{"total":23,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2306.07713","title":"Robustness of SAM: Segment Anything Under Corruptions and Beyond","created":"2023-06-13","cited_by_count":31,"area":null},{"id":"2108.06968","title":"3D High-Fidelity Mask Face Presentation Attack Detection Challenge","created":"2021-08-16","cited_by_count":19,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2206.08316","title":"Boosting the Adversarial Transferability of Surrogate Models with Dark Knowledge","created":"2022-06-16","cited_by_count":6,"area":null},{"id":"2307.07916","title":"On the Robustness of Split Learning against Adversarial Attacks","created":"2023-07-16","cited_by_count":6,"area":null},{"id":"2406.18540","title":"Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing","created":"2024-05-18","cited_by_count":5,"area":null},{"id":"2312.10578","title":"SAME: Sample Reconstruction against Model Extraction Attacks","created":"2023-12-17","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2205.03850","title":"SeqNet: An Efficient Neural Network for Automatic Malware Detection","created":"2022-05-08","cited_by_count":1,"area":null},{"id":"2310.09792","title":"SCME: A Self-Contrastive Method for Data-free and Query-Limited Model Extraction Attack","created":"2023-10-15","cited_by_count":1,"area":null},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2402.02732","title":"A Generative Approach to Surrogate-based Black-box Attacks","created":"2024-02-05","cited_by_count":0,"area":null},{"id":"2412.02270","title":"Sustainable Self-evolution Adversarial Training","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2601.14302","title":"DDSA: Dual-Domain Strategic Attack for Spatial-Temporal Efficiency in Adversarial Robustness Testing","created":"2026-01-18","cited_by_count":0,"area":null}],"next_cursor":null}