{"total":108,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2201.08531","title":"Black-box Prompt Learning for Pre-trained Language Models","created":"2022-01-21","cited_by_count":70,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2303.09495","title":"Among Us: Adversarially Robust Collaborative Perception by Consensus","created":"2023-03-16","cited_by_count":37,"area":null},{"id":"2304.11670","title":"Evading DeepFake Detectors via Adversarial Statistical Consistency","created":"2023-04-23","cited_by_count":37,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2107.10110","title":"On the Convergence of Prior-Guided Zeroth-Order Optimization Algorithms","created":"2021-07-21","cited_by_count":23,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2103.02927","title":"QAIR: Practical Query-efficient Black-Box Attacks for Image Retrieval","created":"2021-03-04","cited_by_count":22,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2102.08168","title":"Just Noticeable Difference for Deep Machine Vision","created":"2021-02-16","cited_by_count":19,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2207.09684","title":"On the Versatile Uses of Partial Distance Correlation in Deep Learning","created":"2022-07-20","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2112.03223","title":"Context-Aware Transfer Attacks for Object Detection","created":"2021-12-06","cited_by_count":18,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2110.02516","title":"Attack as the Best Defense: Nullifying Image-to-image Translation GANs via Limit-aware Adversarial Attack","created":"2021-10-06","cited_by_count":15,"area":null},{"id":"2407.06992","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2112.05282","title":"RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit","created":"2021-12-10","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2102.13184","title":"Nonlinear Projection Based Gradient Estimation for Query Efficient Blackbox Attacks","created":"2021-02-25","cited_by_count":9,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2109.11125","title":"Adversarial Transfer Attacks With Unknown Data and Class Overlap","created":"2021-09-23","cited_by_count":8,"area":null},{"id":"2206.14004","title":"On the amplification of security and privacy risks by post-hoc explanations in machine learning models","created":"2022-06-28","cited_by_count":8,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2206.12590","title":"RSTAM: An Effective Black-Box Impersonation Attack on Face Recognition using a Mobile and Compact Printer","created":"2022-06-25","cited_by_count":7,"area":null},{"id":"2303.07775","title":"Data-Free Sketch-Based Image Retrieval","created":"2023-03-14","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2402.15218","title":"BSPA: Exploring Black-box Stealthy Prompt Attacks against Image Generators","created":"2024-02-23","cited_by_count":7,"area":null},{"id":"2109.05820","title":"Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator","created":"2021-09-13","cited_by_count":6,"area":null},{"id":"2204.12050","title":"Self-recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks","created":"2022-04-26","cited_by_count":6,"area":null},{"id":"2207.06196","title":"Interactive Machine Learning: A State of the Art Review","created":"2022-07-13","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2202.06084","title":"EREBA: Black-box Energy Testing of Adaptive Neural Networks","created":"2022-02-12","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2208.11264","title":"Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability","created":"2022-08-24","cited_by_count":5,"area":null},{"id":"2311.10992","title":"Towards Robust and Accurate Visual Prompting","created":"2023-11-18","cited_by_count":5,"area":null},{"id":"2401.17499","title":"AdvGPS: Adversarial GPS for Multi-Agent Perception Attack","created":"2024-01-30","cited_by_count":5,"area":null},{"id":"2411.05873","title":"Poor Man's Training on MCUs: A Memory-Efficient Quantized Back-Propagation-Free Approach","created":"2024-11-07","cited_by_count":5,"area":null},{"id":"2101.10562","title":"Investigating the significance of adversarial attacks and their relation to interpretability for radar-based human activity recognition systems","created":"2021-01-26","cited_by_count":4,"area":null},{"id":"2106.15357","title":"Multi-stage Optimization based Adversarial Training","created":"2021-06-26","cited_by_count":4,"area":null},{"id":"2209.04920","title":"Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognition","created":"2022-09-11","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2109.15160","title":"Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation","created":"2021-09-30","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2310.03166","title":"Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2109.04300","title":"Energy Attack: On Transferring Adversarial Examples","created":"2021-09-09","cited_by_count":2,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2401.07188","title":"Left-right Discrepancy for Adversarial Attack on Stereo Networks","created":"2024-01-14","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2406.03017","title":"DifAttack++: Query-Efficient Black-Box Adversarial Attack via Hierarchical Disentangled Feature Space in Cross-Domain","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2502.07821","title":"Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2203.14607","title":"Boosting Black-Box Adversarial Attacks with Meta Learning","created":"2022-03-28","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2309.14585","title":"DifAttack: Query-Efficient Black-Box Attack via Disentangled Feature Space","created":"2023-09-26","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2504.01228","title":"TenAd: A Tensor-based Low-rank Black Box Adversarial Attack for Video Classification","created":"2025-04-01","cited_by_count":1,"area":null},{"id":"2505.16313","title":"Accelerating Targeted Hard-Label Adversarial Attacks in Low-Query Black-Box Settings","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2105.03931","title":"Automated Decision-based Adversarial Attacks","created":"2021-05-09","cited_by_count":0,"area":null},{"id":"2107.12473","title":"Adversarial Attacks with Time-Scale Representations","created":"2021-07-26","cited_by_count":0,"area":null},{"id":"2203.04405","title":"Art-Attack: Black-Box Adversarial Attack via Evolutionary Art","created":"2022-03-07","cited_by_count":0,"area":null},{"id":"2205.02116","title":"Optimizing One-pixel Black-box Adversarial Attacks","created":"2022-04-30","cited_by_count":0,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2206.00402","title":"NeuroUnlock: Unlocking the Architecture of Obfuscated Deep Neural Networks","created":"2022-06-01","cited_by_count":0,"area":null},{"id":"2206.04472","title":"Early Transferability of Adversarial Examples in Deep Neural Networks","created":"2022-06-09","cited_by_count":0,"area":null},{"id":"2208.13182","title":"Cross-domain Cross-architecture Black-box Attacks on Fine-tuned Models with Transferred Evolutionary Strategies","created":"2022-08-28","cited_by_count":0,"area":null},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2301.03966","title":"AdvBiom: Adversarial Attacks on Biometric Matchers","created":"2023-01-10","cited_by_count":0,"area":null}],"next_cursor":"100"}