{"total":89,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2209.07735","title":"Enhance the Visual Representation via Discrete Adversarial Training","created":"2022-09-16","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2107.01396","title":"Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity","created":"2021-07-03","cited_by_count":18,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2309.07398","title":"Semantic Adversarial Attacks via Diffusion Models","created":"2023-09-14","cited_by_count":12,"area":"diffusion"},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12,"area":null},{"id":"2201.06070","title":"ALA: Naturalness-aware Adversarial Lightness Attack","created":"2022-01-16","cited_by_count":11,"area":null},{"id":"2206.01034","title":"Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","created":"2022-06-02","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2311.01441","title":"Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models","created":"2023-11-02","cited_by_count":9,"area":"mllm"},{"id":"2403.19254","title":"Imperceptible Protection against Style Imitation from Diffusion Models","created":"2024-03-28","cited_by_count":9,"area":"diffusion"},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2108.02502","title":"Imperceptible Adversarial Examples by Spatial Chroma-Shift","created":"2021-08-05","cited_by_count":7,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7,"area":"diffusion"},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2103.00250","title":"Effective Universal Unrestricted Adversarial Attacks using a MOE Approach","created":"2021-02-27","cited_by_count":4,"area":null},{"id":"2111.12971","title":"Natural & Adversarial Bokeh Rendering via Circle-of-Confusion Predictive Network","created":"2021-11-25","cited_by_count":4,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2306.00353","title":"Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective","created":"2023-06-01","cited_by_count":4,"area":null},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2104.08422","title":"Fashion-Guided Adversarial Attack on Person Segmentation","created":"2021-04-17","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2108.11032","title":"Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2309.01104","title":"Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection","created":"2023-09-03","cited_by_count":3,"area":null},{"id":"2406.16935","title":"Benchmarking Out-of-Distribution Generalization Capabilities of DNN-based Encoding Models for the Ventral Visual Cortex","created":"2024-06-16","cited_by_count":3,"area":null},{"id":"2408.05479","title":"ReToMe-VA: Recursive Token Merging for Video Diffusion-based Unrestricted Adversarial Attack","created":"2024-08-10","cited_by_count":3,"area":"diffusion"},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2506.01511","title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment","created":"2025-06-02","cited_by_count":3,"area":"diffusion"},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2507.23202","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","created":"2025-07-31","cited_by_count":3,"area":"diffusion"},{"id":"2206.07802","title":"Improving generalization by mimicking the human visual diet","created":"2022-06-15","cited_by_count":2,"area":null},{"id":"2206.14020","title":"Rethinking Adversarial Examples for Location Privacy Protection","created":"2022-06-28","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2304.01441","title":"NetFlick: Adversarial Flickering Attacks on Deep Learning Based Video Compression","created":"2023-04-04","cited_by_count":2,"area":null},{"id":"2312.07338","title":"Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2507.02965","title":"Concept-based Adversarial Attack: a Probabilistic Perspective","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2209.02408","title":"Robustness and invariance properties of image classifiers","created":"2022-08-30","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2310.00503","title":"Black-box Attacks on Image Activity Prediction and its Natural Language Explanations","created":"2023-09-30","cited_by_count":1,"area":null},{"id":"2404.12653","title":"How Real Is Real? A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2505.24227","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","created":"2025-05-30","cited_by_count":1,"area":"mllm"},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2602.14844","title":"Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignment","created":"2026-02-16","cited_by_count":1,"area":"offlinerl"},{"id":"2106.04392","title":"Signal Transformer: Complex-valued Attention and Meta-Learning for Signal Recognition","created":"2021-06-05","cited_by_count":0,"area":null},{"id":"2307.06548","title":"Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations","created":"2023-07-13","cited_by_count":0,"area":null},{"id":"2309.09443","title":"Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2311.08141","title":"GMTR: Graph Matching Transformers","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2312.16805","title":"DarkShot: Lighting Dark Images with Low-Compute and High-Quality","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.05431","title":"TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2401.05432","title":"TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2402.04699","title":"Breaking Free: How to Hack Safety Guardrails in Black-Box Diffusion Models!","created":"2024-02-07","cited_by_count":0,"area":"diffusion"},{"id":"2403.13663","title":"T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image","created":"2024-03-20","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2408.17101","title":"Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2410.11162","title":"Towards General Deepfake Detection with Dynamic Curriculum","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2410.13409","title":"Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2505.16166","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","created":"2025-05-22","cited_by_count":0,"area":"diffusion"},{"id":"2507.06486","title":"Mask6D: Masked Pose Priors For 6D Object Pose Estimation","created":"2025-07-09","cited_by_count":0,"area":null},{"id":"2512.18722","title":"Generating Risky Samples with Conformity Constraints via Diffusion Models","created":"2025-12-21","cited_by_count":0,"area":"diffusion"},{"id":"2606.17540","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2609.07110","title":"Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models","created":"2026-09-07","cited_by_count":0,"area":null}],"next_cursor":null}