{"total":60,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2111.12485","title":"Understanding the Dynamics of DNNs Using Graph Modularity","created":"2021-11-24","cited_by_count":26,"area":null},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2202.05687","title":"D4: Detection of Adversarial Diffusion Deepfakes Using Disjoint Ensembles","created":"2022-02-11","cited_by_count":11,"area":null},{"id":"2303.06280","title":"Stateful Defenses for Machine Learning Models Are Not Yet Secure Against Black-box Attacks","created":"2023-03-11","cited_by_count":11,"area":null},{"id":"2401.05217","title":"Exploring Vulnerabilities of No-Reference Image Quality Assessment Models: A Query-Based Black-Box Method","created":"2024-01-10","cited_by_count":10,"area":null},{"id":"2203.03711","title":"Algorithmic audits of algorithms, and the law","created":"2022-02-15","cited_by_count":9,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2204.14187","title":"Randomized Smoothing under Attack: How Good is it in Pratice?","created":"2022-04-28","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2111.07239","title":"Robust and Accurate Object Detection via Self-Knowledge Distillation","created":"2021-11-14","cited_by_count":3,"area":"distill"},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2307.16331","title":"Theoretically Principled Trade-off for Stateful Defenses against Query-Based Black-Box Attacks","created":"2023-07-30","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2102.05368","title":"RoBIC: A benchmark suite for assessing classifiers robustness","created":"2021-02-10","cited_by_count":1,"area":null},{"id":"2202.06488","title":"Finding Dynamics Preserving Adversarial Winning Tickets","created":"2022-02-14","cited_by_count":1,"area":null},{"id":"2303.05719","title":"Boosting Adversarial Attacks by Leveraging Decision Boundary Information","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2505.16313","title":"Accelerating Targeted Hard-Label Adversarial Attacks in Low-Query Black-Box Settings","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2507.17577","title":"Boosting Ray Search Procedure of Hard-label Attacks with Transfer-based Priors","created":"2025-07-23","cited_by_count":1,"area":null},{"id":"2509.18546","title":"SEGA: A Transferable Signed Ensemble Gaussian Black-Box Attack against No-Reference Image Quality Assessment Models","created":"2025-09-23","cited_by_count":1,"area":null},{"id":"2604.25491","title":"The Forensic Cost of Watermark Removal: From Dedicated Attacks to Image Editing","created":"2026-04-28","cited_by_count":1,"area":null},{"id":"2204.09398","title":"Case-Aware Adversarial Training","created":"2022-04-20","cited_by_count":0,"area":null},{"id":"2206.10988","title":"AdvSmo: Black-box Adversarial Attack by Smoothing Linear Structure of Texture","created":"2022-06-22","cited_by_count":0,"area":null},{"id":"2210.00292","title":"DeltaBound Attack: Efficient decision-based attack in low queries regime","created":"2022-10-01","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.09316","title":"Only My Model On My Data: A Privacy Preserving Approach Protecting one Model and Deceiving Unauthorized Black-Box Models","created":"2024-02-14","cited_by_count":0,"area":null},{"id":"2407.02248","title":"EvolBA: Evolutionary Boundary Attack under Hard-label Black Box condition","created":"2024-07-02","cited_by_count":0,"area":null},{"id":"2407.11073","title":"SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images","created":"2024-07-13","cited_by_count":0,"area":null},{"id":"2409.06726","title":"Feedback-based Modal Mutual Search for Attacking Vision-Language Pre-training Models","created":"2024-08-27","cited_by_count":0,"area":"mllm"},{"id":"2412.00404","title":"Hard-Label Black-Box Attacks on 3D Point Clouds","created":"2024-11-30","cited_by_count":0,"area":null},{"id":"2505.06860","title":"DP-TRAE: A Dual-Phase Merging Transferable Reversible Adversarial Example for Image Privacy Protection","created":"2025-05-11","cited_by_count":0,"area":null},{"id":"2505.19194","title":"Curvature Dynamic Black-box Attack: revisiting adversarial robustness via dynamic curvature estimation","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2506.06933","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2506.23676","title":"A Unified Framework for Stealthy Adversarial Generation via Latent Optimization and Transferability Enhancement","created":"2025-06-30","cited_by_count":0,"area":"diffusion"},{"id":"2512.21241","title":"Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks","created":"2025-12-24","cited_by_count":0,"area":null},{"id":"2601.14300","title":"Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations","created":"2026-01-17","cited_by_count":0,"area":null},{"id":"2602.18800","title":"Operational Robustness of LLMs on Code Generation","created":"2026-02-21","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2605.06380","title":"Empirical Evidence for Simply Connected Decision Regions in Image Classifiers","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.25663","title":"Opportunistic Target Selection: Early Directional Commitment for Query-Efficient Black-Box Adversarial Attacks","created":"2026-05-25","cited_by_count":0,"area":null},{"id":"2605.31219","title":"Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks","created":"2026-05-29","cited_by_count":0,"area":null},{"id":"2606.24388","title":"PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models","created":"2026-06-23","cited_by_count":0,"area":"mllm"},{"id":"2610.18724","title":"AIRRI: Towards a Human-Readable, Machine-Resistant Reading Interface","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}