{"total":64,"rows":[{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2409.05294","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","created":"2024-09-09","cited_by_count":25,"area":"diffusion"},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2303.01201","title":"Average of Pruning: Improving Performance and Stability of Out-of-Distribution Detection","created":"2023-03-02","cited_by_count":14,"area":null},{"id":"2303.13813","title":"Generalist: Decoupling Natural and Robust Generalization","created":"2023-03-24","cited_by_count":14,"area":null},{"id":"2305.05392","title":"Sharpness-Aware Minimization Alone can Improve Adversarial Robustness","created":"2023-05-09","cited_by_count":14,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2401.01752","title":"FullLoRA: Efficiently Boosting the Robustness of Pretrained Vision Transformers","created":"2024-01-03","cited_by_count":9,"area":null},{"id":"2302.01056","title":"Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense","created":"2023-02-02","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2406.15305","title":"PID: Prompt-Independent Data Protection Against Latent Diffusion Models","created":"2024-06-14","cited_by_count":6,"area":"diffusion"},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2402.03317","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","created":"2024-01-02","cited_by_count":5,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2501.01529","title":"SAFER: Sharpness Aware layer-selective Finetuning for Enhanced Robustness in vision transformers","created":"2025-01-02","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2301.08092","title":"RNAS-CL: Robust Neural Architecture Search by Cross-Layer Knowledge Distillation","created":"2023-01-19","cited_by_count":2,"area":"distill"},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2410.05951","title":"Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Models","created":"2024-10-08","cited_by_count":2,"area":null},{"id":"2502.07821","title":"Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2310.18975","title":"Blacksmith: Fast Adversarial Training of Vision Transformers via a Mixture of Single-step and Multi-step Methods","created":"2023-10-29","cited_by_count":1,"area":null},{"id":"2401.17515","title":"Semantic-Syntactic Discrepancy in Images (SSDI): Learning Meaning and Order of Features from Natural Images","created":"2024-01-31","cited_by_count":1,"area":null},{"id":"2407.17587","title":"S-E Pipeline: A Vision Transformer (ViT) based Resilient Classification Pipeline for Medical Imaging Against Adversarial Attacks","created":"2024-07-23","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2508.12384","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2508.14079","title":"A Guide to Robust Generalization: The Impact of Architecture, Pre-training, and Optimization Strategy","created":"2025-08-12","cited_by_count":1,"area":null},{"id":"2510.13361","title":"Generalist++: A Meta-learning Framework for Mitigating Trade-off in Adversarial Training","created":"2025-10-15","cited_by_count":1,"area":null},{"id":"2511.00836","title":"Parameter Interpolation Adversarial Training for Robust Image Classification","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2604.12780","title":"Efficient Adversarial Training via Criticality-Aware Fine-Tuning","created":"2026-04-14","cited_by_count":1,"area":null},{"id":"2604.24332","title":"Mitigating Error Amplification in Fast Adversarial Training","created":"2026-04-27","cited_by_count":1,"area":null},{"id":"2605.13395","title":"Taming the Long Tail: Rebalancing Adversarial Training via Adaptive Perturbation","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2401.05338","title":"STR-Cert: Robustness Certification for Deep Text Recognition on Deep Learning Pipelines and Vision Transformers","created":"2023-11-28","cited_by_count":0,"area":null},{"id":"2401.15248","title":"Better Representations via Adversarial Training in Pre-Training: A Theoretical Perspective","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2403.13196","title":"ADAPT to Robustify Prompt Tuning Vision Transformers","created":"2024-03-19","cited_by_count":0,"area":null},{"id":"2409.06420","title":"Unrevealed Threats: A Comprehensive Study of the Adversarial Robustness of Underwater Image Enhancement Models","created":"2024-09-10","cited_by_count":0,"area":null},{"id":"2501.05633","title":"Regularized Top-$k$: A Bayesian Framework for Gradient Sparsification","created":"2025-01-10","cited_by_count":0,"area":null},{"id":"2504.01399","title":"Leveraging Generalizability of Image-to-Image Translation for Enhanced Adversarial Defense","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2504.10850","title":"How to Enhance Downstream Adversarial Robustness (almost) without Touching the Pre-Trained Foundation Model?","created":"2025-04-15","cited_by_count":0,"area":null},{"id":"2506.05032","title":"Identifying and Understanding Cross-Class Features in Adversarial Training","created":"2025-06-05","cited_by_count":0,"area":null},{"id":"2510.00517","title":"Understanding Sensitivity of Differential Attention through the Lens of Adversarial Robustness","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2603.20777","title":"OmniPatch: A Universal Adversarial Patch for ViT-CNN Cross-Architecture Transfer in Semantic Segmentation","created":"2026-03-21","cited_by_count":0,"area":null},{"id":"2604.11590","title":"Learning Robustness at Test-Time from a Non-Robust Teacher","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2606.01746","title":"Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.03925","title":"Adaptive Causal Alignment for High-Confidence Adversarial Training","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.22516","title":"The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks","created":"2026-06-21","cited_by_count":0,"area":null}],"next_cursor":null}