{"total":20,"rows":[{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2311.01473","title":"Adversarial Examples in the Physical World: A Survey","created":"2023-11-01","cited_by_count":10,"area":null},{"id":"2501.05783","title":"UV-Attack: Physical-World Adversarial Attacks for Person Detection via Dynamic-NeRF-based UV Mapping","created":"2025-01-10","cited_by_count":9,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2312.09554","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2409.04133","title":"Secure Traffic Sign Recognition: An Attention-Enabled Universal Image Inpainting Mechanism against Light Patch Attacks","created":"2024-09-06","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2505.22499","title":"SABER: Spatially Consistent 3D Universal Adversarial Objects for BEV Detectors","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2311.01696","title":"Universal Perturbation-based Secret Key-Controlled Data Hiding","created":"2023-11-03","cited_by_count":0,"area":null},{"id":"2407.06688","title":"Universal Multi-view Black-box Attack against Object Detectors via Layout Optimization","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2606.14504","title":"Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks","created":"2026-06-12","cited_by_count":0,"area":null},{"id":"2607.26651","title":"Physically Real-time Infrared Attack against Optical Flow Estimation Networks","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2608.04559","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","created":"2026-08-05","cited_by_count":0,"area":null}],"next_cursor":null}