{"total":20,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2402.11592","title":"Revisiting Zeroth-Order Optimization for Memory-Efficient LLM Fine-Tuning: A Benchmark","created":"2024-02-18","cited_by_count":114,"area":null},{"id":"2310.02025","title":"DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training","created":"2023-10-03","cited_by_count":76,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2410.07698","title":"Enhancing Zeroth-order Fine-tuning for Language Models with Low-rank Structures","created":"2024-10-10","cited_by_count":50,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2602.17155","title":"Powering Up Zeroth-Order Training via Subspace Gradient Orthogonalization","created":"2026-02-19","cited_by_count":12,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2102.05198","title":"Statistical Inference for Polyak-Ruppert Averaged Zeroth-order Stochastic Gradient Algorithm","created":"2021-02-10","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2111.02842","title":"Adversarial Attacks on Graph Classification via Bayesian Optimisation","created":"2021-11-04","cited_by_count":5,"area":null},{"id":"2402.11168","title":"Trust Regions for Explanations via Black-Box Probabilistic Certification","created":"2024-02-17","cited_by_count":4,"area":null},{"id":"2501.06736","title":"ZOQO: Zero-Order Quantized Optimization","created":"2025-01-12","cited_by_count":4,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2407.11073","title":"SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images","created":"2024-07-13","cited_by_count":0,"area":null},{"id":"2603.13115","title":"ZO-SAM: Zero-Order Sharpness-Aware Minimization for Efficient Sparse Training","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2608.12279","title":"Curvature-Aware Zeroth-Order Optimization for Memory-Efficient Test-Time Adaptation","created":"2026-08-12","cited_by_count":0,"area":null}],"next_cursor":null}