{"total":44,"rows":[{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2312.12444","title":"What Makes Pre-Trained Visual Representations Successful for Robust Manipulation?","created":"2023-11-03","cited_by_count":39,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2303.11126","title":"Robustifying Token Attention for Vision Transformers","created":"2023-03-20","cited_by_count":19,"area":null},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16,"area":null},{"id":"2403.10935","title":"Understanding Robustness of Visual State Space Models for Image Classification","created":"2024-03-16","cited_by_count":12,"area":null},{"id":"2401.01752","title":"FullLoRA: Efficiently Boosting the Robustness of Pretrained Vision Transformers","created":"2024-01-03","cited_by_count":9,"area":null},{"id":"2208.09602","title":"Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective","created":"2022-08-20","cited_by_count":8,"area":null},{"id":"2301.13803","title":"Fairness-aware Vision Transformer via Debiased Self-Attention","created":"2023-01-31","cited_by_count":6,"area":null},{"id":"2210.04303","title":"Are All Vision Models Created Equal? A Study of the Open-Loop to Closed-Loop Causality Gap","created":"2022-10-09","cited_by_count":5,"area":null},{"id":"2402.03317","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","created":"2024-01-02","cited_by_count":5,"area":null},{"id":"2403.04701","title":"ObjectCompose: Evaluating Resilience of Vision-Based Models on Object-to-Background Compositional Changes","created":"2024-03-07","cited_by_count":5,"area":null},{"id":"2504.04858","title":"Don't Lag, RAG: Training-Free Adversarial Detection Using RAG","created":"2025-04-07","cited_by_count":5,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2210.11407","title":"Similarity of Neural Architectures using Adversarial Attack Transferability","created":"2022-10-20","cited_by_count":4,"area":null},{"id":"2310.02544","title":"SlowFormer: Universal Adversarial Patch for Attack on Compute and Energy Efficiency of Inference Efficient Vision Transformers","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2403.07942","title":"Attacking Transformers with Feature Diversity Adversarial Perturbation","created":"2024-03-10","cited_by_count":3,"area":null},{"id":"2304.12520","title":"Hint-Aug: Drawing Hints from Foundation Vision Transformers Towards Boosted Few-Shot Parameter-Efficient Tuning","created":"2023-04-25","cited_by_count":2,"area":null},{"id":"2307.04066","title":"Random Position Adversarial Patch for Vision Transformers","created":"2023-07-09","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2407.00389","title":"Query-Efficient Hard-Label Black-Box Attack against Vision Transformers","created":"2024-06-29","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2507.00015","title":"Vision Transformer with Adversarial Indicator Token against Adversarial Attacks in Radio Signal Classifications","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2509.22836","title":"Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GAN","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2510.16660","title":"Universal and Transferable Attacks on Pathology Foundation Models","created":"2025-10-18","cited_by_count":2,"area":null},{"id":"2311.12914","title":"Attention Deficit is Ordered! Fooling Deformable Vision Transformers with Collaborative Adversarial Patches","created":"2023-11-21","cited_by_count":1,"area":null},{"id":"2510.13865","title":"Deep Edge Filter: Return of the Human-Crafted Layer in Deep Learning","created":"2025-10-13","cited_by_count":1,"area":null},{"id":"2301.13356","title":"Inference Time Evidences of Adversarial Attacks for Forensic on Transformers","created":"2023-01-31","cited_by_count":0,"area":null},{"id":"2306.05495","title":"Is Attentional Channel Processing Design Required? Comprehensive Analysis Of Robustness Between Vision Transformers And Fully Attentional Networks","created":"2023-06-08","cited_by_count":0,"area":null},{"id":"2310.08772","title":"Investigating the Robustness and Properties of Detection Transformers (DETR) Toward Difficult Images","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2402.08070","title":"Multi-Attribute Vision Transformers are Efficient and Robust Learners","created":"2024-02-12","cited_by_count":0,"area":null},{"id":"2403.10476","title":"Approximate Nullspace Augmented Finetuning for Robust Vision Transformers","created":"2024-03-15","cited_by_count":0,"area":null},{"id":"2412.20006","title":"Adversarial Robustness for Deep Learning-based Wildfire Prediction Models","created":"2024-12-28","cited_by_count":0,"area":null},{"id":"2505.21609","title":"Preventing Adversarial AI Attacks Against Autonomous Situational Awareness: A Maritime Case Study","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2510.00517","title":"Understanding Sensitivity of Differential Attention through the Lens of Adversarial Robustness","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2603.20777","title":"OmniPatch: A Universal Adversarial Patch for ViT-CNN Cross-Architecture Transfer in Semantic Segmentation","created":"2026-03-21","cited_by_count":0,"area":null},{"id":"2607.07922","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","created":"2026-07-08","cited_by_count":0,"area":null},{"id":"2608.06674","title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}