{"total":130,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2311.08819","title":"Frequency Domain-based Dataset Distillation","created":"2023-11-15","cited_by_count":28,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2509.16645","title":"ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents","created":"2025-09-20","cited_by_count":23,"area":"lr"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18,"area":null},{"id":"2403.01944","title":"Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification","created":"2024-03-04","cited_by_count":18,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2310.14532","title":"Practical Deep Dispersed Watermarking with Synchronization and Fusion","created":"2023-10-23","cited_by_count":15,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2308.10601","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","created":"2023-08-21","cited_by_count":13,"area":null},{"id":"2307.11823","title":"HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness","created":"2023-07-21","cited_by_count":12,"area":null},{"id":"2407.20836","title":"Vulnerabilities in AI-generated Image Detection: The Challenge of Adversarial Attacks","created":"2024-07-30","cited_by_count":12,"area":"diffusion"},{"id":"2506.10962","title":"SpectralAR: Spectral Autoregressive Visual Generation","created":"2025-06-12","cited_by_count":11,"area":"diffusion"},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2407.20657","title":"Prompt-Driven Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":9,"area":"mllm"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2306.15931","title":"Boosting Adversarial Transferability with Learnable Patch-wise Masks","created":"2023-06-28","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2510.08922","title":"SegTrans: Transferable Adversarial Examples for Segmentation Models","created":"2025-10-10","cited_by_count":8,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2401.13205","title":"Boosting the Transferability of Adversarial Examples via Local Mixup and Adaptive Step Size","created":"2024-01-24","cited_by_count":7,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2503.14895","title":"Mitigating Object Hallucinations in MLLMs via Multi-Frequency Perturbations","created":"2025-03-19","cited_by_count":7,"area":"mllm"},{"id":"2305.01361","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","created":"2023-05-02","cited_by_count":6,"area":null},{"id":"2307.07916","title":"On the Robustness of Split Learning against Adversarial Attacks","created":"2023-07-16","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2404.02585","title":"Unsegment Anything by Simulating Deformation","created":"2024-04-03","cited_by_count":6,"area":null},{"id":"2503.19791","title":"SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation","created":"2025-03-25","cited_by_count":6,"area":null},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2402.00418","title":"Benchmarking Transferable Adversarial Attacks","created":"2024-02-01","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2311.12051","title":"Boost Adversarial Transferability by Uniform Scale and Mix Mask Method","created":"2023-11-18","cited_by_count":4,"area":null},{"id":"2403.05955","title":"IOI: Invisible One-Iteration Adversarial Attack on No-Reference Image- and Video-Quality Metrics","created":"2024-03-09","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2504.10804","title":"Harnessing the Computation Redundancy in ViTs to Boost Adversarial Transferability","created":"2025-04-15","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3,"area":null},{"id":"2311.17087","title":"Rethinking Mixup for Improving the Adversarial Transferability","created":"2023-11-28","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2405.03193","title":"Exploring Frequencies via Feature Mixing and Meta-Learning for Improving Adversarial Transferability","created":"2024-05-06","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2503.04385","title":"Scale-Invariant Adversarial Attack against Arbitrary-scale Super-resolution","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2505.21181","title":"Boosting Adversarial Transferability via High-Frequency Augmentation and Hierarchical-Gradient Fusion","created":"2025-05-27","cited_by_count":3,"area":null},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2406.02064","title":"Advancing Generalized Transfer Attack with Initialization Derived Bilevel Optimization and Dynamic Sequence Truncation","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2408.07733","title":"Enhancing Adversarial Attacks via Parameter Adaptive Adversarial Attack","created":"2024-08-14","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2604.08405","title":"SyncBreaker:Stage-Aware Multimodal Adversarial Attacks on Audio-Driven Talking Head Generation","created":"2026-04-09","cited_by_count":2,"area":null},{"id":"2605.21541","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","created":"2026-05-20","cited_by_count":2,"area":"mllm"},{"id":"2304.08811","title":"Towards the Transferable Audio Adversarial Attack via Ensemble Methods","created":"2023-04-18","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2403.14335","title":"FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Images","created":"2024-03-21","cited_by_count":1,"area":null},{"id":"2408.08489","title":"DFT-Based Adversarial Attack Detection in MRI Brain Imaging: Enhancing Diagnostic Accuracy in Alzheimer's Case Studies","created":"2024-08-16","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2502.19672","title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack","created":"2025-02-27","cited_by_count":1,"area":"mllm"},{"id":"2503.00932","title":"Improving the Transferability of Adversarial Attacks by an Input Transpose","created":"2025-03-02","cited_by_count":1,"area":null},{"id":"2506.06992","title":"Boosting Adversarial Transferability via Commonality-Oriented Gradient Optimization","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2507.16052","title":"Disrupting Semantic and Abstract Features for Better Adversarial Transferability","created":"2025-07-21","cited_by_count":1,"area":null},{"id":"2508.05689","title":"Boosting Adversarial Transferability via Residual Perturbation Attack","created":"2025-08-06","cited_by_count":1,"area":null},{"id":"2509.07495","title":"Generating Transferrable Adversarial Examples via Local Mixing and Logits Optimization for Remote Sensing Object Recognition","created":"2025-09-09","cited_by_count":1,"area":null},{"id":"2511.00411","title":"Enhancing Adversarial Transferability by Balancing Exploration and Exploitation with Gradient-Guided Sampling","created":"2025-11-01","cited_by_count":1,"area":null},{"id":"2601.05986","title":"Deepfake detectors are DUMB: A benchmark to assess adversarial training robustness under transferability constraints","created":"2026-01-09","cited_by_count":1,"area":null},{"id":"2605.07447","title":"Sparse Autoencoders as Plug-and-Play Firewalls for Adversarial Attack Detection in VLMs","created":"2026-05-08","cited_by_count":1,"area":"mllm"},{"id":"2212.03412","title":"Artificial Intelligence Security Competition (AISC)","created":"2022-12-07","cited_by_count":0,"area":null},{"id":"2302.10686","title":"Interpretable Spectrum Transformation Attacks to Speaker Recognition","created":"2023-02-21","cited_by_count":0,"area":null}],"next_cursor":"100"}