{"total":67,"rows":[{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2306.09124","title":"DIFFender: Diffusion-Based Adversarial Defense against Patch Attacks","created":"2023-06-15","cited_by_count":15,"area":"diffusion"},{"id":"2308.08925","title":"A White-Box False Positive Adversarial Attack Method on Contrastive Loss Based Offline Handwritten Signature Verification Models","created":"2023-08-17","cited_by_count":15,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2203.07341","title":"Defending From Physically-Realizable Adversarial Attacks Through Internal Over-Activation Analysis","created":"2022-03-14","cited_by_count":10,"area":null},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2401.09673","title":"Artwork Protection Against Neural Style Transfer Using Locally Adaptive Adversarial Color Attack","created":"2024-01-18","cited_by_count":10,"area":null},{"id":"2211.14646","title":"Towards Improved Input Masking for Convolutional Neural Networks","created":"2022-11-26","cited_by_count":8,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2310.17403","title":"Detection Defenses: An Empty Promise against Adversarial Patch Attacks on Optical Flow","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2308.00465","title":"A Satellite Imagery Dataset for Long-Term Sustainable Development in United States Cities","created":"2023-08-01","cited_by_count":5,"area":null},{"id":"2406.10285","title":"I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors","created":"2024-06-12","cited_by_count":5,"area":null},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2409.09406","title":"Real-world Adversarial Defense against Patch Attacks based on Diffusion Model","created":"2024-09-14","cited_by_count":5,"area":"diffusion"},{"id":"2504.04858","title":"Don't Lag, RAG: Training-Free Adversarial Detection Using RAG","created":"2025-04-07","cited_by_count":5,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2407.04382","title":"Self-Supervised Representation Learning for Adversarial Attack Detection","created":"2024-07-05","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2412.01440","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","created":"2024-12-02","cited_by_count":4,"area":"diffusion"},{"id":"2306.16131","title":"Distributional Modeling for Location-Aware Adversarial Patches","created":"2023-06-28","cited_by_count":3,"area":null},{"id":"2311.11191","title":"Attention-Based Real-Time Defenses for Physical Adversarial Attacks in Vision Applications","created":"2023-11-19","cited_by_count":3,"area":null},{"id":"2311.17339","title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition","created":"2023-11-29","cited_by_count":3,"area":null},{"id":"2312.11500","title":"A Red Teaming Framework for Securing AI in Maritime Autonomous Systems","created":"2023-12-08","cited_by_count":3,"area":"safety"},{"id":"2506.23581","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2403.12988","title":"Enhancing Object Detection Robustness: Detecting and Restoring Confidence in the Presence of Adversarial Patch Attacks","created":"2024-03-04","cited_by_count":2,"area":"diffusion"},{"id":"2405.19179","title":"Model Agnostic Defense against Adversarial Patch Attacks on Object Detection in Unmanned Aerial Vehicles","created":"2024-05-29","cited_by_count":2,"area":null},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2205.08989","title":"Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing","created":"2022-05-18","cited_by_count":1,"area":null},{"id":"2306.08422","title":"X-Detect: Explainable Adversarial Patch Detection for Object Detectors in Retail","created":"2023-06-14","cited_by_count":1,"area":null},{"id":"2307.08939","title":"Runtime Stealthy Perception Attacks against DNN-based Adaptive Cruise Control Systems","created":"2023-07-18","cited_by_count":1,"area":null},{"id":"2307.14242","title":"Defending Adversarial Patches via Joint Region Localizing and Inpainting","created":"2023-07-26","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2407.08678","title":"How to beat a Bayesian adversary","created":"2024-07-11","cited_by_count":1,"area":null},{"id":"2410.14089","title":"MMAD-Purify: A Precision-Optimized Framework for Efficient and Scalable Multi-Modal Attacks","created":"2024-10-17","cited_by_count":1,"area":"diffusion"},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.12567","title":"GAN-Based Single-Stage Defense for Traffic Sign Classification Under Adversarial Patch","created":"2025-03-16","cited_by_count":1,"area":null},{"id":"2507.06856","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","created":"2025-07-09","cited_by_count":1,"area":null},{"id":"2507.18484","title":"Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments","created":"2025-07-24","cited_by_count":1,"area":null},{"id":"2509.03179","title":"AutoDetect: Designing an Autoencoder-based Detection Method for Poisoning Attacks on Object Detection Applications in the Military Domain","created":"2025-09-03","cited_by_count":1,"area":null},{"id":"2510.17322","title":"A Single Set of Adversarial Clothes Breaks Multiple Defense Methods in the Physical World","created":"2025-10-20","cited_by_count":1,"area":null},{"id":"2602.07249","title":"Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profit","created":"2026-02-06","cited_by_count":1,"area":"driving"},{"id":"2409.17403","title":"Transient Adversarial 3D Projection Attacks on Object Detection in Autonomous Driving","created":"2024-09-25","cited_by_count":0,"area":null},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2509.04597","title":"DisPatch: Disarming Adversarial Patches in Object Detection with Diffusion Models","created":"2025-09-04","cited_by_count":0,"area":"diffusion"},{"id":"2511.12956","title":"T2I-Based Physical-World Appearance Attack against Traffic Sign Recognition Systems in Autonomous Driving","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2512.12827","title":"GradID: Adversarial Detection via Intrinsic Dimensionality of Gradients","created":"2025-12-14","cited_by_count":0,"area":null},{"id":"2602.10160","title":"AD$^2$: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems","created":"2026-02-10","cited_by_count":0,"area":"driving"},{"id":"2604.10715","title":"Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition","created":"2026-04-12","cited_by_count":0,"area":null},{"id":"2604.26317","title":"The Unseen Adversaries: Robust and Generalized Defense Against Adversarial Patches","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2605.12743","title":"Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving","created":"2026-05-12","cited_by_count":0,"area":"driving"},{"id":"2607.06592","title":"LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.21243","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2608.16031","title":"AdROD: HyperNetwork-based Adversarially Robust Object Detection for Autonomous Driving","created":"2026-08-17","cited_by_count":0,"area":"driving"},{"id":"2608.29510","title":"ARMOR: Manifold-Oriented Training for Adversarially Robust Aerial Object Detection under Data Scarcity","created":"2026-08-30","cited_by_count":0,"area":null},{"id":"2608.30839","title":"Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.08331","title":"Do Input-Level Defenses Transfer to Observation-Level Attacks on VideoLLMs?","created":"2026-09-08","cited_by_count":0,"area":"inference"},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}