{"total":45,"rows":[{"id":"2409.17874","title":"DarkSAM: Fooling Segment Anything Model to Segment Nothing","created":"2024-09-26","cited_by_count":32,"area":null},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2412.16955","title":"NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors","created":"2024-12-22","cited_by_count":17,"area":null},{"id":"2402.05355","title":"A Survey on Safe Multi-Modal Learning System","created":"2024-02-08","cited_by_count":15,"area":null},{"id":"2412.16651","title":"PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2503.15293","title":"Test-Time Backdoor Detection for Object Detection Models","created":"2025-03-19","cited_by_count":14,"area":null},{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2510.24195","title":"Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2","created":"2025-10-28","cited_by_count":11,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2510.08922","title":"SegTrans: Transferable Adversarial Examples for Segmentation Models","created":"2025-10-10","cited_by_count":8,"area":null},{"id":"2510.08094","title":"DarkHash: A Data-Free Backdoor Attack Against Deep Hashing","created":"2025-10-09","cited_by_count":6,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2602.03284","title":"Time Is All It Takes: Spike-Retiming Attacks on Event-Driven Spiking Neural Networks","created":"2026-02-03","cited_by_count":5,"area":null},{"id":"2310.12431","title":"SAM Meets UAP: Attacking Segment Anything Model With Universal Adversarial Perturbation","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2509.20851","title":"Poisoning Prompt-Guided Sampling in Video Large Language Models","created":"2025-09-25","cited_by_count":4,"area":null},{"id":"2401.14074","title":"ProCNS: Progressive Prototype Calibration and Noise Suppression for Weakly-Supervised Medical Image Segmentation","created":"2024-01-25","cited_by_count":3,"area":null},{"id":"2508.20040","title":"Model Science: getting serious about verification, explanation and control of AI systems","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2601.14950","title":"Erosion Attack for Adversarial Training to Enhance Semantic Segmentation Robustness","created":"2026-01-21","cited_by_count":3,"area":null},{"id":"2404.11357","title":"Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving","created":"2024-04-17","cited_by_count":2,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2508.17680","title":"Robustness Feature Adapter for Efficient Adversarial Training","created":"2025-08-25","cited_by_count":2,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2510.08067","title":"Towards Real-World Deepfake Detection: A Diverse In-the-wild Dataset of Forgery Faces","created":"2025-10-09","cited_by_count":1,"area":null},{"id":"2603.03665","title":"Machine Pareidolia: Protecting Facial Image with Emotional Editing","created":"2026-03-04","cited_by_count":1,"area":null},{"id":"2604.23105","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","created":"2026-04-25","cited_by_count":1,"area":null},{"id":"2407.18251","title":"Sparse vs Contiguous Adversarial Pixel Perturbations in Multimodal Models: An Empirical Analysis","created":"2024-07-25","cited_by_count":0,"area":null},{"id":"2505.15265","title":"Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2506.05402","title":"Lorica: A Synergistic Fine-Tuning Framework for Advancing Personalized Adversarial Robustness","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2509.21084","title":"Vision Transformers: the threat of realistic adversarial patches","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2511.21893","title":"Breaking the Illusion: Consensus-Based Generative Mitigation of Adversarial Illusions in Multi-Modal Embeddings","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2605.18868","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2606.19736","title":"VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion","created":"2026-06-18","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.39265","title":"Universal Cross-Prompt Adversarial Attacks on Promptable Concept Segmentation","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.15728","title":"Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}