{"total":57,"rows":[{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2303.12669","title":"An Extended Study of Human-like Behavior under Adversarial Training","created":"2023-03-22","cited_by_count":9,"area":null},{"id":"2401.01752","title":"FullLoRA: Efficiently Boosting the Robustness of Pretrained Vision Transformers","created":"2024-01-03","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2407.10918","title":"PartImageNet++ Dataset: Scaling up Part-based Models for Robust Recognition","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2308.10632","title":"Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models","created":"2023-08-21","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2311.14450","title":"Segment (Almost) Nothing: Prompt-Agnostic Adversarial Attacks on Segmentation Models","created":"2023-11-24","cited_by_count":5,"area":null},{"id":"2402.03317","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","created":"2024-01-02","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2212.03069","title":"Multiple Perturbation Attack: Attack Pixelwise Under Different $\\ell_p$-norms For Better Adversarial Performance","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2412.09765","title":"L-WISE: Boosting Human Visual Category Learning Through Model-Based Image Selection and Enhancement","created":"2024-12-12","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2601.18678","title":"Counterfactual Explanations on Robust Perceptual Geodesics","created":"2026-01-26","cited_by_count":2,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2308.10743","title":"Enhancing Adversarial Attacks: The Similar Target Method","created":"2023-08-21","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2405.15971","title":"Robust width: A lightweight and certifiable adversarial defense","created":"2024-05-24","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2501.18098","title":"Disentangling Safe and Unsafe Corruptions via Anisotropy and Locality","created":"2025-01-30","cited_by_count":0,"area":null},{"id":"2502.17972","title":"Model-Free Adversarial Purification via Coarse-To-Fine Tensor Network Representation","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2502.21041","title":"Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2503.16975","title":"EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2504.05483","title":"Secure Diagnostics: Adversarial Robustness Meets Clinical Interpretability","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2509.23325","title":"Robust Fine-Tuning from Non-Robust Pretrained Models: Mitigating Suboptimal Transfer With Epsilon-Scheduling","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2601.01454","title":"PartImageNet++ Dataset: Enhancing Visual Models with High-Quality Part Annotations","created":"2026-01-04","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}