{"total":27,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2104.02000","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","created":"2021-04-05","cited_by_count":23,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2107.02840","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","created":"2021-06-27","cited_by_count":8,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5,"area":null},{"id":"2307.09375","title":"CertPri: Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space","created":"2023-07-18","cited_by_count":4,"area":null},{"id":"2103.11587","title":"Brain Image Synthesis with Unsupervised Multivariate Canonical CSC$\\ell_4$Net","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2106.02867","title":"Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness","created":"2021-06-05","cited_by_count":2,"area":null},{"id":"2211.01579","title":"Data-free Defense of Black Box Models Against Adversarial Attacks","created":"2022-11-03","cited_by_count":2,"area":null},{"id":"2304.07822","title":"A Random-patch based Defense Strategy Against Physical Attacks for Face Recognition Systems","created":"2023-04-16","cited_by_count":2,"area":null},{"id":"2406.03117","title":"VQUNet: Vector Quantization U-Net for Defending Adversarial Atacks by Regularizing Unwanted Noise","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2406.18144","title":"Artificial Immune System of Secure Face Recognition Against Adversarial Attacks","created":"2024-06-26","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2104.02155","title":"Adaptive Clustering of Robust Semantic Representations for Adversarial Image Purification","created":"2021-04-05","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2408.00329","title":"OTAD: An Optimal Transport-Induced Robust Model for Agnostic Adversarial Attack","created":"2024-08-01","cited_by_count":1,"area":null},{"id":"2103.02781","title":"Structure-Preserving Progressive Low-rank Image Completion for Defending Adversarial Attacks","created":"2021-03-04","cited_by_count":0,"area":null},{"id":"2112.13060","title":"Fight Perturbations with Perturbations: Defending Adversarial Attacks via Neuron Influence","created":"2021-12-24","cited_by_count":0,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null},{"id":"2602.11646","title":"Brain Tumor Classifiers Under Attack: Robustness of ResNet Variants Against Transferable FGSM and PGD Attacks","created":"2026-02-12","cited_by_count":0,"area":null}],"next_cursor":null}