{"total":39,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55,"area":null},{"id":"2207.09239","title":"Assaying Out-Of-Distribution Generalization in Transfer Learning","created":"2022-07-19","cited_by_count":53,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2110.15245","title":"From Machine Learning to Robotics: Challenges and Opportunities for Embodied Intelligence","created":"2021-10-28","cited_by_count":35,"area":null},{"id":"2201.01850","title":"On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Driving","created":"2022-01-05","cited_by_count":30,"area":null},{"id":"2203.11174","title":"DiffPoseNet: Direct Differentiable Camera Pose Estimation","created":"2022-03-21","cited_by_count":27,"area":null},{"id":"2112.08691","title":"Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning","created":"2021-12-16","cited_by_count":25,"area":null},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2108.11168","title":"Adversarially Robust One-class Novelty Detection","created":"2021-08-25","cited_by_count":24,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2110.15629","title":"Attacking Video Recognition Models with Bullet-Screen Comments","created":"2021-10-29","cited_by_count":16,"area":null},{"id":"2203.13214","title":"A Perturbation-Constrained Adversarial Attack for Evaluating the Robustness of Optical Flow","created":"2022-03-24","cited_by_count":16,"area":null},{"id":"2103.16255","title":"Towards Understanding Adversarial Robustness of Optical Flow Networks","created":"2021-03-30","cited_by_count":15,"area":null},{"id":"2305.06716","title":"Distracting Downpour: Adversarial Weather Attacks for Motion Estimation","created":"2023-05-11","cited_by_count":15,"area":null},{"id":"2303.01351","title":"APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation","created":"2023-03-02","cited_by_count":10,"area":null},{"id":"2210.11242","title":"Attacking Motion Estimation with Adversarial Snow","created":"2022-10-20","cited_by_count":9,"area":null},{"id":"2206.04365","title":"CARLA-GeAR: a Dataset Generator for a Systematic Evaluation of Adversarial Robustness of Vision Models","created":"2022-06-09","cited_by_count":8,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2505.09368","title":"RobustSpring: Benchmarking Robustness to Image Corruptions for Optical Flow, Scene Flow and Stereo","created":"2025-05-14","cited_by_count":7,"area":null},{"id":"2310.17403","title":"Detection Defenses: An Empty Promise against Adversarial Patch Attacks on Optical Flow","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2111.08485","title":"Consistent Semantic Attacks on Optical Flow","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2108.00335","title":"Towards Adversarially Robust and Domain Generalizable Stereo Matching by Rethinking DNN Feature Backbones","created":"2021-07-31","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2407.18564","title":"Unveiling Privacy Vulnerabilities: Investigating the Role of Structure in Graph Data","created":"2024-07-26","cited_by_count":3,"area":null},{"id":"2411.14865","title":"Towards Dependable Optical Flow: Benchmarks for Real-World Spatiotemporal Corruptions","created":"2024-11-22","cited_by_count":3,"area":null},{"id":"2401.07188","title":"Left-right Discrepancy for Adversarial Attack on Stereo Networks","created":"2024-01-14","cited_by_count":2,"area":null},{"id":"2510.03224","title":"Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles","created":"2025-10-03","cited_by_count":2,"area":null},{"id":"2604.09853","title":"Do vision models perceive illusory motion in static images like humans?","created":"2026-04-10","cited_by_count":2,"area":null},{"id":"2404.13621","title":"Attack on Scene Flow using Point Clouds","created":"2024-04-21","cited_by_count":1,"area":null},{"id":"2607.09930","title":"Banshee: Target Switch Attacks on Gimbal-Stabilized Visual Tracking Systems via Acoustic Injection","created":"2026-07-10","cited_by_count":0,"area":null},{"id":"2607.26651","title":"Physically Real-time Infrared Attack against Optical Flow Estimation Networks","created":"2026-07-29","cited_by_count":0,"area":null}],"next_cursor":null}