{"total":73,"rows":[{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2311.12832","title":"Toward effective protection against diffusion based mimicry through score distillation","created":"2023-10-02","cited_by_count":65,"area":"diffusion"},{"id":"2310.08184","title":"Learning from models beyond fine-tuning","created":"2023-10-12","cited_by_count":48,"area":null},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2307.13933","title":"AIDE: A Vision-Driven Multi-View, Multi-Modal, Multi-Tasking Dataset for Assistive Driving Perception","created":"2023-07-26","cited_by_count":39,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2403.13965","title":"ConGeo: Robust Cross-view Geo-localization across Ground View Variations","created":"2024-03-20","cited_by_count":27,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2308.01194","title":"Improving Generalization in Visual Reinforcement Learning via Conflict-aware Gradient Agreement Augmentation","created":"2023-08-02","cited_by_count":14,"area":null},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12,"area":null},{"id":"2408.13809","title":"On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective","created":"2024-08-25","cited_by_count":11,"area":null},{"id":"2412.18844","title":"Improving Integrated Gradient-based Transferable Adversarial Examples by Refining the Integration Path","created":"2024-12-25","cited_by_count":10,"area":null},{"id":"2307.16601","title":"Sampling to Distill: Knowledge Transfer from Open-World Data","created":"2023-07-31","cited_by_count":8,"area":"distill"},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2407.14367","title":"Thinking Racial Bias in Fair Forgery Detection: Models, Datasets and Evaluations","created":"2024-07-19","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2503.20613","title":"State-Aware Perturbation Optimization for Robust Deep Reinforcement Learning","created":"2025-03-26","cited_by_count":8,"area":"deeprl"},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8,"area":"diffusion"},{"id":"2403.10883","title":"Improving Adversarial Transferability of Vision-Language Pre-training Models through Collaborative Multimodal Interaction","created":"2024-03-16","cited_by_count":7,"area":"mllm"},{"id":"2503.20844","title":"Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks","created":"2025-03-26","cited_by_count":7,"area":"deeprl"},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2407.13111","title":"PG-Attack: A Precision-Guided Adversarial Attack Framework Against Vision Foundation Models for Autonomous Driving","created":"2024-07-18","cited_by_count":5,"area":null},{"id":"2409.07002","title":"AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models","created":"2024-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2501.09464","title":"Pruning for Sparse Diffusion Models based on Gradient Flow","created":"2025-01-16","cited_by_count":5,"area":"diffusion"},{"id":"2501.14999","title":"VideoPure: Diffusion-based Adversarial Purification for Video Recognition","created":"2025-01-25","cited_by_count":5,"area":"diffusion"},{"id":"2306.00353","title":"Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective","created":"2023-06-01","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2412.01440","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","created":"2024-12-02","cited_by_count":4,"area":"diffusion"},{"id":"2509.25178","title":"GHOST: Hallucination-Inducing Image Generation for Multimodal LLMs","created":"2025-09-29","cited_by_count":4,"area":"mllm"},{"id":"2408.05479","title":"ReToMe-VA: Recursive Token Merging for Video Diffusion-based Unrestricted Adversarial Attack","created":"2024-08-10","cited_by_count":3,"area":"diffusion"},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2506.01511","title":"Enhancing Diffusion-based Unrestricted Adversarial Attacks via Adversary Preferences Alignment","created":"2025-06-02","cited_by_count":3,"area":"diffusion"},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2507.10225","title":"Synthesizing Near-Boundary OOD Samples for Out-of-Distribution Detection","created":"2025-07-14","cited_by_count":3,"area":"mllm"},{"id":"2507.23202","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","created":"2025-07-31","cited_by_count":3,"area":"diffusion"},{"id":"2503.09221","title":"Active Learning Inspired ControlNet Guidance for Augmenting Semantic Segmentation Datasets","created":"2025-03-12","cited_by_count":2,"area":"diffusion"},{"id":"2504.05838","title":"Mind the Trojan Horse: Image Prompt Adapter Enabling Scalable and Deceptive Jailbreaking","created":"2025-04-08","cited_by_count":2,"area":"safety"},{"id":"2507.02965","title":"Concept-based Adversarial Attack: a Probabilistic Perspective","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2402.01220","title":"Delving into Decision-based Black-box Attacks on Semantic Segmentation","created":"2024-02-02","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2501.01015","title":"Boosting Adversarial Transferability with Spatial Adversarial Alignment","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2501.13336","title":"Gradient-Free Adversarial Purification with Diffusion Models","created":"2025-01-23","cited_by_count":1,"area":"diffusion"},{"id":"2502.02096","title":"Dual-Flow: Transferable Multi-Target, Instance-Agnostic Attacks via In-the-wild Cascading Flow Optimization","created":"2025-02-04","cited_by_count":1,"area":null},{"id":"2504.11034","title":"Defending Against Frequency-Based Attacks with Diffusion Models","created":"2025-04-15","cited_by_count":1,"area":"diffusion"},{"id":"2504.17457","title":"Unveiling Hidden Vulnerabilities in Digital Human Generation via Adversarial Attacks","created":"2025-04-24","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2509.15551","title":"PolyJuice Makes It Real: Black-Box, Universal Red Teaming for Synthetic Image Detectors","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2510.00769","title":"ZQBA: Zero Query Black-box Adversarial Attack","created":"2025-10-01","cited_by_count":1,"area":null},{"id":"2310.12017","title":"Exploring the Adversarial Robustness of Face Forgery Detection with Decision-based Black-box Attacks","created":"2023-10-18","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2408.03944","title":"Improving Fast Adversarial Training Paradigm: An Example Taxonomy Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2408.05745","title":"Improving Adversarial Transferability with Neighbourhood Gradient Information","created":"2024-08-11","cited_by_count":0,"area":null},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2504.08782","title":"Embedding Hidden Adversarial Capabilities in Pre-Trained Diffusion Models","created":"2025-04-05","cited_by_count":0,"area":"diffusion"},{"id":"2505.12009","title":"LatentStealth: Unnoticeable and Efficient Adversarial Attacks on Expressive Human Pose and Shape Estimation","created":"2025-05-17","cited_by_count":0,"area":null},{"id":"2505.16166","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","created":"2025-05-22","cited_by_count":0,"area":"diffusion"},{"id":"2508.11341","title":"Semantically Guided Adversarial Testing of Vision Models Using Language Models","created":"2025-08-15","cited_by_count":0,"area":null},{"id":"2511.12956","title":"T2I-Based Physical-World Appearance Attack against Traffic Sign Recognition Systems in Autonomous Driving","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2606.05101","title":"FoeGlass: Simple In-Context Learning Is Enough for Red Teaming Audio Deepfake Detectors","created":"2026-06-03","cited_by_count":0,"area":"safety"},{"id":"2608.11732","title":"Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation","created":"2026-08-12","cited_by_count":0,"area":"diffusion"},{"id":"2609.07110","title":"Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.38991","title":"Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2609.39723","title":"Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}