{"total":88,"rows":[{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2210.09852","title":"Scaling Adversarial Training to Large Perturbation Bounds","created":"2022-10-18","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2110.03135","title":"Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2308.12857","title":"Fast Adversarial Training with Smooth Convergence","created":"2023-08-24","cited_by_count":14,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2306.16170","title":"Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillation","created":"2023-06-28","cited_by_count":13,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2209.09117","title":"Part-Based Models Improve Adversarial Robustness","created":"2022-09-15","cited_by_count":11,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2111.14564","title":"MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack","created":"2021-11-29","cited_by_count":9,"area":null},{"id":"2306.14126","title":"Robust Spatiotemporal Traffic Forecasting with Reinforced Dynamic Adversarial Training","created":"2023-06-25","cited_by_count":9,"area":null},{"id":"2503.03272","title":"Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients","created":"2025-03-05","cited_by_count":9,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2204.14187","title":"Randomized Smoothing under Attack: How Good is it in Pratice?","created":"2022-04-28","cited_by_count":7,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2207.04307","title":"Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Features","created":"2022-07-09","cited_by_count":7,"area":null},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2311.10992","title":"Towards Robust and Accurate Visual Prompting","created":"2023-11-18","cited_by_count":5,"area":null},{"id":"2311.17608","title":"Adversarial Robust Memory-Based Continual Learner","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2306.02618","title":"Enhance Diffusion to Improve Robust Generalization","created":"2023-06-05","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2201.12527","title":"Scale-Invariant Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2022-01-29","cited_by_count":2,"area":null},{"id":"2211.08384","title":"Universal Distributional Decision-based Black-box Adversarial Attack with Reinforcement Learning","created":"2022-11-15","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2601.05789","title":"SAFE: Secure and Accurate Federated Learning for Privacy-Preserving Brain-Computer Interfaces","created":"2026-01-09","cited_by_count":2,"area":null},{"id":"2102.05368","title":"RoBIC: A benchmark suite for assessing classifiers robustness","created":"2021-02-10","cited_by_count":1,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2303.07474","title":"Can Adversarial Examples Be Parsed to Reveal Victim Model Information?","created":"2023-03-13","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2306.14217","title":"On Evaluating the Adversarial Robustness of Semantic Segmentation Models","created":"2023-06-25","cited_by_count":1,"area":null},{"id":"2407.09150","title":"Evaluating the Adversarial Robustness of Semantic Segmentation: Trying Harder Pays Off","created":"2024-07-12","cited_by_count":1,"area":null},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.17577","title":"Boosting Ray Search Procedure of Hard-label Attacks with Transfer-based Priors","created":"2025-07-23","cited_by_count":1,"area":null},{"id":"2103.03325","title":"Hard-label Manifolds: Unexpected Advantages of Query Efficiency for Finding On-manifold Adversarial Examples","created":"2021-03-04","cited_by_count":0,"area":null},{"id":"2110.14030","title":"Improving Local Effectiveness for Global robust training","created":"2021-10-26","cited_by_count":0,"area":null},{"id":"2112.00973","title":"Adversarial Robustness of Deep Reinforcement Learning based Dynamic Recommender Systems","created":"2021-12-02","cited_by_count":0,"area":null},{"id":"2206.10988","title":"AdvSmo: Black-box Adversarial Attack by Smoothing Linear Structure of Texture","created":"2022-06-22","cited_by_count":0,"area":null},{"id":"2208.13182","title":"Cross-domain Cross-architecture Black-box Attacks on Fine-tuned Models with Transferred Evolutionary Strategies","created":"2022-08-28","cited_by_count":0,"area":null},{"id":"2308.11845","title":"SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks","created":"2023-08-23","cited_by_count":0,"area":null},{"id":"2310.12017","title":"Exploring the Adversarial Robustness of Face Forgery Detection with Decision-based Black-box Attacks","created":"2023-10-18","cited_by_count":0,"area":null},{"id":"2312.07245","title":"DTA: Distribution Transform-based Attack for Query-Limited Scenario","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2403.13196","title":"ADAPT to Robustify Prompt Tuning Vision Transformers","created":"2024-03-19","cited_by_count":0,"area":null},{"id":"2406.05796","title":"ProFeAT: Projected Feature Adversarial Training for Self-Supervised Learning of Robust Representations","created":"2024-06-09","cited_by_count":0,"area":null},{"id":"2506.06933","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2510.02642","title":"Sequence-Preserving Dual-FoV Defense for Traffic Sign and Light Recognition in Autonomous Vehicles","created":"2025-10-03","cited_by_count":0,"area":null},{"id":"2512.09264","title":"FBA$^2$D: Frequency-based Black-box Attack for AI-generated Image Detection","created":"2025-12-10","cited_by_count":0,"area":null},{"id":"2512.10275","title":"Sample-wise Adaptive Weighting for Transfer Consistency in Adversarial Distillation","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2512.21241","title":"Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks","created":"2025-12-24","cited_by_count":0,"area":null},{"id":"2601.14300","title":"Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations","created":"2026-01-17","cited_by_count":0,"area":null},{"id":"2605.31219","title":"Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks","created":"2026-05-29","cited_by_count":0,"area":null},{"id":"2607.16414","title":"Signal-based Model Access Risk Analysis for AI System Operations Security","created":"2026-07-17","cited_by_count":0,"area":null},{"id":"2610.17382","title":"Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion","created":"2026-10-12","cited_by_count":0,"area":null},{"id":"2610.18724","title":"AIRRI: Towards a Human-Readable, Machine-Resistant Reading Interface","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}