{"total":65,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2105.03640","title":"On Guaranteed Optimal Robust Explanations for NLP Models","created":"2021-05-08","cited_by_count":54,"area":null},{"id":"2102.07188","title":"Think Global and Act Local: Bayesian Optimisation over High-Dimensional Categorical and Mixed Search Spaces","created":"2021-02-14","cited_by_count":53,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2110.03301","title":"EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detection","created":"2021-10-07","cited_by_count":13,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2409.17977","title":"Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization","created":"2024-09-26","cited_by_count":12,"area":null},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2503.03272","title":"Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients","created":"2025-03-05","cited_by_count":9,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2204.09397","title":"Adversarial Scratches: Deployable Attacks to CNN Classifiers","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2303.04238","title":"Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors","created":"2023-03-07","cited_by_count":5,"area":null},{"id":"2408.01541","title":"Guardians of Image Quality: Benchmarking Defenses Against Adversarial Attacks on Image Quality Metrics","created":"2024-08-02","cited_by_count":5,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2210.15446","title":"LP-BFGS attack: An adversarial attack based on the Hessian with limited pixels","created":"2022-10-26","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2205.15128","title":"Level Up with ML Vulnerability Identification: Leveraging Domain Constraints in Feature Space for Robust Android Malware Detection","created":"2022-05-30","cited_by_count":2,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2405.10924","title":"Boosting Few-Pixel Robustness Verification via Covering Verification Designs","created":"2024-05-17","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2511.09834","title":"CertMask: Certifiable Defense Against Adversarial Patches via Theoretically Optimal Mask Coverage","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2511.10576","title":"Tight Robustness Certification Through the Convex Hull of $\\ell_0$ Attacks","created":"2025-11-13","cited_by_count":1,"area":null},{"id":"2511.13592","title":"Power Homotopy for Zeroth-Order Non-Convex Optimizations","created":"2025-11-17","cited_by_count":1,"area":null},{"id":"2604.07831","title":"Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection","created":"2026-04-09","cited_by_count":1,"area":"agents"},{"id":"2203.04405","title":"Art-Attack: Black-Box Adversarial Attack via Evolutionary Art","created":"2022-03-07","cited_by_count":0,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2309.05381","title":"Hazards in Deep Learning Testing: Prevalence, Impact and Recommendations","created":"2023-09-11","cited_by_count":0,"area":null},{"id":"2402.03576","title":"Generalization Properties of Adversarial Training for $\\ell_0$-Bounded Adversarial Attacks","created":"2024-02-05","cited_by_count":0,"area":null},{"id":"2502.21041","title":"Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2510.18362","title":"FeatureFool: Zero-Query Fooling of Video Models via Feature Map","created":"2025-10-21","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2608.11285","title":"SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.19351","title":"Uncovering the Limits of Proof Sharing for Neural Networks","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2610.00125","title":"A Comprehensive Review of One-Pixel Attack: Research Status, Taxonomy, Applications, Regulation Policy and Future Directions","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}