{"total":43,"rows":[{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2111.10659","title":"Are Vision Transformers Robust to Patch Perturbations?","created":"2021-11-20","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2204.08945","title":"Missingness Bias in Model Debugging","created":"2022-04-19","cited_by_count":38,"area":null},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2306.03301","title":"Estimating Conditional Mutual Information for Dynamic Feature Selection","created":"2023-06-05","cited_by_count":21,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2209.05980","title":"Certified Defences Against Adversarial Patch Attacks on Semantic Segmentation","created":"2022-09-13","cited_by_count":16,"area":null},{"id":"2307.05902","title":"Stability Guarantees for Feature Attributions with Multiplicative Smoothing","created":"2023-07-12","cited_by_count":14,"area":null},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2311.17983","title":"Improving Interpretation Faithfulness for Vision Transformers","created":"2023-11-29","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2211.14646","title":"Towards Improved Input Masking for Convolutional Neural Networks","created":"2022-11-26","cited_by_count":8,"area":null},{"id":"2301.12993","title":"Benchmarking Robustness to Adversarial Image Obfuscations","created":"2023-01-30","cited_by_count":8,"area":null},{"id":"2401.15568","title":"Intriguing Equivalence Structures of the Embedding Space of Vision Transformers","created":"2024-01-28","cited_by_count":8,"area":null},{"id":"2301.13803","title":"Fairness-aware Vision Transformer via Debiased Self-Attention","created":"2023-01-31","cited_by_count":6,"area":null},{"id":"2306.12610","title":"Revisiting Image Classifier Training for Improved Certified Robust Defense against Adversarial Patches","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2405.07668","title":"CrossCert: A Cross-Checking Detection Approach to Patch Robustness Certification for Deep Learning Models","created":"2024-05-13","cited_by_count":3,"area":null},{"id":"2506.05286","title":"Stable Vision Concept Transformers for Medical Diagnosis","created":"2025-06-05","cited_by_count":3,"area":null},{"id":"2307.04066","title":"Random Position Adversarial Patch for Vision Transformers","created":"2023-07-09","cited_by_count":2,"area":null},{"id":"2308.00452","title":"A Majority Invariant Approach to Patch Robustness Certification for Deep Learning Models","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2402.08473","title":"Intriguing Differences Between Zero-Shot and Systematic Evaluations of Vision-Language Transformer Models","created":"2024-02-13","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2305.10929","title":"Architecture-agnostic Iterative Black-box Certified Defense against Adversarial Patches","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2312.00173","title":"Fool the Hydra: Adversarial Attacks against Multi-view Object Detection Systems","created":"2023-11-30","cited_by_count":1,"area":null},{"id":"2405.14176","title":"Certified Robustness against Sparse Adversarial Perturbations via Data Localization","created":"2024-05-23","cited_by_count":1,"area":null},{"id":"2311.01563","title":"Assist Is Just as Important as the Goal: Image Resurfacing to Aid Model's Robust Prediction","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2507.23335","title":"Scalable and Precise Patch Robustness Certification for Deep Learning Models with Top-k Predictions","created":"2025-07-31","cited_by_count":0,"area":null},{"id":"2510.06397","title":"Geometry-Aware Backdoor Attacks: Leveraging Curvature in Hyperbolic Embeddings","created":"2025-10-07","cited_by_count":0,"area":null},{"id":"2511.07755","title":"Filtered-ViT: A Robust Defense Against Multiple Adversarial Patch Attacks","created":"2025-11-11","cited_by_count":0,"area":null},{"id":"2603.12688","title":"STRAP-ViT: Segregated Tokens with Randomized -- Transformations for Defense against Adversarial Patches in ViTs","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2604.26317","title":"The Unseen Adversaries: Robust and Generalized Defense Against Adversarial Patches","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}