{"total":70,"rows":[{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101,"area":"driving"},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2510.13237","title":"Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models","created":"2025-10-15","cited_by_count":22,"area":"vla"},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2212.04138","title":"Targeted Adversarial Attacks against Neural Network Trajectory Predictors","created":"2022-12-08","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2105.06512","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","created":"2021-05-13","cited_by_count":5,"area":null},{"id":"2106.09908","title":"Light Lies: Optical Adversarial Attack","created":"2021-06-18","cited_by_count":5,"area":null},{"id":"2207.01059","title":"Identifying the Context Shift between Test Benchmarks and Production Data","created":"2022-07-03","cited_by_count":5,"area":null},{"id":"2405.10143","title":"Relational DNN Verification With Cross Executional Bound Refinement","created":"2024-05-16","cited_by_count":5,"area":null},{"id":"2412.02795","title":"Hijacking Vision-and-Language Navigation Agents with Adversarial Environmental Attacks","created":"2024-12-03","cited_by_count":5,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2309.07808","title":"What Matters to Enhance Traffic Rule Compliance of Imitation Learning for End-to-End Autonomous Driving","created":"2023-09-14","cited_by_count":2,"area":"driving"},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2208.09285","title":"Shadows Aren't So Dangerous After All: A Fast and Robust Defense Against Shadow-Based Adversarial Attacks","created":"2022-08-18","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2302.02208","title":"Certified Robust Control under Adversarial Perturbations","created":"2023-02-04","cited_by_count":1,"area":null},{"id":"2303.07474","title":"Can Adversarial Examples Be Parsed to Reveal Victim Model Information?","created":"2023-03-13","cited_by_count":1,"area":null},{"id":"2304.13919","title":"Detection of Adversarial Physical Attacks in Time-Series Image Data","created":"2023-04-27","cited_by_count":1,"area":null},{"id":"2307.08939","title":"Runtime Stealthy Perception Attacks against DNN-based Adaptive Cruise Control Systems","created":"2023-07-18","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2311.12722","title":"Attacking Motion Planners Using Adversarial Perception Errors","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2311.13744","title":"Security and Privacy Challenges in Deep Learning Models","created":"2023-11-23","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2405.09176","title":"Cross-Input Certified Training for Universal Perturbations","created":"2024-05-15","cited_by_count":1,"area":null},{"id":"2502.15006","title":"Safe Beyond the Horizon: Efficient Sampling-based MPC with Neural Control Barrier Functions","created":"2025-02-20","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2101.05950","title":"Robusta: Robust AutoML for Feature Selection via Reinforcement Learning","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2110.02080","title":"A Methodology to Identify Cognition Gaps in Visual Recognition Applications Based on Convolutional Neural Networks","created":"2021-10-05","cited_by_count":0,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2311.13233","title":"A Survey of Adversarial CAPTCHAs on its History, Classification and Generation","created":"2023-11-22","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2402.03576","title":"Generalization Properties of Adversarial Training for $\\ell_0$-Bounded Adversarial Attacks","created":"2024-02-05","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2603.15396","title":"AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanations","created":"2026-03-16","cited_by_count":0,"area":null},{"id":"2604.03753","title":"Spatiotemporal-Aware Bit-Flip Injection on DNN-based Advanced Driver Assistance Systems (extended version)","created":"2026-04-04","cited_by_count":0,"area":null},{"id":"2604.26317","title":"The Unseen Adversaries: Robust and Generalized Defense Against Adversarial Patches","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2606.14504","title":"Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks","created":"2026-06-12","cited_by_count":0,"area":null},{"id":"2610.06814","title":"TAPDreamer: Transferable Adversarial Patches for World Action Models","created":"2026-10-05","cited_by_count":0,"area":"wm"}],"next_cursor":null}