{"total":83,"rows":[{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2403.17301","title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving","created":"2024-03-26","cited_by_count":32,"area":null},{"id":"2306.07713","title":"Robustness of SAM: Segment Anything Under Corruptions and Beyond","created":"2023-06-13","cited_by_count":31,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2312.09558","title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World","created":"2023-12-15","cited_by_count":25,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2207.03574","title":"Demystifying the Adversarial Robustness of Random Transformation Defenses","created":"2022-06-18","cited_by_count":14,"area":null},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2310.10010","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","created":"2023-10-16","cited_by_count":13,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2412.18844","title":"Improving Integrated Gradient-based Transferable Adversarial Examples by Refining the Integration Path","created":"2024-12-25","cited_by_count":10,"area":null},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2503.15404","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","created":"2025-03-19","cited_by_count":7,"area":null},{"id":"2206.08316","title":"Boosting the Adversarial Transferability of Surrogate Models with Dark Knowledge","created":"2022-06-16","cited_by_count":6,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2302.12252","title":"Boosting Adversarial Transferability using Dynamic Cues","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2402.00418","title":"Benchmarking Transferable Adversarial Attacks","created":"2024-02-01","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2103.09916","title":"Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?","created":"2021-03-17","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2309.01104","title":"Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection","created":"2023-09-03","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2203.05323","title":"Exploiting the Potential of Datasets: A Data-Centric Approach for Model Robustness","created":"2022-03-10","cited_by_count":2,"area":null},{"id":"2208.08677","title":"Enhancing Targeted Attack Transferability via Diversified Weight Pruning","created":"2022-08-18","cited_by_count":2,"area":null},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2307.00274","title":"Common Knowledge Learning for Generating Transferable Adversarial Examples","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2509.07495","title":"Generating Transferrable Adversarial Examples via Local Mixing and Logits Optimization for Remote Sensing Object Recognition","created":"2025-09-09","cited_by_count":1,"area":null},{"id":"2604.16540","title":"PoInit-of-View: Poisoning Initialization of Views Transfers Across Multiple 3D Reconstruction Systems","created":"2026-04-17","cited_by_count":1,"area":null},{"id":"2206.01467","title":"The Importance of Image Interpretation: Patterns of Semantic Misclassification in Real-World Adversarial Images","created":"2022-06-03","cited_by_count":0,"area":null},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2307.12342","title":"Towards Generic and Controllable Attacks Against Object Detection","created":"2023-07-23","cited_by_count":0,"area":null},{"id":"2308.05320","title":"Generating Transferable and Stealthy Adversarial Patch via Attention-guided Adversarial Inpainting","created":"2023-08-10","cited_by_count":0,"area":null},{"id":"2312.14218","title":"AutoAugment Input Transformation for Highly Transferable Targeted Attacks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2406.05531","title":"Enhancing Adversarial Transferability via Information Bottleneck Constraints","created":"2024-06-08","cited_by_count":0,"area":null},{"id":"2407.01925","title":"Looking From the Future: Multi-order Iterations Can Enhance Adversarial Attack Transferability","created":"2024-07-02","cited_by_count":0,"area":null},{"id":"2407.15683","title":"Enhancing Transferability of Targeted Adversarial Examples: A Self-Universal Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2412.11168","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","created":"2024-12-15","cited_by_count":0,"area":null},{"id":"2412.20807","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","created":"2024-12-30","cited_by_count":0,"area":null},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2504.18594","title":"RaPA: Enhancing Transferable Targeted Attacks via Random Parameter Pruning","created":"2025-04-24","cited_by_count":0,"area":null},{"id":"2507.18457","title":"Revisiting Physically Realizable Adversarial Object Attack against LiDAR-based Detection: Clarifying Problem Formulation and Experimental Protocols","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null}],"next_cursor":null}