{"total":58,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48,"area":null},{"id":"2205.14691","title":"On the Robustness of Safe Reinforcement Learning under Observational Perturbations","created":"2022-05-29","cited_by_count":38,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2412.16651","title":"PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2503.04963","title":"Energy-Latency Attacks: A New Adversarial Threat to Deep Learning","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2205.10677","title":"Risk-Driven Design of Perception Systems","created":"2022-05-21","cited_by_count":4,"area":null},{"id":"2409.04133","title":"Secure Traffic Sign Recognition: An Attention-Enabled Universal Image Inpainting Mechanism against Light Patch Attacks","created":"2024-09-06","cited_by_count":4,"area":null},{"id":"2202.10594","title":"Adversarial Attacks on Speech Recognition Systems for Mission-Critical Applications: A Survey","created":"2022-02-22","cited_by_count":3,"area":null},{"id":"2211.14732","title":"Deep representation learning: Fundamentals, Perspectives, Applications, and Open Challenges","created":"2022-11-27","cited_by_count":3,"area":null},{"id":"2402.12928","title":"A Literature Review of Literature Reviews in Pattern Analysis and Machine Intelligence","created":"2024-02-20","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2411.09749","title":"RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering","created":"2024-11-14","cited_by_count":3,"area":null},{"id":"2304.12486","title":"Evaluating Adversarial Robustness on Document Image Classification","created":"2023-04-24","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2407.19216","title":"EaTVul: ChatGPT-based Evasion Attack Against Software Vulnerability Detection","created":"2024-07-27","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2508.16843","title":"A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2102.09695","title":"Fortify Machine Learning Production Systems: Detect and Classify Adversarial Attacks","created":"2021-02-19","cited_by_count":1,"area":null},{"id":"2112.04033","title":"Image classifiers can not be made robust to small perturbations","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2204.11596","title":"A Simple Structure For Building A Robust Model","created":"2022-04-25","cited_by_count":1,"area":null},{"id":"2207.03689","title":"Guiding the retraining of convolutional neural networks against adversarial inputs","created":"2022-07-08","cited_by_count":1,"area":null},{"id":"2210.13762","title":"Towards Robust Recommender Systems via Triple Cooperative Defense","created":"2022-10-25","cited_by_count":1,"area":null},{"id":"2307.12442","title":"EnTri: Ensemble Learning with Tri-level Representations for Explainable Scene Recognition","created":"2023-07-23","cited_by_count":1,"area":null},{"id":"2405.20672","title":"Investigating and unmasking feature-level vulnerabilities of CNNs to adversarial perturbations","created":"2024-05-31","cited_by_count":1,"area":null},{"id":"2503.04853","title":"From Pixels to Trajectory: Universal Adversarial Example Detection via Temporal Imprints","created":"2025-03-06","cited_by_count":1,"area":null},{"id":"2509.20411","title":"Adversarial Defense in Cybersecurity: A Systematic Review of GANs for Threat Detection and Mitigation","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2608.18900","title":"TestifAI: Tomography-Based Testing for Deep Learning Systems","created":"2026-08-19","cited_by_count":1,"area":null},{"id":"2108.02756","title":"BOSS: Bidirectional One-Shot Synthesis of Adversarial Examples","created":"2021-08-05","cited_by_count":0,"area":null},{"id":"2111.10075","title":"Enhanced countering adversarial attacks via input denoising and feature restoring","created":"2021-11-19","cited_by_count":0,"area":null},{"id":"2309.01452","title":"Toward Defensive Letter Design","created":"2023-09-04","cited_by_count":0,"area":null},{"id":"2312.16957","title":"Attack Tree Analysis for Adversarial Evasion Attacks","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.12700","title":"Securing Recommender System via Cooperative Training","created":"2024-01-23","cited_by_count":0,"area":null},{"id":"2403.10562","title":"Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2405.00289","title":"Adversarial Attacks and Defense for Conversation Entailment Task","created":"2024-05-01","cited_by_count":0,"area":null},{"id":"2405.01855","title":"Robust Explainable Recommendation","created":"2024-05-03","cited_by_count":0,"area":null},{"id":"2409.13770","title":"A constrained optimization approach to improve robustness of neural networks","created":"2024-09-18","cited_by_count":0,"area":null},{"id":"2410.13010","title":"Hiding-in-Plain-Sight (HiPS) Attack on CLIP for Targetted Object Removal from Images","created":"2024-10-16","cited_by_count":0,"area":null},{"id":"2502.02913","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","created":"2025-02-05","cited_by_count":0,"area":null},{"id":"2502.04829","title":"Optimistic Gradient Learning with Hessian Corrections for High-Dimensional Black-Box Optimization","created":"2025-02-07","cited_by_count":0,"area":null},{"id":"2601.14302","title":"DDSA: Dual-Domain Strategic Attack for Spatial-Temporal Efficiency in Adversarial Robustness Testing","created":"2026-01-18","cited_by_count":0,"area":null},{"id":"2602.18573","title":"Multiclass Calibration Assessment and Recalibration of Probability Predictions via the Linear Log Odds Calibration Function","created":"2026-02-20","cited_by_count":0,"area":null},{"id":"2603.05625","title":"Identifying Adversary Characteristics from an Observed Attack","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2603.11546","title":"Multi-Task Anti-Causal Learning for Reconstructing Urban Events from Residents' Reports","created":"2026-03-12","cited_by_count":0,"area":null},{"id":"2604.20704","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2605.12792","title":"SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directions","created":"2026-05-12","cited_by_count":0,"area":null}],"next_cursor":null}