{"total":164,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97,"area":null},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33,"area":null},{"id":"2210.00933","title":"Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loop","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2205.13412","title":"Physical-World Optical Adversarial Attacks on 3D Face Recognition","created":"2022-05-26","cited_by_count":23,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2109.06467","title":"Dodging Attack Using Carefully Crafted Natural Makeup","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2104.04107","title":"FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systems","created":"2021-04-08","cited_by_count":14,"area":null},{"id":"2110.11001","title":"Pixel-Level Face Image Quality Assessment for Explainable Face Recognition","created":"2021-10-21","cited_by_count":14,"area":null},{"id":"2211.01361","title":"My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization","created":"2022-11-02","cited_by_count":14,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2103.00847","title":"Am I a Real or Fake Celebrity? Measuring Commercial Face Recognition Web APIs under Deepfake Impersonation Attack","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2108.09891","title":"Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency","created":"2021-08-23","cited_by_count":12,"area":null},{"id":"2403.17409","title":"Neural Clustering based Visual Representation Learning","created":"2024-03-26","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2105.00249","title":"A Master Key Backdoor for Universal Impersonation Attack against DNN-based Face Verification","created":"2021-05-01","cited_by_count":10,"area":null},{"id":"2103.05248","title":"Practical Relative Order Attack in Deep Ranking","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2208.09500","title":"Causality-Inspired Taxonomy for Explainable Artificial Intelligence","created":"2022-08-19","cited_by_count":9,"area":null},{"id":"2411.03960","title":"Face Reconstruction from Face Embeddings using Adapter to a Face Foundation Model","created":"2024-11-06","cited_by_count":9,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2201.04011","title":"Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition","created":"2022-01-11","cited_by_count":8,"area":null},{"id":"2203.04623","title":"Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognition","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2401.15335","title":"L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks","created":"2024-01-27","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2203.14327","title":"Local-Adaptive Face Recognition via Graph-based Meta-Clustering and Regularized Adaptation","created":"2022-03-27","cited_by_count":7,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2204.01560","title":"SecureSense: Defending Adversarial Attack for Secure Device-Free Human Activity Recognition","created":"2022-04-04","cited_by_count":7,"area":null},{"id":"2206.12590","title":"RSTAM: An Effective Black-Box Impersonation Attack on Face Recognition using a Mobile and Compact Printer","created":"2022-06-25","cited_by_count":7,"area":null},{"id":"2209.08130","title":"Robust Ensemble Morph Detection with Domain Generalization","created":"2022-09-16","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2102.05198","title":"Statistical Inference for Polyak-Ruppert Averaged Zeroth-order Stochastic Gradient Algorithm","created":"2021-02-10","cited_by_count":6,"area":null},{"id":"2109.05820","title":"Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator","created":"2021-09-13","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2207.05327","title":"Certified Adversarial Robustness via Anisotropic Randomized Smoothing","created":"2022-07-12","cited_by_count":6,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2110.00708","title":"Universal Adversarial Spoofing Attacks against Face Recognition","created":"2021-10-02","cited_by_count":5,"area":null},{"id":"2110.14927","title":"Counterfactual Explanation of Brain Activity Classifiers using Image-to-Image Transfer by Generative Adversarial Network","created":"2021-10-28","cited_by_count":5,"area":null},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5,"area":null},{"id":"2306.01125","title":"Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbations","created":"2023-06-01","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2408.08989","title":"Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Models","created":"2024-08-16","cited_by_count":5,"area":null},{"id":"2412.11735","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2209.07235","title":"Sound and Complete Verification of Polynomial Networks","created":"2022-09-15","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2402.18863","title":"Probabilistic Lipschitzness and the Stable Rank for Comparing Explanation Models","created":"2024-02-29","cited_by_count":4,"area":null},{"id":"2407.14972","title":"ARoFace: Alignment Robustness to Improve Low-Quality Face Recognition","created":"2024-07-20","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2304.14601","title":"Improve Video Representation with Temporal Adversarial Augmentation","created":"2023-04-28","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2404.14693","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","created":"2024-04-23","cited_by_count":3,"area":null}],"next_cursor":"100"}