{"total":33,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2308.08162","title":"Interpretability Benchmark for Evaluating Spatial Misalignment of Prototypical Parts Explanations","created":"2023-08-16","cited_by_count":27,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2104.15064","title":"Black-box adversarial attacks using Evolution Strategies","created":"2021-04-30","cited_by_count":11,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2508.15283","title":"Adversarial Attacks against Neural Ranking Models via In-Context Learning","created":"2025-08-21","cited_by_count":4,"area":null},{"id":"2101.07512","title":"Attention-Guided Black-box Adversarial Attacks with Large-Scale Multiobjective Evolutionary Optimization","created":"2021-01-19","cited_by_count":3,"area":null},{"id":"2203.08148","title":"RES-HD: Resilient Intelligent Fault Diagnosis Against Adversarial Attacks Using Hyper-Dimensional Computing","created":"2022-03-14","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2112.03615","title":"Saliency Diversified Deep Ensemble for Robustness to Adversaries","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2407.11599","title":"Enhancing TinyML Security: Study of Adversarial Attack Transferability","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2506.24048","title":"Consensus-based optimization for closed-box adversarial attacks and a connection to evolution strategies","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2507.06252","title":"False Alarms, Real Damage: Adversarial Attacks Using LLM-based Models on Text-based Cyber Threat Intelligence Systems","created":"2025-07-05","cited_by_count":2,"area":null},{"id":"2209.03431","title":"Physics-Guided Adversarial Machine Learning for Aircraft Systems Simulation","created":"2022-09-07","cited_by_count":1,"area":null},{"id":"2109.12803","title":"Distributionally Robust Multi-Output Regression Ranking","created":"2021-09-27","cited_by_count":0,"area":null},{"id":"2201.05001","title":"Evaluation of Four Black-box Adversarial Attacks and Some Query-efficient Improvement Analysis","created":"2022-01-13","cited_by_count":0,"area":null},{"id":"2210.16371","title":"Distributed Black-box Attack: Do Not Overestimate Black-box Attacks","created":"2022-10-28","cited_by_count":0,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2410.05334","title":"TA3: Testing Against Adversarial Attacks on Machine Learning Models","created":"2024-10-06","cited_by_count":0,"area":null},{"id":"2410.12927","title":"Deep Model Merging: The Sister of Neural Network Interpretability -- A Survey","created":"2024-10-16","cited_by_count":0,"area":null},{"id":"2410.15409","title":"PEAS: A Strategy for Crafting Transferable Adversarial Examples","created":"2024-10-20","cited_by_count":0,"area":null},{"id":"2501.12275","title":"With Great Backbones Comes Great Adversarial Transferability","created":"2025-01-21","cited_by_count":0,"area":null},{"id":"2509.22060","title":"Decoding Deception: Understanding Automatic Speech Recognition Vulnerabilities in Evasion and Poisoning Attacks","created":"2025-09-26","cited_by_count":0,"area":null},{"id":"2610.15628","title":"Robust Detection of Directional Adversarial Attacks in Deep Neural Networks for Radiological Imaging","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}