{"total":15,"rows":[{"id":"2206.08575","title":"Query-Efficient and Scalable Black-Box Adversarial Attacks on Discrete Sequential Data via Bayesian Optimization","created":"2022-06-17","cited_by_count":22,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2205.00177","title":"Practice Makes a Solver Perfect: Data Augmentation for Math Word Problem Solvers","created":"2022-04-30","cited_by_count":9,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2210.02844","title":"Are Synonym Substitution Attacks Really Synonym Substitution Attacks?","created":"2022-10-06","cited_by_count":4,"area":null},{"id":"2305.05896","title":"A Black-Box Attack on Code Models via Representation Nearest Neighbor Search","created":"2023-05-10","cited_by_count":3,"area":null},{"id":"2505.01900","title":"CAMOUFLAGE: Exploiting Misinformation Detection Systems Through LLM-driven Adversarial Claim Transformation","created":"2025-05-03","cited_by_count":3,"area":null},{"id":"2507.21750","title":"Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal","created":"2025-07-29","cited_by_count":2,"area":null},{"id":"2402.02695","title":"Exploiting Class Probabilities for Black-box Sentence-level Attacks","created":"2024-02-05","cited_by_count":1,"area":null},{"id":"2402.10527","title":"Assessing biomedical knowledge robustness in large language models by query-efficient sampling attacks","created":"2024-02-16","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2404.11538","title":"GenFighter: A Generative and Evolutive Textual Attack Removal","created":"2024-04-17","cited_by_count":0,"area":null},{"id":"2506.23661","title":"Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttack","created":"2025-06-30","cited_by_count":0,"area":null},{"id":"2607.14101","title":"LBA: Textual Hard-Label Adversarial Attack under Low Query Budgets","created":"2026-05-05","cited_by_count":0,"area":null}],"next_cursor":null}