{"total":32,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2203.04623","title":"Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognition","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2104.10868","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","created":"2021-04-22","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2404.09961","title":"Ti-Patch: Tiled Physical Adversarial Patch for no-reference video quality metrics","created":"2024-04-15","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2201.03353","title":"GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservation","created":"2022-01-10","cited_by_count":2,"area":null},{"id":"2405.06049","title":"BB-Patch: BlackBox Adversarial Patch-Attack using Zeroth-Order Optimization","created":"2024-05-09","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2107.09804","title":"Using Undervolting as an On-Device Defense Against Adversarial Machine Learning Attacks","created":"2021-07-20","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2106.05825","title":"HASI: Hardware-Accelerated Stochastic Inference, A Defense Against Adversarial Machine Learning Attacks","created":"2021-06-09","cited_by_count":0,"area":null},{"id":"2109.03329","title":"Real-World Adversarial Examples involving Makeup Application","created":"2021-09-04","cited_by_count":0,"area":null},{"id":"2309.05879","title":"Generalized Attacks on Face Verification Systems","created":"2023-09-12","cited_by_count":0,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2404.17760","title":"Adversarial Examples: Generation Proposal in the Context of Facial Recognition Systems","created":"2024-04-27","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2509.23198","title":"Real-World Transferable Adversarial Attack on Face-Recognition Systems","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2603.28425","title":"From Pixels to Reality: Physical-Digital Patch Attacks on Real-World Camera","created":"2026-03-30","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null}],"next_cursor":null}