{"total":33,"rows":[{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2210.11662","title":"Local Bayesian optimization via maximizing probability of descent","created":"2022-10-21","cited_by_count":30,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2204.11075","title":"Smart App Attack: Hacking Deep Learning Models in Android Apps","created":"2022-04-23","cited_by_count":12,"area":null},{"id":"2112.05282","title":"RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit","created":"2021-12-10","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2201.02775","title":"ADI: Adversarial Dominating Inputs in Vertical Federated Learning Systems","created":"2022-01-08","cited_by_count":9,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2101.01032","title":"Local Black-box Adversarial Attacks: A Query Efficient Approach","created":"2021-01-04","cited_by_count":7,"area":null},{"id":"2210.01075","title":"Decompiling x86 Deep Neural Network Executables","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2408.01808","title":"ALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features","created":"2024-08-03","cited_by_count":5,"area":null},{"id":"2202.13625","title":"Enhance transferability of adversarial examples with model architecture","created":"2022-02-28","cited_by_count":4,"area":null},{"id":"2402.02953","title":"Unraveling the Key of Machine Learning-based Android Malware Detection","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2212.13700","title":"Publishing Efficient On-device Models Increases Adversarial Vulnerability","created":"2022-12-28","cited_by_count":3,"area":null},{"id":"2406.11707","title":"A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Driving","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2401.09574","title":"Towards Scalable and Robust Model Versioning","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2505.16313","title":"Accelerating Targeted Hard-Label Adversarial Attacks in Low-Query Black-Box Settings","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2407.11073","title":"SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images","created":"2024-07-13","cited_by_count":0,"area":null},{"id":"2408.05745","title":"Improving Adversarial Transferability with Neighbourhood Gradient Information","created":"2024-08-11","cited_by_count":0,"area":null},{"id":"2604.27487","title":"Low Rank Adaptation for Adversarial Perturbation","created":"2026-04-30","cited_by_count":0,"area":null},{"id":"2605.18231","title":"Attacking the First-Principle: A Black-Box, Query-Free Targeted Mimicry Attack on Binary Function Classifiers","created":"2026-05-18","cited_by_count":0,"area":null}],"next_cursor":null}