{"total":59,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2404.16452","title":"PAD: Patch-Agnostic Defense against Adversarial Patch Attacks","created":"2024-04-25","cited_by_count":32,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2308.09889","title":"DUAW: Data-free Universal Adversarial Watermark against Stable Diffusion Customization","created":"2023-08-19","cited_by_count":20,"area":"diffusion"},{"id":"2412.16955","title":"NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors","created":"2024-12-22","cited_by_count":17,"area":null},{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2511.21192","title":"When Robots Obey the Patch: Universal Transferable Patch Attacks on Vision-Language-Action Models","created":"2025-11-26","cited_by_count":13,"area":"vla"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2307.08076","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","created":"2023-07-16","cited_by_count":10,"area":"diffusion"},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2409.02483","title":"TASAR: Transfer-based Attack on Skeletal Action Recognition","created":"2024-09-04","cited_by_count":7,"area":null},{"id":"2504.10888","title":"CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors","created":"2025-04-15","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2412.01440","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","created":"2024-12-02","cited_by_count":4,"area":"diffusion"},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2505.16402","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","created":"2025-05-22","cited_by_count":4,"area":null},{"id":"2406.05800","title":"SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":3,"area":null},{"id":"2506.23581","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2308.03321","title":"AFN: Adaptive Fusion Normalization via an Encoder-Decoder Framework","created":"2023-08-07","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2508.00649","title":"Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2511.09829","title":"Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2604.22552","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2307.12872","title":"Latent Code Augmentation Based on Stable Diffusion for Data-free Substitute Attacks","created":"2023-07-24","cited_by_count":1,"area":"diffusion"},{"id":"2308.10743","title":"Enhancing Adversarial Attacks: The Similar Target Method","created":"2023-08-21","cited_by_count":1,"area":null},{"id":"2408.06625","title":"DePatch: Towards Robust Adversarial Patch for Evading Person Detectors in the Real World","created":"2024-08-13","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2503.06361","title":"Adversarial Robustness of Discriminative Self-Supervised Learning in Vision","created":"2025-03-08","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.10265","title":"Kaleidoscopic Background Attack: Disrupting Pose Estimation with Multi-Fold Radial Symmetry Textures","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2508.10600","title":"Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2604.23105","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","created":"2026-04-25","cited_by_count":1,"area":null},{"id":"2607.17069","title":"AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression","created":"2026-07-19","cited_by_count":1,"area":null},{"id":"2310.12713","title":"Learn from the Past: A Proxy Guided Adversarial Defense Framework with Self Distillation Regularization","created":"2023-10-19","cited_by_count":0,"area":"distill"},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2409.02430","title":"Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2502.01262","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2504.18594","title":"RaPA: Enhancing Transferable Targeted Attacks via Random Parameter Pruning","created":"2025-04-24","cited_by_count":0,"area":null},{"id":"2506.18591","title":"SpaNN: Detecting Multiple Adversarial Patches on CNNs by Spanning Saliency Thresholds","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2607.21243","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2607.27465","title":"IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2608.06801","title":"AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2609.33513","title":"Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}