{"total":124,"rows":[{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2103.03344","title":"WaveGuard: Understanding and Mitigating Audio Adversarial Examples","created":"2021-03-04","cited_by_count":40,"area":null},{"id":"2412.08608","title":"AdvWave: Stealthy Adversarial Jailbreak Attack against Large Audio-Language Models","created":"2024-12-11","cited_by_count":38,"area":"safety"},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2104.02000","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","created":"2021-04-05","cited_by_count":23,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2505.14103","title":"AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models","created":"2025-05-20","cited_by_count":18,"area":"safety"},{"id":"2106.00273","title":"Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning","created":"2021-06-01","cited_by_count":16,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2203.16536","title":"Recent improvements of ASR models in the face of adversarial attacks","created":"2022-03-29","cited_by_count":13,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2508.15407","title":"When Audio and Text Disagree: Revealing Text Bias in Large Audio-Language Models","created":"2025-08-21","cited_by_count":13,"area":null},{"id":"2106.07868","title":"Voting for the right answer: Adversarial defense for speaker verification","created":"2021-06-15","cited_by_count":12,"area":null},{"id":"2109.09598","title":"\"Hello, It's Me\": Deep Learning-based Speech Synthesis Attacks in the Real World","created":"2021-09-20","cited_by_count":12,"area":null},{"id":"2111.06979","title":"Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2405.06134","title":"Muting Whisper: A Universal Acoustic Adversarial Attack on Speech Foundation Models","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2210.17316","title":"There is more than one kind of robustness: Fooling Whisper with adversarial examples","created":"2022-10-26","cited_by_count":11,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2104.02757","title":"Exploring Targeted Universal Adversarial Perturbations to End-to-end ASR Models","created":"2021-04-06","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2110.09843","title":"AequeVox: Automated Fairness Testing of Speech Recognition Systems","created":"2021-10-19","cited_by_count":9,"area":null},{"id":"2403.02955","title":"XAI-Based Detection of Adversarial Attacks on Deepfake Detectors","created":"2024-03-05","cited_by_count":9,"area":null},{"id":"2107.00309","title":"Adversarial Sample Detection for Speaker Verification by Neural Vocoders","created":"2021-07-01","cited_by_count":8,"area":null},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2111.04330","title":"Characterizing the adversarial vulnerability of speech self-supervised learning","created":"2021-11-08","cited_by_count":6,"area":null},{"id":"2112.07076","title":"Real-Time Neural Voice Camouflage","created":"2021-12-14","cited_by_count":6,"area":null},{"id":"2202.00673","title":"Visualizing Automatic Speech Recognition -- Means for a Better Understanding?","created":"2022-02-01","cited_by_count":6,"area":null},{"id":"2204.11304","title":"Dictionary Attacks on Speaker Verification","created":"2022-04-24","cited_by_count":5,"area":null},{"id":"2309.06960","title":"PhantomSound: Black-Box, Query-Efficient Audio Adversarial Attack via Split-Second Phoneme Injection","created":"2023-09-13","cited_by_count":5,"area":null},{"id":"2401.09191","title":"An Optimal Transport Approach for Computing Adversarial Training Lower Bounds in Multiclass Classification","created":"2024-01-17","cited_by_count":5,"area":null},{"id":"2401.17133","title":"SongBsAb: A Dual Prevention Approach against Singing Voice Conversion based Illegal Song Covers","created":"2024-01-30","cited_by_count":5,"area":null},{"id":"2502.04230","title":"XAttnMark: Learning Robust Audio Watermarking with Cross-Attention","created":"2025-02-06","cited_by_count":5,"area":null},{"id":"2103.08086","title":"Multi-Discriminator Sobolev Defense-GAN Against Adversarial Attacks for End-to-End Speech Systems","created":"2021-03-15","cited_by_count":4,"area":null},{"id":"2103.10651","title":"SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2108.00669","title":"Towards Making Deep Learning-based Vulnerability Detectors Robust","created":"2021-08-02","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2411.09220","title":"Transferable Adversarial Attacks against ASR","created":"2024-11-14","cited_by_count":4,"area":null},{"id":"2505.21027","title":"TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Data","created":"2025-05-27","cited_by_count":4,"area":null},{"id":"2508.03365","title":"When Good Sounds Go Adversarial: Jailbreaking Audio-Language Models with Benign Inputs","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2512.23881","title":"Breaking Audio Large Language Models by Attacking Only the Encoder: A Universal Targeted Latent-Space Audio Attack","created":"2025-12-29","cited_by_count":4,"area":"lr"},{"id":"2103.08095","title":"Towards Robust Speech-to-Text Adversarial Attack","created":"2021-03-15","cited_by_count":3,"area":null},{"id":"2104.08422","title":"Fashion-Guided Adversarial Attack on Person Segmentation","created":"2021-04-17","cited_by_count":3,"area":null},{"id":"2109.01766","title":"SEC4SR: A Security Analysis Platform for Speaker Recognition","created":"2021-09-04","cited_by_count":3,"area":null},{"id":"2111.12631","title":"Unity is strength: Improving the Detection of Adversarial Examples with Ensemble Approaches","created":"2021-11-24","cited_by_count":3,"area":null},{"id":"2112.07400","title":"Robustifying automatic speech recognition by extracting slowly varying features","created":"2021-12-14","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2202.02751","title":"Tubes Among Us: Analog Attack on Automatic Speaker Identification","created":"2022-02-06","cited_by_count":3,"area":null},{"id":"2202.10594","title":"Adversarial Attacks on Speech Recognition Systems for Mission-Critical Applications: A Survey","created":"2022-02-22","cited_by_count":3,"area":null},{"id":"2205.10117","title":"DDDM: a Brain-Inspired Framework for Robust Classification","created":"2022-05-01","cited_by_count":3,"area":null},{"id":"2207.13192","title":"Perception-Aware Attack: Creating Adversarial Music via Reverse-Engineering Human Perception","created":"2022-07-26","cited_by_count":3,"area":null},{"id":"2210.00753","title":"Push-Pull: Characterizing the Adversarial Robustness for Audio-Visual Active Speaker Detection","created":"2022-10-03","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2211.14732","title":"Deep representation learning: Fundamentals, Perspectives, Applications, and Open Challenges","created":"2022-11-27","cited_by_count":3,"area":null},{"id":"2305.17000","title":"DistriBlock: Identifying adversarial audio samples by leveraging characteristics of the output distribution","created":"2023-05-26","cited_by_count":3,"area":null},{"id":"2305.18779","title":"It begins with a boundary: A geometric view on probabilistically robust learning","created":"2023-05-30","cited_by_count":3,"area":null},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2604.14604","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2107.05222","title":"Perceptual-based deep-learning denoiser as a defense against adversarial attacks on ASR systems","created":"2021-07-12","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2209.13523","title":"Watch What You Pretrain For: Targeted, Transferable Adversarial Examples on Self-Supervised Speech Recognition models","created":"2022-09-17","cited_by_count":2,"area":null},{"id":"2211.06508","title":"On the robustness of non-intrusive speech quality model by adversarial examples","created":"2022-11-11","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2405.09470","title":"Towards Evaluating the Robustness of Automatic Speech Recognition Systems via Audio Style Transfer","created":"2024-05-15","cited_by_count":2,"area":null},{"id":"2407.04482","title":"Controlling Whisper: Universal Acoustic Adversarial Attacks to Control Speech Foundation Models","created":"2024-07-05","cited_by_count":2,"area":null},{"id":"2604.08405","title":"SyncBreaker:Stage-Aware Multimodal Adversarial Attacks on Audio-Driven Talking Head Generation","created":"2026-04-09","cited_by_count":2,"area":null},{"id":"2105.07776","title":"DISCO Verification: Division of Input Space into COnvex polytopes for neural network verification","created":"2021-05-17","cited_by_count":1,"area":null},{"id":"2108.02010","title":"On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples","created":"2021-08-03","cited_by_count":1,"area":null},{"id":"2112.01821","title":"Catch Me If You Can: Blackbox Adversarial Attacks on Automatic Speech Recognition using Frequency Masking","created":"2021-12-03","cited_by_count":1,"area":null},{"id":"2202.00399","title":"Language Dependencies in Adversarial Attacks on Speech Recognition Systems","created":"2022-02-01","cited_by_count":1,"area":null},{"id":"2203.05408","title":"Attacks as Defenses: Designing Robust Audio CAPTCHAs Using Attacks on Automatic Speech Recognition Systems","created":"2022-03-10","cited_by_count":1,"area":null},{"id":"2203.09849","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","created":"2022-03-18","cited_by_count":1,"area":null},{"id":"2204.08977","title":"Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Masking","created":"2022-04-19","cited_by_count":1,"area":null},{"id":"2206.08170","title":"Adversarial Privacy Protection on Speech Enhancement","created":"2022-06-16","cited_by_count":1,"area":null},{"id":"2208.02250","title":"Adversarial Attacks on ASR Systems: An Overview","created":"2022-08-03","cited_by_count":1,"area":null},{"id":"2211.01621","title":"Leveraging Domain Features for Detecting Adversarial Attacks Against Deep Speech Recognition in Noise","created":"2022-11-03","cited_by_count":1,"area":null},{"id":"2302.03694","title":"Characterizing Financial Market Coverage using Artificial Intelligence","created":"2023-02-07","cited_by_count":1,"area":null},{"id":"2304.08811","title":"Towards the Transferable Audio Adversarial Attack via Ensemble Methods","created":"2023-04-18","cited_by_count":1,"area":null},{"id":"2306.05358","title":"Trustworthy Sensor Fusion against Inaudible Command Attacks in Advanced Driver-Assistance System","created":"2023-05-30","cited_by_count":1,"area":null},{"id":"2306.16614","title":"Group-based Robustness: A General Framework for Customized Robustness in the Real World","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2310.03349","title":"An Integrated Algorithm for Robust and Imperceptible Audio Adversarial Examples","created":"2023-10-05","cited_by_count":1,"area":null},{"id":"2403.08806","title":"Adversarially Robust Deepfake Detection via Adversarial Feature Similarity Learning","created":"2024-02-06","cited_by_count":1,"area":null},{"id":"2406.14682","title":"Uniform Convergence of Adversarially Robust Classifiers","created":"2024-06-20","cited_by_count":1,"area":null},{"id":"2409.01813","title":"Comparative Study on Noise-Augmented Training and its Effect on Adversarial Robustness in ASR Systems","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2409.07390","title":"D-CAPTCHA++: A Study of Resilience of Deepfake CAPTCHA under Transferable Imperceptible Adversarial Attack","created":"2024-09-11","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2507.05441","title":"Adversarial Machine Learning Attacks on Financial Reporting via Maximum Violated Multi-Objective Attack","created":"2025-07-07","cited_by_count":1,"area":null},{"id":"2509.15437","title":"Impact of Phonetics on Speaker Identity in Adversarial Voice Attack","created":"2025-09-18","cited_by_count":1,"area":null},{"id":"2605.20519","title":"Codec-Robust Attacks on Audio LLMs","created":"2026-05-19","cited_by_count":1,"area":null},{"id":"2605.28211","title":"When Helpful Context Leaks: Privacy Risks in Domain-Adapted ASR","created":"2026-05-27","cited_by_count":1,"area":null},{"id":"2102.00313","title":"Cortical Features for Defense Against Adversarial Audio Attacks","created":"2021-01-30","cited_by_count":0,"area":null},{"id":"2106.07428","title":"Audio Attacks and Defenses against AED Systems -- A Practical Study","created":"2021-06-14","cited_by_count":0,"area":null},{"id":"2110.12948","title":"Generating Watermarked Adversarial Texts","created":"2021-10-25","cited_by_count":0,"area":"safety"},{"id":"2207.06858","title":"RSD-GAN: Regularized Sobolev Defense GAN Against Speech-to-Text Adversarial Attacks","created":"2022-07-14","cited_by_count":0,"area":null}],"next_cursor":"100"}