{"total":52,"rows":[{"id":"2112.04359","title":"Ethical and social risks of harm from Language Models","created":"2021-12-08","cited_by_count":966,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2308.03166","title":"Strategic Preys Make Acute Predators: Enhancing Camouflaged Object Detectors by Generating Camouflaged Objects","created":"2023-08-06","cited_by_count":56,"area":null},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2206.07635","title":"AI Ethics Issues in Real World: Evidence from AI Incident Database","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2104.15064","title":"Black-box adversarial attacks using Evolution Strategies","created":"2021-04-30","cited_by_count":11,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2506.09237","title":"PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies","created":"2025-06-10","cited_by_count":8,"area":null},{"id":"2104.01732","title":"Semantically Stealthy Adversarial Attacks against Segmentation Models","created":"2021-04-05","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2206.05751","title":"Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation","created":"2022-06-12","cited_by_count":6,"area":null},{"id":"2207.05729","title":"Physical Passive Patch Adversarial Attacks on Visual Odometry Systems","created":"2022-07-11","cited_by_count":6,"area":null},{"id":"2505.19562","title":"FairMedQA: Benchmarking Bias in Large Language Models for Medical Question Answering","created":"2025-05-26","cited_by_count":6,"area":null},{"id":"2211.04780","title":"On the Robustness of Explanations of Deep Neural Network Models: A Survey","created":"2022-11-09","cited_by_count":5,"area":null},{"id":"2109.12406","title":"MINIMAL: Mining Models for Data Free Universal Adversarial Triggers","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2205.01493","title":"On the uncertainty principle of neural networks","created":"2022-05-03","cited_by_count":4,"area":null},{"id":"2306.11261","title":"Comparative Evaluation of Recent Universal Adversarial Perturbations in Image Classification","created":"2023-06-20","cited_by_count":4,"area":null},{"id":"2402.10983","title":"Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of Conjugate Variables in System Attacks","created":"2024-02-16","cited_by_count":4,"area":null},{"id":"2503.14281","title":"XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants","created":"2025-03-18","cited_by_count":4,"area":null},{"id":"2303.10594","title":"AdaptGuard: Defending Against Universal Attacks for Model Adaptation","created":"2023-03-19","cited_by_count":3,"area":null},{"id":"2411.11795","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2204.09803","title":"GUARD: Graph Universal Adversarial Defense","created":"2022-04-20","cited_by_count":2,"area":null},{"id":"2306.15705","title":"On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection","created":"2023-06-27","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2204.11596","title":"A Simple Structure For Building A Robust Model","created":"2022-04-25","cited_by_count":1,"area":null},{"id":"2206.04316","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","created":"2022-06-09","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2210.13235","title":"Chaos Theory and Adversarial Robustness","created":"2022-10-20","cited_by_count":1,"area":null},{"id":"2301.07520","title":"Adversarial AI in Insurance: Pervasiveness and Resilience","created":"2023-01-17","cited_by_count":1,"area":null},{"id":"2311.00207","title":"Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2405.02830","title":"You Only Need Half: Boosting Data Augmentation by Using Partial Content","created":"2024-05-05","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2506.19051","title":"NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysis","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2211.10227","title":"Adversarial Detection by Approximation of Ensemble Boundary","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2402.17104","title":"Adversarial Perturbations of Physical Signals","created":"2024-02-27","cited_by_count":0,"area":null},{"id":"2403.19150","title":"Towards Understanding Dual BN In Hybrid Adversarial Training","created":"2024-03-28","cited_by_count":0,"area":null},{"id":"2409.19619","title":"Discerning the Chaos: Detecting Adversarial Perturbations while Disentangling Intentional from Unintentional Noises","created":"2024-09-29","cited_by_count":0,"area":null},{"id":"2508.05489","title":"Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2512.10936","title":"Empirical evaluation of the Frank-Wolfe methods for constructing white-box adversarial attacks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2512.14719","title":"Hybrid Attribution Priors for Explainable and Robust Model Training","created":"2025-12-09","cited_by_count":0,"area":null}],"next_cursor":null}