{"total":117,"rows":[{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324,"area":null},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101,"area":null},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2302.09309","title":"StyleAdv: Meta Style Adversarial Training for Cross-Domain Few-Shot Learning","created":"2023-02-18","cited_by_count":53,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2110.09903","title":"Unrestricted Adversarial Attacks on ImageNet Competition","created":"2021-10-17","cited_by_count":23,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2206.01034","title":"Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","created":"2022-06-02","cited_by_count":11,"area":null},{"id":"2208.01819","title":"Adversarial Camouflage for Node Injection Attack on Graphs","created":"2022-08-03","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2304.14614","title":"Fusion is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection","created":"2023-04-28","cited_by_count":11,"area":null},{"id":"2203.09845","title":"Location-Free Camouflage Generation Network","created":"2022-03-18","cited_by_count":10,"area":null},{"id":"2303.01351","title":"APARATE: Adaptive Adversarial Patch for CNN-based Monocular Depth Estimation for Autonomous Navigation","created":"2023-03-02","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2111.09137","title":"Two-Face: Adversarial Audit of Commercial Face Recognition Systems","created":"2021-11-17","cited_by_count":8,"area":null},{"id":"2303.01338","title":"AdvRain: Adversarial Raindrops to Attack Camera-based Smart Vision Systems","created":"2023-03-02","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2401.02031","title":"Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack","created":"2024-01-04","cited_by_count":7,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2210.08870","title":"Differential Evolution based Dual Adversarial Camouflage: Fooling Human Eyes and Object Detectors","created":"2022-10-17","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2209.09883","title":"Leveraging Local Patch Differences in Multi-Object Scenes for Generative Adversarial Attacks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2303.04238","title":"Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors","created":"2023-03-07","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2308.03476","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","created":"2023-08-07","cited_by_count":5,"area":null},{"id":"2407.16327","title":"Understanding Impacts of Electromagnetic Signal Injection Attacks on Object Detection","created":"2024-07-23","cited_by_count":5,"area":null},{"id":"2412.02795","title":"Hijacking Vision-and-Language Navigation Agents with Adversarial Environmental Attacks","created":"2024-12-03","cited_by_count":5,"area":null},{"id":"2110.10444","title":"Moir\\'e Attack (MA): A New Potential Risk of Screen Photos","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2201.08661","title":"The Security of Deep Learning Defences for Medical Imaging","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2310.09795","title":"AFLOW: Developing Adversarial Examples under Extremely Noise-limited Settings","created":"2023-10-15","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2410.06243","title":"Unsupervised Model Diagnosis","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2104.08422","title":"Fashion-Guided Adversarial Attack on Person Segmentation","created":"2021-04-17","cited_by_count":3,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2307.04651","title":"Joint Salient Object Detection and Camouflaged Object Detection via Uncertainty-aware Learning","created":"2023-07-10","cited_by_count":3,"area":null},{"id":"2309.03215","title":"Explainable and Trustworthy Traffic Sign Detection for Safe Autonomous Driving: An Inductive Logic Programming Approach","created":"2023-08-30","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2412.13709","title":"Physics-Based Adversarial Attack on Near-Infrared Human Detector for Nighttime Surveillance Camera Systems","created":"2024-12-18","cited_by_count":3,"area":null},{"id":"2501.05239","title":"Is Your Autonomous Vehicle Safe? Understanding the Threat of Electromagnetic Signal Injection Attacks on Traffic Scene Perception","created":"2025-01-09","cited_by_count":3,"area":null},{"id":"2207.02963","title":"The Weaknesses of Adversarial Camouflage in Overhead Imagery","created":"2022-07-06","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2604.22552","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2103.15897","title":"Automating Defense Against Adversarial Attacks: Discovery of Vulnerabilities and Application of Multi-INT Imagery to Protect Deployed Models","created":"2021-03-29","cited_by_count":1,"area":null},{"id":"2104.10377","title":"Dual Head Adversarial Training","created":"2021-04-21","cited_by_count":1,"area":null},{"id":"2111.10969","title":"Medical Aegis: Robust adversarial protectors for medical images","created":"2021-11-22","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2307.00421","title":"Brightness-Restricted Adversarial Attack Patch","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2310.09792","title":"SCME: A Self-Contrastive Method for Data-free and Query-Limited Model Extraction Attack","created":"2023-10-15","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2604.14643","title":"Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification","created":"2026-04-16","cited_by_count":1,"area":null},{"id":"2605.04675","title":"Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Pattern","created":"2026-05-06","cited_by_count":1,"area":null},{"id":"2101.06704","title":"Adversarial Interaction Attack: Fooling AI to Misinterpret Human Intentions","created":"2021-01-17","cited_by_count":0,"area":null},{"id":"2105.00622","title":"Physical world assistive signals for deep neural network classifiers -- neither defense nor attack","created":"2021-05-03","cited_by_count":0,"area":null}],"next_cursor":"100"}