{"total":44,"rows":[{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39,"area":null},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2202.05687","title":"D4: Detection of Adversarial Diffusion Deepfakes Using Disjoint Ensembles","created":"2022-02-11","cited_by_count":11,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2208.12428","title":"Robust Prototypical Few-Shot Organ Segmentation with Regularized Neural-ODEs","created":"2022-08-26","cited_by_count":5,"area":null},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2304.12829","title":"Improving Robustness Against Adversarial Attacks with Deeply Quantized Neural Networks","created":"2023-04-25","cited_by_count":3,"area":null},{"id":"2310.09891","title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning","created":"2023-10-15","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2212.11209","title":"A Theoretical Study of The Effects of Adversarial Attacks on Sparse Regression","created":"2022-12-21","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2306.01762","title":"Rapid Plug-in Defenders","created":"2023-05-27","cited_by_count":1,"area":null},{"id":"2309.06438","title":"Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks","created":"2023-09-12","cited_by_count":1,"area":null},{"id":"2406.00918","title":"Robustness of Practical Perceptual Hashing Algorithms to Hash-Evasion and Hash-Inversion Attacks","created":"2024-06-03","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2607.14921","title":"Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2208.09449","title":"A Novel Plug-and-Play Approach for Adversarially Robust Generalization","created":"2022-08-19","cited_by_count":0,"area":null},{"id":"2301.04785","title":"Phase-shifted Adversarial Training","created":"2023-01-12","cited_by_count":0,"area":null},{"id":"2308.11845","title":"SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks","created":"2023-08-23","cited_by_count":0,"area":null},{"id":"2402.17018","title":"A Curious Case of Remarkable Resilience to Gradient Attacks via Fully Convolutional and Differentiable Front End with a Skip Connection","created":"2024-02-26","cited_by_count":0,"area":null},{"id":"2403.10562","title":"Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2410.15409","title":"PEAS: A Strategy for Crafting Transferable Adversarial Examples","created":"2024-10-20","cited_by_count":0,"area":null},{"id":"2503.08973","title":"Quantitative Analysis of Deeply Quantized Tiny Neural Networks Robust to Adversarial Attacks","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2504.04216","title":"A Perplexity and Menger Curvature-Based Approach for Similarity Evaluation of Large Language Models","created":"2025-04-05","cited_by_count":0,"area":null},{"id":"2601.14300","title":"Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations","created":"2026-01-17","cited_by_count":0,"area":null},{"id":"2602.08679","title":"Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2602.19918","title":"RobPI: Robust Private Inference against Malicious Client","created":"2026-02-23","cited_by_count":0,"area":null},{"id":"2610.17382","title":"Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}