{"total":48,"rows":[{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2205.07972","title":"Sparse Visual Counterfactual Explanations in Image Space","created":"2022-05-16","cited_by_count":30,"area":null},{"id":"2307.15157","title":"R-LPIPS: An Adversarially Robust Perceptual Similarity Metric","created":"2023-07-27","cited_by_count":28,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2207.11727","title":"Can we achieve robustness from data alone?","created":"2022-07-24","cited_by_count":16,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2310.18274","title":"LipSim: A Provably Robust Perceptual Similarity Metric","created":"2023-10-27","cited_by_count":15,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2109.04460","title":"Protein Folding Neural Networks Are Not Robust","created":"2021-09-09","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2602.03284","title":"Time Is All It Takes: Spike-Retiming Attacks on Event-Driven Spiking Neural Networks","created":"2026-02-03","cited_by_count":5,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2405.16918","title":"The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2312.13628","title":"Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples","created":"2023-12-21","cited_by_count":3,"area":null},{"id":"2411.19853","title":"Towards Class-wise Robustness Analysis","created":"2024-11-29","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2212.03069","title":"Multiple Perturbation Attack: Attack Pixelwise Under Different $\\ell_p$-norms For Better Adversarial Performance","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2405.10924","title":"Boosting Few-Pixel Robustness Verification via Covering Verification Designs","created":"2024-05-17","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2509.04980","title":"MAIA: An Inpainting-Based Approach for Music Adversarial Attacks","created":"2025-09-05","cited_by_count":2,"area":null},{"id":"2511.12985","title":"Angular Gradient Sign Method: Uncovering Vulnerabilities in Hyperbolic Networks","created":"2025-11-17","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2411.17936","title":"Stealthy Multi-Task Adversarial Attacks","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2307.09804","title":"Fix your downsampling ASAP! Be natively more robust via Aliasing and Spectral Artifact free Pooling","created":"2023-07-19","cited_by_count":0,"area":null},{"id":"2309.17048","title":"On Continuity of Robust and Accurate Classifiers","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2403.00103","title":"On Robustness and Generalization of ML-Based Congestion Predictors to Valid and Imperceptible Perturbations","created":"2024-02-29","cited_by_count":0,"area":null},{"id":"2404.01642","title":"Patch Synthesis for Property Repair of Deep Neural Networks","created":"2024-04-02","cited_by_count":0,"area":null},{"id":"2406.08443","title":"Transform-Dependent Adversarial Attacks","created":"2024-06-12","cited_by_count":0,"area":null},{"id":"2409.06420","title":"Unrevealed Threats: A Comprehensive Study of the Adversarial Robustness of Underwater Image Enhancement Models","created":"2024-09-10","cited_by_count":0,"area":null},{"id":"2411.16162","title":"Sparse patches adversarial attacks via extrapolating point-wise information","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2502.21041","title":"Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2510.14460","title":"Structured Universal Adversarial Attacks on Object Detection for Video Sequences","created":"2025-10-16","cited_by_count":0,"area":null},{"id":"2602.06578","title":"Exploring Sparsity and Smoothness of Arbitrary Lp Norms in Adversarial Attacks","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2603.00481","title":"Analyzing Physical Adversarial Example Threats to Machine Learning in Election Systems","created":"2026-02-28","cited_by_count":0,"area":null},{"id":"2605.06357","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2606.21045","title":"OVIG: Optimistic Verification of AI Training Integrity via Gradient Signals","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.04652","title":"Pareto-Improving Adversarial Attacks with Primal-Dual Regularization","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}