{"total":16,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2105.11645","title":"Feature Space Targeted Attacks by Statistic Alignment","created":"2021-05-25","cited_by_count":21,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2203.04607","title":"Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformation","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2505.13327","title":"Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning","created":"2025-05-19","cited_by_count":5,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2504.08866","title":"On Transfer-based Universal Attacks in Pure Black-box Setting","created":"2025-04-11","cited_by_count":0,"area":null},{"id":"2511.05073","title":"Deep learning models are vulnerable, but adversarial examples are even more vulnerable","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2511.13749","title":"DeepDefense: Robust Learning via Layer-Wise Gradient-Feature Alignment","created":"2025-11-13","cited_by_count":0,"area":null}],"next_cursor":null}