{"total":56,"rows":[{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53,"area":null},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2210.09421","title":"Deepfake Text Detection: Limitations and Opportunities","created":"2022-10-17","cited_by_count":37,"area":null},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2206.14157","title":"How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirection","created":"2022-06-28","cited_by_count":21,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2303.06280","title":"Stateful Defenses for Machine Learning Models Are Not Yet Secure Against Black-box Attacks","created":"2023-03-11","cited_by_count":11,"area":null},{"id":"2101.11888","title":"Does Typological Blinding Impede Cross-Lingual Sharing?","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2403.18587","title":"The Impact of Uniform Inputs on Activation Sparsity and Energy-Latency Attacks in Computer Vision","created":"2024-03-27","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2509.11173","title":"Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers","created":"2025-09-14","cited_by_count":7,"area":null},{"id":"2510.16794","title":"Black-box Optimization of LLM Outputs by Asking for Directions","created":"2025-10-19","cited_by_count":7,"area":"safety"},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2103.10651","title":"SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2602.08690","title":"SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity","created":"2026-02-09","cited_by_count":4,"area":"deeprl"},{"id":"2103.02014","title":"Online Adversarial Attacks","created":"2021-03-02","cited_by_count":3,"area":null},{"id":"2202.07568","title":"StratDef: Strategic Defense Against Adversarial Attacks in ML-based Malware Detection","created":"2022-02-15","cited_by_count":3,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2307.16331","title":"Theoretically Principled Trade-off for Stateful Defenses against Query-Based Black-Box Attacks","created":"2023-07-30","cited_by_count":2,"area":null},{"id":"2111.04371","title":"Geometrically Adaptive Dictionary Attack on Face Recognition","created":"2021-11-08","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2503.12497","title":"D-ADD: An Effective Plug-In for Defending Against Model Stealing","created":"2025-03-16","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2102.02923","title":"PredCoin: Defense against Query-based Hard-label Attack","created":"2021-02-04","cited_by_count":0,"area":null},{"id":"2112.00973","title":"Adversarial Robustness of Deep Reinforcement Learning based Dynamic Recommender Systems","created":"2021-12-02","cited_by_count":0,"area":null},{"id":"2302.00537","title":"Effectiveness of Moving Target Defenses for Adversarial Attacks in ML-based Malware Detection","created":"2023-02-01","cited_by_count":0,"area":null},{"id":"2308.11845","title":"SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks","created":"2023-08-23","cited_by_count":0,"area":null},{"id":"2403.10562","title":"Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2410.23483","title":"Keep on Swimming: Real Attackers Only Need Partial Knowledge of a Multi-Model System","created":"2024-10-30","cited_by_count":0,"area":null},{"id":"2506.15506","title":"Insights on Adversarial Attacks for Tabular Machine Learning via a Systematic Literature Review","created":"2025-06-18","cited_by_count":0,"area":null},{"id":"2602.08679","title":"Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2605.18231","title":"Attacking the First-Principle: A Black-Box, Query-Free Targeted Mimicry Attack on Binary Function Classifiers","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2609.16403","title":"Implementing a White-Box Undetectable Backdoor for Random Fourier Features","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2610.13083","title":"The Limits of Query Monitoring against Distributed Model Extraction","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}