{"total":75,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2111.11368","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","created":"2021-11-22","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2207.03574","title":"Demystifying the Adversarial Robustness of Random Transformation Defenses","created":"2022-06-18","cited_by_count":14,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2111.11165","title":"Graph-Based Similarity of Neural Network Representations","created":"2021-11-22","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2305.00866","title":"Attack-SAM: Towards Attacking Segment Anything Model With Adversarial Examples","created":"2023-05-01","cited_by_count":5,"area":null},{"id":"2312.13118","title":"LRS: Enhancing Adversarial Transferability through Lipschitz Regularized Surrogate","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2206.09410","title":"Low-Mid Adversarial Perturbation against Unauthorized Face Recognition System","created":"2022-06-19","cited_by_count":4,"area":null},{"id":"2308.07625","title":"Backpropagation Path Search On Adversarial Transferability","created":"2023-08-15","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2503.06276","title":"Exploring Adversarial Transferability between Kolmogorov-arnold Networks","created":"2025-03-08","cited_by_count":4,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2111.12922","title":"Clustering Effect of (Linearized) Adversarial Robust Models","created":"2021-11-25","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2112.11018","title":"A Theoretical View of Linear Backpropagation and Its Convergence","created":"2021-12-21","cited_by_count":2,"area":null},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2401.17038","title":"Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR","created":"2024-01-30","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2408.15833","title":"Network transferability of adversarial patches in real-time object detection","created":"2024-08-28","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2503.00932","title":"Improving the Transferability of Adversarial Attacks by an Input Transpose","created":"2025-03-02","cited_by_count":1,"area":null},{"id":"2507.16052","title":"Disrupting Semantic and Abstract Features for Better Adversarial Transferability","created":"2025-07-21","cited_by_count":1,"area":null},{"id":"2604.05461","title":"Content Fuzzing for Escaping Information Cocoons on Digital Social Media","created":"2026-04-07","cited_by_count":1,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2206.04472","title":"Early Transferability of Adversarial Examples in Deep Neural Networks","created":"2022-06-09","cited_by_count":0,"area":null},{"id":"2207.08948","title":"Multi-step domain adaptation by adversarial attack to $\\mathcal{H} \\Delta \\mathcal{H}$-divergence","created":"2022-07-18","cited_by_count":0,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2309.13752","title":"Improving Robustness of Deep Convolutional Neural Networks via Multiresolution Learning","created":"2023-09-24","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2412.14080","title":"On the Robustness of Distributed Machine Learning against Transfer Attacks","created":"2024-12-18","cited_by_count":0,"area":null},{"id":"2503.20310","title":"Enabling Heterogeneous Adversarial Transferability via Feature Permutation Attacks","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2601.21323","title":"Adversarial Vulnerability Transcends Computational Paradigms: Feature Engineering Provides No Defense Against Neural Adversarial Transfer","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2606.31378","title":"MAPE: Defending Against Transferable Adversarial Attacks Using Multi-Source Adversarial Perturbations Elimination","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2608.04441","title":"Season: Spectrum-Aware Orthogonal Gradient Refinement for Transfer-Based Adversarial Attacks","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.11815","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null},{"id":"2608.25133","title":"Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning","created":"2026-08-25","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}