{"total":39,"rows":[{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64,"area":null},{"id":"2111.04060","title":"Are we ready for a new paradigm shift? A Survey on Visual Deep MLP","created":"2021-11-07","cited_by_count":63,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2111.10659","title":"Are Vision Transformers Robust to Patch Perturbations?","created":"2021-11-20","cited_by_count":39,"area":null},{"id":"2308.07009","title":"ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion","created":"2023-08-14","cited_by_count":31,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2210.05742","title":"Curved Representation Space of Vision Transformers","created":"2022-10-11","cited_by_count":8,"area":null},{"id":"2211.16499","title":"Finding Differences Between Transformers and ConvNets Using Counterfactual Simulation Testing","created":"2022-11-29","cited_by_count":6,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2208.00906","title":"Understanding Adversarial Robustness of Vision Transformers via Cauchy Problem","created":"2022-08-01","cited_by_count":4,"area":null},{"id":"2209.13113","title":"FG-UAP: Feature-Gathering Universal Adversarial Perturbation","created":"2022-09-27","cited_by_count":4,"area":null},{"id":"2112.05871","title":"On Adversarial Robustness of Point Cloud Semantic Segmentation","created":"2021-12-11","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2506.05286","title":"Stable Vision Concept Transformers for Medical Diagnosis","created":"2025-06-05","cited_by_count":3,"area":null},{"id":"2309.07197","title":"Mitigating Adversarial Attacks in Federated Learning with Trusted Execution Environments","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2311.17128","title":"Vulnerability Analysis of Transformer-based Optical Character Recognition to Adversarial Attacks","created":"2023-11-28","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2305.12906","title":"Latent Magic: An Investigation into Adversarial Examples Crafted in the Semantic Latent Space","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2308.04373","title":"Pelta: Shielding Transformers to Mitigate Evasion Attacks in Federated Learning","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2311.12914","title":"Attention Deficit is Ordered! Fooling Deformable Vision Transformers with Collaborative Adversarial Patches","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2407.17587","title":"S-E Pipeline: A Vision Transformer (ViT) based Resilient Classification Pipeline for Medical Imaging Against Adversarial Attacks","created":"2024-07-23","cited_by_count":1,"area":null},{"id":"2502.10452","title":"Quaternion-Hadamard Network: A Novel Defense Against Adversarial Attacks with a New Dataset","created":"2025-02-12","cited_by_count":1,"area":null},{"id":"2503.23924","title":"Model Hemorrhage and the Robustness Limits of Large Language Models","created":"2025-03-31","cited_by_count":1,"area":null},{"id":"2507.04020","title":"Exploring Kolmogorov-Arnold Network Expansions in Vision Transformers for Mitigating Catastrophic Forgetting in Continual Learning","created":"2025-07-05","cited_by_count":1,"area":null},{"id":"2110.06697","title":"Semantic Image Fusion","created":"2021-10-13","cited_by_count":0,"area":null},{"id":"2306.08336","title":"Global-Local Processing in Convolutional Neural Networks","created":"2023-06-14","cited_by_count":0,"area":null},{"id":"2310.08772","title":"Investigating the Robustness and Properties of Detection Transformers (DETR) Toward Difficult Images","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2505.21609","title":"Preventing Adversarial AI Attacks Against Autonomous Situational Awareness: A Maritime Case Study","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2511.18562","title":"Ensuring Calibration Robustness in Split Conformal Prediction Under Adversarial Attacks","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2607.07922","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","created":"2026-07-08","cited_by_count":0,"area":null}],"next_cursor":null}