{"total":30,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2106.10785","title":"Adversarial Attack on Graph Neural Networks as An Influence Maximization Problem","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2308.05681","title":"Hard No-Box Adversarial Attack on Skeleton-Based Human Action Recognition with Skeleton-Motion-Informed Gradient","created":"2023-08-10","cited_by_count":10,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2210.13660","title":"Multi-SpacePhish: Extending the Evasion-space of Adversarial Attacks against Phishing Website Detectors using Machine Learning","created":"2022-10-24","cited_by_count":7,"area":null},{"id":"2106.07221","title":"Certification of embedded systems based on Machine Learning: A survey","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5,"area":null},{"id":"2209.07235","title":"Sound and Complete Verification of Polynomial Networks","created":"2022-09-15","cited_by_count":4,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2307.06608","title":"MF-CLIP: Leveraging CLIP as Surrogate Models for No-box Adversarial Attacks","created":"2023-07-13","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2405.15244","title":"Adversarial Attacks on Hidden Tasks in Multi-Task Learning","created":"2024-05-24","cited_by_count":2,"area":null},{"id":"2503.00063","title":"NoPain: No-box Point Cloud Attack via Optimal Transport Singular Boundary","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2607.05522","title":"Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Control","created":"2026-07-06","cited_by_count":2,"area":null},{"id":"2302.14166","title":"GLOW: Global Layout Aware Attacks on Object Detection","created":"2023-02-27","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2604.05461","title":"Content Fuzzing for Escaping Information Cocoons on Digital Social Media","created":"2026-04-07","cited_by_count":1,"area":null}],"next_cursor":null}