{"total":93,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33,"area":null},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27,"area":null},{"id":"2307.07859","title":"Unified Adversarial Patch for Cross-modal Attacks in the Physical World","created":"2023-07-15","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2312.09558","title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World","created":"2023-12-15","cited_by_count":25,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21,"area":null},{"id":"2307.14682","title":"Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical World","created":"2023-07-27","cited_by_count":21,"area":null},{"id":"2301.00896","title":"Efficient Robustness Assessment via Adversarial Spatial-Temporal Focus on Videos","created":"2023-01-03","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2306.16170","title":"Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillation","created":"2023-06-28","cited_by_count":13,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2312.05508","title":"Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillation","created":"2023-12-09","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2307.11528","title":"Improving Viewpoint Robustness for Visual Recognition via Adversarial Training","created":"2023-07-21","cited_by_count":7,"area":null},{"id":"2407.01916","title":"Sequential Manipulation Against Rank Aggregation: Theory and Algorithm","created":"2024-07-02","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2504.10888","title":"CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors","created":"2025-04-15","cited_by_count":6,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2312.01789","title":"Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical world","created":"2023-12-04","cited_by_count":4,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2410.19863","title":"Breaking the Illusion: Real-world Challenges for Adversarial Patches in Object Detection","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2502.07408","title":"Maximal Brain Damage Without Data or Optimization: Disrupting Neural Networks via Sign-Bit Flips","created":"2025-02-11","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2306.16131","title":"Distributional Modeling for Location-Aware Adversarial Patches","created":"2023-06-28","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2409.12394","title":"The Fluorescent Veil: A Stealthy and Effective Physical Adversarial Patch Against Traffic Sign Recognition","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2411.18776","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2302.13487","title":"Contextual adversarial attack against aerial detection in the physical world","created":"2023-02-27","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2405.19179","title":"Model Agnostic Defense against Adversarial Patch Attacks on Object Detection in Unmanned Aerial Vehicles","created":"2024-05-29","cited_by_count":2,"area":null},{"id":"2409.14240","title":"Cloud Adversarial Example Generation for Remote Sensing Image Classification","created":"2024-09-21","cited_by_count":2,"area":null},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2511.09829","title":"Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2303.09858","title":"Preventing Unauthorized AI Over-Analysis by Medical Image Adversarial Watermarking","created":"2023-03-17","cited_by_count":1,"area":"safety"},{"id":"2307.14242","title":"Defending Adversarial Patches via Joint Region Localizing and Inpainting","created":"2023-07-26","cited_by_count":1,"area":null},{"id":"2311.12857","title":"Adversarial sample generation and training using geometric masks for accurate and resilient license plate character recognition","created":"2023-10-25","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2410.08338","title":"Time Traveling to Defend Against Adversarial Example Attacks in Image Classification","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2502.18724","title":"Adversarial Universal Stickers: Universal Perturbation Attacks on Traffic Sign using Stickers","created":"2025-02-26","cited_by_count":1,"area":null},{"id":"2503.12567","title":"GAN-Based Single-Stage Defense for Traffic Sign Classification Under Adversarial Patch","created":"2025-03-16","cited_by_count":1,"area":null},{"id":"2506.04823","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","created":"2025-06-05","cited_by_count":1,"area":null},{"id":"2508.01676","title":"Benchmarking Adversarial Patch Selection and Location","created":"2025-08-03","cited_by_count":1,"area":null},{"id":"2508.10600","title":"Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2604.12780","title":"Efficient Adversarial Training via Criticality-Aware Fine-Tuning","created":"2026-04-14","cited_by_count":1,"area":null},{"id":"2604.14643","title":"Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification","created":"2026-04-16","cited_by_count":1,"area":null},{"id":"2605.04675","title":"Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Pattern","created":"2026-05-06","cited_by_count":1,"area":null},{"id":"2606.11615","title":"Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks","created":"2026-06-10","cited_by_count":1,"area":"diffusion"},{"id":"2304.05048","title":"Simultaneous Adversarial Attacks On Multiple Face Recognition System Components","created":"2023-04-11","cited_by_count":0,"area":null},{"id":"2311.13233","title":"A Survey of Adversarial CAPTCHAs on its History, Classification and Generation","created":"2023-11-22","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2411.16162","title":"Sparse patches adversarial attacks via extrapolating point-wise information","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2502.19710","title":"SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models","created":"2025-02-27","cited_by_count":0,"area":"diffusion"},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2505.16318","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2506.00661","title":"Elytra: A Flexible Framework for Securing Large Vision Systems","created":"2025-05-31","cited_by_count":0,"area":null},{"id":"2506.00978","title":"CAPAA: Classifier-Agnostic Projector-Based Adversarial Attack","created":"2025-06-01","cited_by_count":0,"area":null},{"id":"2506.08611","title":"Towards Class-wise Fair Adversarial Training via Anti-Bias Soft Label Distillation","created":"2025-06-10","cited_by_count":0,"area":null},{"id":"2506.09538","title":"AngleRoCL: Angle-Robust Concept Learning for Physically View-Invariant T2I Adversarial Patches","created":"2025-06-11","cited_by_count":0,"area":"diffusion"},{"id":"2509.23198","title":"Real-World Transferable Adversarial Attack on Face-Recognition Systems","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2603.21867","title":"Adversarial Camouflage","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2604.20895","title":"Towards a Systematic Risk Assessment of Deep Neural Network Limitations in Autonomous Driving Perception","created":"2026-04-21","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2608.04559","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.30839","title":"Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.18133","title":"Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}