{"total":21,"rows":[{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2406.04998","title":"ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks","created":"2024-06-07","cited_by_count":8,"area":null},{"id":"2405.17181","title":"Spectral regularization for adversarially-robust representation learning","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2409.14240","title":"Cloud Adversarial Example Generation for Remote Sensing Image Classification","created":"2024-09-21","cited_by_count":2,"area":null},{"id":"2410.18648","title":"GADT: Enhancing Transferable Adversarial Attacks through Gradient-guided Adversarial Data Transformation","created":"2024-10-24","cited_by_count":2,"area":null},{"id":"2503.12827","title":"GSBA$^K$: $top$-$K$ Geometric Score-based Black-box Attack","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2406.16200","title":"Feature compression is the root cause of adversarial fragility in neural network classifiers","created":"2024-06-23","cited_by_count":1,"area":null},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2505.16313","title":"Accelerating Targeted Hard-Label Adversarial Attacks in Low-Query Black-Box Settings","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2507.17577","title":"Boosting Ray Search Procedure of Hard-label Attacks with Transfer-based Priors","created":"2025-07-23","cited_by_count":1,"area":null},{"id":"2605.27135","title":"Do Modern Post-Hoc Watermarking Methods Beat Broken-Arrows?","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2312.07245","title":"DTA: Distribution Transform-based Attack for Query-Limited Scenario","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2412.02270","title":"Sustainable Self-evolution Adversarial Training","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2505.19194","title":"Curvature Dynamic Black-box Attack: revisiting adversarial robustness via dynamic curvature estimation","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2506.06933","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2512.21241","title":"Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks","created":"2025-12-24","cited_by_count":0,"area":null},{"id":"2601.14300","title":"Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations","created":"2026-01-17","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2605.06380","title":"Empirical Evidence for Simply Connected Decision Regions in Image Classifiers","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.31219","title":"Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks","created":"2026-05-29","cited_by_count":0,"area":null},{"id":"2610.17382","title":"Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}