{"total":88,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41,"area":null},{"id":"2212.05709","title":"HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design","created":"2022-12-12","cited_by_count":27,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2305.06716","title":"Distracting Downpour: Adversarial Weather Attacks for Motion Estimation","created":"2023-05-11","cited_by_count":15,"area":null},{"id":"2401.03582","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","created":"2024-01-07","cited_by_count":14,"area":null},{"id":"2307.08278","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","created":"2023-07-17","cited_by_count":13,"area":null},{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2411.14201","title":"Regional Attention for Shadow Removal","created":"2024-11-21","cited_by_count":12,"area":null},{"id":"2206.01034","title":"Adversarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","created":"2022-06-02","cited_by_count":11,"area":null},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2510.04398","title":"SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations","created":"2025-10-05","cited_by_count":9,"area":null},{"id":"2303.01338","title":"AdvRain: Adversarial Raindrops to Attack Camera-based Smart Vision Systems","created":"2023-03-02","cited_by_count":8,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2307.11528","title":"Improving Viewpoint Robustness for Visual Recognition via Adversarial Training","created":"2023-07-21","cited_by_count":7,"area":null},{"id":"2402.13575","title":"Flexible Physical Camouflage Generation Based on a Differential Approach","created":"2024-02-21","cited_by_count":7,"area":null},{"id":"2407.08865","title":"Single-Image Shadow Removal Using Deep Learning: A Comprehensive Survey","created":"2024-07-11","cited_by_count":7,"area":null},{"id":"2409.02108","title":"Unveiling Deep Shadows: A Survey and Benchmark on Image and Video Shadow Detection, Removal, and Generation in the Deep Learning Era","created":"2024-09-03","cited_by_count":7,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2409.09860","title":"Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective","created":"2024-09-15","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2206.12251","title":"Adversarial Zoom Lens: A Novel Physical-World Attack to DNNs","created":"2022-06-23","cited_by_count":4,"area":null},{"id":"2211.16192","title":"Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shape","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2409.04133","title":"Secure Traffic Sign Recognition: An Attention-Enabled Universal Image Inpainting Mechanism against Light Patch Attacks","created":"2024-09-06","cited_by_count":4,"area":null},{"id":"2404.06211","title":"Unified Physical-Digital Attack Detection Challenge","created":"2024-04-09","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2411.18776","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2412.01495","title":"Adversarial Attacks on Hyperbolic Networks","created":"2024-12-02","cited_by_count":3,"area":null},{"id":"2412.13709","title":"Physics-Based Adversarial Attack on Near-Infrared Human Detector for Nighttime Surveillance Camera Systems","created":"2024-12-18","cited_by_count":3,"area":null},{"id":"2303.17890","title":"Fooling Polarization-based Vision using Locally Controllable Polarizing Projection","created":"2023-03-31","cited_by_count":2,"area":null},{"id":"2312.07338","title":"Self-supervised Adaptive Pre-training of Multilingual Speech Models for Language and Dialect Identification","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2409.14240","title":"Cloud Adversarial Example Generation for Remote Sensing Image Classification","created":"2024-09-21","cited_by_count":2,"area":null},{"id":"2208.07174","title":"A Human-in-the-Middle Attack against Object Detection Systems","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2208.09285","title":"Shadows Aren't So Dangerous After All: A Fast and Robust Defense Against Shadow-Based Adversarial Attacks","created":"2022-08-18","cited_by_count":1,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2311.12857","title":"Adversarial sample generation and training using geometric masks for accurate and resilient license plate character recognition","created":"2023-10-25","cited_by_count":1,"area":null},{"id":"2312.16516","title":"ConstScene: Dataset and Model for Advancing Robust Semantic Segmentation in Construction Environments","created":"2023-12-27","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2408.06625","title":"DePatch: Towards Robust Adversarial Patch for Evading Person Detectors in the Real World","created":"2024-08-13","cited_by_count":1,"area":null},{"id":"2410.08338","title":"Time Traveling to Defend Against Adversarial Example Attacks in Image Classification","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2502.05208","title":"Mitigation of Camouflaged Adversarial Attacks in Autonomous Vehicles--A Case Study Using CARLA Simulator","created":"2025-02-03","cited_by_count":1,"area":null},{"id":"2502.18724","title":"Adversarial Universal Stickers: Universal Perturbation Attacks on Traffic Sign using Stickers","created":"2025-02-26","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2604.14643","title":"Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification","created":"2026-04-16","cited_by_count":1,"area":null},{"id":"2604.24332","title":"Mitigating Error Amplification in Fast Adversarial Training","created":"2026-04-27","cited_by_count":1,"area":null},{"id":"2605.12813","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","created":"2026-05-12","cited_by_count":1,"area":null},{"id":"2309.09443","title":"Enhancing Multilingual Speech Recognition through Language Prompt Tuning and Frame-Level Language Adapter","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2311.08141","title":"GMTR: Graph Matching Transformers","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2311.15994","title":"Adversarial Doodles: Interpretable and Human-drawable Attacks Provide Describable Insights","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2312.06163","title":"Adversarial Camera Patch: An Effective and Robust Physical-World Attack on Object Detectors","created":"2023-12-11","cited_by_count":0,"area":null},{"id":"2312.16805","title":"DarkShot: Lighting Dark Images with Low-Compute and High-Quality","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2401.05431","title":"TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2401.05432","title":"TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks","created":"2024-01-06","cited_by_count":0,"area":null},{"id":"2403.13663","title":"T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image","created":"2024-03-20","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2408.12727","title":"BankTweak: Adversarial Attack against Multi-Object Trackers by Manipulating Feature Banks","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2408.17101","title":"Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2410.11162","title":"Towards General Deepfake Detection with Dynamic Curriculum","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2410.13409","title":"Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2410.21443","title":"TACO: Adversarial Camouflage Optimization on Trucks to Fool Object Detectors","created":"2024-10-28","cited_by_count":0,"area":null},{"id":"2412.09150","title":"Evaluating Adversarial Attacks on Traffic Sign Classifiers beyond Standard Baselines","created":"2024-12-12","cited_by_count":0,"area":null},{"id":"2502.19757","title":"Snowball Adversarial Attack on Traffic Sign Classification","created":"2025-02-27","cited_by_count":0,"area":null},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2504.00429","title":"Unleashing the Power of Pre-trained Encoders for Universal Adversarial Attack Detection","created":"2025-04-01","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2506.00661","title":"Elytra: A Flexible Framework for Securing Large Vision Systems","created":"2025-05-31","cited_by_count":0,"area":null},{"id":"2507.06486","title":"Mask6D: Masked Pose Priors For 6D Object Pose Estimation","created":"2025-07-09","cited_by_count":0,"area":null},{"id":"2602.09740","title":"Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors","created":"2026-02-10","cited_by_count":0,"area":null},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2606.14504","title":"Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks","created":"2026-06-12","cited_by_count":0,"area":null}],"next_cursor":null}