{"total":33,"rows":[{"id":"2105.00579","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","created":"2021-05-02","cited_by_count":68,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2307.15008","title":"A LLM Assisted Exploitation of AI-Guardian","created":"2023-07-20","cited_by_count":15,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2202.06312","title":"Progressive Backdoor Erasing via connecting Backdoor and Adversarial Attacks","created":"2022-02-13","cited_by_count":11,"area":null},{"id":"2405.17929","title":"Towards Unified Robustness Against Both Backdoor and Adversarial Attacks","created":"2024-05-28","cited_by_count":10,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2204.10933","title":"A Tale of Two Models: Constructing Evasive Attacks on Edge Models","created":"2022-04-22","cited_by_count":6,"area":null},{"id":"2209.00005","title":"Be Your Own Neighborhood: Detecting Adversarial Example by the Neighborhood Relations Built on Self-Supervised Learning","created":"2022-08-31","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2311.07389","title":"Transpose Attack: Stealing Datasets with Bidirectional Training","created":"2023-11-13","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2105.03822","title":"RBNN: Memory-Efficient Reconfigurable Deep Binary Neural Network with IP Protection for Internet of Things","created":"2021-05-09","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2108.10132","title":"TRAPDOOR: Repurposing backdoors to detect dataset bias in machine learning-based genomic analysis","created":"2021-08-14","cited_by_count":2,"area":null},{"id":"2205.03850","title":"SeqNet: An Efficient Neural Network for Automatic Malware Detection","created":"2022-05-08","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2407.05396","title":"Evolutionary Trigger Detection and Lightweight Model Repair Based Backdoor Defense","created":"2024-07-07","cited_by_count":1,"area":null},{"id":"2408.00255","title":"Revocable Backdoor for Deep Model Trading","created":"2024-08-01","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.04853","title":"From Pixels to Trajectory: Universal Adversarial Example Detection via Temporal Imprints","created":"2025-03-06","cited_by_count":1,"area":null},{"id":"2505.12586","title":"A Few Large Shifts: Layer-Inconsistency Based Minimal Overhead Adversarial Example Detection","created":"2025-05-19","cited_by_count":1,"area":null},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2110.03106","title":"Multi-Trigger-Key: Towards Multi-Task Privacy Preserving In Deep Learning","created":"2021-10-06","cited_by_count":0,"area":null},{"id":"2202.13755","title":"Towards Robust Stacked Capsule Autoencoder with Hybrid Adversarial Training","created":"2022-02-28","cited_by_count":0,"area":null},{"id":"2406.13411","title":"Composite Concept Extraction through Backdooring","created":"2024-06-19","cited_by_count":0,"area":null}],"next_cursor":null}