{"total":56,"rows":[{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2304.11670","title":"Evading DeepFake Detectors via Adversarial Statistical Consistency","created":"2023-04-23","cited_by_count":37,"area":null},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2104.13673","title":"AdvHaze: Adversarial Haze Attack","created":"2021-04-28","cited_by_count":31,"area":null},{"id":"2403.05247","title":"Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds","created":"2024-03-08","cited_by_count":24,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2401.01377","title":"Does Few-shot Learning Suffer from Backdoor Attacks?","created":"2023-12-31","cited_by_count":20,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2411.02669","title":"Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack","created":"2024-11-04","cited_by_count":18,"area":"mllm"},{"id":"2507.03034","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","created":"2025-07-03","cited_by_count":18,"area":null},{"id":"2108.07920","title":"Adversarial Relighting Against Face Recognition","created":"2021-08-18","cited_by_count":16,"area":null},{"id":"2110.15629","title":"Attacking Video Recognition Models with Bullet-Screen Comments","created":"2021-10-29","cited_by_count":16,"area":null},{"id":"2412.15678","title":"Multi-Pair Temporal Sentence Grounding via Multi-Thread Knowledge Transfer Network","created":"2024-12-20","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2207.07347","title":"Feasibility of Inconspicuous GAN-generated Adversarial Patches against Object Detection","created":"2022-07-15","cited_by_count":13,"area":null},{"id":"2206.02958","title":"Saliency Cards: A Framework to Characterize and Compare Saliency Methods","created":"2022-06-07","cited_by_count":11,"area":null},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2505.15249","title":"Fooling the LVLM Judges: Visual Biases in LVLM-Based Evaluation","created":"2025-05-21","cited_by_count":10,"area":"mllm"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2605.27823","title":"Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Security","created":"2026-05-27","cited_by_count":8,"area":"safety"},{"id":"2312.09935","title":"LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2503.12874","title":"Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models","created":"2025-03-17","cited_by_count":6,"area":"mllm"},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2212.01767","title":"ConfounderGAN: Protecting Image Data Privacy with Causal Confounder","created":"2022-12-04","cited_by_count":4,"area":null},{"id":"2304.10679","title":"A Plug-and-Play Defensive Perturbation for Copyright Protection of DNN-based Applications","created":"2023-04-20","cited_by_count":3,"area":null},{"id":"2404.00924","title":"BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks","created":"2024-04-01","cited_by_count":3,"area":null},{"id":"2408.12099","title":"Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing","created":"2024-08-22","cited_by_count":3,"area":null},{"id":"2503.04385","title":"Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2605.29602","title":"CogniVerse: Revolutionizing Multi-Modal Retrieval-Augmented Generation with Cognitive Reflection and Geometric Reasoning","created":"2026-05-28","cited_by_count":3,"area":"lr"},{"id":"2606.15608","title":"On the Adversarial Robustness of Multimodal LLM Judges","created":"2026-06-14","cited_by_count":3,"area":"mllm"},{"id":"2402.03705","title":"FoolSDEdit: Deceptively Steering Your Edits Towards Targeted Attribute-aware Distribution","created":"2024-02-06","cited_by_count":2,"area":"diffusion"},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2607.15657","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","created":"2026-07-17","cited_by_count":2,"area":"agents"},{"id":"2110.02700","title":"Reversible Attack based on Local Visual Adversarial Perturbation","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2303.09858","title":"Preventing Unauthorized AI Over-Analysis by Medical Image Adversarial Watermarking","created":"2023-03-17","cited_by_count":1,"area":"safety"},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.11509","title":"PATFinger: Prompt-Adapted Transferable Fingerprinting against Unauthorized Multimodal Dataset Usage","created":"2025-04-15","cited_by_count":1,"area":"mllm"},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2310.16540","title":"Dual Defense: Adversarial, Traceable, and Invisible Robust Watermarking against Face Swapping","created":"2023-10-25","cited_by_count":0,"area":null},{"id":"2510.18362","title":"FeatureFool: Zero-Query Fooling of Video Models via Feature Map","created":"2025-10-21","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2608.06211","title":"Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era","created":"2026-08-06","cited_by_count":0,"area":"safety"}],"next_cursor":null}