{"total":67,"rows":[{"id":"2305.12082","title":"SneakyPrompt: Jailbreaking Text-to-image Generative Models","created":"2023-05-20","cited_by_count":189,"area":"diffusion"},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2311.08819","title":"Frequency Domain-based Dataset Distillation","created":"2023-11-15","cited_by_count":28,"area":null},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2110.15629","title":"Attacking Video Recognition Models with Bullet-Screen Comments","created":"2021-10-29","cited_by_count":16,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2310.10010","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","created":"2023-10-16","cited_by_count":13,"area":null},{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2108.13872","title":"Reinforcement Learning Based Sparse Black-box Adversarial Attack on Video Recognition Models","created":"2021-08-29","cited_by_count":12,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2406.07145","title":"Failures Are Fated, But Can Be Faded: Characterizing and Mitigating Unwanted Behaviors in Large-Scale Vision and Language Models","created":"2024-06-11","cited_by_count":11,"area":null},{"id":"2308.05985","title":"TrajPAC: Towards Robustness Verification of Pedestrian Trajectory Prediction Models","created":"2023-08-11","cited_by_count":8,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2409.10071","title":"Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation","created":"2024-09-16","cited_by_count":6,"area":null},{"id":"2204.09397","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2303.04238","title":"Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors","created":"2023-03-07","cited_by_count":5,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2104.11691","title":"Patch Shortcuts: Interpretable Proxy Models Efficiently Find Black-Box Vulnerabilities","created":"2021-04-22","cited_by_count":4,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2602.08690","title":"SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity","created":"2026-02-09","cited_by_count":4,"area":"deeprl"},{"id":"2605.28083","title":"VLA-Hijack: A Transferable Patch Attack against Vision-Language-Action Models via Visual Proprioception Hijacking","created":"2026-05-27","cited_by_count":4,"area":"vla"},{"id":"2104.02425","title":"The Duo of Artificial Intelligence and Big Data for Industry 4.0: Review of Applications, Techniques, Challenges, and Future Research Directions","created":"2021-04-06","cited_by_count":3,"area":null},{"id":"2306.16131","title":"Distributional Modeling for Location-Aware Adversarial Patches","created":"2023-06-28","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2509.05592","title":"MFFI: Multi-Dimensional Face Forgery Image Dataset for Real-World Scenarios","created":"2025-09-06","cited_by_count":3,"area":null},{"id":"2303.08944","title":"Agnostic Multi-Robust Learning Using ERM","created":"2023-03-15","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2406.03684","title":"Principles of Designing Robust Remote Face Anti-Spoofing Systems","created":"2024-06-06","cited_by_count":2,"area":null},{"id":"2502.07821","title":"Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2511.09834","title":"CertMask: Certifiable Defense Against Adversarial Patches via Theoretically Optimal Mask Coverage","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2303.01245","title":"An Incremental Gray-box Physical Adversarial Attack on Neural Network Training","created":"2023-02-20","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2508.01676","title":"Benchmarking Adversarial Patch Selection and Location","created":"2025-08-03","cited_by_count":1,"area":null},{"id":"2403.15918","title":"Towards Adversarial Robustness And Backdoor Mitigation in SSL","created":"2024-03-23","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2409.14940","title":"Improving Adversarial Robustness for 3D Point Cloud Recognition at Test-Time through Purified Self-Training","created":"2024-09-23","cited_by_count":0,"area":null},{"id":"2410.16738","title":"LLM-Assisted Red Teaming of Diffusion Models through \"Failures Are Fated, But Can Be Faded\"","created":"2024-10-22","cited_by_count":0,"area":"diffusion"},{"id":"2410.23870","title":"Noise as a Double-Edged Sword: Reinforcement Learning Exploits Randomized Defenses in Neural Networks","created":"2024-10-31","cited_by_count":0,"area":"deeprl"},{"id":"2411.17026","title":"RED: Robust Environmental Design","created":"2024-11-26","cited_by_count":0,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null},{"id":"2505.16318","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2506.17632","title":"Pixel-Optimization-Free Patch Attack on Stereo Depth Estimation","created":"2025-06-21","cited_by_count":0,"area":null},{"id":"2508.12132","title":"TriQDef: Disrupting Semantic and Gradient Alignment to Prevent Adversarial Patch Transferability in Quantized Neural Networks","created":"2025-08-16","cited_by_count":0,"area":null},{"id":"2510.18362","title":"FeatureFool: Zero-Query Fooling of Video Models via Feature Map","created":"2025-10-21","cited_by_count":0,"area":null},{"id":"2601.21323","title":"Adversarial Vulnerability Transcends Computational Paradigms: Feature Engineering Provides No Defense Against Neural Adversarial Transfer","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2606.18318","title":"Budget-Aware Adaptive Adversarial Patches for Black-Box Object Detection","created":"2026-06-16","cited_by_count":0,"area":null}],"next_cursor":null}