{"total":94,"rows":[{"id":"2311.12832","title":"Toward effective protection against diffusion based mimicry through score distillation","created":"2023-10-02","cited_by_count":65,"area":"diffusion"},{"id":"2306.04542","title":"On the Design Fundamentals of Diffusion Models: A Survey","created":"2023-06-07","cited_by_count":60,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2408.05669","title":"StealthDiffusion: Towards Evading Diffusion Forensic Detection through Diffusion Model","created":"2024-08-11","cited_by_count":12,"area":"diffusion"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2307.08182","title":"Zero-Shot Image Harmonization with Generative Model Prior","created":"2023-07-17","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2503.20613","title":"State-Aware Perturbation Optimization for Robust Deep Reinforcement Learning","created":"2025-03-26","cited_by_count":8,"area":"deeprl"},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2510.16171","title":"Bridging Symmetry and Robustness: On the Role of Equivariance in Enhancing Adversarial Robustness","created":"2025-10-17","cited_by_count":8,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2503.10350","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","created":"2025-03-13","cited_by_count":7,"area":"diffusion"},{"id":"2503.20844","title":"Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks","created":"2025-03-26","cited_by_count":7,"area":"deeprl"},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2503.19791","title":"SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation","created":"2025-03-25","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2306.09192","title":"DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers","created":"2023-06-15","cited_by_count":5,"area":null},{"id":"2403.04701","title":"ObjectCompose: Evaluating Resilience of Vision-Based Models on Object-to-Background Compositional Changes","created":"2024-03-07","cited_by_count":5,"area":null},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5,"area":"diffusion"},{"id":"2511.00143","title":"BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing","created":"2025-10-31","cited_by_count":5,"area":null},{"id":"2306.00353","title":"Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective","created":"2023-06-01","cited_by_count":4,"area":null},{"id":"2308.15692","title":"Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models","created":"2023-08-30","cited_by_count":4,"area":"diffusion"},{"id":"2401.12578","title":"ToDA: Target-oriented Diffusion Attacker against Recommendation System","created":"2024-01-23","cited_by_count":4,"area":"diffusion"},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2408.05479","title":"ReToMe-VA: Recursive Token Merging for Video Diffusion-based Unrestricted Adversarial Attack","created":"2024-08-10","cited_by_count":3,"area":"diffusion"},{"id":"2506.01511","title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment","created":"2025-06-02","cited_by_count":3,"area":"diffusion"},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2503.09221","title":"Active Learning Inspired ControlNet Guidance for Augmenting Semantic Segmentation Datasets","created":"2025-03-12","cited_by_count":2,"area":"diffusion"},{"id":"2505.18097","title":"Towards more transferable adversarial attack in black-box manner","created":"2025-05-23","cited_by_count":2,"area":"diffusion"},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2506.19270","title":"Continuous-variable Quantum Diffusion Model for State Generation and Restoration","created":"2025-06-24","cited_by_count":2,"area":"diffusion"},{"id":"2507.02965","title":"Concept-based Adversarial Attack: a Probabilistic Perspective","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2305.12906","title":"Latent Magic: An Investigation into Adversarial Examples Crafted in the Semantic Latent Space","created":"2023-05-22","cited_by_count":1,"area":null},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2504.17457","title":"Unveiling Hidden Vulnerabilities in Digital Human Generation via Adversarial Attacks","created":"2025-04-24","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2507.21163","title":"Generating Adversarial Point Clouds Using Diffusion Model","created":"2025-07-25","cited_by_count":1,"area":"diffusion"},{"id":"2508.03067","title":"Untraceable DeepFakes via Traceable Fingerprint Elimination","created":"2025-08-05","cited_by_count":1,"area":null},{"id":"2509.15551","title":"PolyJuice Makes It Real: Black-Box, Universal Red Teaming for Synthetic Image Detectors","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2510.00769","title":"ZQBA: Zero Query Black-box Adversarial Attack","created":"2025-10-01","cited_by_count":1,"area":null},{"id":"2601.23179","title":"Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization","created":"2026-01-30","cited_by_count":1,"area":"mllm"},{"id":"2603.24821","title":"Generative Adversarial Perturbations with Cross-paradigm Transferability on Localized Crowd Counting","created":"2026-03-25","cited_by_count":1,"area":null},{"id":"2606.17606","title":"Flux-Guard: Facial Identity Protection using diffusion models","created":"2026-06-16","cited_by_count":1,"area":"diffusion"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2402.04699","title":"Breaking Free: How to Hack Safety Guardrails in Black-Box Diffusion Models!","created":"2024-02-07","cited_by_count":0,"area":"diffusion"},{"id":"2412.07274","title":"A Generative Victim Model for Segmentation","created":"2024-12-10","cited_by_count":0,"area":null},{"id":"2502.19710","title":"SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models","created":"2025-02-27","cited_by_count":0,"area":"diffusion"},{"id":"2504.08782","title":"Embedding Hidden Adversarial Capabilities in Pre-Trained Diffusion Models","created":"2025-04-05","cited_by_count":0,"area":"diffusion"},{"id":"2504.14137","title":"Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach","created":"2025-04-19","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2505.12009","title":"LatentStealth: Unnoticeable and Efficient Adversarial Attacks on Expressive Human Pose and Shape Estimation","created":"2025-05-17","cited_by_count":0,"area":null},{"id":"2505.16166","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","created":"2025-05-22","cited_by_count":0,"area":"diffusion"},{"id":"2506.18248","title":"Improving Black-Box Generative Attacks via Generator Semantic Consistency","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2506.23676","title":"A Unified Framework for Stealthy Adversarial Generation via Latent Optimization and Transferability Enhancement","created":"2025-06-30","cited_by_count":0,"area":"diffusion"},{"id":"2509.12824","title":"DiffHash: Text-Guided Targeted Attack via Diffusion Models against Deep Hashing Image Retrieval","created":"2025-09-16","cited_by_count":0,"area":"diffusion"},{"id":"2509.19044","title":"Latent Danger Zone: Distilling Unified Attention for Cross-Architecture Black-box Attacks","created":"2025-09-23","cited_by_count":0,"area":"diffusion"},{"id":"2511.07701","title":"Diffusion Guided Adversarial State Perturbations in Reinforcement Learning","created":"2025-11-10","cited_by_count":0,"area":"deeprl"},{"id":"2511.12956","title":"T2I-Based Physical-World Appearance Attack against Traffic Sign Recognition Systems in Autonomous Driving","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2511.17688","title":"Enhancing Adversarial Transferability through Block Stretch and Shrink","created":"2025-11-21","cited_by_count":0,"area":null},{"id":"2601.17388","title":"ONRW: Optimizing inversion noise for high-quality and robust watermark","created":"2026-01-24","cited_by_count":0,"area":"diffusion"},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.06311","title":"Latent Transfer Attack: Adversarial Examples via Generative Latent Spaces","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2603.19456","title":"In-the-Wild Camouflage Attack on Vehicle Detectors through Controllable Image Editing","created":"2026-03-19","cited_by_count":0,"area":null},{"id":"2605.00880","title":"Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving","created":"2026-04-26","cited_by_count":0,"area":"diffusion"},{"id":"2605.08898","title":"LLM-Agnostic Semantic Representation Attack","created":"2026-05-09","cited_by_count":0,"area":"safety"},{"id":"2605.31219","title":"Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks","created":"2026-05-29","cited_by_count":0,"area":null},{"id":"2606.02267","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.05101","title":"FoeGlass: Simple In-Context Learning Is Enough for Red Teaming Audio Deepfake Detectors","created":"2026-06-03","cited_by_count":0,"area":"safety"},{"id":"2606.20717","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","created":"2026-06-16","cited_by_count":0,"area":"agents"},{"id":"2607.09787","title":"Adversarially Guided Diffusion for LiDAR Range Image Synthesis","created":"2026-07-08","cited_by_count":0,"area":"wm"},{"id":"2607.21897","title":"ISPCloak: Weaponizing ISP for Optimization-Free Physical Camouflage against Deepfake Detectors","created":"2026-07-24","cited_by_count":0,"area":null},{"id":"2609.07110","title":"Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.39723","title":"Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.01944","title":"Anti-Persona: Disrupting Unauthorized Identity Binding and Recognition in Personalized Vision--Language Models","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.04652","title":"Pareto-Improving Adversarial Attacks with Primal-Dual Regularization","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}