{"list":"other","total":132,"rows":[{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1812.04948","title":"A Style-Based Generator Architecture for Generative Adversarial Networks","created":"2018-12-12","cited_by_count":6013},{"id":"2203.00667","title":"Generative Adversarial Networks","created":"2022-03-01","cited_by_count":5627},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1611.07004","title":"Image-to-Image Translation with Conditional Adversarial Networks","created":"2016-11-21","cited_by_count":4527},{"id":"1512.02325","title":"SSD: Single Shot MultiBox Detector","created":"2015-12-08","cited_by_count":3130},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1504.08083","title":"Fast R-CNN","created":"2015-04-30","cited_by_count":2933},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1804.02767","title":"YOLOv3: An Incremental Improvement","created":"2018-04-08","cited_by_count":2659},{"id":"1711.03938","title":"CARLA: An Open Urban Driving Simulator","created":"2017-11-10","cited_by_count":2449},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2004.10934","title":"YOLOv4: Optimal Speed and Accuracy of Object Detection","created":"2020-04-23","cited_by_count":1630},{"id":"1612.08242","title":"YOLO9000: Better, Faster, Stronger","created":"2016-12-25","cited_by_count":1431},{"id":"1506.02025","title":"Spatial Transformer Networks","created":"2015-06-05","cited_by_count":1429},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"2207.02696","title":"YOLOv7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectors","created":"2022-07-06","cited_by_count":982},{"id":"1612.01925","title":"FlowNet 2.0: Evolution of Optical Flow Estimation with Deep Networks","created":"2016-12-06","cited_by_count":784},{"id":"1704.08063","title":"SphereFace: Deep Hypersphere Embedding for Face Recognition","created":"2017-04-26","cited_by_count":737},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1711.07566","title":"Neural 3D Mesh Renderer","created":"2017-11-20","cited_by_count":437},{"id":"1412.0035","title":"Understanding Deep Image Representations by Inverting Them","created":"2014-11-26","cited_by_count":403},{"id":"2104.09224","title":"Multi-Modal Fusion Transformer for End-to-End Autonomous Driving","created":"2021-04-19","cited_by_count":377},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2002.03754","title":"Unsupervised Discovery of Interpretable Directions in the GAN Latent Space","created":"2020-02-10","cited_by_count":289},{"id":"2209.02976","title":"YOLOv6: A Single-Stage Object Detection Framework for Industrial Applications","created":"2022-09-07","cited_by_count":275},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1704.08545","title":"ICNet for Real-Time Semantic Segmentation on High-Resolution Images","created":"2017-04-27","cited_by_count":261},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1505.00256","title":"DeepDriving: Learning Affordance for Direct Perception in Autonomous Driving","created":"2015-05-01","cited_by_count":231},{"id":"1312.6229","title":"OverFeat: Integrated Recognition, Localization and Detection using Convolutional Networks","created":"2013-12-21","cited_by_count":224},{"id":"1512.00596","title":"The MegaFace Benchmark: 1 Million Faces for Recognition at Scale","created":"2015-12-02","cited_by_count":200},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2109.04456","title":"NEAT: Neural Attention Fields for End-to-End Autonomous Driving","created":"2021-09-09","cited_by_count":174},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1412.1842","title":"Reading Text in the Wild with Convolutional Neural Networks","created":"2014-12-04","cited_by_count":122},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"1906.11897","title":"On Physical Adversarial Patches for Object Detection","created":"2019-06-20","cited_by_count":93},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"1801.00349","title":"A General Framework for Adversarial Examples with Objectives","created":"2017-12-31","cited_by_count":84},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"1911.11897","title":"AttentionGAN: Unpaired Image-to-Image Translation using Attention-Guided Generative Adversarial Networks","created":"2019-11-27","cited_by_count":77},{"id":"1805.04103","title":"Arbitrary Style Transfer with Deep Feature Reshuffle","created":"2018-05-10","cited_by_count":75},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67},{"id":"2012.12528","title":"The Translucent Patch: A Physical and Universal Attack on Object Detectors","created":"2020-12-23","cited_by_count":62},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"2008.01919","title":"Adv-watermark: A Novel Watermark Perturbation for Adversarial Examples","created":"2020-08-05","cited_by_count":56},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55},{"id":"1802.06430","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","created":"2018-02-18","cited_by_count":54},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"1707.03501","title":"NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles","created":"2017-07-12","cited_by_count":48},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48},{"id":"1812.09803","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","created":"2018-12-24","cited_by_count":46},{"id":"1707.07217","title":"Deep Learning in Robotics: A Review of Recent Research","created":"2017-07-22","cited_by_count":43},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43},{"id":"1612.06299","title":"Simple Black-Box Adversarial Perturbations for Deep Networks","created":"2016-12-19","cited_by_count":42},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42},{"id":"2212.12995","title":"Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attacks","created":"2022-12-26","cited_by_count":42},{"id":"1910.10053","title":"Attacking Optical Flow","created":"2019-10-22","cited_by_count":41},{"id":"2003.11145","title":"Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study","created":"2020-03-24","cited_by_count":40},{"id":"2011.13375","title":"Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect","created":"2020-11-26","cited_by_count":40},{"id":"2305.11618","title":"DAP: A Dynamic Adversarial Patch for Evading Person Detectors","created":"2023-05-19","cited_by_count":40},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39},{"id":"2007.16118","title":"Physical Adversarial Attack on Vehicle Detector in the Carla Simulator","created":"2020-07-31","cited_by_count":38},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36},{"id":"1908.09327","title":"advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns","created":"2019-08-25","cited_by_count":35},{"id":"1910.07067","title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system","created":"2019-10-15","cited_by_count":35},{"id":"1511.06292","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","created":"2015-11-19","cited_by_count":32},{"id":"2010.03072","title":"Adversarial Patch Attacks on Monocular Depth Estimation Networks","created":"2020-10-06","cited_by_count":29}],"next_cursor":"100"}