{"total":75,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2104.11408","title":"Neural Mean Discrepancy for Efficient Out-of-Distribution Detection","created":"2021-04-23","cited_by_count":42,"area":null},{"id":"2303.11470","title":"Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking","created":"2023-03-20","cited_by_count":37,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.02331","title":"iDECODe: In-distribution Equivariance for Conformal Out-of-distribution Detection","created":"2022-01-07","cited_by_count":27,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2106.02749","title":"Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics","created":"2021-06-04","cited_by_count":19,"area":null},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2307.15008","title":"A LLM Assisted Exploitation of AI-Guardian","created":"2023-07-20","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2204.05427","title":"Generalizing Adversarial Explanations with Grad-CAM","created":"2022-04-11","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2306.05873","title":"Detecting Adversarial Directions in Deep Reinforcement Learning to Make Robust Decisions","created":"2023-06-09","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2204.09514","title":"Special Session: Towards an Agile Design Methodology for Efficient, Reliable, and Secure ML Systems","created":"2022-04-18","cited_by_count":6,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2407.15385","title":"Towards Robust Vision Transformer via Masked Adaptive Ensemble","created":"2024-07-22","cited_by_count":4,"area":null},{"id":"2105.10101","title":"Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks","created":"2021-05-21","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2111.12631","title":"Unity is strength: Improving the Detection of Adversarial Examples with Ensemble Approaches","created":"2021-11-24","cited_by_count":3,"area":null},{"id":"2306.15457","title":"Robust Proxy: Improving Adversarial Robustness by Robust Proxy Learning","created":"2023-06-27","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2404.10789","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2405.11195","title":"Trustworthy Actionable Perturbations","created":"2024-05-18","cited_by_count":3,"area":null},{"id":"2105.00495","title":"BAARD: Blocking Adversarial Examples by Testing for Applicability, Reliability and Decidability","created":"2021-05-02","cited_by_count":2,"area":null},{"id":"2105.08620","title":"Adversarial Examples Detection with Bayesian Neural Network","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2106.03099","title":"A Primer on Multi-Neuron Relaxation-based Adversarial Robustness Certification","created":"2021-06-06","cited_by_count":2,"area":null},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2,"area":null},{"id":"2207.12545","title":"$p$-DkNN: Out-of-Distribution Detection Through Statistical Testing of Deep Representations","created":"2022-07-25","cited_by_count":2,"area":null},{"id":"2210.12396","title":"ADDMU: Detection of Far-Boundary Adversarial Examples with Data and Model Uncertainty Estimation","created":"2022-10-22","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2502.09110","title":"Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks","created":"2025-02-13","cited_by_count":2,"area":null},{"id":"2107.04827","title":"Identifying Layers Susceptible to Adversarial Attacks","created":"2021-07-10","cited_by_count":1,"area":null},{"id":"2111.10844","title":"Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attacks","created":"2021-11-21","cited_by_count":1,"area":null},{"id":"2208.10373","title":"Reversing Skin Cancer Adversarial Examples by Multiscale Diffusive and Denoising Aggregation Mechanism","created":"2022-08-22","cited_by_count":1,"area":null},{"id":"2408.10885","title":"Low-Quality Image Detection by Hierarchical VAE","created":"2024-08-20","cited_by_count":1,"area":null},{"id":"2511.05102","title":"Quantifying the Risk of Transferred Black Box Attacks","created":"2025-11-07","cited_by_count":1,"area":null},{"id":"2102.04836","title":"Target Training Does Adversarial Training Without Adversarial Samples","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2105.14638","title":"DAAIN: Detection of Anomalous and Adversarial Input using Normalizing Flows","created":"2021-05-30","cited_by_count":0,"area":null},{"id":"2106.05825","title":"HASI: Hardware-Accelerated Stochastic Inference, A Defense Against Adversarial Machine Learning Attacks","created":"2021-06-09","cited_by_count":0,"area":null},{"id":"2107.00561","title":"Using Anomaly Feature Vectors for Detecting, Classifying and Warning of Outlier Adversarial Examples","created":"2021-07-01","cited_by_count":0,"area":null},{"id":"2202.10309","title":"HoneyModels: Machine Learning Honeypots","created":"2022-02-21","cited_by_count":0,"area":"safety"},{"id":"2204.11985","title":"When adversarial examples are excusable","created":"2022-04-25","cited_by_count":0,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2206.13083","title":"Adversarial Example Detection in Deployed Tree Ensembles","created":"2022-06-27","cited_by_count":0,"area":null},{"id":"2208.00498","title":"DNNShield: Dynamic Randomized Model Sparsification, A Defense Against Adversarial Machine Learning","created":"2022-07-31","cited_by_count":0,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2306.00042","title":"Graph-based methods coupled with specific distributional distances for adversarial attack detection","created":"2023-05-31","cited_by_count":0,"area":null},{"id":"2306.06462","title":"Boosting Adversarial Robustness using Feature Level Stochastic Smoothing","created":"2023-06-10","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2411.06666","title":"Adversarial Detection with a Dynamically Stable System","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2606.27832","title":"USAD: Uncertainty-aware Statistical Adversarial Detection","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2608.10203","title":"A Convolutional Layer Activation Dimensionality Reduction for Out-of-Distribution and Adversarial Attack Detection Methods","created":"2026-08-10","cited_by_count":0,"area":null}],"next_cursor":null}