{"total":16,"rows":[{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2308.10601","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","created":"2023-08-21","cited_by_count":13,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2104.08231","title":"An Adversarially-Learned Turing Test for Dialog Generation Models","created":"2021-04-16","cited_by_count":2,"area":null},{"id":"2505.23313","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null},{"id":"2305.12906","title":"Latent Magic: An Investigation into Adversarial Examples Crafted in the Semantic Latent Space","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2603.24821","title":"Generative Adversarial Perturbations with Cross-paradigm Transferability on Localized Crowd Counting","created":"2026-03-25","cited_by_count":1,"area":null},{"id":"2208.13591","title":"Chosen methods of improving small object recognition with weak recognizable features","created":"2022-08-29","cited_by_count":0,"area":null},{"id":"2307.16099","title":"On Neural Network approximation of ideal adversarial attack and convergence of adversarial training","created":"2023-07-30","cited_by_count":0,"area":null},{"id":"2311.11753","title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems","created":"2023-11-20","cited_by_count":0,"area":null}],"next_cursor":null}