{"total":18,"rows":[{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2301.00975","title":"Surveillance Face Anti-spoofing","created":"2023-01-03","cited_by_count":12,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2311.17339","title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition","created":"2023-11-29","cited_by_count":3,"area":null},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2402.02554","title":"DeSparsify: Adversarial Attack Against Token Sparsification Mechanisms in Vision Transformers","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2507.06856","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","created":"2025-07-09","cited_by_count":1,"area":null},{"id":"2311.17332","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","created":"2023-11-29","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2505.19951","title":"Novel Loss-Enhanced Universal Adversarial Patches for Sustainable Speaker Privacy","created":"2025-05-26","cited_by_count":0,"area":null},{"id":"2509.23198","title":"Real-World Transferable Adversarial Attack on Face-Recognition Systems","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2603.28425","title":"From Pixels to Reality: Physical-Digital Patch Attacks on Real-World Camera","created":"2026-03-30","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null}],"next_cursor":null}