{"total":46,"rows":[{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2303.06280","title":"Stateful Defenses for Machine Learning Models Are Not Yet Secure Against Black-box Attacks","created":"2023-03-11","cited_by_count":11,"area":null},{"id":"2110.07305","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","created":"2021-10-14","cited_by_count":10,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2101.02115","title":"Adversarial Robustness by Design through Analog Computing and Synthetic Gradients","created":"2021-01-06","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2106.01917","title":"SpecRepair: Counter-Example Guided Safety Repair of Deep Neural Networks","created":"2021-06-03","cited_by_count":6,"area":null},{"id":"2208.10716","title":"Threshold-adaptive Unsupervised Focal Loss for Domain Adaptation of Semantic Segmentation","created":"2022-08-23","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2204.09397","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2408.01541","title":"Guardians of Image Quality: Benchmarking Defenses Against Adversarial Attacks on Image Quality Metrics","created":"2024-08-02","cited_by_count":5,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2108.04217","title":"ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients","created":"2021-07-06","cited_by_count":2,"area":null},{"id":"2110.11987","title":"Improving Robustness of Malware Classifiers using Adversarial Strings Generated from Perturbed Latent Representations","created":"2021-10-22","cited_by_count":2,"area":null},{"id":"2506.24048","title":"Consensus-based optimization for closed-box adversarial attacks and a connection to evolution strategies","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2203.09849","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","created":"2022-03-18","cited_by_count":1,"area":null},{"id":"2309.06438","title":"Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks","created":"2023-09-12","cited_by_count":1,"area":null},{"id":"2402.01220","title":"Delving into Decision-based Black-box Attacks on Semantic Segmentation","created":"2024-02-02","cited_by_count":1,"area":null},{"id":"2108.04409","title":"On Procedural Adversarial Noise Attack And Defense","created":"2021-08-10","cited_by_count":0,"area":null},{"id":"2109.09060","title":"On the Noise Stability and Robustness of Adversarially Trained Networks on NVM Crossbars","created":"2021-09-19","cited_by_count":0,"area":null},{"id":"2210.16371","title":"Distributed Black-box Attack: Do Not Overestimate Black-box Attacks","created":"2022-10-28","cited_by_count":0,"area":null},{"id":"2308.11845","title":"SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks","created":"2023-08-23","cited_by_count":0,"area":null},{"id":"2310.12017","title":"Exploring the Adversarial Robustness of Face Forgery Detection with Decision-based Black-box Attacks","created":"2023-10-18","cited_by_count":0,"area":null},{"id":"2403.10562","title":"Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2501.12275","title":"With Great Backbones Comes Great Adversarial Transferability","created":"2025-01-21","cited_by_count":0,"area":null},{"id":"2510.19574","title":"Can You Trust What You See? Alpha Channel No-Box Attacks on Video Object Detection","created":"2025-10-22","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2601.14300","title":"Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations","created":"2026-01-17","cited_by_count":0,"area":null},{"id":"2605.18231","title":"Attacking the First-Principle: A Black-Box, Query-Free Targeted Mimicry Attack on Binary Function Classifiers","created":"2026-05-18","cited_by_count":0,"area":null}],"next_cursor":null}