{"list":"other","total":83,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"2001.00179","title":"DeepFakes and Beyond: A Survey of Face Manipulation and Fake Detection","created":"2020-01-01","cited_by_count":233},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"2003.04092","title":"Searching Central Difference Convolutional Networks for Face Anti-Spoofing","created":"2020-03-09","cited_by_count":173},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2007.12342","title":"CelebA-Spoof: Large-Scale Face Anti-Spoofing Dataset with Rich Annotations","created":"2020-07-24","cited_by_count":109},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"1911.10891","title":"ColorFool: Semantic Adversarial Colorization","created":"2019-11-25","cited_by_count":89},{"id":"1804.00499","title":"Semantic Adversarial Examples","created":"2018-03-16","cited_by_count":86},{"id":"1904.06347","title":"Unrestricted Adversarial Examples via Semantic Manipulation","created":"2019-04-12","cited_by_count":84},{"id":"2004.05790","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","created":"2020-04-13","cited_by_count":80},{"id":"2009.01103","title":"Face Image Quality Assessment: A Literature Survey","created":"2020-09-02","cited_by_count":80},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2203.05340","title":"Domain Generalization via Shuffled Style Assembly for Face Anti-Spoofing","created":"2022-03-10","cited_by_count":73},{"id":"2203.14325","title":"PatchNet: A Simple Face Anti-Spoofing Framework via Fine-Grained Patch Recognition","created":"2022-03-27","cited_by_count":67},{"id":"1901.01677","title":"Image Super-Resolution as a Defense Against Adversarial Attacks","created":"2019-01-07","cited_by_count":65},{"id":"2106.14948","title":"Deep Learning for Face Anti-Spoofing: A Survey","created":"2021-06-28","cited_by_count":65},{"id":"2007.02157","title":"Face Anti-Spoofing with Human Material Perception","created":"2020-07-04","cited_by_count":62},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"2008.01919","title":"Adv-watermark: A Novel Watermark Perturbation for Adversarial Examples","created":"2020-08-05","cited_by_count":56},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1707.05373","title":"Houdini: Fooling Deep Structured Prediction Models","created":"2017-07-17","cited_by_count":50},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"1705.08378","title":"Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reduction","created":"2017-05-23","cited_by_count":49},{"id":"2108.02667","title":"Adaptive Normalized Representation Learning for Generalizable Face Anti-Spoofing","created":"2021-08-05","cited_by_count":49},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48},{"id":"2105.01290","title":"Dual-Cross Central Difference Network for Face Anti-Spoofing","created":"2021-05-04","cited_by_count":47},{"id":"2309.16649","title":"FLIP: Cross-domain Face Anti-spoofing with Language Guidance","created":"2023-09-28","cited_by_count":45},{"id":"1907.01003","title":"Accurate, reliable and fast robustness evaluation","created":"2019-07-01","cited_by_count":43},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41},{"id":"2003.11145","title":"Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study","created":"2020-03-24","cited_by_count":40},{"id":"1712.05796","title":"A Data-Driven Analysis of Workers' Earnings on Amazon Mechanical Turk","created":"2017-12-14","cited_by_count":39},{"id":"2208.11148","title":"Multi-domain Learning for Updating Face Anti-spoofing Models","created":"2022-08-23","cited_by_count":39},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38},{"id":"2002.05123","title":"Over-the-Air Adversarial Flickering Attacks against Video Recognition Networks","created":"2020-02-12","cited_by_count":36},{"id":"1908.09327","title":"advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns","created":"2019-08-25","cited_by_count":35},{"id":"1910.07067","title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system","created":"2019-10-15","cited_by_count":35},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34},{"id":"1803.04683","title":"Invisible Mask: Practical Attacks on Face Recognition with Infrared","created":"2018-03-13","cited_by_count":33},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33},{"id":"2004.10998","title":"Cross-ethnicity Face Anti-spoofing Recognition Challenge: A Review","created":"2020-04-23","cited_by_count":25},{"id":"2205.13412","title":"Physical-World Optical Adversarial Attacks on 3D Face Recognition","created":"2022-05-26","cited_by_count":23},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23},{"id":"2112.00568","title":"Dual Spoof Disentanglement Generation for Face Anti-spoofing with Depth Uncertainty Learning","created":"2021-12-01","cited_by_count":20},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20},{"id":"2003.08937","title":"Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates","created":"2020-03-19","cited_by_count":18},{"id":"1801.02780","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","created":"2018-01-09","cited_by_count":14},{"id":"1911.06502","title":"Simple iterative method for generating targeted universal adversarial perturbations","created":"2019-11-15","cited_by_count":14},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11},{"id":"2006.06756","title":"On Improving Temporal Consistency for Online Face Liveness Detection","created":"2020-06-11","cited_by_count":10},{"id":"2212.03651","title":"Cyclically Disentangled Feature Translation for Face Anti-spoofing","created":"2022-12-07","cited_by_count":10},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4},{"id":"2205.14851","title":"Exposing Fine-Grained Adversarial Vulnerability of Face Anti-Spoofing Models","created":"2022-05-30","cited_by_count":3},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3}],"next_cursor":null}