{"total":68,"rows":[{"id":"2409.01586","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","created":"2024-09-03","cited_by_count":92,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2405.14169","title":"Towards Transferable Attacks Against Vision-LLMs in Autonomous Driving with Typography","created":"2024-05-23","cited_by_count":18,"area":"lr"},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2311.18495","title":"Improving Adversarial Transferability via Model Alignment","created":"2023-11-30","cited_by_count":10,"area":"alignment"},{"id":"2312.02207","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","created":"2023-12-03","cited_by_count":10,"area":null},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2409.02483","title":"TASAR: Transfer-based Attack on Skeletal Action Recognition","created":"2024-09-04","cited_by_count":7,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2411.15553","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","created":"2024-11-23","cited_by_count":6,"area":null},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2312.13118","title":"LRS: Enhancing Adversarial Transferability through Lipschitz Regularized Surrogate","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2311.12051","title":"Boost Adversarial Transferability by Uniform Scale and Mix Mask Method","created":"2023-11-18","cited_by_count":4,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2407.12292","title":"Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2512.14341","title":"Towards Transferable Defense Against Malicious Image Edits","created":"2025-12-16","cited_by_count":3,"area":"diffusion"},{"id":"2304.02688","title":"Going Further: Flatness at the Rescue of Early Stopping for Adversarial Example Transferability","created":"2023-04-05","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2503.06140","title":"Boosting the Local Invariance for Better Adversarial Transferability","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2310.19038","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2508.05689","title":"Boosting Adversarial Transferability via Residual Perturbation Attack","created":"2025-08-06","cited_by_count":1,"area":null},{"id":"2508.16937","title":"NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability","created":"2025-08-23","cited_by_count":1,"area":null},{"id":"2511.00411","title":"Enhancing Adversarial Transferability by Balancing Exploration and Exploitation with Gradient-Guided Sampling","created":"2025-11-01","cited_by_count":1,"area":null},{"id":"2605.18919","title":"MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks","created":"2026-05-18","cited_by_count":1,"area":null},{"id":"2406.05531","title":"Enhancing Adversarial Transferability via Information Bottleneck Constraints","created":"2024-06-08","cited_by_count":0,"area":null},{"id":"2407.08572","title":"Boosting Adversarial Transferability for Skeleton-based Action Recognition via Exploring the Model Posterior Space","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2408.05745","title":"Improving Adversarial Transferability with Neighbourhood Gradient Information","created":"2024-08-11","cited_by_count":0,"area":null},{"id":"2503.20310","title":"Enabling Heterogeneous Adversarial Transferability via Feature Permutation Attacks","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2506.17632","title":"Pixel-Optimization-Free Patch Attack on Stereo Depth Estimation","created":"2025-06-21","cited_by_count":0,"area":null},{"id":"2511.01240","title":"Beyond Deceptive Flatness: Dual-Order Solution for Strengthening Adversarial Transferability","created":"2025-11-03","cited_by_count":0,"area":null},{"id":"2512.14188","title":"Optimizing the Adversarial Perturbation with a Momentum-based Adaptive Matrix","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2601.00577","title":"Adversarial Samples Are Not Created Equal","created":"2026-01-02","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2604.27487","title":"Low Rank Adaptation for Adversarial Perturbation","created":"2026-04-30","cited_by_count":0,"area":null},{"id":"2605.24958","title":"SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2608.11815","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2608.12037","title":"Clustered Randomized Smoothing for Stochastic Prediction Functions","created":"2026-08-12","cited_by_count":0,"area":null},{"id":"2610.04652","title":"Pareto-Improving Adversarial Attacks with Primal-Dual Regularization","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}