{"total":79,"rows":[{"id":"2101.01169","title":"Transformers in Vision: A Survey","created":"2021-01-04","cited_by_count":1013,"area":null},{"id":"2105.10497","title":"Intriguing Properties of Vision Transformers","created":"2021-05-21","cited_by_count":446,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2101.06639","title":"Removing Undesirable Feature Contributions Using Out-of-Distribution Data","created":"2021-01-17","cited_by_count":23,"area":null},{"id":"2112.14337","title":"Closer Look at the Transferability of Adversarial Examples: How They Fool Different Models Differently","created":"2021-12-29","cited_by_count":22,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2210.03372","title":"Pre-trained Adversarial Perturbations","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2104.09172","title":"Direction-Aggregated Attack for Transferable Adversarial Examples","created":"2021-04-19","cited_by_count":6,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2209.09883","title":"Leveraging Local Patch Differences in Multi-Object Scenes for Generative Adversarial Attacks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2302.12252","title":"Boosting Adversarial Transferability using Dynamic Cues","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2306.15363","title":"Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability","created":"2023-06-27","cited_by_count":5,"area":null},{"id":"2104.11691","title":"Patch Shortcuts: Interpretable Proxy Models Efficiently Find Black-Box Vulnerabilities","created":"2021-04-22","cited_by_count":4,"area":null},{"id":"2501.01106","title":"AIM: Additional Image Guided Generation of Transferable Adversarial Attacks","created":"2025-01-02","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2205.09891","title":"Interpolating Compressed Parameter Subspaces","created":"2022-05-19","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2401.07188","title":"Left-right Discrepancy for Adversarial Attack on Stereo Networks","created":"2024-01-14","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2512.04837","title":"A Sanity Check for Multi-In-Domain Face Forgery Detection in the Real World","created":"2025-12-04","cited_by_count":2,"area":null},{"id":"2205.15523","title":"Variational Transfer Learning using Cross-Domain Latent Modulation","created":"2022-05-31","cited_by_count":1,"area":null},{"id":"2208.10878","title":"Transferability Ranking of Adversarial Examples","created":"2022-08-23","cited_by_count":1,"area":null},{"id":"2209.14053","title":"Inducing Data Amplification Using Auxiliary Datasets in Adversarial Training","created":"2022-09-27","cited_by_count":1,"area":null},{"id":"2210.15997","title":"Universal Adversarial Directions","created":"2022-10-28","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2305.12906","title":"Latent Magic: An Investigation into Adversarial Examples Crafted in the Semantic Latent Space","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2401.17038","title":"Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR","created":"2024-01-30","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2408.15833","title":"Network transferability of adversarial patches in real-time object detection","created":"2024-08-28","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2503.00932","title":"Improving the Transferability of Adversarial Attacks by an Input Transpose","created":"2025-03-02","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2508.16937","title":"NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability","created":"2025-08-23","cited_by_count":1,"area":null},{"id":"2604.01833","title":"Language-Pretraining-Induced Bias: A Strong Foundation for General Vision Tasks","created":"2026-04-02","cited_by_count":1,"area":null},{"id":"2112.00428","title":"Adv-4-Adv: Thwarting Changing Adversarial Perturbations via Adversarial Domain Adaptation","created":"2021-12-01","cited_by_count":0,"area":null},{"id":"2208.13182","title":"Cross-domain Cross-architecture Black-box Attacks on Fine-tuned Models with Transferred Evolutionary Strategies","created":"2022-08-28","cited_by_count":0,"area":null},{"id":"2403.00013","title":"Prioritizing Informative Features and Examples for Deep Learning from Noisy Data","created":"2024-02-27","cited_by_count":0,"area":null},{"id":"2502.19697","title":"Prompt-driven Transferable Adversarial Attack on Person Re-Identification with Attribute-aware Textual Inversion","created":"2025-02-27","cited_by_count":0,"area":null},{"id":"2503.10629","title":"Hierarchical Self-Supervised Adversarial Training for Robust Vision Models in Histopathology","created":"2025-03-13","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2511.01317","title":"A Generative Adversarial Approach to Adversarial Attacks Guided by Contrastive Language-Image Pre-trained Model","created":"2025-11-03","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null},{"id":"2609.25962","title":"Exploring Solver-Level Warmstarting for Neural Network Verification","created":"2026-09-22","cited_by_count":0,"area":null}],"next_cursor":null}