{"total":28,"rows":[{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2401.01377","title":"Does Few-shot Learning Suffer from Backdoor Attacks?","created":"2023-12-31","cited_by_count":20,"area":null},{"id":"2411.16198","title":"Interpreting Object-level Foundation Models via Visual Precision Search","created":"2024-11-25","cited_by_count":20,"area":null},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2412.11471","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2508.02987","title":"Adversarial Attention Perturbations for Large Object Detection Transformers","created":"2025-08-05","cited_by_count":4,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2404.15881","title":"Steal Now and Attack Later: Evaluating Robustness of Object Detection against Black-box Adversarial Attacks","created":"2024-04-24","cited_by_count":2,"area":null},{"id":"2502.07821","title":"Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2508.15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","created":"2025-08-21","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2307.12342","title":"Towards Generic and Controllable Attacks Against Object Detection","created":"2023-07-23","cited_by_count":0,"area":null},{"id":"2509.20793","title":"FERD: Fairness-Enhanced Data-Free Robustness Distillation","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2603.17567","title":"Face anonymization preserving facial expressions and photometric realism","created":"2026-03-18","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2608.06674","title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers","created":"2026-08-07","cited_by_count":0,"area":null}],"next_cursor":null}