{"total":81,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2208.08831","title":"Discovering Bugs in Vision Models using Off-the-shelf Image Generation and Captioning","created":"2022-08-18","cited_by_count":45,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2205.05076","title":"Reduce Information Loss in Transformers for Pluralistic Image Inpainting","created":"2022-05-10","cited_by_count":36,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2207.02204","title":"Detecting and Recovering Sequential DeepFake Manipulation","created":"2022-07-05","cited_by_count":34,"area":null},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33,"area":null},{"id":"2104.02156","title":"Unified Detection of Digital and Physical Face Attacks","created":"2021-04-05","cited_by_count":31,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2303.15441","title":"Zero-shot Model Diagnosis","created":"2023-03-27","cited_by_count":23,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2401.17699","title":"Unified Physical-Digital Face Attack Detection","created":"2024-01-31","cited_by_count":17,"area":null},{"id":"2108.07920","title":"Adversarial Relighting Against Face Recognition","created":"2021-08-18","cited_by_count":16,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2104.04107","title":"FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systems","created":"2021-04-08","cited_by_count":14,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2503.08269","title":"Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks","created":"2025-03-11","cited_by_count":14,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2106.00576","title":"Exposing Previously Undetectable Faults in Deep Neural Networks","created":"2021-06-01","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2205.06448","title":"FRIH: Fine-grained Region-aware Image Harmonization","created":"2022-05-13","cited_by_count":9,"area":null},{"id":"2111.09137","title":"Two-Face: Adversarial Audit of Commercial Face Recognition Systems","created":"2021-11-17","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2404.00513","title":"Transformer based Pluralistic Image Completion with Reduced Information Loss","created":"2024-03-31","cited_by_count":7,"area":null},{"id":"2104.10868","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","created":"2021-04-22","cited_by_count":6,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2412.11735","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2410.06243","title":"Unsupervised Model Diagnosis","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2210.05667","title":"Human Body Measurement Estimation with Adversarial Augmentation","created":"2022-10-11","cited_by_count":3,"area":null},{"id":"2312.13628","title":"Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples","created":"2023-12-21","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2104.08231","title":"An Adversarially-Learned Turing Test for Dialog Generation Models","created":"2021-04-16","cited_by_count":2,"area":null},{"id":"2105.04070","title":"Robust Training Using Natural Transformation","created":"2021-05-10","cited_by_count":2,"area":null},{"id":"2204.05905","title":"Few-shot Forgery Detection via Guided Adversarial Interpolation","created":"2022-04-12","cited_by_count":2,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2304.01441","title":"NetFlick: Adversarial Flickering Attacks on Deep Learning Based Video Compression","created":"2023-04-04","cited_by_count":2,"area":null},{"id":"2309.11667","title":"Understanding Pose and Appearance Disentanglement in 3D Human Pose Estimation","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2110.04459","title":"Adversarial Training for Face Recognition Systems using Contrastive Adversarial Learning and Triplet Loss Fine-tuning","created":"2021-10-09","cited_by_count":1,"area":null},{"id":"2112.09968","title":"Being Friends Instead of Adversaries: Deep Networks Learn from Data Simplified by Other Networks","created":"2021-12-18","cited_by_count":1,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null},{"id":"2303.13010","title":"Semantic Image Attack for Visual Model Diagnosis","created":"2023-03-23","cited_by_count":1,"area":null},{"id":"2404.10408","title":"Adversarial Identity Injection for Semantic Face Image Synthesis","created":"2024-04-16","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2105.14638","title":"DAAIN: Detection of Anomalous and Adversarial Input using Normalizing Flows","created":"2021-05-30","cited_by_count":0,"area":null},{"id":"2202.04978","title":"Towards Assessing and Characterizing the Semantic Robustness of Face Recognition","created":"2022-02-10","cited_by_count":0,"area":null},{"id":"2209.02406","title":"Unrestricted Adversarial Samples Based on Non-semantic Feature Clusters Substitution","created":"2022-08-31","cited_by_count":0,"area":null},{"id":"2301.03966","title":"AdvBiom: Adversarial Attacks on Biometric Matchers","created":"2023-01-10","cited_by_count":0,"area":null},{"id":"2303.03400","title":"Testing the Channels of Convolutional Neural Networks","created":"2023-03-06","cited_by_count":0,"area":null},{"id":"2305.03212","title":"LLM2Loss: Leveraging Language Models for Explainable Model Diagnostics","created":"2023-05-04","cited_by_count":0,"area":null},{"id":"2308.05320","title":"Generating Transferable and Stealthy Adversarial Patch via Attention-guided Adversarial Inpainting","created":"2023-08-10","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2404.11819","title":"Utilizing Adversarial Examples for Bias Mitigation and Accuracy Enhancement","created":"2024-04-18","cited_by_count":0,"area":null},{"id":"2407.17312","title":"Physical Adversarial Attack on Monocular Depth Estimation via Shape-Varying Patches","created":"2024-07-24","cited_by_count":0,"area":null},{"id":"2409.16865","title":"Linking in Style: Understanding learned features in deep learning models","created":"2024-09-25","cited_by_count":0,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null},{"id":"2606.17540","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","created":"2026-06-16","cited_by_count":0,"area":null}],"next_cursor":null}