{"total":56,"rows":[{"id":"2212.05709","title":"HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design","created":"2022-12-12","cited_by_count":27,"area":null},{"id":"2502.05673","title":"The Evolution of Dataset Distillation: Toward Scalable and Generalizable Solutions","created":"2025-02-08","cited_by_count":26,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2510.00181","title":"CHAI: Command Hijacking against embodied AI","created":"2025-09-30","cited_by_count":11,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2504.10888","title":"CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors","created":"2025-04-15","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2503.00377","title":"Adversarial Attacks on Event-Based Pedestrian Detectors: A Physical Approach","created":"2025-03-01","cited_by_count":5,"area":null},{"id":"2504.04858","title":"Don't Lag, RAG: Training-Free Adversarial Detection Using RAG","created":"2025-04-07","cited_by_count":5,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2505.16402","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","created":"2025-05-22","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2411.11795","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2303.17890","title":"Fooling Polarization-based Vision using Locally Controllable Polarizing Projection","created":"2023-03-31","cited_by_count":2,"area":null},{"id":"2410.05951","title":"Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Models","created":"2024-10-08","cited_by_count":2,"area":null},{"id":"2505.22798","title":"Efficient Preimage Approximation for Neural Network Certification","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2505.23313","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2307.07933","title":"Holistic Prototype Attention Network for Few-Shot VOS","created":"2023-07-16","cited_by_count":1,"area":null},{"id":"2506.14582","title":"Busting the Paper Ballot: Voting Meets Adversarial Machine Learning","created":"2025-06-17","cited_by_count":1,"area":null},{"id":"2506.19051","title":"NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysis","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2510.16923","title":"UNDREAM: Bridging Differentiable Rendering and Photorealistic Simulation for End-to-end Adversarial Attacks","created":"2025-10-19","cited_by_count":1,"area":null},{"id":"2601.04991","title":"Higher-Order Adversarial Patches for Real-Time Object Detectors","created":"2026-01-08","cited_by_count":1,"area":null},{"id":"2605.04675","title":"Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Pattern","created":"2026-05-06","cited_by_count":1,"area":null},{"id":"2605.14396","title":"Systematic Discovery of Semantic Attacks in Online Map Construction through Conditional Diffusion","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2311.01563","title":"Assist Is Just as Important as the Goal: Image Resurfacing to Aid Model's Robust Prediction","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2409.09530","title":"An Augmentation-based Model Re-adaptation Framework for Robust Image Segmentation","created":"2024-09-14","cited_by_count":0,"area":null},{"id":"2505.15628","title":"SNAP: A Benchmark for Testing the Effects of Capture Conditions on Fundamental Vision Tasks","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2506.00978","title":"CAPAA: Classifier-Agnostic Projector-Based Adversarial Attack","created":"2025-06-01","cited_by_count":0,"area":null},{"id":"2506.17632","title":"Pixel-Optimization-Free Patch Attack on Stereo Depth Estimation","created":"2025-06-21","cited_by_count":0,"area":null},{"id":"2507.00690","title":"Cage-Based Deformation for Transferable and Undefendable Point Cloud Attack","created":"2025-07-01","cited_by_count":0,"area":null},{"id":"2507.12384","title":"Trustworthy Tree-based Machine Learning by $MoS_2$ Flash-based Analog CAM with Inherent Soft Boundaries","created":"2025-07-16","cited_by_count":0,"area":null},{"id":"2509.19793","title":"BiTAA: A Bi-Task Adversarial Attack for Object Detection and Depth Estimation via 3D Gaussian Splatting","created":"2025-09-24","cited_by_count":0,"area":null},{"id":"2510.02642","title":"Sequence-Preserving Dual-FoV Defense for Traffic Sign and Light Recognition in Autonomous Vehicles","created":"2025-10-03","cited_by_count":0,"area":null},{"id":"2511.09497","title":"Fundamentals of Physical AI","created":"2025-11-12","cited_by_count":0,"area":null},{"id":"2511.12265","title":"Stabilizing Multi-Attack Adversarial Training via Bandit Optimization","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2511.16020","title":"Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion","created":"2025-11-20","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2601.16200","title":"Feature-Space Smoothing: Certified Robustness of Deep Representations","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2603.00266","title":"Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimization","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2604.06865","title":"Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasion","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2604.06954","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2604.10715","title":"Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition","created":"2026-04-12","cited_by_count":0,"area":null},{"id":"2605.17772","title":"Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2605.17822","title":"Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detection","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2605.23448","title":"AI Security Research Should Better Incentivize Defense Research","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2607.17077","title":"ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments","created":"2026-07-19","cited_by_count":0,"area":null},{"id":"2609.08013","title":"A Black-Box Adversarial Attack on Human Pose Estimation and Keypoint-Based Action Recognition Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.18133","title":"Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}