{"total":19,"rows":[{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2303.06280","title":"Stateful Defenses for Machine Learning Models Are Not Yet Secure Against Black-box Attacks","created":"2023-03-11","cited_by_count":11,"area":null},{"id":"2401.02718","title":"Calibration Attacks: A Comprehensive Study of Adversarial Attacks on Model Confidence","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2302.11963","title":"Investigating Catastrophic Overfitting in Fast Adversarial Training: A Self-fitting Perspective","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2310.00567","title":"Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks","created":"2023-10-01","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2310.09891","title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning","created":"2023-10-15","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2607.14921","title":"Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2306.01400","title":"Adaptive Attractors: A Defense Strategy against ML Adversarial Collusion Attacks","created":"2023-06-02","cited_by_count":0,"area":null},{"id":"2308.11845","title":"SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks","created":"2023-08-23","cited_by_count":0,"area":null},{"id":"2602.08679","title":"Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2610.17382","title":"Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}