{"total":28,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22,"area":null},{"id":"2506.09237","title":"PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies","created":"2025-06-10","cited_by_count":8,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2207.07797","title":"CARBEN: Composite Adversarial Robustness Benchmark","created":"2022-07-16","cited_by_count":5,"area":null},{"id":"2102.09012","title":"Improving Hierarchical Adversarial Robustness of Deep Neural Networks","created":"2021-02-17","cited_by_count":4,"area":null},{"id":"2202.13625","title":"Enhance transferability of adversarial examples with model architecture","created":"2022-02-28","cited_by_count":4,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2601.05587","title":"HogVul: Black-box Adversarial Code Generation Framework Against LM-based Vulnerability Detectors","created":"2026-01-09","cited_by_count":3,"area":null},{"id":"2210.02577","title":"A Closer Look at Robustness to L-infinity and Spatial Perturbations and their Composition","created":"2022-10-05","cited_by_count":2,"area":null},{"id":"2212.07992","title":"Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2305.07308","title":"Efficient Search of Comprehensively Robust Neural Architectures via Multi-fidelity Evaluation","created":"2023-05-12","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2507.22428","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2512.12997","title":"Calibrating Uncertainty for Zero-Shot Adversarial CLIP","created":"2025-12-15","cited_by_count":1,"area":null},{"id":"2204.09398","title":"Case-Aware Adversarial Training","created":"2022-04-20","cited_by_count":0,"area":null},{"id":"2208.06984","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2209.02406","title":"Unrestricted Adversarial Samples Based on Non-semantic Feature Clusters Substitution","created":"2022-08-31","cited_by_count":0,"area":null},{"id":"2307.06548","title":"Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations","created":"2023-07-13","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2603.29182","title":"Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses","created":"2026-03-31","cited_by_count":0,"area":null}],"next_cursor":null}