{"total":244,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2304.11670","title":"Evading DeepFake Detectors via Adversarial Statistical Consistency","created":"2023-04-23","cited_by_count":37,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2311.11017","title":"Improving Adversarial Transferability by Stable Diffusion","created":"2023-11-18","cited_by_count":22,"area":"diffusion"},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2112.03223","title":"Context-Aware Transfer Attacks for Object Detection","created":"2021-12-06","cited_by_count":18,"area":null},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18,"area":null},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2209.11964","title":"Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning","created":"2022-09-24","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2308.08925","title":"A White-Box False Positive Adversarial Attack Method on Contrastive Loss Based Offline Handwritten Signature Verification Models","created":"2023-08-17","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14,"area":"diffusion"},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2308.10601","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","created":"2023-08-21","cited_by_count":13,"area":null},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2511.21192","title":"When Robots Obey the Patch: Universal Transferable Patch Attacks on Vision-Language-Action Models","created":"2025-11-26","cited_by_count":13,"area":"vla"},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2406.15213","title":"Backdooring Bias ($B^2$) into Stable Diffusion Models","created":"2024-06-21","cited_by_count":12,"area":"diffusion"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2408.13809","title":"On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective","created":"2024-08-25","cited_by_count":11,"area":null},{"id":"2311.18495","title":"Improving Adversarial Transferability via Model Alignment","created":"2023-11-30","cited_by_count":10,"area":"alignment"},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2403.06014","title":"Hard-label based Small Query Black-box Adversarial Attack","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2309.13857","title":"Adversarial Attacks on Video Object Segmentation with Hard Region Discovery","created":"2023-09-25","cited_by_count":9,"area":null},{"id":"2310.01818","title":"AutoLoRa: A Parameter-Free Automated Robust Fine-Tuning Framework","created":"2023-10-03","cited_by_count":9,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2403.13322","title":"DD-RobustBench: An Adversarial Robustness Benchmark for Dataset Distillation","created":"2024-03-20","cited_by_count":8,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2503.15404","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","created":"2025-03-19","cited_by_count":7,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2307.07916","title":"On the Robustness of Split Learning against Adversarial Attacks","created":"2023-07-16","cited_by_count":6,"area":null}],"next_cursor":"100"}