{"total":36,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2111.06628","title":"Learning to Break Deep Perceptual Hashing: The Use Case NeuralHash","created":"2021-11-12","cited_by_count":25,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2308.10315","title":"Improving Adversarial Robustness of Masked Autoencoders via Test-time Frequency-domain Prompting","created":"2023-08-20","cited_by_count":12,"area":null},{"id":"2403.10935","title":"Understanding Robustness of Visual State Space Models for Image Classification","created":"2024-03-16","cited_by_count":12,"area":null},{"id":"2401.05217","title":"Exploring Vulnerabilities of No-Reference Image Quality Assessment Models: A Query-Based Black-Box Method","created":"2024-01-10","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2503.03272","title":"Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients","created":"2025-03-05","cited_by_count":9,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2211.16040","title":"AdvMask: A Sparse Adversarial Attack Based Data Augmentation Method for Image Classification","created":"2022-11-29","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2407.15385","title":"Towards Robust Vision Transformer via Masked Adaptive Ensemble","created":"2024-07-22","cited_by_count":4,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2212.07495","title":"SAIF: Sparse Adversarial and Imperceptible Attack Framework","created":"2022-12-14","cited_by_count":2,"area":null},{"id":"2103.10787","title":"LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial Attack","created":"2021-03-19","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2510.16637","title":"A Versatile Framework for Designing Group-Sparse Adversarial Attacks","created":"2025-10-18","cited_by_count":1,"area":null},{"id":"2105.00278","title":"A Perceptual Distortion Reduction Framework: Towards Generating Adversarial Examples with High Perceptual Quality and Attack Success Rate","created":"2021-05-01","cited_by_count":0,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2203.09756","title":"AutoAdversary: A Pixel Pruning Method for Sparse Adversarial Attack","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2411.16162","title":"Sparse patches adversarial attacks via extrapolating point-wise information","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2504.02335","title":"Evaluating and Enhancing Segmentation Model Robustness with Metamorphic Testing","created":"2025-04-03","cited_by_count":0,"area":null},{"id":"2602.06578","title":"Exploring Sparsity and Smoothness of Arbitrary Lp Norms in Adversarial Attacks","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2608.11285","title":"SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}