{"total":98,"rows":[{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2405.15556","title":"Certifiably Robust RAG against Retrieval Corruption","created":"2024-05-24","cited_by_count":151,"area":"rag"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2203.08519","title":"Towards Practical Certifiable Patch Defense with Vision Transformer","created":"2022-03-16","cited_by_count":44,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29,"area":null},{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2209.05980","title":"Certified Defences Against Adversarial Patch Attacks on Semantic Segmentation","created":"2022-09-13","cited_by_count":16,"area":null},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15,"area":null},{"id":"2210.06077","title":"Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivity","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2401.03582","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","created":"2024-01-07","cited_by_count":14,"area":null},{"id":"2108.05075","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","created":"2021-08-11","cited_by_count":13,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2305.19521","title":"Incremental Randomized Smoothing Certification","created":"2023-05-31","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2210.16140","title":"Localized Randomized Smoothing for Collective Robustness Certification","created":"2022-10-28","cited_by_count":10,"area":null},{"id":"2301.02039","title":"Randomized Message-Interception Smoothing: Gray-box Certificates for Graph Neural Networks","created":"2023-01-05","cited_by_count":10,"area":null},{"id":"2204.13004","title":"Defending Person Detection Against Adversarial Patch Attack by using Universal Defensive Frame","created":"2022-04-27","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2211.14646","title":"Towards Improved Input Masking for Convolutional Neural Networks","created":"2022-11-26","cited_by_count":8,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2406.17830","title":"Treatment of Statistical Estimation Problems in Randomized Smoothing for Adversarial Robustness","created":"2024-06-25","cited_by_count":8,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2306.12610","title":"Revisiting Image Classifier Training for Improved Certified Robust Defense against Adversarial Patches","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2310.17403","title":"Detection Defenses: An Empty Promise against Adversarial Patch Attacks on Optical Flow","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2402.06249","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","created":"2024-02-09","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2405.15942","title":"Can Implicit Bias Imply Adversarial Robustness?","created":"2024-05-24","cited_by_count":5,"area":null},{"id":"2302.04379","title":"Et Tu Certifications: Robustness Certificates Yield Better Adversarial Examples","created":"2023-02-09","cited_by_count":4,"area":null},{"id":"2402.15267","title":"A Robust Defense against Adversarial Attacks on Deep Learning-based Malware Detectors via (De)Randomized Smoothing","created":"2024-02-23","cited_by_count":4,"area":null},{"id":"2506.13024","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","created":"2025-06-16","cited_by_count":4,"area":null},{"id":"2208.09195","title":"Real-Time Robust Video Object Detection System Against Physical-World Adversarial Attacks","created":"2022-08-19","cited_by_count":3,"area":null},{"id":"2303.13372","title":"DRSM: De-Randomized Smoothing on Malware Classifier Providing Certified Robustness","created":"2023-03-20","cited_by_count":3,"area":null},{"id":"2312.12608","title":"Rethinking Randomized Smoothing from the Perspective of Scalability","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2405.07668","title":"CrossCert: A Cross-Checking Detection Approach to Patch Robustness Certification for Deep Learning Models","created":"2024-05-13","cited_by_count":3,"area":null},{"id":"2101.11060","title":"Defenses Against Multi-Sticker Physical Domain Attacks on Classifiers","created":"2021-01-26","cited_by_count":2,"area":null},{"id":"2308.00452","title":"A Majority Invariant Approach to Patch Robustness Certification for Deep Learning Models","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2503.22998","title":"AuditVotes: Elevating Provable Defense for GNNs with Efficient Augmentation and Conditional Smoothing","created":"2025-03-29","cited_by_count":2,"area":null},{"id":"2509.23689","title":"Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability","created":"2025-09-28","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2511.09834","title":"CertMask: Certifiable Defense Against Adversarial Patches via Theoretically Optimal Mask Coverage","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2205.08989","title":"Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing","created":"2022-05-18","cited_by_count":1,"area":null},{"id":"2305.10929","title":"Architecture-agnostic Iterative Black-box Certified Defense against Adversarial Patches","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2307.14242","title":"Defending Adversarial Patches via Joint Region Localizing and Inpainting","created":"2023-07-26","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2402.07498","title":"Accelerated Smoothing: A Scalable Approach to Randomized Smoothing","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2404.18541","title":"Machine Learning for Windows Malware Detection and Classification: Methods, Challenges and Ongoing Research","created":"2024-04-29","cited_by_count":1,"area":null},{"id":"2405.14176","title":"Certified Robustness against Sparse Adversarial Perturbations via Data Localization","created":"2024-05-23","cited_by_count":1,"area":null},{"id":"2405.18499","title":"Training More Robust Classification Model via Discriminative Loss and Gaussian Noise Injection","created":"2024-05-28","cited_by_count":1,"area":null},{"id":"2406.02309","title":"Effects of Exponential Gaussian Distribution on (Double Sampling) Randomized Smoothing","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2505.24703","title":"PatchDEMUX: A Certifiably Robust Framework for Multi-label Classifiers Against Adversarial Patches","created":"2025-05-30","cited_by_count":1,"area":null},{"id":"2511.10576","title":"Tight Robustness Certification Through the Convex Hull of $\\ell_0$ Attacks","created":"2025-11-13","cited_by_count":1,"area":null},{"id":"2203.08945","title":"Provable Adversarial Robustness for Fractional Lp Threat Models","created":"2022-03-16","cited_by_count":0,"area":null},{"id":"2311.01563","title":"Assist Is Just as Important as the Goal: Image Resurfacing to Aid Model's Robust Prediction","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2405.00392","title":"Certified Adversarial Robustness of Machine Learning-based Malware Detectors via (De)Randomized Smoothing","created":"2024-05-01","cited_by_count":0,"area":null},{"id":"2409.13546","title":"Certified Adversarial Robustness via Partition-based Randomized Smoothing","created":"2024-09-20","cited_by_count":0,"area":null},{"id":"2411.17026","title":"RED: Robust Environmental Design","created":"2024-11-26","cited_by_count":0,"area":null},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2507.23335","title":"Scalable and Precise Patch Robustness Certification for Deep Learning Models with Top-k Predictions","created":"2025-07-31","cited_by_count":0,"area":null},{"id":"2508.10946","title":"IPG: Incremental Patch Generation for Generalized Adversarial Patch Training","created":"2025-08-13","cited_by_count":0,"area":null},{"id":"2510.08659","title":"Provably Robust Adaptation for Language-Empowered Foundation Models","created":"2025-10-09","cited_by_count":0,"area":null},{"id":"2511.07755","title":"Filtered-ViT: A Robust Defense Against Multiple Adversarial Patch Attacks","created":"2025-11-11","cited_by_count":0,"area":null},{"id":"2511.13749","title":"DeepDefense: Robust Learning via Layer-Wise Gradient-Feature Alignment","created":"2025-11-13","cited_by_count":0,"area":null},{"id":"2601.00367","title":"PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2603.12688","title":"STRAP-ViT: Segregated Tokens with Randomized -- Transformations for Defense against Adversarial Patches in ViTs","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2604.20495","title":"Towards Certified Malware Detection: Provable Guarantees Against Evasion Attacks","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2606.27694","title":"Halt Fast! Early Stopping for Certified Robustness","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2607.13801","title":"Traffic-Aware Randomized Smoothing for LLM-Based Network Intrusion Detection","created":"2026-07-15","cited_by_count":0,"area":null},{"id":"2607.24177","title":"EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability","created":"2026-07-27","cited_by_count":0,"area":null},{"id":"2608.20791","title":"CertVLA: Certified Defense against Physical Visual Attacks for Vision-Language-Action Models","created":"2026-08-21","cited_by_count":0,"area":"vla"},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}