{"total":57,"rows":[{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2105.11645","title":"Feature Space Targeted Attacks by Statistic Alignment","created":"2021-05-25","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2308.14597","title":"Adversarial Attacks on Foundational Vision Models","created":"2023-08-28","cited_by_count":13,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2402.11083","title":"VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models","created":"2024-02-16","cited_by_count":10,"area":null},{"id":"2210.12001","title":"When Expressivity Meets Trainability: Fewer than $n$ Neurons Can Work","created":"2022-10-21","cited_by_count":8,"area":null},{"id":"2205.09592","title":"Transferable Physical Attack against Object Detection with Separable Attention","created":"2022-05-19","cited_by_count":6,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5,"area":null},{"id":"2209.09883","title":"Leveraging Local Patch Differences in Multi-Object Scenes for Generative Adversarial Attacks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2208.08677","title":"Enhancing Targeted Attack Transferability via Diversified Weight Pruning","created":"2022-08-18","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2408.10204","title":"Criticality Leveraged Adversarial Training (CLAT) for Boosted Performance via Parameter Efficiency","created":"2024-08-19","cited_by_count":2,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2508.12430","title":"Adversarial Attacks on VQA-NLE: Exposing and Alleviating Inconsistencies in Visual Question Answering Explanations","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2509.18546","title":"SEGA: A Transferable Signed Ensemble Gaussian Black-Box Attack against No-Reference Image Quality Assessment Models","created":"2025-09-23","cited_by_count":1,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2206.01467","title":"The Importance of Image Interpretation: Patterns of Semantic Misclassification in Real-World Adversarial Images","created":"2022-06-03","cited_by_count":0,"area":null},{"id":"2212.05827","title":"Carpet-bombing patch: attacking a deep network without usual requirements","created":"2022-12-12","cited_by_count":0,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2312.14218","title":"AutoAugment Input Transformation for Highly Transferable Targeted Attacks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2407.15683","title":"Enhancing Transferability of Targeted Adversarial Examples: A Self-Universal Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2412.14080","title":"On the Robustness of Distributed Machine Learning against Transfer Attacks","created":"2024-12-18","cited_by_count":0,"area":null},{"id":"2506.10459","title":"Boosting Adversarial Transferability for Hyperspectral Image Classification Using 3D Structure-invariant Transformation and Weighted Intermediate Feature Divergence","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2601.21220","title":"LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models","created":"2026-01-29","cited_by_count":0,"area":"mllm"},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null}],"next_cursor":null}