{"total":72,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2405.14062","title":"ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous Vehicles","created":"2024-05-22","cited_by_count":93,"area":"driving"},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2310.12432","title":"CAT: Closed-loop Adversarial Training for Safe End-to-End Driving","created":"2023-10-19","cited_by_count":54,"area":"driving"},{"id":"2112.03909","title":"Vehicle trajectory prediction works, but not everywhere","created":"2021-12-07","cited_by_count":39,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2308.05731","title":"The Integration of Prediction and Planning in Deep Learning Automated Driving Systems: A Review","created":"2023-08-10","cited_by_count":29,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2207.07347","title":"Feasibility of Inconspicuous GAN-generated Adversarial Patches against Object Detection","created":"2022-07-15","cited_by_count":13,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2508.09158","title":"EvaDrive: Evolutionary Adversarial Policy Optimization for End-to-End Autonomous Driving","created":"2025-08-05","cited_by_count":12,"area":"driving"},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9,"area":null},{"id":"2305.08060","title":"Two is Better Than One: Digital Siblings to Improve Autonomous Driving Testing","created":"2023-05-14","cited_by_count":9,"area":null},{"id":"2311.10366","title":"Breaking Temporal Consistency: Generating Video Universal Adversarial Perturbations Using Image Models","created":"2023-11-17","cited_by_count":9,"area":null},{"id":"2206.04365","title":"CARLA-GeAR: a Dataset Generator for a Systematic Evaluation of Adversarial Robustness of Vision Models","created":"2022-06-09","cited_by_count":8,"area":null},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2411.19479","title":"FLARE: Toward Universal Dataset Purification against Backdoor Attacks","created":"2024-11-29","cited_by_count":7,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2404.05219","title":"Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey","created":"2024-04-08","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2307.11962","title":"MIMONet: Multi-Input Multi-Output On-Device Deep Learning","created":"2023-07-22","cited_by_count":3,"area":null},{"id":"2409.08167","title":"High-Frequency Anti-DreamBooth: Robust Defense against Personalized Image Synthesis","created":"2024-09-12","cited_by_count":3,"area":null},{"id":"2502.08374","title":"AdvSwap: Covert Adversarial Perturbation with High Frequency Info-swapping for Autonomous Driving Perception","created":"2025-02-12","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2312.07338","title":"Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2408.07733","title":"Enhancing Adversarial Attacks via Parameter Adaptive Adversarial Attack","created":"2024-08-14","cited_by_count":2,"area":null},{"id":"2104.10377","title":"Dual Head Adversarial Training","created":"2021-04-21","cited_by_count":1,"area":null},{"id":"2412.08014","title":"MAGIC: Mastering Physical Adversarial Generation in Context through Collaborative LLM Agents","created":"2024-12-11","cited_by_count":1,"area":"agents"},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2508.05689","title":"Boosting Adversarial Transferability via Residual Perturbation Attack","created":"2025-08-06","cited_by_count":1,"area":null},{"id":"2512.24111","title":"Guided Diffusion-based Generation of Adversarial Objects for Real-World Monocular Depth Estimation Attacks","created":"2025-12-30","cited_by_count":1,"area":"diffusion"},{"id":"2605.03491","title":"Real-Time Evaluation of Autonomous Systems under Adversarial Attacks","created":"2026-05-05","cited_by_count":1,"area":"driving"},{"id":"2102.02923","title":"PredCoin: Defense against Query-based Hard-label Attack","created":"2021-02-04","cited_by_count":0,"area":null},{"id":"2106.04392","title":"Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognition","created":"2021-06-05","cited_by_count":0,"area":null},{"id":"2210.06589","title":"Adversarial Attack Against Image-Based Localization Neural Networks","created":"2022-10-11","cited_by_count":0,"area":null},{"id":"2309.09443","title":"Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2311.08141","title":"GMTR: Graph Matching Transformers","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2312.16805","title":"DarkShot: Lighting Dark Images with Low-Compute and High-Quality","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.05431","title":"TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2401.05432","title":"TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2403.13663","title":"T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image","created":"2024-03-20","cited_by_count":0,"area":null},{"id":"2408.17101","title":"Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2409.00340","title":"LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models","created":"2024-08-31","cited_by_count":0,"area":"diffusion"},{"id":"2410.11162","title":"Towards General Deepfake Detection with Dynamic Curriculum","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2410.13409","title":"Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2507.06486","title":"Mask6D: Masked Pose Priors For 6D Object Pose Estimation","created":"2025-07-09","cited_by_count":0,"area":null},{"id":"2507.21483","title":"NCCR: to Evaluate the Robustness of Neural Networks and Adversarial Examples","created":"2025-07-29","cited_by_count":0,"area":null},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2603.08897","title":"Comparative Analysis of Patch Attack on VLM-Based Autonomous Driving Architectures","created":"2026-03-09","cited_by_count":0,"area":"mllm"},{"id":"2604.23362","title":"UniAda: Universal Adaptive Multi-objective Adversarial Attack for End-to-End Autonomous Driving Systems","created":"2026-04-25","cited_by_count":0,"area":"driving"},{"id":"2605.00880","title":"Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving","created":"2026-04-26","cited_by_count":0,"area":"diffusion"},{"id":"2606.10371","title":"Test-time Adversarial Takeover: A Real-time Hijacking Interface against Robotic Diffusion Policies","created":"2026-06-09","cited_by_count":0,"area":"diffusion"},{"id":"2606.21289","title":"Reconstructing Randomly Masked Spectra Helps DNNs Identify Discriminant Wavenumbers","created":"2026-06-19","cited_by_count":0,"area":null}],"next_cursor":null}