{"total":37,"rows":[{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2308.03108","title":"SAAM: Stealthy Adversarial Attack on Monocular Depth Estimation","created":"2023-08-06","cited_by_count":12,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2311.12084","title":"ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches","created":"2023-11-20","cited_by_count":6,"area":null},{"id":"2402.06249","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","created":"2024-02-09","cited_by_count":6,"area":null},{"id":"2502.21171","title":"QFAL: Quantum Federated Adversarial Learning","created":"2025-02-28","cited_by_count":6,"area":null},{"id":"2503.10690","title":"Battling Misinformation: An Empirical Study on Adversarial Factuality in Open-Source Large Language Models","created":"2025-03-12","cited_by_count":6,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2403.11515","title":"SSAP: A Shape-Sensitive Adversarial Patch for Comprehensive Disruption of Monocular Depth Estimation in Autonomous Navigation Applications","created":"2024-03-18","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2505.16402","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","created":"2025-05-22","cited_by_count":4,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2409.20426","title":"Navigating Threats: A Survey of Physical Adversarial Attacks on LiDAR Perception Systems in Autonomous Vehicles","created":"2024-09-30","cited_by_count":3,"area":null},{"id":"2511.08015","title":"Invisible Triggers, Visible Threats! Road-Style Adversarial Creation Attack for Visual 3D Detection in Autonomous Driving","created":"2025-11-11","cited_by_count":3,"area":null},{"id":"2505.19613","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2604.22552","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2411.10498","title":"Prompt-Guided Environmentally Consistent Adversarial Patch","created":"2024-11-15","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.07058","title":"Breaking the Limits of Quantization-Aware Defenses: QADT-R for Robustness Against Patch-Based Adversarial Attacks in QNNs","created":"2025-03-10","cited_by_count":1,"area":null},{"id":"2508.10600","title":"Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2511.04970","title":"Learning Fourier shapes to probe the geometric world of deep neural networks","created":"2025-11-07","cited_by_count":1,"area":null},{"id":"2606.00159","title":"Digital-to-Physical Transfer of Adversarial Patches for Aerial Vehicle Detection","created":"2026-05-29","cited_by_count":1,"area":null},{"id":"2406.01708","title":"SnatchML: Hijacking ML models without Training Access","created":"2024-06-03","cited_by_count":0,"area":null},{"id":"2408.09181","title":"PADetBench: Towards Benchmarking Physical Attacks against Object Detection","created":"2024-08-17","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2509.21084","title":"Vision Transformers: the threat of realistic adversarial patches","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2511.16020","title":"Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion","created":"2025-11-20","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null},{"id":"2601.00367","title":"PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2603.21876","title":"Thermal Topology Collapse: Universal Physical Patch Attacks on Infrared Vision Systems","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2604.06865","title":"Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasion","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2605.17822","title":"Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detection","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2605.30578","title":"AdvScene: Rethinking Adversarial Patch Evaluation Through Scene Robustness","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2606.31703","title":"Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2608.06801","title":"AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2609.34501","title":"Can Attack Difficulty Be Characterized Before Optimization? A Study of Pre-optimization Difficulty in Person-Vanishing Attacks","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}