{"total":66,"rows":[{"id":"2201.09873","title":"Transformers in Medical Imaging: A Survey","created":"2022-01-24","cited_by_count":245,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42,"area":null},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2204.07932","title":"Towards Comprehensive Testing on the Robustness of Cooperative Multi-agent Reinforcement Learning","created":"2022-04-17","cited_by_count":21,"area":null},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18,"area":null},{"id":"2110.15629","title":"Attacking Video Recognition Models with Bullet-Screen Comments","created":"2021-10-29","cited_by_count":16,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2308.10315","title":"Improving Adversarial Robustness of Masked Autoencoders via Test-time Frequency-domain Prompting","created":"2023-08-20","cited_by_count":12,"area":null},{"id":"2309.13609","title":"Vulnerabilities in Video Quality Assessment Models: The Challenge of Adversarial Attacks","created":"2023-09-24","cited_by_count":12,"area":null},{"id":"2408.13809","title":"On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective","created":"2024-08-25","cited_by_count":11,"area":null},{"id":"2501.08415","title":"Cross-Modal Transferable Image-to-Video Attack on Video Quality Metrics","created":"2025-01-14","cited_by_count":9,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2503.15404","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","created":"2025-03-19","cited_by_count":7,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2207.05526","title":"Long-term Leap Attention, Short-term Periodic Shift for Video Classification","created":"2022-07-12","cited_by_count":5,"area":null},{"id":"2404.10790","title":"Multimodal Attack Detection for Action Recognition Models","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2505.13327","title":"Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning","created":"2025-05-19","cited_by_count":5,"area":null},{"id":"2506.11111","title":"Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions","created":"2025-06-08","cited_by_count":5,"area":null},{"id":"2112.04345","title":"Burn After Reading: Online Adaptation for Cross-domain Streaming Data","created":"2021-12-08","cited_by_count":3,"area":null},{"id":"2112.05871","title":"On Adversarial Robustness of Point Cloud Semantic Segmentation","created":"2021-12-11","cited_by_count":3,"area":null},{"id":"2403.07942","title":"Attacking Transformers with Feature Diversity Adversarial Perturbation","created":"2024-03-10","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2311.17128","title":"Vulnerability Analysis of Transformer-based Optical Character Recognition to Adversarial Attacks","created":"2023-11-28","cited_by_count":2,"area":null},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2402.02554","title":"DeSparsify: Adversarial Attack Against Token Sparsification Mechanisms in Vision Transformers","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2411.02871","title":"Enhancing Adversarial Robustness via Uncertainty-Aware Distributional Adversarial Training","created":"2024-11-05","cited_by_count":2,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2510.16660","title":"Universal and Transferable Attacks on Pathology Foundation Models","created":"2025-10-18","cited_by_count":2,"area":null},{"id":"2511.08937","title":"Boosting Adversarial Transferability via Ensemble Non-Attention","created":"2025-11-12","cited_by_count":2,"area":null},{"id":"2307.00274","title":"Common Knowledge Learning for Generating Transferable Adversarial Examples","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2311.12914","title":"Attention Deficit is Ordered! Fooling Deformable Vision Transformers with Collaborative Adversarial Patches","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2404.00185","title":"On Inherent Adversarial Robustness of Active Vision Systems","created":"2024-03-29","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2412.18718","title":"Evaluating the Adversarial Robustness of Detection Transformers","created":"2024-12-25","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2501.11901","title":"Enhancing Adversarial Transferability via Component-Wise Transformation","created":"2025-01-21","cited_by_count":1,"area":null},{"id":"2506.06992","title":"Boosting Adversarial Transferability via Commonality-Oriented Gradient Optimization","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2508.12384","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2508.12430","title":"Adversarial Attacks on VQA-NLE: Exposing and Alleviating Inconsistencies in Visual Question Answering Explanations","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2112.05379","title":"Cross-Modal Transferable Adversarial Attacks from Images to Videos","created":"2021-12-10","cited_by_count":0,"area":null},{"id":"2207.09539","title":"Revealing Secrets From Pre-trained Models","created":"2022-07-19","cited_by_count":0,"area":null},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2310.08772","title":"Investigating the Robustness and Properties of Detection Transformers (DETR) Toward Difficult Images","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2402.09671","title":"Exploiting Alpha Transparency In Language And Vision-Based AI Systems","created":"2024-02-15","cited_by_count":0,"area":null},{"id":"2501.07044","title":"Protego: Detecting Adversarial Examples for Vision Transformers via Intrinsic Capabilities","created":"2025-01-13","cited_by_count":0,"area":null},{"id":"2503.20310","title":"Enabling Heterogeneous Adversarial Transferability via Feature Permutation Attacks","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2505.21609","title":"Preventing Adversarial AI Attacks Against Autonomous Situational Awareness: A Maritime Case Study","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2509.21084","title":"Vision Transformers: the threat of realistic adversarial patches","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.23438","title":"Targeted Adversarial Traffic Generation : Black-box Approach to Evade Intrusion Detection Systems in IoT Networks","created":"2026-03-24","cited_by_count":0,"area":null},{"id":"2605.18868","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2609.08013","title":"A Black-Box Adversarial Attack on Human Pose Estimation and Keypoint-Based Action Recognition Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.31128","title":"Frame the adversary: a structure-aware attack methodology","created":"2026-09-25","cited_by_count":0,"area":null}],"next_cursor":null}