{"total":105,"rows":[{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2304.11928","title":"Survey on Unsupervised Domain Adaptation for Semantic Segmentation for Visual Perception in Automated Driving","created":"2023-04-24","cited_by_count":29,"area":null},{"id":"2202.07054","title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","created":"2022-02-14","cited_by_count":24,"area":null},{"id":"2403.07937","title":"Speech Robust Bench: A Robustness Benchmark For Speech Recognition","created":"2024-03-08","cited_by_count":21,"area":null},{"id":"2212.02127","title":"FaceQAN: Face Image Quality Assessment Through Adversarial Noise Exploration","created":"2022-12-05","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2309.10058","title":"Dual Student Networks for Data-Free Model Stealing","created":"2023-09-18","cited_by_count":17,"area":null},{"id":"2312.13053","title":"Quantifying Bias in Text-to-Image Generative Models","created":"2023-12-20","cited_by_count":16,"area":null},{"id":"2407.06992","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2308.05681","title":"Hard No-Box Adversarial Attack on Skeleton-Based Human Action Recognition with Skeleton-Motion-Informed Gradient","created":"2023-08-10","cited_by_count":10,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2407.00125","title":"A Survey on Failure Analysis and Fault Injection in AI Systems","created":"2024-06-28","cited_by_count":10,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2204.13004","title":"Defending Person Detection Against Adversarial Patch Attack by using Universal Defensive Frame","created":"2022-04-27","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2303.16633","title":"Targeted Adversarial Attacks on Wind Power Forecasts","created":"2023-03-29","cited_by_count":9,"area":null},{"id":"2207.10495","title":"Generating and Detecting True Ambiguity: A Forgotten Danger in DNN Supervision Testing","created":"2022-07-21","cited_by_count":8,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2208.00788","title":"A Hybrid CNN-LSTM model for Video Deepfake Detection by Leveraging Optical Flow Features","created":"2022-07-28","cited_by_count":7,"area":null},{"id":"2307.07512","title":"Expressive Monotonic Neural Networks","created":"2023-07-14","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2211.08044","title":"Backdoor Attacks for Remote Sensing Data with Wavelet Transform","created":"2022-11-15","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2304.08275","title":"Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspects","created":"2023-04-17","cited_by_count":6,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2309.02752","title":"SWAP: Exploiting Second-Ranked Logits for Adversarial Attacks on Time Series","created":"2023-09-06","cited_by_count":6,"area":null},{"id":"2409.10071","title":"Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation","created":"2024-09-16","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2211.04780","title":"On the Robustness of Explanations of Deep Neural Network Models: A Survey","created":"2022-11-09","cited_by_count":5,"area":null},{"id":"2301.06286","title":"Meta Generative Attack on Person Reidentification","created":"2023-01-16","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2503.23536","title":"A Survey on Unlearnable Data","created":"2025-03-30","cited_by_count":5,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2207.07803","title":"Masked Spatial-Spectral Autoencoders Are Excellent Hyperspectral Defenders","created":"2022-07-16","cited_by_count":4,"area":null},{"id":"2301.13869","title":"Reverse engineering adversarial attacks with fingerprints from adversarial examples","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2303.01300","title":"Compensating for Sensing Failures via Delegation in Human-AI Hybrid Systems","created":"2023-03-02","cited_by_count":4,"area":null},{"id":"2403.09480","title":"What Sketch Explainability Really Means for Downstream Tasks","created":"2024-03-14","cited_by_count":4,"area":null},{"id":"2404.06776","title":"Logit Calibration and Feature Contrast for Robust Federated Learning on Non-IID Data","created":"2024-04-10","cited_by_count":4,"area":null},{"id":"2504.19000","title":"Unveiling and Mitigating Adversarial Vulnerabilities in Iterative Optimizers","created":"2025-04-26","cited_by_count":4,"area":null},{"id":"2508.15283","title":"Adversarial Attacks against Neural Ranking Models via In-Context Learning","created":"2025-08-21","cited_by_count":4,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2203.10166","title":"Concept-based Adversarial Attacks: Tricking Humans and Classifiers Alike","created":"2022-03-18","cited_by_count":3,"area":null},{"id":"2206.08638","title":"Minimum Noticeable Difference based Adversarial Privacy Preserving Image Generation","created":"2022-06-17","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2210.13463","title":"Adversarial Pretraining of Self-Supervised Deep Networks: Past, Present and Future","created":"2022-10-23","cited_by_count":3,"area":null},{"id":"2303.17255","title":"Fooling the Image Dehazing Models by First Order Gradient","created":"2023-03-30","cited_by_count":3,"area":null},{"id":"2305.14395","title":"Towards credible visual model interpretation with path attribution","created":"2023-05-23","cited_by_count":3,"area":null},{"id":"2402.05605","title":"Optimizing Delegation in Collaborative Human-AI Hybrid Teams","created":"2024-02-08","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2502.05214","title":"CoRPA: Adversarial Image Generation for Chest X-rays Using Concept Vector Perturbations and Generative Models","created":"2025-02-04","cited_by_count":3,"area":null},{"id":"2209.13160","title":"Collaborative Decision Making Using Action Suggestions","created":"2022-09-27","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2303.17890","title":"Fooling Polarization-based Vision using Locally Controllable Polarizing Projection","created":"2023-03-31","cited_by_count":2,"area":null},{"id":"2307.03798","title":"Fooling Contrastive Language-Image Pre-trained Models with CLIPMasterPrints","created":"2023-07-07","cited_by_count":2,"area":null},{"id":"2310.19439","title":"Asymmetric Diffusion Based Channel-Adaptive Secure Wireless Semantic Communications","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2403.19444","title":"Leveraging Expert Input for Robust and Explainable AI-Assisted Lung Cancer Detection in Chest X-rays","created":"2024-03-28","cited_by_count":2,"area":null},{"id":"2406.03117","title":"VQUNet: Vector Quantization U-Net for Defending Adversarial Atacks by Regularizing Unwanted Noise","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2410.13138","title":"Data Defenses Against Large Language Models","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2411.13981","title":"On the Fairness, Diversity and Reliability of Text-to-Image Generative Models","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2508.14699","title":"Foe for Fraud: Transferable Adversarial Attacks in Credit Card Fraud Detection","created":"2025-08-20","cited_by_count":2,"area":null},{"id":"2205.15357","title":"Searching for the Essence of Adversarial Perturbations","created":"2022-05-30","cited_by_count":1,"area":null},{"id":"2207.10862","title":"Contrastive Self-Supervised Learning Leads to Higher Adversarial Susceptibility","created":"2022-07-22","cited_by_count":1,"area":null},{"id":"2304.04023","title":"Attack-Augmentation Mixing-Contrastive Skeletal Representation Learning","created":"2023-04-08","cited_by_count":1,"area":null},{"id":"2306.15451","title":"Advancing Adversarial Training by Injecting Booster Signal","created":"2023-06-27","cited_by_count":1,"area":null},{"id":"2309.11111","title":"PRAT: PRofiling Adversarial aTtacks","created":"2023-09-20","cited_by_count":1,"area":null},{"id":"2310.19163","title":"RAIFLE: Reconstruction Attacks on Interaction-based Federated Learning with Adversarial Data Manipulation","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2311.12857","title":"Adversarial sample generation and training using geometric masks for accurate and resilient license plate character recognition","created":"2023-10-25","cited_by_count":1,"area":null},{"id":"2410.12814","title":"Leveraging generative models to characterize the failure conditions of image classifiers","created":"2024-10-01","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.01228","title":"TenAd: A Tensor-based Low-rank Black Box Adversarial Attack for Video Classification","created":"2025-04-01","cited_by_count":1,"area":null},{"id":"2507.10998","title":"Crafting Imperceptible On-Manifold Adversarial Attacks for Tabular Data","created":"2025-07-15","cited_by_count":1,"area":null},{"id":"2603.13970","title":"Shapes are not enough: CONSERVAttack and its use for finding vulnerabilities and uncertainties in machine learning applications","created":"2026-03-14","cited_by_count":1,"area":null},{"id":"2605.07690","title":"Fortifying Time Series: DTW-Certified Robust Anomaly Detection","created":"2026-05-08","cited_by_count":1,"area":null},{"id":"2205.08955","title":"Structural Extensions of Basis Pursuit: Guarantees on Adversarial Robustness","created":"2022-05-05","cited_by_count":0,"area":null},{"id":"2205.15553","title":"Mask2Hand: Learning to Predict the 3D Hand Pose and Shape from Shadow","created":"2022-05-31","cited_by_count":0,"area":null},{"id":"2206.02131","title":"Federated Adversarial Training with Transformers","created":"2022-06-05","cited_by_count":0,"area":null},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2306.12161","title":"Adversarial Attacks Neutralization via Data Set Randomization","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2309.05381","title":"Hazards in Deep Learning Testing: Prevalence, Impact and Recommendations","created":"2023-09-11","cited_by_count":0,"area":null},{"id":"2402.09671","title":"Exploiting Alpha Transparency In Language And Vision-Based AI Systems","created":"2024-02-15","cited_by_count":0,"area":null},{"id":"2402.17018","title":"A Curious Case of Remarkable Resilience to Gradient Attacks via Fully Convolutional and Differentiable Front End with a Skip Connection","created":"2024-02-26","cited_by_count":0,"area":null},{"id":"2403.16782","title":"The Anatomy of Adversarial Attacks: Concept-based XAI Dissection","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2404.06236","title":"Towards Robust Domain Generation Algorithm Classification","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2501.18098","title":"Disentangling Safe and Unsafe Corruptions via Anisotropy and Locality","created":"2025-01-30","cited_by_count":0,"area":null},{"id":"2505.02073","title":"Lightweight Defense Against Adversarial Attacks in Time Series Classification","created":"2025-05-04","cited_by_count":0,"area":null},{"id":"2505.03646","title":"Revealing Hidden Vulnerabilities in Autoencoders through Gradient Signal Restoration","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2507.13727","title":"Adversarial Training Improves Generalization Under Distribution Shifts in Bird Sound Classification","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2508.10038","title":"Certifiably robust malware detectors by design","created":"2025-08-10","cited_by_count":0,"area":null},{"id":"2509.19793","title":"BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting","created":"2025-09-24","cited_by_count":0,"area":null},{"id":"2510.01014","title":"Revisiting Adversarial Training under Hyperspectral Image","created":"2025-10-01","cited_by_count":0,"area":null}],"next_cursor":"100"}