{"total":41,"rows":[{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2404.18191","title":"Exploring the Robustness of In-Context Learning with Noisy Labels","created":"2024-04-28","cited_by_count":14,"area":null},{"id":"2212.14597","title":"Defense Against Adversarial Attacks on Audio DeepFake Detection","created":"2022-12-30","cited_by_count":12,"area":null},{"id":"2401.12532","title":"DAFA: Distance-Aware Fair Adversarial Training","created":"2024-01-23","cited_by_count":11,"area":null},{"id":"2301.12993","title":"Benchmarking Robustness to Adversarial Image Obfuscations","created":"2023-01-30","cited_by_count":8,"area":null},{"id":"2403.13322","title":"DD-RobustBench: An Adversarial Robustness Benchmark for Dataset Distillation","created":"2024-03-20","cited_by_count":8,"area":null},{"id":"2506.09237","title":"PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies","created":"2025-06-10","cited_by_count":8,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2511.22147","title":"RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attacks","created":"2025-11-27","cited_by_count":7,"area":null},{"id":"2410.10744","title":"Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddings","created":"2024-10-14","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2407.15385","title":"Towards Robust Vision Transformer via Masked Adaptive Ensemble","created":"2024-07-22","cited_by_count":4,"area":null},{"id":"2205.14851","title":"Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Models","created":"2022-05-30","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2210.02577","title":"A Closer Look at Robustness to L-infinity and Spatial Perturbations and their Composition","created":"2022-10-05","cited_by_count":2,"area":null},{"id":"2212.07992","title":"Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2304.12486","title":"Evaluating Adversarial Robustness on Document Image Classification","created":"2023-04-24","cited_by_count":2,"area":null},{"id":"2304.12876","title":"Evaluation of Parameter-based Attacks against Embedded Neural Networks with Laser Injection","created":"2023-04-25","cited_by_count":2,"area":null},{"id":"2406.10933","title":"Improving Adversarial Robustness via Decoupled Visual Representation Masking","created":"2024-06-16","cited_by_count":2,"area":null},{"id":"2505.19397","title":"Are Time-Series Foundation Models Deployment-Ready? A Systematic Study of Adversarial Robustness Across Domains","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2510.21532","title":"FrameShield: Adversarially Robust Video Anomaly Detection","created":"2025-10-24","cited_by_count":2,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2512.12997","title":"Calibrating Uncertainty for Zero-Shot Adversarial CLIP","created":"2025-12-15","cited_by_count":1,"area":null},{"id":"2605.18919","title":"MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks","created":"2026-05-18","cited_by_count":1,"area":null},{"id":"2205.02741","title":"CE-based white-box adversarial attacks will not work using super-fitting","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2205.02743","title":"Rethinking Classifier and Adversarial Attack","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2208.06984","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2307.06548","title":"Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations","created":"2023-07-13","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2406.06792","title":"Reinforced Compressive Neural Architecture Search for Versatile Adversarial Robustness","created":"2024-06-10","cited_by_count":0,"area":null},{"id":"2406.15635","title":"DataFreeShield: Defending Adversarial Attacks without Training Data","created":"2024-06-21","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2410.23483","title":"Keep on Swimming: Real Attackers Only Need Partial Knowledge of a Multi-Model System","created":"2024-10-30","cited_by_count":0,"area":null},{"id":"2510.10000","title":"Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks","created":"2025-10-11","cited_by_count":0,"area":null},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2603.29182","title":"Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses","created":"2026-03-31","cited_by_count":0,"area":null}],"next_cursor":null}