2205.09624","title":"Focused Adversarial Attacks","created":"2022-05-19","cited_by_count":1,"area":null},{"id":"2206.10809","title":"SSMI: How to Make Objects of Interest Disappear without Accessing Object Detectors?","created":"2022-06-22","cited_by_count":1,"area":null},{"id":"2208.07174","title":"A Human-in-the-Middle Attack against Object Detection Systems","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2210.09405","title":"Towards Generating Adversarial Examples on Mixed-type Data","created":"2022-10-17","cited_by_count":1,"area":null},{"id":"2302.14166","title":"GLOW: Global Layout Aware Attacks on Object Detection","created":"2023-02-27","cited_by_count":1,"area":null},{"id":"2408.15833","title":"Network transferability of adversarial patches in real-time object detection","created":"2024-08-28","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2307.12342","title":"Towards Generic and Controllable Attacks Against Object Detection","created":"2023-07-23","cited_by_count":0,"area":null},{"id":"2504.12644","title":"Quantum Computing Supported Adversarial Attack-Resilient Autonomous Vehicle Perception Module for Traffic Sign Classification","created":"2025-04-17","cited_by_count":0,"area":null},{"id":"2504.14423","title":"Adversarial Attack for RGB-Event based Visual Object Tracking","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2512.16123","title":"Autoencoder-based Denoising Defense against Adversarial Attacks on Object Detection","created":"2025-12-18","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2607.06592","title":"LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2608.06674","title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers","created":"2026-08-07","cited_by_count":0,"area":null}],"next_cursor":null}