{"total":59,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49,"area":"safety"},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2306.07713","title":"Robustness of SAM: Segment Anything Under Corruptions and Beyond","created":"2023-06-13","cited_by_count":31,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2308.06217","title":"Continual Face Forgery Detection via Historical Distribution Preserving","created":"2023-08-11","cited_by_count":23,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2207.10899","title":"Decoupled Adversarial Contrastive Learning for Self-supervised Adversarial Robustness","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2310.10010","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","created":"2023-10-16","cited_by_count":13,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2103.02984","title":"Motion-blurred Video Interpolation and Extrapolation","created":"2021-03-04","cited_by_count":11,"area":null},{"id":"2402.19322","title":"Verification of Neural Networks' Global Robustness","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2111.11165","title":"Graph-Based Similarity of Neural Network Representations","created":"2021-11-22","cited_by_count":7,"area":null},{"id":"2602.14679","title":"Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection","created":"2026-02-16","cited_by_count":7,"area":"diffusion"},{"id":"2206.05751","title":"Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation","created":"2022-06-12","cited_by_count":6,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2209.13113","title":"FG-UAP: Feature-Gathering Universal Adversarial Perturbation","created":"2022-09-27","cited_by_count":4,"area":null},{"id":"2310.12431","title":"SAM Meets UAP: Attacking Segment Anything Model With Universal Adversarial Perturbation","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2504.19000","title":"Unveiling and Mitigating Adversarial Vulnerabilities in Iterative Optimizers","created":"2025-04-26","cited_by_count":4,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2303.10594","title":"AdaptGuard: Defending Against Universal Attacks for Model Adaptation","created":"2023-03-19","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2206.10858","title":"Robust Universal Adversarial Perturbations","created":"2022-06-22","cited_by_count":2,"area":null},{"id":"2407.09958","title":"Partner in Crime: Boosting Targeted Poisoning Attacks against Federated Learning","created":"2024-07-13","cited_by_count":2,"area":null},{"id":"2105.15057","title":"Dominant Patterns: Critical Features Hidden in Deep Neural Networks","created":"2021-05-31","cited_by_count":1,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2308.06467","title":"Not So Robust After All: Evaluating the Robustness of Deep Neural Networks to Unseen Adversarial Attacks","created":"2023-08-12","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2401.17038","title":"Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR","created":"2024-01-30","cited_by_count":1,"area":null},{"id":"2409.01821","title":"When Does Visual Prompting Outperform Linear Probing for Vision-Language Models? A Likelihood Perspective","created":"2024-09-03","cited_by_count":1,"area":"mllm"},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2511.18223","title":"A Novel and Practical Universal Adversarial Perturbations against Deep Reinforcement Learning based Intrusion Detection Systems","created":"2025-11-22","cited_by_count":1,"area":null},{"id":"2106.09982","title":"Towards interpreting computer vision based on transformation invariant optimization","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2309.00007","title":"When Measures are Unreliable: Imperceptible Adversarial Perturbations toward Top-$k$ Multi-Label Learning","created":"2023-07-27","cited_by_count":0,"area":null},{"id":"2311.01696","title":"Universal Perturbation-based Secret Key-Controlled Data Hiding","created":"2023-11-03","cited_by_count":0,"area":null},{"id":"2407.15683","title":"Enhancing Transferability of Targeted Adversarial Examples: A Self-Universal Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2503.22205","title":"Data-Free Universal Attack by Exploiting the Intrinsic Vulnerability of Deep Models","created":"2025-03-28","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2510.15699","title":"Constrained Adversarial Perturbation","created":"2025-10-17","cited_by_count":0,"area":null}],"next_cursor":null}