{"list":"other","total":106,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"2304.07193","title":"DINOv2: Learning Robust Visual Features without Supervision","created":"2023-04-14","cited_by_count":7974},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2208.12242","title":"DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generation","created":"2022-08-25","cited_by_count":3300},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1909.08072","title":"Adversarial Attacks and Defenses in Images, Graphs and Text: A Review","created":"2019-09-17","cited_by_count":237},{"id":"2312.00785","title":"Sequential Modeling Enables Scalable Learning for Large Vision Models","created":"2023-12-01","cited_by_count":212},{"id":"2001.06564","title":"Media Forensics and DeepFakes: an overview","created":"2020-01-18","cited_by_count":209},{"id":"2302.04578","title":"Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples","created":"2023-02-09","cited_by_count":167},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120},{"id":"2305.12683","title":"Mist: Towards Improved Adversarial Examples for Diffusion Models","created":"2023-05-22","cited_by_count":94},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67},{"id":"1707.05572","title":"Fast Feature Fool: A data independent approach to universal adversarial perturbations","created":"2017-07-18","cited_by_count":66},{"id":"2311.12832","title":"Toward effective protection against diffusion based mimicry through score distillation","created":"2023-10-02","cited_by_count":65},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"1804.05296","title":"Adversarial Attacks Against Medical Deep Learning Systems","created":"2018-04-15","cited_by_count":62},{"id":"1904.08489","title":"Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers","created":"2019-04-17","cited_by_count":57},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"2004.12519","title":"Transferable Perturbations of Deep Feature Distributions","created":"2020-04-27","cited_by_count":51},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45},{"id":"2311.13127","title":"MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning","created":"2023-11-22","cited_by_count":44},{"id":"2307.01778","title":"Physically Realizable Natural-Looking Clothing Textures Evade Person Detectors via 3D Modeling","created":"2023-07-04","cited_by_count":41},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38},{"id":"2312.00084","title":"Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?","created":"2023-11-30","cited_by_count":38},{"id":"2306.01902","title":"Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation","created":"2023-06-02","cited_by_count":37},{"id":"2312.07865","title":"SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Models","created":"2023-12-13","cited_by_count":36},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36},{"id":"2310.19248","title":"IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI","created":"2023-10-30","cited_by_count":35},{"id":"2207.12020","title":"Domain-invariant Feature Exploration for Domain Generalization","created":"2022-07-25","cited_by_count":34},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27},{"id":"1905.05186","title":"Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models","created":"2019-05-13","cited_by_count":26},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23},{"id":"2404.09401","title":"Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models","created":"2024-04-15","cited_by_count":23},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21},{"id":"1908.00706","title":"AdvGAN++ : Harnessing latent layers for adversary generation","created":"2019-08-02","cited_by_count":20},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20},{"id":"2502.20625","title":"T2ICount: Enhancing Cross-modal Understanding for Zero-Shot Counting","created":"2025-02-28","cited_by_count":19},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16},{"id":"2308.08925","title":"A White-Box False Positive Adversarial Attack Method on Contrastive Loss Based Offline Handwritten Signature Verification Models","created":"2023-08-17","cited_by_count":15},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14},{"id":"2408.10901","title":"A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse","created":"2024-08-20","cited_by_count":13},{"id":"2502.05863","title":"Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education","created":"2025-02-09","cited_by_count":13},{"id":"2309.07398","title":"Semantic Adversarial Attacks via Diffusion Models","created":"2023-09-14","cited_by_count":12},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11},{"id":"2401.09673","title":"Artwork Protection Against Neural Style Transfer Using Locally Adaptive Adversarial Color Attack","created":"2024-01-18","cited_by_count":10},{"id":"2411.17957","title":"DiffVax: Optimization-Free Image Immunization Against Diffusion-Based Editing","created":"2024-11-27","cited_by_count":10},{"id":"1711.02879","title":"LatentPoison - Adversarial Attacks On The Latent Space","created":"2017-11-08","cited_by_count":9},{"id":"1901.03398","title":"Characterizing and evaluating adversarial examples for Offline Handwritten Signature Verification","created":"2019-01-10","cited_by_count":9},{"id":"1905.09162","title":"Biometric Backdoors: A Poisoning Attack Against Unsupervised Template Updating","created":"2019-05-22","cited_by_count":9},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8},{"id":"2304.04386","title":"Generating Adversarial Attacks in the Latent Space","created":"2023-04-10","cited_by_count":8},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8},{"id":"2501.04066","title":"Federated Knowledge Distillation for Multi-Model Architectures Lithography Hotspot Detection","created":"2025-01-07","cited_by_count":8},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7},{"id":"2505.17050","title":"Towards Robust Evaluation of STEM Education: Leveraging MLLMs in Project-Based Learning","created":"2025-05-16","cited_by_count":7},{"id":"2310.10352","title":"Semi-Supervised Crowd Counting with Contextual Modeling: Facilitating Holistic Understanding of Crowd Scenes","created":"2023-10-16","cited_by_count":6},{"id":"2408.08518","title":"Visual-Friendly Concept Protection via Selective Adversarial Perturbations","created":"2024-08-16","cited_by_count":6},{"id":"2012.05027","title":"Generating Out of Distribution Adversarial Attack using Latent Space Poisoning","created":"2020-12-09","cited_by_count":5},{"id":"2311.13713","title":"A Somewhat Robust Image Watermark against Diffusion-based Editing Models","created":"2023-11-22","cited_by_count":5},{"id":"2412.09844","title":"Real-time Identity Defenses against Malicious Personalization of Diffusion Models","created":"2024-12-13","cited_by_count":5},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5},{"id":"1911.07989","title":"WITCHcraft: Efficient PGD attacks with random step size","created":"2019-11-18","cited_by_count":4},{"id":"2203.13479","title":"Enhancing Transferability of Adversarial Examples with Spatial Momentum","created":"2022-03-25","cited_by_count":4},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4},{"id":"1907.07001","title":"Latent Adversarial Defence with Boundary-guided Generation","created":"2019-07-16","cited_by_count":3},{"id":"2203.10166","title":"Concept-based Adversarial Attacks: Tricking Humans and Classifiers Alike","created":"2022-03-18","cited_by_count":3},{"id":"2301.12968","title":"Improving Adversarial Transferability with Scheduled Step Size and Dual Example","created":"2023-01-30","cited_by_count":3},{"id":"2407.20141","title":"DDAP: Dual-Domain Anti-Personalization against Text-to-Image Diffusion Models","created":"2024-07-29","cited_by_count":3},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3},{"id":"2507.05816","title":"Affective-ROPTester: Capability and Bias Analysis of LLMs in Predicting Retinopathy of Prematurity","created":"2025-07-08","cited_by_count":3},{"id":"2001.11055","title":"Evaluating Robustness to Context-Sensitive Feature Perturbations of Different Granularities","created":"2020-01-29","cited_by_count":2},{"id":"2101.09930","title":"Generalizing Adversarial Examples by AdaBelief Optimizer","created":"2021-01-25","cited_by_count":2},{"id":"2201.12527","title":"Scale-Invariant Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2022-01-29","cited_by_count":2},{"id":"2307.13131","title":"Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations","created":"2023-07-24","cited_by_count":2},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2}],"next_cursor":"100"}