{"total":17,"rows":[{"id":"2202.07054","title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","created":"2022-02-14","cited_by_count":24,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2101.02115","title":"Adversarial Robustness by Design through Analog Computing and Synthetic Gradients","created":"2021-01-06","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2104.09369","title":"Adversarial Diffusion Attacks on Graph-based Traffic Prediction Models","created":"2021-04-19","cited_by_count":5,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2302.10802","title":"A Novel Noise Injection-based Training Scheme for Better Model Robustness","created":"2023-02-17","cited_by_count":3,"area":null},{"id":"2102.00029","title":"You Only Query Once: Effective Black Box Adversarial Attacks with Minimal Repeated Queries","created":"2021-01-29","cited_by_count":2,"area":null},{"id":"2108.04217","title":"ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients","created":"2021-07-06","cited_by_count":2,"area":null},{"id":"2506.24048","title":"Consensus-based optimization for closed-box adversarial attacks and a connection to evolution strategies","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2111.15160","title":"Mitigating Adversarial Attacks by Distributing Different Copies to Different Users","created":"2021-11-30","cited_by_count":1,"area":null},{"id":"2309.06438","title":"Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks","created":"2023-09-12","cited_by_count":1,"area":null},{"id":"2203.04405","title":"Art-Attack: Black-Box Adversarial Attack via Evolutionary Art","created":"2022-03-07","cited_by_count":0,"area":null},{"id":"2206.10988","title":"AdvSmo: Black-box Adversarial Attack by Smoothing Linear Structure of Texture","created":"2022-06-22","cited_by_count":0,"area":null}],"next_cursor":null}