{"total":39,"rows":[{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2208.00780","title":"Visual correspondence-based explanations improve AI robustness and human-AI team accuracy","created":"2022-07-26","cited_by_count":39,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2202.07054","title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","created":"2022-02-14","cited_by_count":24,"area":null},{"id":"2209.07735","title":"Enhance the Visual Representation via Discrete Adversarial Training","created":"2022-09-16","cited_by_count":23,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2201.10937","title":"Boosting 3D Adversarial Attacks with Attacking On Frequency","created":"2022-01-26","cited_by_count":18,"area":null},{"id":"2204.04063","title":"Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2305.17627","title":"Robust Natural Language Understanding with Residual Attention Debiasing","created":"2023-05-28","cited_by_count":10,"area":null},{"id":"2205.09592","title":"Transferable Physical Attack against Object Detection with Separable Attention","created":"2022-05-19","cited_by_count":6,"area":null},{"id":"2302.11963","title":"Investigating Catastrophic Overfitting in Fast Adversarial Training: A Self-fitting Perspective","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2312.13118","title":"LRS: Enhancing Adversarial Transferability through Lipschitz Regularized Surrogate","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2209.13113","title":"FG-UAP: Feature-Gathering Universal Adversarial Perturbation","created":"2022-09-27","cited_by_count":4,"area":null},{"id":"2211.16192","title":"Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shape","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2305.01808","title":"Hamming Similarity and Graph Laplacians for Class Partitioning and Adversarial Image Detection","created":"2023-05-02","cited_by_count":4,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2204.13232","title":"Adversarial Fine-tune with Dynamically Regulated Adversary","created":"2022-04-28","cited_by_count":2,"area":null},{"id":"2211.13305","title":"Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attacks","created":"2022-11-23","cited_by_count":2,"area":null},{"id":"2511.08937","title":"Boosting Adversarial Transferability via Ensemble Non-Attention","created":"2025-11-12","cited_by_count":2,"area":null},{"id":"2105.15057","title":"Dominant Patterns: Critical Features Hidden in Deep Neural Networks","created":"2021-05-31","cited_by_count":1,"area":null},{"id":"2201.01080","title":"Towards Understanding and Harnessing the Effect of Image Transformation in Adversarial Detection","created":"2022-01-04","cited_by_count":1,"area":null},{"id":"2206.00913","title":"Improving the Robustness and Generalization of Deep Neural Network with Confidence Threshold Reduction","created":"2022-06-02","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2402.15430","title":"Hierarchical Invariance for Robust and Interpretable Vision Tasks at Larger Scales","created":"2024-02-23","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2410.20893","title":"Adversarial Attacks on LiDAR-Based Tracking Across Road Users: Robustness Evaluation and Target-Aware Black-Box Method","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2102.10343","title":"Measuring the Transferability of $\\ell_\\infty$ Attacks by the $\\ell_2$ Norm","created":"2021-02-20","cited_by_count":0,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2403.10476","title":"Approximate Nullspace Augmented Finetuning for Robust Vision Transformers","created":"2024-03-15","cited_by_count":0,"area":null},{"id":"2410.05334","title":"TA3: Testing Against Adversarial Attacks on Machine Learning Models","created":"2024-10-06","cited_by_count":0,"area":null},{"id":"2503.16975","title":"EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2503.20310","title":"Enabling Heterogeneous Adversarial Transferability via Feature Permutation Attacks","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2512.10936","title":"Empirical evaluation of the Frank-Wolfe methods for constructing white-box adversarial attacks","created":"2025-12-11","cited_by_count":0,"area":null}],"next_cursor":null}