{"total":28,"rows":[{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2210.02447","title":"Practical Adversarial Attacks on Spatiotemporal Traffic Forecasting Models","created":"2022-10-05","cited_by_count":29,"area":null},{"id":"2301.00896","title":"Efficient Robustness Assessment via Adversarial Spatial-Temporal Focus on Videos","created":"2023-01-03","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2304.10712","title":"Adversarial Infrared Blocks: A Multi-view Black-box Attack to Thermal Infrared Detectors in Physical World","created":"2023-04-21","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2312.14217","title":"Adversarial Infrared Curves: An Attack on Infrared Pedestrian Detectors in the Physical World","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2403.06014","title":"Hard-label based Small Query Black-box Adversarial Attack","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2304.10985","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2209.09652","title":"Adversarial Color Projection: A Projector-based Physical Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2209.11739","title":"Adversarial Catoptric Light: An Effective, Stealthy and Robust Physical-World Attack to DNNs","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2507.17577","title":"Boosting Ray Search Procedure of Hard-label Attacks with Transfer-based Priors","created":"2025-07-23","cited_by_count":1,"area":null},{"id":"2601.11952","title":"Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal","created":"2026-01-17","cited_by_count":1,"area":null},{"id":"2312.07245","title":"DTA: Distribution Transform-based Attack for Query-Limited Scenario","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2505.03383","title":"Attention-aggregated Attack for Boosting the Transferability of Facial Adversarial Examples","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2608.28499","title":"REPLICANT: Learning Policies for Evading and Hardening Malware Detectors","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":null}