{"total":89,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2212.05709","title":"HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design","created":"2022-12-12","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2409.17977","title":"Cross-Modality Attack Boosted by Gradient-Evolutionary Multiform Optimization","created":"2024-09-26","cited_by_count":12,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2405.09924","title":"Infrared Adversarial Car Stickers","created":"2024-05-16","cited_by_count":8,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2206.05751","title":"Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation","created":"2022-06-12","cited_by_count":6,"area":null},{"id":"2210.08870","title":"Differential Evolution based Dual Adversarial Camouflage: Fooling Human Eyes and Object Detectors","created":"2022-10-17","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2303.04238","title":"Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors","created":"2023-03-07","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2406.10285","title":"I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors","created":"2024-06-12","cited_by_count":5,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2312.01789","title":"Two-stage optimized unified adversarial patch for attacking visible-infrared cross-modal detectors in the physical world","created":"2023-12-04","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2504.09361","title":"PapMOT: Exploring Adversarial Patch Attack against Multiple Object Tracking","created":"2025-04-12","cited_by_count":4,"area":null},{"id":"2505.16402","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","created":"2025-05-22","cited_by_count":4,"area":null},{"id":"2311.11191","title":"Attention-Based Real-Time Defenses for Physical Adversarial Attacks in Vision Applications","created":"2023-11-19","cited_by_count":3,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2506.23581","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2312.07338","title":"Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2404.15881","title":"Steal Now and Attack Later: Evaluating Robustness of Object Detection against Black-box Adversarial Attacks","created":"2024-04-24","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2511.09829","title":"Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2311.06122","title":"Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2312.03030","title":"Generating Visually Realistic Adversarial Patch","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2407.01168","title":"Multi-View Black-Box Physical Attacks on Infrared Pedestrian Detectors Using Adversarial Infrared Grid","created":"2024-07-01","cited_by_count":1,"area":null},{"id":"2408.06625","title":"DePatch: Towards Robust Adversarial Patch for Evading Person Detectors in the Real World","created":"2024-08-13","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2507.10265","title":"Kaleidoscopic Background Attack: Disrupting Pose Estimation with Multi-Fold Radial Symmetry Textures","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2508.10600","title":"Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2510.17322","title":"A Single Set of Adversarial Clothes Breaks Multiple Defense Methods in the Physical World","created":"2025-10-20","cited_by_count":1,"area":null},{"id":"2605.04675","title":"Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Pattern","created":"2026-05-06","cited_by_count":1,"area":null},{"id":"2607.17069","title":"AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression","created":"2026-07-19","cited_by_count":1,"area":null},{"id":"2309.09443","title":"Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2311.08141","title":"GMTR: Graph Matching Transformers","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2312.16805","title":"DarkShot: Lighting Dark Images with Low-Compute and High-Quality","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.05431","title":"TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2401.05432","title":"TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2403.03674","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","created":"2024-03-06","cited_by_count":0,"area":null},{"id":"2403.13663","title":"T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image","created":"2024-03-20","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2408.17101","title":"Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2410.11162","title":"Towards General Deepfake Detection with Dynamic Curriculum","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2410.13409","title":"Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2505.12009","title":"LatentStealth: Unnoticeable and Efficient Adversarial Attacks on Expressive Human Pose and Shape Estimation","created":"2025-05-17","cited_by_count":0,"area":null},{"id":"2507.06486","title":"Mask6D: Masked Pose Priors For 6D Object Pose Estimation","created":"2025-07-09","cited_by_count":0,"area":null},{"id":"2511.16020","title":"Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion","created":"2025-11-20","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2603.21876","title":"Thermal Topology Collapse: Universal Physical Patch Attacks on Infrared Vision Systems","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2604.06865","title":"Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasion","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2604.10715","title":"Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition","created":"2026-04-12","cited_by_count":0,"area":null},{"id":"2605.17822","title":"Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detection","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.19736","title":"VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion","created":"2026-06-18","cited_by_count":0,"area":null},{"id":"2607.21243","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2608.06801","title":"AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.30839","title":"Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.07110","title":"Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.18133","title":"Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.34501","title":"Can Attack Difficulty Be Characterized Before Optimization? A Study of Pre-optimization Difficulty in Person-Vanishing Attacks","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}