{"total":55,"rows":[{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2405.16341","title":"R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model","created":"2024-05-25","cited_by_count":58,"area":"diffusion"},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2308.11284","title":"LEAP: Efficient and Automated Test Method for NLP Software","created":"2023-08-22","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2404.18791","title":"Certification of Speaker Recognition Models to Additive Perturbations","created":"2024-04-29","cited_by_count":6,"area":null},{"id":"2204.02887","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2022-04-06","cited_by_count":5,"area":null},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5,"area":null},{"id":"2301.06286","title":"Meta Generative Attack on Person Reidentification","created":"2023-01-16","cited_by_count":5,"area":null},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2404.03340","title":"Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks","created":"2024-04-04","cited_by_count":5,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2201.00097","title":"Adversarial Attack via Dual-Stage Network Erosion","created":"2022-01-01","cited_by_count":3,"area":null},{"id":"2405.03193","title":"Exploring Frequencies via Feature Mixing and Meta-Learning for Improving Adversarial Transferability","created":"2024-05-06","cited_by_count":3,"area":null},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2304.05135","title":"RecUP-FL: Reconciling Utility and Privacy in Federated Learning via User-configurable Privacy Defense","created":"2023-04-11","cited_by_count":2,"area":null},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2406.18144","title":"Artificial Immune System of Secure Face Recognition Against Adversarial Attacks","created":"2024-06-26","cited_by_count":2,"area":null},{"id":"2412.06727","title":"Take Fake as Real: Realistic-like Robust Black-box Adversarial Attack to Evade AIGC Detection","created":"2024-12-09","cited_by_count":2,"area":null},{"id":"2503.13652","title":"Web Artifact Attacks Disrupt Vision Language Models","created":"2025-03-17","cited_by_count":2,"area":"mllm"},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2511.08937","title":"Boosting Adversarial Transferability via Ensemble Non-Attention","created":"2025-11-12","cited_by_count":2,"area":null},{"id":"2511.12985","title":"Angular Gradient Sign Method: Uncovering Vulnerabilities in Hyperbolic Networks","created":"2025-11-17","cited_by_count":2,"area":null},{"id":"2111.10291","title":"Meta Adversarial Perturbations","created":"2021-11-19","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2407.14684","title":"Data Poisoning: An Overlooked Threat to Power Grid Resilience","created":"2024-07-19","cited_by_count":1,"area":"safety"},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2505.08999","title":"Towards Adaptive Meta-Gradient Adversarial Examples for Visual Tracking","created":"2025-05-13","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2605.01519","title":"Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity","created":"2026-05-02","cited_by_count":1,"area":null},{"id":"2205.10617","title":"Gradient Concealment: Free Lunch for Defending Adversarial Attacks","created":"2022-05-21","cited_by_count":0,"area":null},{"id":"2302.10686","title":"Interpretable Spectrum Transformation Attacks to Speaker Recognition","created":"2023-02-21","cited_by_count":0,"area":null},{"id":"2305.08929","title":"AF2-Mutation: Adversarial Sequence Mutations against AlphaFold2 on Protein Tertiary Structure Prediction","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2307.02828","title":"Sampling-based Fast Gradient Rescaling Method for Highly Transferable Adversarial Attacks","created":"2023-07-06","cited_by_count":0,"area":null},{"id":"2310.12713","title":"Learn from the Past: A Proxy Guided Adversarial Defense Framework with Self Distillation Regularization","created":"2023-10-19","cited_by_count":0,"area":"distill"},{"id":"2602.21849","title":"Meta-FC: Meta-Learning with Feature Consistency for Robust and Generalizable Watermarking","created":"2026-02-25","cited_by_count":0,"area":null},{"id":"2608.11815","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2609.38991","title":"Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}