{"total":140,"rows":[{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2202.07054","title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","created":"2022-02-14","cited_by_count":24,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18,"area":null},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2504.05461","title":"Intermediate Layer Classifiers for OOD generalization","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2306.16170","title":"Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillation","created":"2023-06-28","cited_by_count":13,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2511.17448","title":"MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models","created":"2025-11-21","cited_by_count":11,"area":"mllm"},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2402.11083","title":"VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models","created":"2024-02-16","cited_by_count":10,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2501.08415","title":"Cross-Modal Transferable Image-to-Video Attack on Video Quality Metrics","created":"2025-01-14","cited_by_count":9,"area":null},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2209.08130","title":"Robust Ensemble Morph Detection with Domain Generalization","created":"2022-09-16","cited_by_count":7,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2106.07221","title":"Certification of embedded systems based on Machine Learning: A survey","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2205.09592","title":"Transferable Physical Attack against Object Detection with Separable Attention","created":"2022-05-19","cited_by_count":6,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2312.05720","title":"Beyond Gradient and Priors in Privacy Attacks: Leveraging Pooler Layer Inputs of Language Models in Federated Learning","created":"2023-12-10","cited_by_count":6,"area":null},{"id":"2404.02585","title":"Unsegment Anything by Simulating Deformation","created":"2024-04-03","cited_by_count":6,"area":null},{"id":"2410.11317","title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation","created":"2024-10-15","cited_by_count":6,"area":"safety"},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2410.09804","title":"BlackDAN: A Black-Box Multi-Objective Approach for Effective and Contextual Jailbreaking of Large Language Models","created":"2024-10-13","cited_by_count":5,"area":"safety"},{"id":"2103.10651","title":"SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2108.07033","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","created":"2021-08-16","cited_by_count":4,"area":null},{"id":"2211.15926","title":"Interpretations Cannot Be Trusted: Stealthy and Effective Adversarial Perturbations against Interpretable Deep Learning","created":"2022-11-29","cited_by_count":4,"area":null},{"id":"2311.12051","title":"Boost Adversarial Transferability by Uniform Scale and Mix Mask Method","created":"2023-11-18","cited_by_count":4,"area":null},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2307.06608","title":"MF-CLIP: Leveraging CLIP as Surrogate Models for No-box Adversarial Attacks","created":"2023-07-13","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2503.04385","title":"Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2204.10606","title":"Enhancing the Transferability via Feature-Momentum Adversarial Attack","created":"2022-04-22","cited_by_count":2,"area":null},{"id":"2307.11906","title":"Unveiling Vulnerabilities in Interpretable Deep Learning Systems with Query-Efficient Black-box Attacks","created":"2023-07-21","cited_by_count":2,"area":null},{"id":"2404.10202","title":"Towards a Novel Perspective on Adversarial Examples Driven by Frequency","created":"2024-04-16","cited_by_count":2,"area":null},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2411.15222","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2508.06837","title":"Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models","created":"2025-08-09","cited_by_count":2,"area":"diffusion"},{"id":"2511.08937","title":"Boosting Adversarial Transferability via Ensemble Non-Attention","created":"2025-11-12","cited_by_count":2,"area":null},{"id":"2512.04969","title":"Rethinking the Use of Vision Transformers for AI-Generated Image Detection","created":"2025-12-04","cited_by_count":2,"area":null},{"id":"2605.04358","title":"Intermediate Representations are Strong AI-Generated Image Detectors","created":"2026-05-05","cited_by_count":2,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2206.08124","title":"Using adversarial images to improve outcomes of federated learning for non-IID data","created":"2022-06-16","cited_by_count":1,"area":null}],"next_cursor":"100"}