{"total":32,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2308.12857","title":"Fast Adversarial Training with Smooth Convergence","created":"2023-08-24","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2307.04099","title":"GNP Attack: Transferable Adversarial Examples via Gradient Norm Penalty","created":"2023-07-09","cited_by_count":8,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2108.07033","title":"Exploring Transferable and Robust Adversarial Perturbation Generation from the Perspective of Network Hierarchy","created":"2021-08-16","cited_by_count":4,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2508.16937","title":"NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability","created":"2025-08-23","cited_by_count":1,"area":null},{"id":"2105.00278","title":"A Perceptual Distortion Reduction Framework: Towards Generating Adversarial Examples with High Perceptual Quality and Attack Success Rate","created":"2021-05-01","cited_by_count":0,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2404.12635","title":"AED-PADA:Improving Generalizability of Adversarial Example Detection via Principal Adversarial Domain Adaptation","created":"2024-04-19","cited_by_count":0,"area":null},{"id":"2412.20807","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","created":"2024-12-30","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2601.16200","title":"Feature-Space Smoothing: Certified Robustness of Deep Representations","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null}],"next_cursor":null}