{"total":79,"rows":[{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2501.18841","title":"Trading Inference-Time Compute for Adversarial Robustness","created":"2025-01-31","cited_by_count":61,"area":"lr"},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2502.11725","title":"Adversarially Robust CLIP Models Can Induce Better (Robust) Perceptual Metrics","created":"2025-02-17","cited_by_count":10,"area":null},{"id":"2401.01752","title":"FullLoRA: Efficiently Boosting the Robustness of Pretrained Vision Transformers","created":"2024-01-03","cited_by_count":9,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2308.10632","title":"Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models","created":"2023-08-21","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2408.01541","title":"Guardians of Image Quality: Benchmarking Defenses Against Adversarial Attacks on Image Quality Metrics","created":"2024-08-02","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2311.05565","title":"High-Performance Transformers for Table Structure Recognition Need Early Convolutions","created":"2023-11-09","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2506.01511","title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment","created":"2025-06-02","cited_by_count":3,"area":"diffusion"},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2309.01620","title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2402.19401","title":"Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance","created":"2024-02-29","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2412.10353","title":"Robust image classification with multi-modal large language models","created":"2024-12-13","cited_by_count":2,"area":"mllm"},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2510.21532","title":"FrameShield: Adversarially Robust Video Anomaly Detection","created":"2025-10-24","cited_by_count":2,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2311.16577","title":"Efficient Key-Based Adversarial Defense for ImageNet by Using Pre-trained Model","created":"2023-11-28","cited_by_count":1,"area":null},{"id":"2311.17607","title":"Topology-preserving Adversarial Training for Alleviating Natural Accuracy Degradation","created":"2023-11-29","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.08950","title":"On the Adversarial Transferability of Generalized \"Skip Connections\"","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.16579","title":"Conflict-Aware Adversarial Training","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2503.17110","title":"Beyond Accuracy: What Matters in Designing Well-Behaved Image Classification Models?","created":"2025-03-21","cited_by_count":1,"area":null},{"id":"2508.00552","title":"DBLP: Noise Bridge Consistency Distillation For Efficient And Reliable Adversarial Purification","created":"2025-08-01","cited_by_count":1,"area":null},{"id":"2508.14079","title":"A Guide to Robust Generalization: The Impact of Architecture, Pre-training, and Optimization Strategy","created":"2025-08-12","cited_by_count":1,"area":null},{"id":"2509.25927","title":"The Impact of Scaling Training Data on Adversarial Robustness","created":"2025-09-30","cited_by_count":1,"area":null},{"id":"2510.13872","title":"Scalable Energy-Based Models via Adversarial Training: Unifying Discrimination and Generation","created":"2025-10-13","cited_by_count":1,"area":null},{"id":"2601.17536","title":"OTI: A Model-free and Visually Interpretable Measure of Image Attackability","created":"2026-01-24","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2607.14921","title":"Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2306.06081","title":"Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2407.08806","title":"HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2502.03758","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","created":"2025-02-06","cited_by_count":0,"area":null},{"id":"2504.05483","title":"Secure Diagnostics: Adversarial Robustness Meets Clinical Interpretability","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2508.05489","title":"Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2509.23325","title":"Robust Fine-Tuning from Non-Robust Pretrained Models: Mitigating Suboptimal Transfer With Epsilon-Scheduling","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2510.10000","title":"Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks","created":"2025-10-11","cited_by_count":0,"area":null},{"id":"2511.11993","title":"Dynamic Parameter Optimization for Highly Transferable Transformation-Based Attacks","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2601.02228","title":"FMVP: Masked Flow Matching for Adversarial Video Purification","created":"2026-01-05","cited_by_count":0,"area":"diffusion"},{"id":"2602.05175","title":"Enhancing Adversarial Robustness with Signed Distance Fields for Harmonizing Geometric Invariance and Texture","created":"2026-02-05","cited_by_count":0,"area":null},{"id":"2603.25244","title":"Fast Preemptive Robustification: High-Frequency Response Anti-Aligns Shared Vulnerability","created":"2026-03-26","cited_by_count":0,"area":null},{"id":"2606.01746","title":"Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.03925","title":"Adaptive Causal Alignment for High-Confidence Adversarial Training","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.08745","title":"Stain-Aware Wavelet Regularization for Instant Adversarial Purification in Histopathology","created":"2026-06-07","cited_by_count":0,"area":null},{"id":"2606.22516","title":"The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks","created":"2026-06-21","cited_by_count":0,"area":null},{"id":"2607.06109","title":"RoME: Robust Mixture of Low-Rank Experts against Multiple Adversarial Perturbations","created":"2026-07-07","cited_by_count":0,"area":"moe"},{"id":"2607.12545","title":"VanillaBench: The Hidden Accuracy Cost of Adversarial Robustness","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}