{"total":69,"rows":[{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2106.09848","title":"PAC Prediction Sets Under Covariate Shift","created":"2021-06-17","cited_by_count":45,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.12485","title":"Understanding the Dynamics of DNNs Using Graph Modularity","created":"2021-11-24","cited_by_count":26,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2103.10274","title":"TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation","created":"2021-03-18","cited_by_count":13,"area":null},{"id":"2112.01601","title":"Is RobustBench/AutoAttack a suitable Benchmark for Adversarial Robustness?","created":"2021-12-02","cited_by_count":12,"area":null},{"id":"2409.14424","title":"Dormant: Defending against Pose-driven Human Image Animation","created":"2024-09-22","cited_by_count":11,"area":null},{"id":"2110.07305","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","created":"2021-10-14","cited_by_count":10,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2107.09225","title":"Discriminator-Free Generative Adversarial Attack","created":"2021-07-20","cited_by_count":8,"area":null},{"id":"2202.09300","title":"Exploring Adversarially Robust Training for Unsupervised Domain Adaptation","created":"2022-02-18","cited_by_count":8,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2106.00455","title":"Instance Correction for Learning with Open-set Noisy Labels","created":"2021-06-01","cited_by_count":7,"area":null},{"id":"2110.08712","title":"Black-box Adversarial Attacks on Network-wide Multi-step Traffic State Prediction Models","created":"2021-10-17","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2111.11165","title":"Graph-Based Similarity of Neural Network Representations","created":"2021-11-22","cited_by_count":7,"area":null},{"id":"2101.12372","title":"Adversarial Learning with Cost-Sensitive Classes","created":"2021-01-29","cited_by_count":6,"area":null},{"id":"2204.12050","title":"Self-recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks","created":"2022-04-26","cited_by_count":6,"area":null},{"id":"2210.03150","title":"Towards Out-of-Distribution Adversarial Robustness","created":"2022-10-06","cited_by_count":5,"area":null},{"id":"2404.03340","title":"Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks","created":"2024-04-04","cited_by_count":5,"area":null},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2206.07282","title":"Human Eyes Inspired Recurrent Neural Networks are More Robust Against Adversarial Noises","created":"2022-06-15","cited_by_count":4,"area":null},{"id":"2405.11432","title":"On Robust Reinforcement Learning with Lipschitz-Bounded Policy Networks","created":"2024-05-19","cited_by_count":4,"area":"deeprl"},{"id":"2508.05167","title":"PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems","created":"2025-08-07","cited_by_count":4,"area":"lr"},{"id":"2109.01766","title":"SEC4SR: A Security Analysis Platform for Speaker Recognition","created":"2021-09-04","cited_by_count":3,"area":null},{"id":"2204.11531","title":"VITA: A Multi-Source Vicinal Transfer Augmentation Method for Out-of-Distribution Generalization","created":"2022-04-25","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2502.08932","title":"On the Promise for Assurance of Differentiable Neurosymbolic Reasoning Paradigms","created":"2025-02-13","cited_by_count":3,"area":"lr"},{"id":"2102.02128","title":"IWA: Integrated Gradient based White-box Attacks for Fooling Deep Neural Networks","created":"2021-02-03","cited_by_count":2,"area":null},{"id":"2107.03759","title":"Analytically Tractable Hidden-States Inference in Bayesian Neural Networks","created":"2021-07-08","cited_by_count":2,"area":null},{"id":"2112.03615","title":"Saliency Diversified Deep Ensemble for Robustness to Adversaries","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2205.10457","title":"Robust Sensible Adversarial Learning of Deep Neural Networks for Image Classification","created":"2022-05-20","cited_by_count":2,"area":null},{"id":"2206.14477","title":"Adversarial Ensemble Training by Jointly Learning Label Dependencies and Member Models","created":"2022-06-29","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2406.10933","title":"Improving Adversarial Robustness via Decoupled Visual Representation Masking","created":"2024-06-16","cited_by_count":2,"area":null},{"id":"2307.06484","title":"Single-Class Target-Specific Attack against Interpretable Deep Learning Systems","created":"2023-07-12","cited_by_count":1,"area":null},{"id":"2307.06496","title":"Microbial Genetic Algorithm-based Black-box Attack against Interpretable Deep Learning Systems","created":"2023-07-13","cited_by_count":1,"area":null},{"id":"2309.17348","title":"Intrinsic Biologically Plausible Adversarial Robustness","created":"2023-09-29","cited_by_count":1,"area":null},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2505.22839","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","created":"2025-05-28","cited_by_count":1,"area":"diffusion"},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2511.01724","title":"PRBench: A Standardized Probabilistic Robustness Benchmark","created":"2025-11-03","cited_by_count":1,"area":null},{"id":"2106.11644","title":"NCIS: Neural Contextual Iterative Smoothing for Purifying Adversarial Perturbations","created":"2021-06-22","cited_by_count":0,"area":null},{"id":"2201.04733","title":"Adversarially Robust Classification by Conditional Generative Model Inversion","created":"2022-01-12","cited_by_count":0,"area":null},{"id":"2203.09790","title":"Towards Robust 2D Convolution for Reliable Visual Recognition","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2205.10952","title":"Generalization ability and Vulnerabilities to adversarial perturbations: Two sides of the same coin","created":"2022-05-22","cited_by_count":0,"area":null},{"id":"2211.04973","title":"Accelerating Adversarial Perturbation by 50% with Semi-backward Propagation","created":"2022-11-09","cited_by_count":0,"area":null},{"id":"2306.04756","title":"A Linearly Convergent GAN Inversion-based Algorithm for Reverse Engineering of Deceptions","created":"2023-06-07","cited_by_count":0,"area":null},{"id":"2306.06081","title":"Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2311.15356","title":"Having Second Thoughts? Let's hear it","created":"2023-11-26","cited_by_count":0,"area":null},{"id":"2312.17667","title":"AIJack: Let's Hijack AI! Security and Privacy Risk Simulator for Machine Learning","created":"2023-12-29","cited_by_count":0,"area":null},{"id":"2402.00304","title":"Invariance-powered Trustworthy Defense via Remove Then Restore","created":"2024-02-01","cited_by_count":0,"area":null},{"id":"2409.02629","title":"AdvSecureNet: A Python Toolkit for Adversarial Machine Learning","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2503.20583","title":"Feature Statistics with Uncertainty Help Adversarial Robustness","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2505.12642","title":"Two out of Three (ToT): using self-consistency to make robust predictions","created":"2025-05-19","cited_by_count":0,"area":null},{"id":"2505.12647","title":"Spiking Neural Network: a low power solution for physical layer authentication","created":"2025-05-19","cited_by_count":0,"area":null},{"id":"2602.04356","title":"Stage-wise Attention-Guided Region Sequencing for Adversarial Attacks on Large Vision-Language Models","created":"2026-02-04","cited_by_count":0,"area":"mllm"}],"next_cursor":null}