{"total":127,"rows":[{"id":"2211.14461","title":"CDDFuse: Correlation-Driven Dual-Branch Feature Decomposition for Multi-Modality Image Fusion","created":"2022-11-26","cited_by_count":223,"area":null},{"id":"2303.06840","title":"DDFM: Denoising Diffusion Model for Multi-Modality Image Fusion","created":"2023-03-13","cited_by_count":153,"area":"diffusion"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2404.09498","title":"FusionMamba: Dynamic Feature Enhancement for Multimodal Image Fusion with Mamba","created":"2024-04-15","cited_by_count":81,"area":"ssm"},{"id":"2109.04176","title":"Towards Transferable Adversarial Attacks on Vision Transformers","created":"2021-09-09","cited_by_count":80,"area":null},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74,"area":null},{"id":"2303.14341","title":"Towards Accurate Post-Training Quantization for Vision Transformer","created":"2023-03-25","cited_by_count":71,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2302.09491","title":"X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection","created":"2023-02-19","cited_by_count":59,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2406.06302","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","created":"2024-06-10","cited_by_count":38,"area":"safety"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2404.08406","title":"MambaDFuse: A Mamba-based Dual-phase Model for Multi-modality Image Fusion","created":"2024-04-12","cited_by_count":35,"area":"ssm"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2403.17301","title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving","created":"2024-03-26","cited_by_count":32,"area":null},{"id":"2405.03144","title":"PTQ4SAM: Post-Training Quantization for Segment Anything","created":"2024-05-06","cited_by_count":32,"area":null},{"id":"2308.07009","title":"ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion","created":"2023-08-14","cited_by_count":31,"area":null},{"id":"2407.00600","title":"GenderBias-\\emph{VL}: Benchmarking Gender Bias in Vision Language Models via Counterfactual Probing","created":"2024-06-30","cited_by_count":31,"area":"mllm"},{"id":"2408.02882","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","created":"2024-08-06","cited_by_count":31,"area":"agents"},{"id":"2108.09917","title":"Towards Real-world X-ray Security Inspection: A High-Quality Benchmark and Lateral Inhibition Module for Prohibited Items Detection","created":"2021-08-23","cited_by_count":30,"area":null},{"id":"2503.15092","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","created":"2025-03-19","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2305.11602","title":"Latent Imitator: Generating Natural Individual Discriminatory Instances for Black-Box Fairness Testing","created":"2023-05-19","cited_by_count":23,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2301.11233","title":"BiBench: Benchmarking and Analyzing Network Binarization","created":"2023-01-26","cited_by_count":22,"area":null},{"id":"2204.07932","title":"Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning","created":"2022-04-17","cited_by_count":21,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2209.09841","title":"Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation","created":"2022-09-20","cited_by_count":19,"area":"distill"},{"id":"2308.02350","title":"RobustMQ: Benchmarking Robustness of Quantized Models","created":"2023-08-04","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2402.15853","title":"RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation","created":"2024-02-24","cited_by_count":18,"area":null},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2503.06042","title":"Improving SAM for Camouflaged Object Detection via Dual Stream Adapters","created":"2025-03-08","cited_by_count":13,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2302.06060","title":"Threatening Patch Attacks on Object Detection in Optical Remote Sensing Images","created":"2023-02-13","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2405.09924","title":"Infrared Adversarial Car Stickers","created":"2024-05-16","cited_by_count":8,"area":null},{"id":"2511.07292","title":"PlanT 2.0: Exposing Biases and Structural Flaws in Closed-Loop Driving","created":"2025-11-10","cited_by_count":8,"area":"driving"},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2205.09592","title":"Transferable Physical Attack against Object Detection with Separable Attention","created":"2022-05-19","cited_by_count":6,"area":null},{"id":"2210.08870","title":"Differential Evolution based Dual Adversarial Camouflage: Fooling Human Eyes and Object Detectors","created":"2022-10-17","cited_by_count":6,"area":null},{"id":"2304.05098","title":"Benchmarking the Physical-world Adversarial Robustness of Vehicle Detection","created":"2023-04-11","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2409.10071","title":"Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation","created":"2024-09-16","cited_by_count":6,"area":null},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2303.04238","title":"Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors","created":"2023-03-07","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2308.03476","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","created":"2023-08-07","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2408.08989","title":"Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Models","created":"2024-08-16","cited_by_count":5,"area":null},{"id":"2412.02795","title":"Hijacking Vision-and-Language Navigation Agents with Adversarial Environmental Attacks","created":"2024-12-03","cited_by_count":5,"area":null},{"id":"2508.14527","title":"Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles","created":"2025-08-20","cited_by_count":5,"area":"driving"},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2312.01789","title":"Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical world","created":"2023-12-04","cited_by_count":4,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2409.07321","title":"Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving","created":"2024-09-11","cited_by_count":4,"area":"driving"},{"id":"2409.17963","title":"CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors","created":"2024-09-26","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2208.10688","title":"Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2508.06534","title":"MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving","created":"2025-08-04","cited_by_count":3,"area":"driving"},{"id":"2207.02963","title":"The Weaknesses of Adversarial Camouflage in Overhead Imagery","created":"2022-07-06","cited_by_count":2,"area":null},{"id":"2302.13487","title":"Contextual adversarial attack against aerial detection in the physical world","created":"2023-02-27","cited_by_count":2,"area":null},{"id":"2304.03968","title":"Benchmarking the Robustness of Quantized Models","created":"2023-04-08","cited_by_count":2,"area":null},{"id":"2304.05402","title":"Boosting Cross-task Transferability of Adversarial Patches with Visual Relations","created":"2023-04-11","cited_by_count":2,"area":null},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2,"area":null},{"id":"2405.20764","title":"CoMoFusion: Fast and High-quality Fusion of Infrared and Visible Image with Consistency Model","created":"2024-05-31","cited_by_count":2,"area":"diffusion"},{"id":"2505.13872","title":"Safety2Drive: Safety-Critical Scenario Benchmark for the Evaluation of Autonomous Driving","created":"2025-05-20","cited_by_count":2,"area":"driving"},{"id":"2507.09993","title":"3DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving","created":"2025-07-14","cited_by_count":2,"area":null},{"id":"2508.01272","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","created":"2025-08-02","cited_by_count":2,"area":null},{"id":"2511.09829","title":"Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2604.22552","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2208.07174","title":"A Human-in-the-Middle Attack against Object Detection Systems","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null}],"next_cursor":"100"}