{"total":24,"rows":[{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2407.13588","title":"Robust Calibration of Large Vision-Language Adapters","created":"2024-07-18","cited_by_count":28,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2206.07179","title":"Proximal Splitting Adversarial Attacks for Semantic Segmentation","created":"2022-06-14","cited_by_count":23,"area":null},{"id":"2401.17699","title":"Unified Physical-Digital Face Attack Detection","created":"2024-01-31","cited_by_count":17,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2211.15088","title":"Class Adaptive Network Calibration","created":"2022-11-28","cited_by_count":13,"area":null},{"id":"2404.08450","title":"Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues","created":"2024-04-12","cited_by_count":8,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2201.01235","title":"On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Error","created":"2022-01-04","cited_by_count":6,"area":null},{"id":"2308.11284","title":"LEAP: Efficient and Automated Test Method for NLP Software","created":"2023-08-22","cited_by_count":6,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2505.13327","title":"Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning","created":"2025-05-19","cited_by_count":5,"area":null},{"id":"2209.04293","title":"Robust-by-Design Classification via Unitary-Gradient Neural Networks","created":"2022-09-09","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2403.12364","title":"Class and Region-Adaptive Constraints for Network Calibration","created":"2024-03-19","cited_by_count":2,"area":null},{"id":"2212.14106","title":"Provable Robust Saliency-based Explanations","created":"2022-12-28","cited_by_count":1,"area":null},{"id":"2303.12481","title":"Revisiting DeepFool: generalization and improvement","created":"2023-03-22","cited_by_count":1,"area":null},{"id":"2512.06010","title":"Fast and Flexible Robustness Certificates for Semantic Segmentation","created":"2025-12-03","cited_by_count":1,"area":null},{"id":"2210.03261","title":"Adversarial Lagrangian Integrated Contrastive Embedding for Limited Size Datasets","created":"2022-10-06","cited_by_count":0,"area":null},{"id":"2307.04024","title":"Robust Ranking Explanations","created":"2023-07-08","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2601.09522","title":"Class Adaptive Conformal Training","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null}],"next_cursor":null}