{"total":391,"rows":[{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127,"area":null},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101,"area":null},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2109.04176","title":"Towards Transferable Adversarial Attacks on Vision Transformers","created":"2021-09-09","cited_by_count":80,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2212.10556","title":"Unleashing the Power of Visual Prompting At the Pixel Level","created":"2022-12-20","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2104.13673","title":"AdvHaze: Adversarial Haze Attack","created":"2021-04-28","cited_by_count":31,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2105.05558","title":"AVA: Adversarial Vignetting Attack against Visual Recognition","created":"2021-05-12","cited_by_count":29,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2308.03979","title":"PAIF: Perception-Aware Infrared-Visible Image Fusion for Attack-Tolerant Semantic Segmentation","created":"2023-08-08","cited_by_count":26,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2105.11645","title":"Feature Space Targeted Attacks by Statistic Alignment","created":"2021-05-25","cited_by_count":21,"area":null},{"id":"2110.09075","title":"Boosting the Transferability of Video Adversarial Examples via Temporal Translation","created":"2021-10-18","cited_by_count":21,"area":null},{"id":"2207.11971","title":"Jigsaw-ViT: Learning Jigsaw Puzzles in Vision Transformer","created":"2022-07-25","cited_by_count":21,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2102.08168","title":"Just Noticeable Difference for Deep Machine Vision","created":"2021-02-16","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2210.03372","title":"Pre-trained Adversarial Perturbations","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2110.02516","title":"Attack as the Best Defense: Nullifying Image-to-image Translation GANs via Limit-aware Adversarial Attack","created":"2021-10-06","cited_by_count":15,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null}],"next_cursor":"100"}