{"total":88,"rows":[{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2403.05247","title":"Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds","created":"2024-03-08","cited_by_count":24,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2207.13326","title":"Point Cloud Attacks in Graph Spectral Domain: When 3D Geometry Meets Graph Signal Processing","created":"2022-07-27","cited_by_count":16,"area":null},{"id":"2412.15678","title":"Multi-Pair Temporal Sentence Grounding via Multi-Thread Knowledge Transfer Network","created":"2024-12-20","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2308.10601","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","created":"2023-08-21","cited_by_count":13,"area":null},{"id":"2102.03726","title":"Adversarial example generation with AdaBelief Optimizer and Crop Invariance","created":"2021-02-07","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2111.14564","title":"MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack","created":"2021-11-29","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2303.11611","title":"Out of Thin Air: Exploring Data-Free Adversarial Robustness Distillation","created":"2023-03-21","cited_by_count":7,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2104.09172","title":"Direction-Aggregated Attack for Transferable Adversarial Examples","created":"2021-04-19","cited_by_count":6,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2108.00422","title":"An Effective and Robust Detector for Logo Detection","created":"2021-08-01","cited_by_count":5,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2204.02887","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2022-04-06","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2302.13464","title":"Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2310.14637","title":"Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval","created":"2023-10-23","cited_by_count":5,"area":null},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2203.10183","title":"RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression","created":"2022-03-18","cited_by_count":4,"area":null},{"id":"2310.12708","title":"Generating Robust Adversarial Examples against Online Social Networks (OSNs)","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2108.00180","title":"Delving into Deep Image Prior for Adversarial Defense: A Novel Reconstruction-based Defense Framework","created":"2021-07-31","cited_by_count":3,"area":null},{"id":"2111.12922","title":"Clustering Effect of (Linearized) Adversarial Robust Models","created":"2021-11-25","cited_by_count":3,"area":null},{"id":"2407.12292","title":"Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2101.09451","title":"Error Diffusion Halftoning Against Adversarial Examples","created":"2021-01-23","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2202.02595","title":"Memory Defense: More Robust Classification via a Memory-Masking Autoencoder","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2202.12872","title":"AutoFR: Automated Filter Rule Generation for Adblocking","created":"2022-02-25","cited_by_count":2,"area":null},{"id":"2205.07466","title":"Robust Representation via Dynamic Feature Aggregation","created":"2022-05-16","cited_by_count":2,"area":null},{"id":"2403.11656","title":"LocalStyleFool: Regional Video Style Transfer Attack Using Segment Anything Model","created":"2024-03-18","cited_by_count":2,"area":null},{"id":"2406.03117","title":"VQUNet: Vector Quantization U-Net for Defending Adversarial Atacks by Regularizing Unwanted Noise","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2506.11892","title":"Attention-based Adversarial Robust Distillation in Radio Signal Classifications for Low-Power IoT Devices","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2601.05789","title":"SAFE: Secure and Accurate Federated Learning for Privacy-Preserving Brain-Computer Interfaces","created":"2026-01-09","cited_by_count":2,"area":null},{"id":"2607.29684","title":"Toward Robust and 3D-Aware RGB-NIR Imaging in the Dark","created":"2026-07-31","cited_by_count":2,"area":null},{"id":"2306.00314","title":"Adversarial-Aware Deep Learning System based on a Secondary Classical Machine Learning Verification Approach","created":"2023-06-01","cited_by_count":1,"area":null},{"id":"2306.02021","title":"Towards Black-box Adversarial Example Detection: A Data Reconstruction-based Method","created":"2023-06-03","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2511.01079","title":"T-MLA: A targeted multiscale log-exponential attack framework for neural image compression","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2103.06487","title":"DAFAR: Defending against Adversaries by Feedback-Autoencoder Reconstruction","created":"2021-03-11","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2110.07801","title":"Adversarial Purification through Representation Disentanglement","created":"2021-10-15","cited_by_count":0,"area":null},{"id":"2111.10075","title":"Enhanced countering adversarial attacks via input denoising and feature restoring","created":"2021-11-19","cited_by_count":0,"area":null},{"id":"2112.14420","title":"Invertible Image Dataset Protection","created":"2021-12-29","cited_by_count":0,"area":null},{"id":"2212.08341","title":"Adversarial Example Defense via Perturbation Grading Strategy","created":"2022-12-16","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2305.13651","title":"Adversarial Defenses via Vector Quantization","created":"2023-05-23","cited_by_count":0,"area":null},{"id":"2307.02828","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2023-07-06","cited_by_count":0,"area":null},{"id":"2309.05132","title":"DAD++: Improved Data-free Test Time Adversarial Defense","created":"2023-09-10","cited_by_count":0,"area":null},{"id":"2311.15339","title":"Adversarial Purification of Information Masking","created":"2023-11-26","cited_by_count":0,"area":null},{"id":"2402.13629","title":"Adversarial Purification and Fine-tuning for Robust UDC Image Restoration","created":"2024-02-21","cited_by_count":0,"area":null},{"id":"2407.09550","title":"CAPM: Fast and Robust Verification on Maxpool-based CNN via Dual Network","created":"2024-06-27","cited_by_count":0,"area":null},{"id":"2408.05745","title":"Improving Adversarial Transferability with Neighbourhood Gradient Information","created":"2024-08-11","cited_by_count":0,"area":null},{"id":"2503.06559","title":"MMARD: Improving the Min-Max Optimization Process in Adversarial Robustness Distillation","created":"2025-03-09","cited_by_count":0,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null},{"id":"2508.05489","title":"Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2510.03747","title":"LoRA Patching: Exposing the Fragility of Proactive Defenses against Deepfakes","created":"2025-10-04","cited_by_count":0,"area":null},{"id":"2511.01240","title":"Beyond Deceptive Flatness: Dual-Order Solution for Strengthening Adversarial Transferability","created":"2025-11-03","cited_by_count":0,"area":null},{"id":"2604.06954","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","created":"2026-04-08","cited_by_count":0,"area":null}],"next_cursor":null}