{"total":70,"rows":[{"id":"2201.09873","title":"Transformers in Medical Imaging: A Survey","created":"2022-01-24","cited_by_count":245,"area":null},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2109.04176","title":"Towards Transferable Adversarial Attacks on Vision Transformers","created":"2021-09-09","cited_by_count":80,"area":null},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42,"area":null},{"id":"2111.10659","title":"Are Vision Transformers Robust to Patch Perturbations?","created":"2021-11-20","cited_by_count":39,"area":null},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2207.12392","title":"Self-Distilled Vision Transformer for Domain Generalization","created":"2022-07-25","cited_by_count":35,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2310.18969","title":"Analyzing Vision Transformers for Image Classification in Class Embedding Space","created":"2023-10-29","cited_by_count":26,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2308.10315","title":"Improving Adversarial Robustness of Masked Autoencoders via Test-time Frequency-domain Prompting","created":"2023-08-20","cited_by_count":12,"area":null},{"id":"2403.20254","title":"Benchmarking the Robustness of Temporal Action Detection Models Against Temporal Corruptions","created":"2024-03-29","cited_by_count":12,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2311.18495","title":"Improving Adversarial Transferability via Model Alignment","created":"2023-11-30","cited_by_count":10,"area":"alignment"},{"id":"2111.11870","title":"DBIA: Data-free Backdoor Injection Attack against Transformer Networks","created":"2021-11-22","cited_by_count":9,"area":"safety"},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2208.01195","title":"Making the Best of Both Worlds: A Domain-Oriented Transformer for Unsupervised Domain Adaptation","created":"2022-08-02","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2503.15404","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","created":"2025-03-19","cited_by_count":7,"area":null},{"id":"2206.04242","title":"OOD Augmentation May Be at Odds with Open-Set Recognition","created":"2022-06-09","cited_by_count":6,"area":null},{"id":"2207.08803","title":"Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbations","created":"2022-07-18","cited_by_count":6,"area":null},{"id":"2301.13803","title":"Fairness-aware Vision Transformer via Debiased Self-Attention","created":"2023-01-31","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2302.12252","title":"Boosting Adversarial Transferability using Dynamic Cues","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2304.01200","title":"Video Instance Segmentation in an Open-World","created":"2023-04-03","cited_by_count":5,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2403.07942","title":"Attacking Transformers with Feature Diversity Adversarial Perturbation","created":"2024-03-10","cited_by_count":3,"area":null},{"id":"2407.12292","title":"Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2206.05912","title":"INDIGO: Intrinsic Multimodality for Domain Generalization","created":"2022-06-13","cited_by_count":2,"area":null},{"id":"2304.02688","title":"Going Further: Flatness at the Rescue of Early Stopping for Adversarial Example Transferability","created":"2023-04-05","cited_by_count":2,"area":null},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2402.02554","title":"DeSparsify: Adversarial Attack Against Token Sparsification Mechanisms in Vision Transformers","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2307.00274","title":"Common Knowledge Learning for Generating Transferable Adversarial Examples","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2204.12204","title":"Boosting Adversarial Transferability of MLP-Mixer","created":"2022-04-26","cited_by_count":0,"area":null},{"id":"2209.08724","title":"On the Adversarial Transferability of ConvMixer Models","created":"2022-09-19","cited_by_count":0,"area":null},{"id":"2308.07874","title":"SEDA: Self-Ensembling ViT with Defensive Distillation and Adversarial Training for robust Chest X-rays Classification","created":"2023-08-15","cited_by_count":0,"area":null},{"id":"2310.08772","title":"Investigating the Robustness and Properties of Detection Transformers (DETR) Toward Difficult Images","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2501.12275","title":"With Great Backbones Comes Great Adversarial Transferability","created":"2025-01-21","cited_by_count":0,"area":null},{"id":"2503.20310","title":"Enabling Heterogeneous Adversarial Transferability via Feature Permutation Attacks","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2504.18594","title":"RaPA: Enhancing Transferable Targeted Attacks via Random Parameter Pruning","created":"2025-04-24","cited_by_count":0,"area":null},{"id":"2507.14248","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2509.06459","title":"IGAff: Benchmarking Adversarial Iterative and Genetic Affine Algorithms on Deep Neural Networks","created":"2025-09-08","cited_by_count":0,"area":null},{"id":"2510.00517","title":"Understanding Sensitivity of Differential Attention through the Lens of Adversarial Robustness","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2603.20777","title":"OmniPatch: A Universal Adversarial Patch for ViT-CNN Cross-Architecture Transfer in Semantic Segmentation","created":"2026-03-21","cited_by_count":0,"area":null},{"id":"2607.27465","title":"IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2608.22716","title":"TEE-X: TEE-aware Acceleration Framework for Large Vision Models at the Edge","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2609.15799","title":"RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services","created":"2026-09-14","cited_by_count":0,"area":"diffusion"},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}