{"total":66,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.16746","title":"Towards More Flexible and Accurate Object Tracking with Natural Language: Algorithms and Benchmark","created":"2021-03-31","cited_by_count":126,"area":null},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2311.16194","title":"BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP","created":"2023-11-26","cited_by_count":67,"area":"mllm"},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2408.02882","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","created":"2024-08-06","cited_by_count":31,"area":"agents"},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2201.07425","title":"WebUAV-3M: A Benchmark for Unveiling the Power of Million-Scale Deep UAV Tracking","created":"2022-01-19","cited_by_count":26,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25,"area":null},{"id":"2403.05247","title":"Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds","created":"2024-03-08","cited_by_count":24,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2505.06679","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","created":"2025-05-10","cited_by_count":21,"area":"diffusion"},{"id":"2209.09841","title":"Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation","created":"2022-09-20","cited_by_count":19,"area":"distill"},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2203.06898","title":"Efficient universal shuffle attack for visual object tracking","created":"2022-03-14","cited_by_count":14,"area":null},{"id":"2207.02088","title":"SiamMask: A Framework for Fast Online Object Tracking and Segmentation","created":"2022-07-05","cited_by_count":13,"area":null},{"id":"2602.18739","title":"When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models","created":"2026-02-21","cited_by_count":13,"area":"wm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2207.08044","title":"DIMBA: Discretely Masked Black-Box Attack in Single Object Tracking","created":"2022-07-17","cited_by_count":11,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2105.02480","title":"A Simple and Strong Baseline for Universal Targeted Attacks on Siamese Visual Tracking","created":"2021-05-06","cited_by_count":9,"area":null},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9,"area":null},{"id":"2508.02028","title":"Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving","created":"2025-08-04","cited_by_count":8,"area":"mllm"},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2508.14527","title":"Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles","created":"2025-08-20","cited_by_count":5,"area":"driving"},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2508.06534","title":"MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving","created":"2025-08-04","cited_by_count":3,"area":"driving"},{"id":"2204.00734","title":"SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learning","created":"2022-04-02","cited_by_count":2,"area":null},{"id":"2204.11410","title":"Single Object Tracking Research: A Survey","created":"2022-04-25","cited_by_count":2,"area":null},{"id":"2508.15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","created":"2025-08-21","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2603.05872","title":"Evolving Deception: When Agents Evolve, Deception Wins","created":"2026-03-06","cited_by_count":2,"area":"agents"},{"id":"2402.17976","title":"Enhancing Tracking Robustness with Auxiliary Adversarial Defense Networks","created":"2024-02-28","cited_by_count":1,"area":null},{"id":"2404.06247","title":"LRR: Language-Driven Resamplable Continuous Representation against Adversarial Tracking Attacks","created":"2024-04-09","cited_by_count":1,"area":null},{"id":"2410.20893","title":"Adversarial Attacks on LiDAR-Based Tracking Across Road Users: Robustness Evaluation and Target-Aware Black-Box Method","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2505.08999","title":"Towards Adaptive Meta-Gradient Adversarial Examples for Visual Tracking","created":"2025-05-13","cited_by_count":1,"area":null},{"id":"2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","created":"2026-04-06","cited_by_count":1,"area":"mllm"},{"id":"2607.05783","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","created":"2026-07-07","cited_by_count":1,"area":"driving"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2504.14423","title":"Adversarial Attack for RGB-Event based Visual Object Tracking","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2509.20793","title":"FERD: Fairness-Enhanced Data-Free Robustness Distillation","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2608.21114","title":"CIVA: Critic-Induced Value-Subspace Attacks on Visual World-Model Agents","created":"2026-08-21","cited_by_count":0,"area":"wm"}],"next_cursor":null}