{"total":45,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2101.10011","title":"They See Me Rollin': Inherent Vulnerability of the Rolling Shutter in CMOS Image Sensors","created":"2021-01-25","cited_by_count":17,"area":null},{"id":"2204.02675","title":"Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition","created":"2022-04-06","cited_by_count":15,"area":null},{"id":"2401.03582","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","created":"2024-01-07","cited_by_count":14,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2204.10933","title":"A Tale of Two Models: Constructing Evasive Attacks on Edge Models","created":"2022-04-22","cited_by_count":6,"area":null},{"id":"2406.05810","title":"ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2407.07510","title":"Invisible Optical Adversarial Stripes on Traffic Sign against Autonomous Vehicles","created":"2024-07-10","cited_by_count":5,"area":null},{"id":"2409.04133","title":"Secure Traffic Sign Recognition: An Attention-Enabled Universal Image Inpainting Mechanism against Light Patch Attacks","created":"2024-09-06","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2210.08579","title":"Nowhere to Hide: A Lightweight Unsupervised Detector against Adversarial Examples","created":"2022-10-16","cited_by_count":3,"area":null},{"id":"2406.05800","title":"SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2107.09502","title":"Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features","created":"2021-07-19","cited_by_count":2,"area":null},{"id":"2304.01441","title":"NetFlick: Adversarial Flickering Attacks on Deep Learning Based Video Compression","created":"2023-04-04","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2201.01080","title":"Towards Understanding and Harnessing the Effect of Image Transformation in Adversarial Detection","created":"2022-01-04","cited_by_count":1,"area":null},{"id":"2307.08939","title":"Runtime Stealthy Perception Attacks against DNN-based Adaptive Cruise Control Systems","created":"2023-07-18","cited_by_count":1,"area":null},{"id":"2311.00207","title":"Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2311.16118","title":"Imperceptible CMOS camera dazzle for adversarial attacks on deep neural networks","created":"2023-10-22","cited_by_count":0,"area":null},{"id":"2409.17403","title":"Transient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving","created":"2024-09-25","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2505.05183","title":"PaniCar: Securing the Perception of Advanced Driving Assistance Systems Against Emergency Vehicle Lighting","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2511.14386","title":"Cheating Stereo Matching in Full-scale: Physical Adversarial Attack against Binocular Depth Estimation in Autonomous Driving","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2605.30578","title":"AdvScene: Rethinking Adversarial Patch Evaluation Through Scene Robustness","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2608.28778","title":"Adversarial Calibration Attack on Autonomous Vehicles","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":null}