{"total":81,"rows":[{"id":"2305.12434","title":"BiasAsker: Measuring the Bias in Conversational AI System","created":"2023-05-21","cited_by_count":53,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2304.13410","title":"Improving Adversarial Transferability via Intermediate-level Perturbation Decay","created":"2023-04-26","cited_by_count":29,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2304.00010","title":"Towards Reasonable Budget Allocation in Untargeted Graph Structure Attacks via Gradient Debias","created":"2023-03-29","cited_by_count":16,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2302.09268","title":"Bag of Tricks for Effective Language Model Pretraining and Downstream Adaptation: A Case Study on GLUE","created":"2023-02-18","cited_by_count":11,"area":null},{"id":"2208.05514","title":"Are Gradients on Graph Structure Reliable in Gray-box Attacks?","created":"2022-08-07","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2401.02727","title":"Enhancing targeted transferability via feature space fine-tuning","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2305.13623","title":"Validating Multimedia Content Moderation Software via Semantic Fusion","created":"2023-05-23","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2402.00418","title":"Benchmarking Transferable Adversarial Attacks","created":"2024-02-01","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2411.16760","title":"LibraGrad: Balancing Gradient Flow for Universally Better Vision Transformer Attributions","created":"2024-11-24","cited_by_count":5,"area":null},{"id":"2308.07625","title":"Backpropagation Path Search On Adversarial Transferability","created":"2023-08-15","cited_by_count":4,"area":null},{"id":"2311.12051","title":"Boost Adversarial Transferability by Uniform Scale and Mix Mask Method","created":"2023-11-18","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.09220","title":"Transferable Adversarial Attacks against ASR","created":"2024-11-14","cited_by_count":4,"area":null},{"id":"2307.11011","title":"Neuron Sensitivity Guided Test Case Selection for Deep Learning Testing","created":"2023-07-20","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2308.09810","title":"An Image is Worth a Thousand Toxic Words: A Metamorphic Testing Framework for Content Moderation Software","created":"2023-08-18","cited_by_count":3,"area":null},{"id":"2311.17087","title":"Rethinking Mixup for Improving the Adversarial Transferability","created":"2023-11-28","cited_by_count":3,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2503.04385","title":"Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2408.07733","title":"Enhancing Adversarial Attacks via Parameter Adaptive Adversarial Attack","created":"2024-08-14","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2303.10078","title":"Fuzziness-tuned: Improving the Transferability of Adversarial Examples","created":"2023-03-17","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2406.07580","title":"DMS: Addressing Information Loss with More Steps for Pragmatic Adversarial Attacks","created":"2024-06-09","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2507.16052","title":"Disrupting Semantic and Abstract Features for Better Adversarial Transferability","created":"2025-07-21","cited_by_count":1,"area":null},{"id":"2508.12384","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2205.09518","title":"Gradient Aligned Attacks via a Few Queries","created":"2022-05-19","cited_by_count":0,"area":null},{"id":"2308.02369","title":"Universal Defensive Underpainting Patch: Making Your Text Invisible to Optical Character Recognition","created":"2023-08-04","cited_by_count":0,"area":null},{"id":"2406.06792","title":"Reinforced Compressive Neural Architecture Search for Versatile Adversarial Robustness","created":"2024-06-10","cited_by_count":0,"area":null},{"id":"2406.11576","title":"Harmonizing Feature Maps: A Graph Convolutional Approach for Enhancing Adversarial Robustness","created":"2024-06-17","cited_by_count":0,"area":null},{"id":"2411.06666","title":"Adversarial Detection with a Dynamically Stable System","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2412.19523","title":"Attribution for Enhanced Explanation with Transferable Adversarial eXploration","created":"2024-12-27","cited_by_count":0,"area":null},{"id":"2502.01262","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2502.12207","title":"PAR-AdvGAN: Improving Adversarial Attack Capability with Progressive Auto-Regression AdvGAN","created":"2025-02-16","cited_by_count":0,"area":null},{"id":"2503.12683","title":"Algebraic Adversarial Attacks on Explainability Models","created":"2025-03-16","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2505.03383","title":"Attention-aggregated Attack for Boosting the Transferability of Facial Adversarial Examples","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2505.17807","title":"Temporal Consistency Constrained Transferable Adversarial Attacks with Background Mixup for Action Recognition","created":"2025-05-23","cited_by_count":0,"area":null},{"id":"2511.07479","title":"Modulo Video Recovery via Selective Spatiotemporal Vision Transformer","created":"2025-11-09","cited_by_count":0,"area":null},{"id":"2511.15571","title":"Transferable Dual-Domain Feature Importance Attack against AI-Generated Image Detector","created":"2025-11-19","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2608.04441","title":"Season: Spectrum-Aware Orthogonal Gradient Refinement for Transfer-Based Adversarial Attacks","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}