{"total":24,"rows":[{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2203.04623","title":"Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognition","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2302.13519","title":"CBA: Contextual Background Attack against Optical Aerial Detection in the Physical World","created":"2023-02-27","cited_by_count":7,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2307.13294","title":"Imperceptible Physical Attack against Face Recognition Systems via LED Illumination Modulation","created":"2023-07-25","cited_by_count":1,"area":null},{"id":"2407.01168","title":"Multi-View Black-Box Physical Attacks on Infrared Pedestrian Detectors Using Adversarial Infrared Grid","created":"2024-07-01","cited_by_count":1,"area":null},{"id":"2408.06625","title":"DePatch: Towards Robust Adversarial Patch for Evading Person Detectors in the Real World","created":"2024-08-13","cited_by_count":1,"area":null},{"id":"2507.03427","title":"Rectifying Adversarial Sample with Low Entropy Prior for Test-Time Defense","created":"2025-07-04","cited_by_count":1,"area":null},{"id":"2512.07228","title":"Towards Robust Protective Perturbation against DeepFake Face Swapping","created":"2025-12-08","cited_by_count":1,"area":null},{"id":"2403.03674","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","created":"2024-03-06","cited_by_count":0,"area":null},{"id":"2411.03348","title":"Undermining Image and Text Classification Algorithms Using Adversarial Attacks","created":"2024-11-03","cited_by_count":0,"area":null},{"id":"2505.20782","title":"Towards Cross-Domain Multi-Targeted Adversarial Attacks","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2603.21867","title":"Adversarial Camouflage","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2607.26651","title":"Physically Real-time Infrared Attack against Optical Flow Estimation Networks","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2609.27022","title":"Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study","created":"2026-09-22","cited_by_count":0,"area":null}],"next_cursor":null}