{"total":56,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2311.08819","title":"Frequency Domain-based Dataset Distillation","created":"2023-11-15","cited_by_count":28,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2205.04533","title":"How Does Frequency Bias Affect the Robustness of Neural Image Classifiers against Common Corruption and Adversarial Perturbations?","created":"2022-05-09","cited_by_count":11,"area":null},{"id":"2202.11287","title":"LPF-Defense: 3D Adversarial Defense based on Frequency Analysis","created":"2022-02-23","cited_by_count":10,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2104.12679","title":"Impact of Spatial Frequency Based Constraints on Adversarial Robustness","created":"2021-04-26","cited_by_count":8,"area":null},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2307.12027","title":"On the Effectiveness of Spectral Discriminators for Perceptual Quality Improvement","created":"2023-07-22","cited_by_count":8,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2306.01125","title":"Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbations","created":"2023-06-01","cited_by_count":5,"area":null},{"id":"2511.00143","title":"BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing","created":"2025-10-31","cited_by_count":5,"area":null},{"id":"2206.09410","title":"Low-Mid Adversarial Perturbation against Unauthorized Face Recognition System","created":"2022-06-19","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2203.08822","title":"Understanding robustness and generalization of artificial neural networks through Fourier masks","created":"2022-03-16","cited_by_count":3,"area":null},{"id":"2312.06199","title":"Towards Transferable Adversarial Attacks with Centralized Perturbation","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2405.03193","title":"Exploring Frequencies via Feature Mixing and Meta-Learning for Improving Adversarial Transferability","created":"2024-05-06","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2101.09324","title":"Generating Black-Box Adversarial Examples in Sparse Domain","created":"2021-01-22","cited_by_count":2,"area":null},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2111.01215","title":"Gradient Frequency Modulation for Visually Explaining Video Understanding Models","created":"2021-11-01","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2108.02010","title":"On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples","created":"2021-08-03","cited_by_count":1,"area":null},{"id":"2110.00623","title":"Calibrated Adversarial Training","created":"2021-10-01","cited_by_count":1,"area":null},{"id":"2301.13514","title":"Fourier Sensitivity and Regularization of Computer Vision Models","created":"2023-01-31","cited_by_count":1,"area":null},{"id":"2408.08489","title":"DFT-Based Adversarial Attack Detection in MRI Brain Imaging: Enhancing Diagnostic Accuracy in Alzheimer's Case Studies","created":"2024-08-16","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2210.01257","title":"Testing predictions of representation cost theory with CNNs","created":"2022-10-03","cited_by_count":0,"area":null},{"id":"2305.08439","title":"Exploiting Frequency Spectrum of Adversarial Images for General Robustness","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2305.15203","title":"Frequency maps reveal the correlation between Adversarial Attacks and Implicit Bias","created":"2023-05-24","cited_by_count":0,"area":null},{"id":"2307.12622","title":"Phase Matching for Out-of-Distribution Generalization","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2408.12670","title":"Leveraging Information Consistency in Frequency and Spatial Domain for Adversarial Attacks","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2502.15017","title":"Interpreting Adversarial Attacks and Defences using Architectures with Enhanced Interpretability","created":"2025-02-20","cited_by_count":0,"area":null},{"id":"2509.12265","title":"A Modern Look at Simplicity Bias in Image Classification Tasks","created":"2025-09-13","cited_by_count":0,"area":null},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null}],"next_cursor":null}