{"total":76,"rows":[{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2302.09309","title":"StyleAdv: Meta Style Adversarial Training for Cross-Domain Few-Shot Learning","created":"2023-02-18","cited_by_count":53,"area":null},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48,"area":null},{"id":"2401.10090","title":"Cross-Modality Perturbation Synergy Attack for Person Re-identification","created":"2024-01-18","cited_by_count":45,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2209.07592","title":"Explicit Tradeoffs between Adversarial and Natural Distributional Robustness","created":"2022-09-15","cited_by_count":20,"area":null},{"id":"2210.09852","title":"Scaling Adversarial Training to Large Perturbation Bounds","created":"2022-10-18","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2207.02036","title":"PRoA: A Probabilistic Robustness Assessment against Functional Perturbations","created":"2022-07-05","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2309.13609","title":"Vulnerabilities in Video Quality Assessment Models: The Challenge of Adversarial Attacks","created":"2023-09-24","cited_by_count":12,"area":null},{"id":"2409.17977","title":"Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization","created":"2024-09-26","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2110.00054","title":"Learning to Predict Trustworthiness with Steep Slope Loss","created":"2021-09-30","cited_by_count":11,"area":null},{"id":"2111.05468","title":"Sparse Adversarial Video Attacks with Spatial Transformations","created":"2021-11-10","cited_by_count":11,"area":null},{"id":"2112.00378","title":"$\\ell_\\infty$-Robustness and Beyond: Unleashing Efficient Adversarial Training","created":"2021-12-01","cited_by_count":11,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2502.11725","title":"Adversarially Robust CLIP Models Can Induce Better (Robust) Perceptual Metrics","created":"2025-02-17","cited_by_count":10,"area":null},{"id":"2201.05647","title":"Tools and Practices for Responsible AI Engineering","created":"2022-01-14","cited_by_count":9,"area":null},{"id":"2209.05785","title":"Adversarial Coreset Selection for Efficient Robust Training","created":"2022-09-13","cited_by_count":9,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2303.15385","title":"Recognizing Rigid Patterns of Unlabeled Point Clouds by Complete and Continuous Isometry Invariants with no False Negatives and no False Positives","created":"2023-03-27","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2108.02502","title":"Imperceptible Adversarial Examples by Spatial Chroma-Shift","created":"2021-08-05","cited_by_count":7,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2207.04307","title":"Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Features","created":"2022-07-09","cited_by_count":7,"area":null},{"id":"2210.00973","title":"NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learning","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2210.08870","title":"Differential Evolution based Dual Adversarial Camouflage: Fooling Human Eyes and Object Detectors","created":"2022-10-17","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2312.03286","title":"Indirect Gradient Matching for Adversarial Robust Distillation","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2207.04308","title":"Dynamic Time Warping based Adversarial Framework for Time-Series Domain","created":"2022-07-09","cited_by_count":5,"area":null},{"id":"2210.03150","title":"Towards Out-of-Distribution Adversarial Robustness","created":"2022-10-06","cited_by_count":5,"area":null},{"id":"2211.05656","title":"On Proper Learnability between Average- and Worst-case Robustness","created":"2022-11-10","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2210.00621","title":"Optimization for Robustness Evaluation beyond $\\ell_p$ Metrics","created":"2022-10-02","cited_by_count":3,"area":null},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2103.07595","title":"Learning Defense Transformers for Counterattacking Adversarial Examples","created":"2021-03-13","cited_by_count":2,"area":null},{"id":"2208.14863","title":"Style-Agnostic Reinforcement Learning","created":"2022-08-31","cited_by_count":2,"area":null},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2106.10252","title":"Less is More: Feature Selection for Adversarial Robustness with Compressive Counter-Adversarial Attacks","created":"2021-06-18","cited_by_count":1,"area":null},{"id":"2207.04305","title":"Training Robust Deep Models for Time-Series Domain: Novel Algorithms and Theoretical Analysis","created":"2022-07-09","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2606.25376","title":"Transferable Attack against Face Swapping in an Extended Space","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2105.14710","title":"Robustifying $\\ell_\\infty$ Adversarial Training to the Union of Perturbation Models","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2211.14088","title":"Boundary Adversarial Examples Against Adversarial Overfitting","created":"2022-11-25","cited_by_count":0,"area":null},{"id":"2307.03803","title":"A Theoretical Perspective on Subnetwork Contributions to Adversarial Robustness","created":"2023-07-07","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2312.13575","title":"ARBiBench: Benchmarking Adversarial Robustness of Binarized Neural Networks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2407.02248","title":"EvolBA: Evolutionary Boundary Attack under Hard-label Black Box condition","created":"2024-07-02","cited_by_count":0,"area":null},{"id":"2411.06666","title":"Adversarial Detection with a Dynamically Stable System","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2606.17540","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","created":"2026-06-16","cited_by_count":0,"area":null}],"next_cursor":null}