{"total":56,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2209.07735","title":"Enhance the Visual Representation via Discrete Adversarial Training","created":"2022-09-16","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2201.10937","title":"Boosting 3D Adversarial Attacks with Attacking On Frequency","created":"2022-01-26","cited_by_count":18,"area":null},{"id":"2401.17699","title":"Unified Physical-Digital Face Attack Detection","created":"2024-01-31","cited_by_count":17,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2307.15061","title":"The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimation","created":"2023-07-27","cited_by_count":13,"area":null},{"id":"2211.15030","title":"Imperceptible Adversarial Attack via Invertible Neural Networks","created":"2022-11-28","cited_by_count":12,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2202.11287","title":"LPF-Defense: 3D Adversarial Defense based on Frequency Analysis","created":"2022-02-23","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2404.08450","title":"Joint Physical-Digital Facial Attack Detection Via Simulating Spoofing Clues","created":"2024-04-12","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2412.09921","title":"FaceShield: Defending Facial Image against Deepfake Threats","created":"2024-12-13","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2503.20613","title":"State-Aware Perturbation Optimization for Robust Deep Reinforcement Learning","created":"2025-03-26","cited_by_count":8,"area":"deeprl"},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2503.20844","title":"Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks","created":"2025-03-26","cited_by_count":7,"area":"deeprl"},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2307.07269","title":"Frequency Domain Adversarial Training for Robust Volumetric Medical Segmentation","created":"2023-07-14","cited_by_count":6,"area":null},{"id":"2503.19791","title":"SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation","created":"2025-03-25","cited_by_count":6,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2311.17608","title":"Adversarial Robust Memory-Based Continual Learner","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2404.03340","title":"Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks","created":"2024-04-04","cited_by_count":5,"area":null},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2505.13327","title":"Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning","created":"2025-05-19","cited_by_count":5,"area":null},{"id":"2203.10183","title":"RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression","created":"2022-03-18","cited_by_count":4,"area":null},{"id":"2312.01789","title":"Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical world","created":"2023-12-04","cited_by_count":4,"area":null},{"id":"2310.13950","title":"Adversarial Image Generation by Spatial Transformation in Perceptual Colorspaces","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2405.03193","title":"Exploring Frequencies via Feature Mixing and Meta-Learning for Improving Adversarial Transferability","created":"2024-05-06","cited_by_count":3,"area":null},{"id":"2502.08374","title":"AdvSwap: Covert Adversarial Perturbation with High Frequency Info-swapping for Autonomous Driving Perception","created":"2025-02-12","cited_by_count":3,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2505.23313","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2305.04436","title":"Adversarial Examples Detection with Enhanced Image Difference Features based on Local Histogram Equalization","created":"2023-05-08","cited_by_count":1,"area":null},{"id":"2306.15451","title":"Advancing Adversarial Training by Injecting Booster Signal","created":"2023-06-27","cited_by_count":1,"area":null},{"id":"2310.13019","title":"Tailoring Adversarial Attacks on Deep Neural Networks for Targeted Class Manipulation Using DeepFool Algorithm","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2312.07258","title":"SSTA: Salient Spatially Transformed Attack","created":"2023-12-12","cited_by_count":1,"area":null},{"id":"2406.01894","title":"SVASTIN: Sparse Video Adversarial Attack via Spatio-Temporal Invertible Neural Networks","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2407.01168","title":"Multi-View Black-Box Physical Attacks on Infrared Pedestrian Detectors Using Adversarial Infrared Grid","created":"2024-07-01","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2511.01079","title":"T-MLA: A targeted multiscale log-exponential attack framework for neural image compression","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2605.01519","title":"Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity","created":"2026-05-02","cited_by_count":1,"area":null},{"id":"2205.10617","title":"Gradient Concealment: Free Lunch for Defending Adversarial Attacks","created":"2022-05-21","cited_by_count":0,"area":null},{"id":"2211.08864","title":"PrivacyProber: Assessment and Detection of Soft-Biometric Privacy-Enhancing Techniques","created":"2022-11-16","cited_by_count":0,"area":null},{"id":"2403.03674","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","created":"2024-03-06","cited_by_count":0,"area":null},{"id":"2408.12670","title":"Leveraging Information Consistency in Frequency and Spatial Domain for Adversarial Attacks","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2412.11168","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","created":"2024-12-15","cited_by_count":0,"area":null},{"id":"2609.31128","title":"Frame the adversary: a structure-aware attack methodology","created":"2026-09-25","cited_by_count":0,"area":null},{"id":"2610.15482","title":"Security in LLM-Assisted Coding: A Systematic Literature Review","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}