{"total":48,"rows":[{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2306.13119","title":"Adversarial Resilience in Sequential Prediction via Abstention","created":"2023-06-22","cited_by_count":11,"area":null},{"id":"2110.07305","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","created":"2021-10-14","cited_by_count":10,"area":null},{"id":"2107.02840","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","created":"2021-06-27","cited_by_count":8,"area":null},{"id":"2202.05957","title":"Confident AI","created":"2022-02-12","cited_by_count":6,"area":null},{"id":"2404.05219","title":"Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey","created":"2024-04-08","cited_by_count":6,"area":null},{"id":"2503.04963","title":"Energy-Latency Attacks: A New Adversarial Threat to Deep Learning","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2209.05668","title":"Class-Level Logit Perturbation","created":"2022-09-13","cited_by_count":4,"area":null},{"id":"2212.00727","title":"Adversarial Artifact Detection in EEG-Based Brain-Computer Interfaces","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2308.03243","title":"Unsupervised Adversarial Detection without Extra Model: Training Loss Should Change","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2210.08579","title":"Nowhere to Hide: A Lightweight Unsupervised Detector against Adversarial Examples","created":"2022-10-16","cited_by_count":3,"area":null},{"id":"2310.14001","title":"Toward Stronger Textual Attack Detectors","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2503.17416","title":"Debugging and Runtime Analysis of Neural Networks with VLMs (A Case Study)","created":"2025-03-21","cited_by_count":3,"area":null},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2,"area":null},{"id":"2206.08738","title":"Detecting Adversarial Examples in Batches -- a geometrical approach","created":"2022-06-17","cited_by_count":2,"area":null},{"id":"2206.15415","title":"MEAD: A Multi-Armed Approach for Evaluation of Adversarial Examples Detectors","created":"2022-06-30","cited_by_count":2,"area":null},{"id":"2209.12195","title":"Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks","created":"2022-09-25","cited_by_count":2,"area":null},{"id":"2304.04033","title":"Exploring the Connection between Robust and Generative Models","created":"2023-04-08","cited_by_count":2,"area":null},{"id":"2403.13502","title":"Adversarial Attacks and Defenses in Fault Detection and Diagnosis: A Comprehensive Benchmark on the Tennessee Eastman Process","created":"2024-03-20","cited_by_count":2,"area":null},{"id":"2107.07043","title":"GGT: Graph-Guided Testing for Adversarial Sample Detection of Deep Neural Network","created":"2021-07-09","cited_by_count":1,"area":null},{"id":"2305.04436","title":"Adversarial Examples Detection with Enhanced Image Difference Features based on Local Histogram Equalization","created":"2023-05-08","cited_by_count":1,"area":null},{"id":"2306.02021","title":"Towards Black-box Adversarial Example Detection: A Data Reconstruction-based Method","created":"2023-06-03","cited_by_count":1,"area":null},{"id":"2306.04252","title":"Adversarial Sample Detection Through Neural Network Transport Dynamics","created":"2023-06-07","cited_by_count":1,"area":null},{"id":"2306.08422","title":"X-Detect: Explainable Adversarial Patch Detection for Object Detectors in Retail","created":"2023-06-14","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2506.05382","title":"How stealthy is stealthy? Studying the Efficacy of Black-Box Adversarial Attacks in the Real World","created":"2025-06-03","cited_by_count":1,"area":null},{"id":"2606.01437","title":"CEAR: Certified Ensemble Adversarial Robustness in DNNs","created":"2026-05-31","cited_by_count":1,"area":null},{"id":"2206.02131","title":"Federated Adversarial Training with Transformers","created":"2022-06-05","cited_by_count":0,"area":null},{"id":"2211.10227","title":"Adversarial Detection by Approximation of Ensemble Boundary","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2302.02216","title":"A Minimax Approach Against Multi-Armed Adversarial Attacks Detection","created":"2023-02-04","cited_by_count":0,"area":null},{"id":"2306.17323","title":"Scaling Model Checking for DNN Analysis via State-Space Reduction and Input Segmentation (Extended Version)","created":"2023-06-29","cited_by_count":0,"area":null},{"id":"2309.17048","title":"On Continuity of Robust and Accurate Classifiers","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2312.11510","title":"QuadAttack: A Quadratic Programming Approach to Ordered Top-K Attacks","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2402.07480","title":"Topological safeguard for evasion attack interpreting the neural networks' behavior","created":"2024-02-12","cited_by_count":0,"area":null},{"id":"2402.15808","title":"Optimal Zero-Shot Detector for Multi-Armed Attacks","created":"2024-02-24","cited_by_count":0,"area":null},{"id":"2412.01154","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2510.12752","title":"KoALA: KL-L0 Adversarial Detector via Label Agreement","created":"2025-10-14","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2610.15359","title":"Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}