{"total":64,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51,"area":null},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2308.09942","title":"On the Robustness of Open-World Test-Time Training: Self-Training with Dynamic Prototype Expansion","created":"2023-08-19","cited_by_count":34,"area":null},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24,"area":"diffusion"},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2310.08847","title":"On the Over-Memorization During Natural, Robust and Catastrophic Overfitting","created":"2023-10-13","cited_by_count":20,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2304.04795","title":"Evaluation of Test-Time Adaptation Under Computational Time Constraints","created":"2023-04-10","cited_by_count":15,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2510.24038","title":"Enhancing CLIP Robustness via Cross-Modality Alignment","created":"2025-10-28","cited_by_count":15,"area":"mllm"},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2404.08154","title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization","created":"2024-04-11","cited_by_count":12,"area":null},{"id":"2405.16262","title":"Layer-Aware Analysis of Catastrophic Overfitting: Revealing the Pseudo-Robust Shortcut Dependency","created":"2024-05-25","cited_by_count":10,"area":null},{"id":"2212.06079","title":"Robust Perception through Equivariance","created":"2022-12-12","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2209.00005","title":"Be Your Own Neighborhood: Detecting Adversarial Example by the Neighborhood Relations Built on Self-Supervised Learning","created":"2022-08-31","cited_by_count":5,"area":null},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2303.12848","title":"Test-time Detection and Repair of Adversarial Samples via Masked Autoencoder","created":"2023-03-22","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2206.06496","title":"Towards Alternative Techniques for Improving Adversarial Robustness: Analysis of Adversarial Training at a Spectrum of Perturbations","created":"2022-06-13","cited_by_count":3,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2312.06423","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2405.20596","title":"Generalized Semi-Supervised Learning via Self-Supervised Feature Adaptation","created":"2024-05-31","cited_by_count":3,"area":null},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2411.01644","title":"Achieving Domain-Independent Certified Robustness via Knowledge Continuity","created":"2024-11-03","cited_by_count":3,"area":null},{"id":"2212.07815","title":"Adversarially Robust Video Perception by Seeing Motion","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2306.01435","title":"Improving Adversarial Robustness of DEQs with Explicit Regulations Along the Neural Dynamics","created":"2023-06-02","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2308.00346","title":"Dynamic ensemble selection based on Deep Neural Network Uncertainty Estimation for Adversarial Robustness","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2406.15104","title":"Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectors","created":"2024-06-21","cited_by_count":2,"area":null},{"id":"2211.05854","title":"Test-time adversarial detection and robustness for localizing humans using ultra wide band channel impulse responses","created":"2022-11-10","cited_by_count":1,"area":null},{"id":"2306.14217","title":"On Evaluating the Adversarial Robustness of Semantic Segmentation Models","created":"2023-06-25","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2405.11708","title":"Adaptive Batch Normalization Networks for Adversarial Robustness","created":"2024-05-20","cited_by_count":1,"area":null},{"id":"2405.15971","title":"Robust width: A lightweight and certifiable adversarial defense","created":"2024-05-24","cited_by_count":1,"area":null},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2407.09150","title":"Evaluating the Adversarial Robustness of Semantic Segmentation: Trying Harder Pays Off","created":"2024-07-12","cited_by_count":1,"area":null},{"id":"2410.16805","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2507.03427","title":"Rectifying Adversarial Sample with Low Entropy Prior for Test-Time Defense","created":"2025-07-04","cited_by_count":1,"area":null},{"id":"2509.02182","title":"ADVMEM: Adversarial Memory Initialization for Realistic Test-Time Adaptation via Tracklet-Based Benchmarking","created":"2025-09-02","cited_by_count":1,"area":null},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2605.01519","title":"Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity","created":"2026-05-02","cited_by_count":1,"area":null},{"id":"2206.08237","title":"Noisy Learning for Neural ODEs Acts as a Robustness Locus Widening","created":"2022-06-16","cited_by_count":0,"area":null},{"id":"2305.09305","title":"Releasing Inequality Phenomenon in $\\ell_{\\infty}$-norm Adversarial Training via Input Gradient Distillation","created":"2023-05-16","cited_by_count":0,"area":null},{"id":"2308.15072","title":"Advancing Adversarial Robustness Through Adversarial Logit Update","created":"2023-08-29","cited_by_count":0,"area":null},{"id":"2310.08732","title":"Provably Cost-Sensitive Adversarial Defense via Randomized Smoothing","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2409.09591","title":"Open-World Test-Time Training: Self-Training with Contrast Learning","created":"2024-09-15","cited_by_count":0,"area":null},{"id":"2412.01154","title":"R.I.P.: A Simple Black-box Attack on Continual Test-time Adaptation","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2504.02335","title":"Evaluating and Enhancing Segmentation Model Robustness with Metamorphic Testing","created":"2025-04-03","cited_by_count":0,"area":null},{"id":"2507.08163","title":"Adaptive Diffusion Denoised Smoothing : Certified Robustness via Randomized Smoothing with Differentially Private Guided Denoising Diffusion","created":"2025-07-10","cited_by_count":0,"area":"diffusion"},{"id":"2511.19248","title":"FedPoisonTTP: A Threat Model and Poisoning Attack for Federated Test-Time Personalization","created":"2025-11-24","cited_by_count":0,"area":null},{"id":"2601.01109","title":"NADD: Amplifying Noise for Effective Diffusion-based Adversarial Purification","created":"2026-01-03","cited_by_count":0,"area":"diffusion"},{"id":"2604.11590","title":"Learning Robustness at Test-Time from a Non-Robust Teacher","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2606.22351","title":"Reliability-Guided Adaptive Ensembling for Robust Test-Time Adaptation","created":"2026-06-21","cited_by_count":0,"area":null},{"id":"2609.08683","title":"Neither Adversarial Training Nor Purification: Emergent Adversarial Robustness from Oscillatory Predictive Learning","created":"2026-09-08","cited_by_count":0,"area":null}],"next_cursor":null}