{"total":91,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2105.05558","title":"AVA: Adversarial Vignetting Attack against Visual Recognition","created":"2021-05-12","cited_by_count":29,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2302.12366","title":"Less is More: Data Pruning for Faster Adversarial Training","created":"2023-02-23","cited_by_count":13,"area":null},{"id":"2206.01898","title":"Saliency Attack: Towards Imperceptible Black-box Adversarial Attack","created":"2022-06-04","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2403.10935","title":"Understanding Robustness of Visual State Space Models for Image Classification","created":"2024-03-16","cited_by_count":12,"area":null},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2205.13807","title":"fakeWeather: Adversarial Attacks for Deep Neural Networks Emulating Weather Conditions on the Camera Lens of Autonomous Systems","created":"2022-05-27","cited_by_count":8,"area":null},{"id":"2207.09572","title":"Robust Multivariate Time-Series Forecasting: Adversarial Attacks and Defense Mechanisms","created":"2022-07-19","cited_by_count":8,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2211.16040","title":"AdvMask: A Sparse Adversarial Attack Based Data Augmentation Method for Image Classification","created":"2022-11-29","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2204.09397","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2106.12900","title":"Long-term Cross Adversarial Training: A Robust Meta-learning Method for Few-shot Classification Tasks","created":"2021-06-22","cited_by_count":4,"area":null},{"id":"2112.05235","title":"The Fundamental Limits of Interval Arithmetic for Neural Networks","created":"2021-12-09","cited_by_count":4,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2403.05955","title":"IOI: Invisible One-Iteration Adversarial Attack on No-Reference Image- and Video-Quality Metrics","created":"2024-03-09","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2407.11463","title":"Investigating Imperceptibility of Adversarial Attacks on Tabular Data: An Empirical Analysis","created":"2024-07-16","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2105.01403","title":"An Overview of Laser Injection against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2202.07453","title":"Random Walks for Adversarial Meshes","created":"2022-02-15","cited_by_count":3,"area":null},{"id":"2205.14851","title":"Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Models","created":"2022-05-30","cited_by_count":3,"area":null},{"id":"2207.02087","title":"Learning to Accelerate Approximate Methods for Solving Integer Programming via Early Fixing","created":"2022-07-05","cited_by_count":3,"area":null},{"id":"2210.00621","title":"Optimization for Robustness Evaluation beyond $\\ell_p$ Metrics","created":"2022-10-02","cited_by_count":3,"area":null},{"id":"2212.06836","title":"Towards Efficient and Domain-Agnostic Evasion Attack with High-dimensional Categorical Inputs","created":"2022-12-13","cited_by_count":3,"area":null},{"id":"2303.00284","title":"To Make Yourself Invisible with Adversarial Semantic Contours","created":"2023-03-01","cited_by_count":3,"area":null},{"id":"2310.13950","title":"Adversarial Image Generation by Spatial Transformation in Perceptual Colorspaces","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2502.01936","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","created":"2025-02-04","cited_by_count":3,"area":null},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2212.07495","title":"SAIF: Sparse Adversarial and Imperceptible Attack Framework","created":"2022-12-14","cited_by_count":2,"area":null},{"id":"2212.13989","title":"AdvCat: Domain-Agnostic Robustness Assessment for Cybersecurity-Critical Applications with Categorical Inputs","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2309.11667","title":"Understanding Pose and Appearance Disentanglement in 3D Human Pose Estimation","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2403.10330","title":"Towards Non-Adversarial Algorithmic Recourse","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2507.03450","title":"Evaluating the Evaluators: Trust in Adversarial Robustness Tests","created":"2025-07-04","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2209.02408","title":"Robustness and invariance properties of image classifiers","created":"2022-08-30","cited_by_count":1,"area":null},{"id":"2301.01223","title":"ExploreADV: Towards exploratory attack for Neural Networks","created":"2023-01-01","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2410.15723","title":"S-CFE: Simple Counterfactual Explanations","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2508.15454","title":"Mini-Batch Robustness Verification of Deep Neural Networks","created":"2025-08-21","cited_by_count":1,"area":null},{"id":"2509.16678","title":"IPF-RDA: An Information-Preserving Framework for Robust Data Augmentation","created":"2025-09-20","cited_by_count":1,"area":null},{"id":"2510.16637","title":"A Versatile Framework for Designing Group-Sparse Adversarial Attacks","created":"2025-10-18","cited_by_count":1,"area":null},{"id":"2512.03730","title":"Out-of-the-box: Black-box Causal Attacks on Object Detectors","created":"2025-12-03","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2106.01615","title":"Imperceptible Adversarial Examples for Fake Image Detection","created":"2021-06-03","cited_by_count":0,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2203.09756","title":"AutoAdversary: A Pixel Pruning Method for Sparse Adversarial Attack","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2302.11757","title":"Open-World Object Detection via Discriminative Class Prototype Learning","created":"2023-02-23","cited_by_count":0,"area":null},{"id":"2403.00103","title":"On Robustness and Generalization of ML-Based Congestion Predictors to Valid and Imperceptible Perturbations","created":"2024-02-29","cited_by_count":0,"area":null},{"id":"2403.11131","title":"Omni-Recon: Harnessing Image-based Rendering for General-Purpose Neural Radiance Fields","created":"2024-03-17","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2409.01413","title":"Probabilistic Iterative Hard Thresholding for Sparse Learning","created":"2024-09-02","cited_by_count":0,"area":null},{"id":"2411.16162","title":"Sparse patches adversarial attacks via extrapolating point-wise information","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2502.21041","title":"Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2602.06578","title":"Exploring Sparsity and Smoothness of Arbitrary Lp Norms in Adversarial Attacks","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2603.00481","title":"Analyzing Physical Adversarial Example Threats to Machine Learning in Election Systems","created":"2026-02-28","cited_by_count":0,"area":null},{"id":"2608.06912","title":"Fast LapSum: Exact Differentiable Top-$k$ at Million Scale","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.11285","title":"SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}