{"total":74,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2308.11894","title":"Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack","created":"2023-08-23","cited_by_count":37,"area":null},{"id":"2403.17301","title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving","created":"2024-03-26","cited_by_count":32,"area":null},{"id":"2308.07009","title":"ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion","created":"2023-08-14","cited_by_count":31,"area":null},{"id":"2212.05709","title":"HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design","created":"2022-12-12","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2312.09558","title":"Towards Transferable Targeted 3D Adversarial Attack in the Physical World","created":"2023-12-15","cited_by_count":25,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2402.15853","title":"RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation","created":"2024-02-24","cited_by_count":18,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2508.05855","title":"Safety of Embodied Navigation: A Survey","created":"2025-08-07","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2405.09924","title":"Infrared Adversarial Car Stickers","created":"2024-05-16","cited_by_count":8,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2205.09592","title":"Transferable Physical Attack against Object Detection with Separable Attention","created":"2022-05-19","cited_by_count":6,"area":null},{"id":"2210.08870","title":"Differential Evolution based Dual Adversarial Camouflage: Fooling Human Eyes and Object Detectors","created":"2022-10-17","cited_by_count":6,"area":null},{"id":"2304.05098","title":"Benchmarking the Physical-world Adversarial Robustness of Vehicle Detection","created":"2023-04-11","cited_by_count":6,"area":null},{"id":"2409.10071","title":"Towards Physically Realizable Adversarial Attacks in Embodied Vision Navigation","created":"2024-09-16","cited_by_count":6,"area":null},{"id":"2504.10888","title":"CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors","created":"2025-04-15","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2308.03476","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","created":"2023-08-07","cited_by_count":5,"area":null},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2312.01789","title":"Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical world","created":"2023-12-04","cited_by_count":4,"area":null},{"id":"2409.17963","title":"CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors","created":"2024-09-26","cited_by_count":4,"area":null},{"id":"2504.09361","title":"PapMOT: Exploring Adversarial Patch Attack against Multiple Object Tracking","created":"2025-04-12","cited_by_count":4,"area":null},{"id":"2505.16402","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","created":"2025-05-22","cited_by_count":4,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2411.09749","title":"RenderBender: A Survey on Adversarial Attacks Using Differentiable Rendering","created":"2024-11-14","cited_by_count":3,"area":null},{"id":"2412.13709","title":"Physics-Based Adversarial Attack on Near-Infrared Human Detector for Nighttime Surveillance Camera Systems","created":"2024-12-18","cited_by_count":3,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2508.06534","title":"MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving","created":"2025-08-04","cited_by_count":3,"area":"driving"},{"id":"2507.09993","title":"3DGAA: Realistic and Robust 3D Gaussian-based Adversarial Attack for Autonomous Driving","created":"2025-07-14","cited_by_count":2,"area":null},{"id":"2208.07174","title":"A Human-in-the-Middle Attack against Object Detection Systems","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2312.00173","title":"Fool the Hydra: Adversarial Attacks against Multi-view Object Detection Systems","created":"2023-11-30","cited_by_count":1,"area":null},{"id":"2407.01168","title":"Multi-View Black-Box Physical Attacks on Infrared Pedestrian Detectors Using Adversarial Infrared Grid","created":"2024-07-01","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2411.10029","title":"Toward Robust and Accurate Adversarial Camouflage Generation against Vehicle Detectors","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2505.22499","title":"SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectors","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2311.01696","title":"Universal Perturbation-based Secret Key-Controlled Data Hiding","created":"2023-11-03","cited_by_count":0,"area":null},{"id":"2311.08539","title":"Physical Adversarial Examples for Multi-Camera Systems","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2403.03674","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","created":"2024-03-06","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2410.21443","title":"TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors","created":"2024-10-28","cited_by_count":0,"area":null},{"id":"2509.19793","title":"BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting","created":"2025-09-24","cited_by_count":0,"area":null},{"id":"2510.06952","title":"OBJVanish: Physically Realizable Text-to-3D Adv. Generation of LiDAR-Invisible Objects","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2603.04913","title":"Beyond the Patch: Exploring Vulnerabilities of Visuomotor Policies via Viewpoint-Consistent 3D Adversarial Object","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2605.12743","title":"Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving","created":"2026-05-12","cited_by_count":0,"area":"driving"},{"id":"2605.17772","title":"Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2607.17077","title":"ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments","created":"2026-07-19","cited_by_count":0,"area":null},{"id":"2608.04559","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.30839","title":"Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.18133","title":"Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}