{"total":95,"rows":[{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58,"area":"distill"},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2509.17818","title":"ContextFlow: Training-Free Video Object Editing via Adaptive Context Enrichment","created":"2025-09-22","cited_by_count":27,"area":"diffusion"},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2209.09841","title":"Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation","created":"2022-09-20","cited_by_count":19,"area":"distill"},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2412.15678","title":"Multi-Pair Temporal Sentence Grounding via Multi-Thread Knowledge Transfer Network","created":"2024-12-20","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2403.10073","title":"Revisiting Adversarial Training under Long-Tailed Distributions","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2307.09763","title":"Towards Building More Robust Models with Frequency Bias","created":"2023-07-19","cited_by_count":12,"area":null},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2312.07067","title":"Focus on Hiders: Exploring Hidden Threats for Enhancing Adversarial Training","created":"2023-12-12","cited_by_count":9,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2312.05508","title":"Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillation","created":"2023-12-09","cited_by_count":8,"area":null},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2506.15115","title":"Towards Reliable Forgetting: A Survey on Machine Unlearning Verification","created":"2025-06-18","cited_by_count":8,"area":"safety"},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2305.12118","title":"Annealing Self-Distillation Rectification Improves Adversarial Training","created":"2023-05-20","cited_by_count":7,"area":"distill"},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2401.14948","title":"Conserve-Update-Revise to Cure Generalization and Robustness Trade-off in Adversarial Training","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2503.01924","title":"TAET: Two-Stage Adversarial Equalization Training on Long-Tailed Distributions","created":"2025-03-02","cited_by_count":6,"area":null},{"id":"2503.08038","title":"Generalized Kullback-Leibler Divergence Loss","created":"2025-03-11","cited_by_count":6,"area":"distill"},{"id":"2503.12874","title":"Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models","created":"2025-03-17","cited_by_count":6,"area":"mllm"},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5,"area":null},{"id":"2303.14077","title":"Improved Adversarial Training Through Adaptive Instance-wise Loss Smoothing","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2310.14637","title":"Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval","created":"2023-10-23","cited_by_count":5,"area":null},{"id":"2309.04650","title":"Exploring Robust Features for Improving Adversarial Robustness","created":"2023-09-09","cited_by_count":4,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2407.15385","title":"Towards Robust Vision Transformer via Masked Adaptive Ensemble","created":"2024-07-22","cited_by_count":4,"area":null},{"id":"2408.13102","title":"Dynamic Label Adversarial Training for Deep Learning Robustness Against Adversarial Attacks","created":"2024-08-23","cited_by_count":4,"area":null},{"id":"2402.15586","title":"Distilling Adversarial Robustness Using Heterogeneous Teachers","created":"2024-02-23","cited_by_count":3,"area":"distill"},{"id":"2404.01828","title":"Defense without Forgetting: Continual Adversarial Defense with Anisotropic & Isotropic Pseudo Replay","created":"2024-04-02","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2410.06339","title":"Filtered Randomized Smoothing: A New Defense for Robust Modulation Classification","created":"2024-10-08","cited_by_count":3,"area":null},{"id":"2512.07500","title":"MultiMotion: Multi Subject Video Motion Transfer via Video Diffusion Transformer","created":"2025-12-08","cited_by_count":3,"area":"diffusion"},{"id":"2303.14922","title":"CAT:Collaborative Adversarial Training","created":"2023-03-27","cited_by_count":2,"area":null},{"id":"2306.10001","title":"Group Orthogonalization Regularization For Vision Models Adaptation and Robustness","created":"2023-06-16","cited_by_count":2,"area":null},{"id":"2311.15165","title":"Mixing Classifiers to Alleviate the Accuracy-Robustness Trade-Off","created":"2023-11-26","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2510.27249","title":"C-LEAD: Contrastive Learning for Enhanced Adversarial Defense","created":"2025-10-31","cited_by_count":2,"area":null},{"id":"2208.08083","title":"Two Heads are Better than One: Robust Learning Meets Multi-branch Models","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2309.01099","title":"Enhancing Infrared Small Target Detection Robustness with Bi-Level Adversarial Framework","created":"2023-09-03","cited_by_count":1,"area":null},{"id":"2310.00607","title":"Understanding Robust Overfitting from the Feature Generalization Perspective","created":"2023-10-01","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2311.17607","title":"Topology-preserving Adversarial Training for Alleviating Natural Accuracy Degradation","created":"2023-11-29","cited_by_count":1,"area":null},{"id":"2410.16579","title":"Conflict-Aware Adversarial Training","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2412.09954","title":"$\\textrm{A}^{\\textrm{2}}$RNet: Adversarial Attack Resilient Network for Robust Infrared and Visible Image Fusion","created":"2024-12-13","cited_by_count":1,"area":null},{"id":"2505.19459","title":"Your Classifier Can Do More: Towards Balancing the Gaps in Classification, Robustness, and Generation","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.07056","title":"D2R: dual regularization loss with collaborative adversarial generation for model robustness","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2508.17265","title":"AdaGAT: Adaptive Guidance Adversarial Training for the Robustness of Deep Neural Networks","created":"2025-08-24","cited_by_count":1,"area":"distill"},{"id":"2509.06992","title":"FedAPT: Federated Adversarial Prompt Tuning for Vision-Language Models","created":"2025-09-03","cited_by_count":1,"area":"mllm"},{"id":"2509.12633","title":"CIARD: Cyclic Iterative Adversarial Robustness Distillation","created":"2025-09-16","cited_by_count":1,"area":null},{"id":"2604.24332","title":"Mitigating Error Amplification in Fast Adversarial Training","created":"2026-04-27","cited_by_count":1,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2301.01495","title":"Beckman Defense","created":"2023-01-04","cited_by_count":0,"area":null},{"id":"2303.13955","title":"PIAT: Parameter Interpolation based Adversarial Training for Image Classification","created":"2023-03-24","cited_by_count":0,"area":null},{"id":"2306.06081","title":"Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2306.14262","title":"A Spectral Perspective towards Understanding and Improving Adversarial Robustness","created":"2023-06-25","cited_by_count":0,"area":null},{"id":"2310.12713","title":"Learn from the Past: A Proxy Guided Adversarial Defense Framework with Self Distillation Regularization","created":"2023-10-19","cited_by_count":0,"area":"distill"},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2404.06313","title":"On adversarial training and the 1 Nearest Neighbor classifier","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2408.03892","title":"MORTAR: A Model-based Runtime Action Repair Framework for AI-enabled Cyber-Physical Systems","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2408.03944","title":"Improving Fast Adversarial Training Paradigm: An Example Taxonomy Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2409.06726","title":"Feedback-based Modal Mutual Search for Attacking Vision-Language Pre-training Models","created":"2024-08-27","cited_by_count":0,"area":"mllm"},{"id":"2412.19947","title":"Standard-Deviation-Inspired Regularization for Improving Adversarial Robustness","created":"2024-12-27","cited_by_count":0,"area":null},{"id":"2502.17972","title":"Model-Free Adversarial Purification via Coarse-To-Fine Tensor Network Representation","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2506.08255","title":"SHIELD: Secure Hypernetworks for Incremental Expansion Learning Defense","created":"2025-06-09","cited_by_count":0,"area":null},{"id":"2506.08611","title":"Towards Class-wise Fair Adversarial Training via Anti-Bias Soft Label Distillation","created":"2025-06-10","cited_by_count":0,"area":null},{"id":"2509.20793","title":"FERD: Fairness-Enhanced Data-Free Robustness Distillation","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2605.02183","title":"Manifold-Constrained Adversarial Training for Long-Tailed Robustness via Geometric Alignment","created":"2026-05-04","cited_by_count":0,"area":null},{"id":"2606.01746","title":"Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.27784","title":"Improving Adversarial Robustness via Activation Amplification and Attenuation","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2610.19911","title":"CARD: Closing the Teacher-Student Loop for Adversarial Robustness Distillation","created":"2026-10-14","cited_by_count":0,"area":"distill"}],"next_cursor":null}