{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/adversarial-attack/papers/11","list_of":"/task/adversarial-attack","task":"Adversarial Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":11,"pages_in_order":19,"rows_per_page":100,"rows":[1001,1100],"of":1808,"counts":{"archive_papers_tagged":1808,"with_a_code_link":745,"where_syntology_ran_a_sample":206,"not_listed_spam_title":0,"listed":1808,"listed_where_code_ran":206,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":161,"every_run_a_failure_of_syntologys_instrument":45,"listed_with_a_run_with_no_instrument_failure":161,"listed_every_run_a_failure_of_syntologys_instrument":45,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/adversarial-attack","prev":"/task/adversarial-attack/papers/10","next":"/task/adversarial-attack/papers/12","papers":[{"url":null,"slug":"noise-bert-a-unified-perturbation-robust","title":"Noise-BERT: A Unified Perturbation-Robust Framework with Noise Alignment Pre-training for Noisy Slot Filling Task","date":"2024-02-22","arxiv_id":"2402.14494","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-adversarial-approach-to-evaluating-the","title":"An Adversarial Approach to Evaluating the Robustness of Event Identification Models","date":"2024-02-19","arxiv_id":"2402.12338","repositories_listed":0,"syntology":null},{"url":null,"slug":"only-my-model-on-my-data-a-privacy-preserving","title":"Only My Model On My Data: A Privacy Preserving Approach Protecting one Model and Deceiving Unauthorized Black-Box Models","date":"2024-02-14","arxiv_id":"2402.09316","repositories_listed":0,"syntology":null},{"url":null,"slug":"corruption-robust-offline-reinforcement-1","title":"Corruption Robust Offline Reinforcement Learning with Human Feedback","date":"2024-02-09","arxiv_id":"2402.06734","repositories_listed":0,"syntology":null},{"url":null,"slug":"tetris-towards-exploring-the-robustness-of","title":"TETRIS: Towards Exploring the Robustness of Interactive Segmentation","date":"2024-02-09","arxiv_id":"2402.06132","repositories_listed":0,"syntology":null},{"url":null,"slug":"foolsdedit-deceptively-steering-your-edits","title":"FoolSDEdit: Deceptively Steering Your Edits Towards Targeted Attribute-aware Distribution","date":"2024-02-06","arxiv_id":"2402.03705","repositories_listed":0,"syntology":null},{"url":null,"slug":"prosac-provably-safe-certification-for","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","date":"2024-02-04","arxiv_id":"2402.02629","repositories_listed":0,"syntology":null},{"url":null,"slug":"analyzing-sentiment-polarity-reduction-in","title":"Analyzing Sentiment Polarity Reduction in News Presentation through Contextual Perturbation and Large Language Models","date":"2024-02-03","arxiv_id":"2402.02145","repositories_listed":0,"syntology":null},{"url":null,"slug":"enhanced-urban-region-profiling-with","title":"Enhanced Urban Region Profiling with Adversarial Self-Supervised Learning for Robust Forecasting and Security","date":"2024-02-02","arxiv_id":"2402.01163","repositories_listed":0,"syntology":null},{"url":null,"slug":"staa-net-a-sparse-and-transferable","title":"STAA-Net: A Sparse and Transferable Adversarial Attack for Speech Emotion Recognition","date":"2024-02-02","arxiv_id":"2402.01227","repositories_listed":0,"syntology":null},{"url":null,"slug":"addressing-noise-and-efficiency-issues-in","title":"Mitigating the Impact of Noisy Edges on Graph-Based Algorithms via Adversarial Robustness Evaluation","date":"2024-01-28","arxiv_id":"2401.15615","repositories_listed":0,"syntology":null},{"url":null,"slug":"sparse-and-transferable-universal-singular","title":"Sparse and Transferable Universal Singular Vectors Attack","date":"2024-01-25","arxiv_id":"2401.14031","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploring-adversarial-threat-models-in-cyber","title":"Exploring Adversarial Threat Models in Cyber Physical Battery Systems","date":"2024-01-24","arxiv_id":"2401.13801","repositories_listed":0,"syntology":null},{"url":null,"slug":"hgattack-transferable-heterogeneous-graph","title":"HGAttack: Transferable Heterogeneous Graph Adversarial Attack","date":"2024-01-18","arxiv_id":"2401.09945","repositories_listed":0,"syntology":null},{"url":null,"slug":"ppr-enhancing-dodging-attacks-while","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","date":"2024-01-17","arxiv_id":"2401.08903","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-generative-adversarial-attack-for","title":"A Generative Adversarial Attack for Multilingual Text Classifiers","date":"2024-01-16","arxiv_id":"2401.08255","repositories_listed":0,"syntology":null},{"url":null,"slug":"left-right-discrepancy-for-adversarial-attack","title":"Left-right Discrepancy for Adversarial Attack on Stereo Networks","date":"2024-01-14","arxiv_id":"2401.07188","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploring-adversarial-attacks-against-latent","title":"Exploring Adversarial Attacks against Latent Diffusion Model from the Perspective of Adversarial Transferability","date":"2024-01-13","arxiv_id":"2401.07087","repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-learned-image-compression","title":"Transferable Learned Image Compression-Resistant Adversarial Perturbations","date":"2024-01-06","arxiv_id":"2401.03115","repositories_listed":0,"syntology":null},{"url":null,"slug":"dual-teacher-knowledge-distillation-with","title":"Dual Teacher Knowledge Distillation with Domain Alignment for Face Anti-spoofing","date":"2024-01-02","arxiv_id":"2401.01102","repositories_listed":0,"syntology":null},{"url":null,"slug":"ar-gan-generative-adversarial-network-based","title":"AR-GAN: Generative Adversarial Network-Based Defense Method Against Adversarial Attacks on the Traffic Sign Classification System of Autonomous Vehicles","date":"2023-12-31","arxiv_id":"2401.14232","repositories_listed":0,"syntology":null},{"url":null,"slug":"explainability-driven-leaf-disease","title":"Explainability-Driven Leaf Disease Classification Using Adversarial Training and Knowledge Distillation","date":"2023-12-30","arxiv_id":"2401.00334","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-image-classification-1","title":"Adversarial Attacks on Image Classification Models: Analysis and Defense","date":"2023-12-28","arxiv_id":"2312.16880","repositories_listed":0,"syntology":null},{"url":null,"slug":"attack-tree-analysis-for-adversarial-evasion","title":"Attack Tree Analysis for Adversarial Evasion Attacks","date":"2023-12-28","arxiv_id":"2312.16957","repositories_listed":0,"syntology":null},{"url":null,"slug":"explainability-based-adversarial-attack-on","title":"Explainability-Based Adversarial Attack on Graphs Through Edge Perturbation","date":"2023-12-28","arxiv_id":"2312.17301","repositories_listed":0,"syntology":null},{"url":null,"slug":"autoaugment-input-transformation-for-highly","title":"AutoAugment Input Transformation for Highly Transferable Targeted Attacks","date":"2023-12-21","arxiv_id":"2312.14218","repositories_listed":0,"syntology":null},{"url":null,"slug":"mutual-modality-adversarial-attack-with","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","date":"2023-12-20","arxiv_id":"2312.12768","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-malware-classification-survey-on","title":"A Malware Classification Survey on Adversarial Attacks and Defences","date":"2023-12-15","arxiv_id":"2312.09636","repositories_listed":0,"syntology":null},{"url":null,"slug":"embodied-adversarial-attack-a-dynamic-robust","title":"Embodied Laser Attack:Leveraging Scene Priors to Achieve Agent-based Robust Non-contact Attacks","date":"2023-12-15","arxiv_id":"2312.09554","repositories_listed":0,"syntology":null},{"url":null,"slug":"forbidden-facts-an-investigation-of-competing","title":"Forbidden Facts: An Investigation of Competing Objectives in Llama-2","date":"2023-12-14","arxiv_id":"2312.08793","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-transferable-adversarial-attacks-with","title":"Towards Transferable Adversarial Attacks with Centralized Perturbation","date":"2023-12-11","arxiv_id":"2312.06199","repositories_listed":0,"syntology":null},{"url":null,"slug":"ot-attack-enhancing-adversarial","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","date":"2023-12-07","arxiv_id":"2312.04403","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-simple-framework-to-enhance-the-adversarial","title":"A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System","date":"2023-12-06","arxiv_id":"2312.03245","repositories_listed":0,"syntology":null},{"url":null,"slug":"realistic-scatterer-based-adversarial-attacks","title":"Realistic Scatterer Based Adversarial Attacks on SAR Image Classifiers","date":"2023-12-05","arxiv_id":"2312.02912","repositories_listed":0,"syntology":null},{"url":null,"slug":"transegpgd-improving-transferability-of","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","date":"2023-12-03","arxiv_id":"2312.02207","repositories_listed":0,"syntology":null},{"url":null,"slug":"nerftap-enhancing-transferability-of","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","date":"2023-11-29","arxiv_id":"2311.17332","repositories_listed":0,"syntology":null},{"url":null,"slug":"vulnerability-analysis-of-transformer-based","title":"Vulnerability Analysis of Transformer-based Optical Character Recognition to Adversarial Attacks","date":"2023-11-28","arxiv_id":"2311.17128","repositories_listed":0,"syntology":null},{"url":null,"slug":"retouchuaa-unconstrained-adversarial-attack","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","date":"2023-11-27","arxiv_id":"2311.16478","repositories_listed":0,"syntology":null},{"url":null,"slug":"when-side-channel-attacks-break-the-black-box","title":"When Side-Channel Attacks Break the Black-Box Property of Embedded Artificial Intelligence","date":"2023-11-23","arxiv_id":"2311.14005","repositories_listed":0,"syntology":null},{"url":null,"slug":"advgen-physical-adversarial-attack-on-face","title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems","date":"2023-11-20","arxiv_id":"2311.11753","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-valid-and-natural-adversarial","title":"Generating Valid and Natural Adversarial Examples with Large Language Models","date":"2023-11-20","arxiv_id":"2311.11861","repositories_listed":0,"syntology":null},{"url":null,"slug":"jailbreaking-gpt-4v-via-self-adversarial","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","date":"2023-11-15","arxiv_id":"2311.09127","repositories_listed":0,"syntology":null},{"url":null,"slug":"dala-a-distribution-aware-lora-based","title":"$DA^3$: A Distribution-Aware Adversarial Attack against Language Models","date":"2023-11-14","arxiv_id":"2311.08598","repositories_listed":0,"syntology":null},{"url":null,"slug":"learning-globally-optimized-language","title":"Learning Globally Optimized Language Structure via Adversarial Training","date":"2023-11-12","arxiv_id":"2311.06771","repositories_listed":0,"syntology":null},{"url":null,"slug":"resilient-and-constrained-consensus-against","title":"Resilient and constrained consensus against adversarial attacks: A distributed MPC framework","date":"2023-11-10","arxiv_id":"2311.05935","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-adversarial-attacks-detection-for-deep","title":"Robust Adversarial Attacks Detection for Deep Learning based Relative Pose Estimation for Space Rendezvous","date":"2023-11-10","arxiv_id":"2311.05992","repositories_listed":0,"syntology":null},{"url":null,"slug":"abigx-a-unified-framework-for-explainable","title":"ABIGX: A Unified Framework for eXplainable Fault Detection and Classification","date":"2023-11-09","arxiv_id":"2311.05316","repositories_listed":0,"syntology":null},{"url":null,"slug":"optimal-cost-constrained-adversarial-attacks","title":"Optimal Cost Constrained Adversarial Attacks For Multiple Agent Systems","date":"2023-11-01","arxiv_id":"2311.00859","repositories_listed":0,"syntology":null},{"url":null,"slug":"lfaa-crafting-transferable-targeted","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","date":"2023-10-31","arxiv_id":"2310.20175","repositories_listed":0,"syntology":null},{"url":null,"slug":"differentially-private-reward-estimation-with","title":"Differentially Private Reward Estimation with Preference Feedback","date":"2023-10-30","arxiv_id":"2310.19733","repositories_listed":0,"syntology":null},{"url":null,"slug":"boosting-decision-based-black-box-adversarial-1","title":"Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors","date":"2023-10-29","arxiv_id":"2310.19038","repositories_listed":0,"syntology":null},{"url":null,"slug":"imperceptible-cmos-camera-dazzle-for","title":"Imperceptible CMOS camera dazzle for adversarial attacks on deep neural networks","date":"2023-10-22","arxiv_id":"2311.16118","repositories_listed":0,"syntology":null},{"url":null,"slug":"segment-anything-meets-universal-adversarial","title":"SAM Meets UAP: Attacking Segment Anything Model With Universal Adversarial Perturbation","date":"2023-10-19","arxiv_id":"2310.12431","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-non-monotonic-smooth-activation-function","title":"A Non-monotonic Smooth Activation Function","date":"2023-10-16","arxiv_id":"2310.10126","repositories_listed":0,"syntology":null},{"url":null,"slug":"black-box-targeted-adversarial-attack-on","title":"Black-box Targeted Adversarial Attack on Segment Anything (SAM)","date":"2023-10-16","arxiv_id":"2310.10010","repositories_listed":0,"syntology":null},{"url":null,"slug":"evading-detection-actively-toward-anti","title":"Evading Detection Actively: Toward Anti-Forensics against Forgery Localization","date":"2023-10-16","arxiv_id":"2310.10036","repositories_listed":0,"syntology":null},{"url":null,"slug":"survey-of-vulnerabilities-in-large-language","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","date":"2023-10-16","arxiv_id":"2310.10844","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-optimization-leads-to-over","title":"Adversarial optimization leads to over-optimistic security-constrained dispatch, but sampling can help","date":"2023-10-10","arxiv_id":"2310.06956","repositories_listed":0,"syntology":null},{"url":null,"slug":"untargeted-white-box-adversarial-attack-with","title":"Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System","date":"2023-10-05","arxiv_id":"2310.03334","repositories_listed":0,"syntology":null},{"url":null,"slug":"optimizing-key-selection-for-face-based-one","title":"Optimizing Key-Selection for Face-based One-Time Biometrics via Morphing","date":"2023-10-04","arxiv_id":"2310.02997","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-client-detection-via-non","title":"Adversarial Client Detection via Non-parametric Subspace Monitoring in the Internet of Federated Things","date":"2023-10-02","arxiv_id":"2310.01537","repositories_listed":0,"syntology":null},{"url":null,"slug":"gray-box-adversarial-attack-of-deep","title":"Gray-box Adversarial Attack of Deep Reinforcement Learning-based Trading Agents","date":"2023-09-26","arxiv_id":"2309.14615","repositories_listed":0,"syntology":null},{"url":null,"slug":"prat-profiling-adversarial-attacks","title":"PRAT: PRofiling Adversarial aTtacks","date":"2023-09-20","arxiv_id":"2309.11111","repositories_listed":0,"syntology":null},{"url":null,"slug":"understanding-pose-and-appearance","title":"Understanding Pose and Appearance Disentanglement in 3D Human Pose Estimation","date":"2023-09-20","arxiv_id":"2309.11667","repositories_listed":0,"syntology":null},{"url":null,"slug":"model-leeching-an-extraction-attack-targeting","title":"Model Leeching: An Extraction Attack Targeting LLMs","date":"2023-09-19","arxiv_id":"2309.10544","repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-adversarial-attack-on-image","title":"Transferable Adversarial Attack on Image Tampering Localization","date":"2023-09-19","arxiv_id":"2309.10243","repositories_listed":0,"syntology":null},{"url":null,"slug":"context-aware-adversarial-attack-on-named","title":"Context-aware Adversarial Attack on Named Entity Recognition","date":"2023-09-16","arxiv_id":"2309.08999","repositories_listed":0,"syntology":null},{"url":null,"slug":"phantomsound-black-box-query-efficient-audio","title":"PhantomSound: Black-Box, Query-Efficient Audio Adversarial Attack via Split-Second Phoneme Injection","date":"2023-09-13","arxiv_id":"2309.06960","repositories_listed":0,"syntology":null},{"url":null,"slug":"adaptive-adversarial-training-does-not","title":"Adaptive Adversarial Training Does Not Increase Recourse Costs","date":"2023-09-05","arxiv_id":"2309.02528","repositories_listed":0,"syntology":null},{"url":null,"slug":"improving-visual-quality-and-transferability","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","date":"2023-09-04","arxiv_id":"2309.01582","repositories_listed":0,"syntology":null},{"url":null,"slug":"mathattack-attacking-large-language-models","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","date":"2023-09-04","arxiv_id":"2309.01686","repositories_listed":0,"syntology":null},{"url":null,"slug":"non-asymptotic-bounds-for-adversarial-excess","title":"Non-Asymptotic Bounds for Adversarial Excess Risk under Misspecified Models","date":"2023-09-02","arxiv_id":"2309.00771","repositories_listed":0,"syntology":null},{"url":null,"slug":"can-we-rely-on-ai","title":"Can We Rely on AI?","date":"2023-08-29","arxiv_id":"2308.15092","repositories_listed":0,"syntology":null},{"url":null,"slug":"imperceptible-adversarial-attack-on-deep","title":"Imperceptible Adversarial Attack on Deep Neural Networks from Image Boundary","date":"2023-08-29","arxiv_id":"2308.15344","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-manifold-projected-gradient-descent","title":"On-Manifold Projected Gradient Descent","date":"2023-08-23","arxiv_id":"2308.12279","repositories_listed":0,"syntology":null},{"url":null,"slug":"hiding-backdoors-within-event-sequence-data","title":"Hiding Backdoors within Event Sequence Data via Poisoning Attacks","date":"2023-08-20","arxiv_id":"2308.10201","repositories_listed":0,"syntology":null},{"url":null,"slug":"black-box-adversarial-attacks-against-dense","title":"Black-box Adversarial Attacks against Dense Retrieval Models: A Multi-view Contrastive Learning Method","date":"2023-08-19","arxiv_id":"2308.09861","repositories_listed":0,"syntology":null},{"url":null,"slug":"air-threats-of-adversarial-attacks-on-deep","title":"AIR: Threats of Adversarial Attacks on Deep Learning-Based Information Recovery","date":"2023-08-17","arxiv_id":"2309.16706","repositories_listed":0,"syntology":null},{"url":null,"slug":"not-so-robust-after-all-evaluating-the","title":"Not So Robust After All: Evaluating the Robustness of Deep Neural Networks to Unseen Adversarial Attacks","date":"2023-08-12","arxiv_id":"2308.06467","repositories_listed":0,"syntology":null},{"url":null,"slug":"physical-adversarial-attacks-for-camera-based","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","date":"2023-08-11","arxiv_id":"2308.06173","repositories_listed":0,"syntology":null},{"url":null,"slug":"pelta-shielding-transformers-to-mitigate","title":"Pelta: Shielding Transformers to Mitigate Evasion Attacks in Federated Learning","date":"2023-08-08","arxiv_id":"2308.04373","repositories_listed":0,"syntology":null},{"url":null,"slug":"exploring-the-physical-world-adversarial","title":"Exploring the Physical World Adversarial Robustness of Vehicle Detection","date":"2023-08-07","arxiv_id":"2308.03476","repositories_listed":0,"syntology":null},{"url":null,"slug":"saam-stealthy-adversarial-attack-on-monoculor","title":"SAAM: Stealthy Adversarial Attack on Monocular Depth Estimation","date":"2023-08-06","arxiv_id":"2308.03108","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-ai-enabled-framework-to-defend-ingenious","title":"An AI-Enabled Framework to Defend Ingenious MDT-based Attacks on the Emerging Zero Touch Cellular Networks","date":"2023-08-05","arxiv_id":"2308.02923","repositories_listed":0,"syntology":null},{"url":null,"slug":"dynamic-ensemble-selection-based-on-deep","title":"Dynamic ensemble selection based on Deep Neural Network Uncertainty Estimation for Adversarial Robustness","date":"2023-08-01","arxiv_id":"2308.00346","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-novel-deep-learning-based-model-to-defend","title":"A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks","date":"2023-07-31","arxiv_id":"2308.00077","repositories_listed":0,"syntology":null},{"url":null,"slug":"defense-of-adversarial-ranking-attack-in-text","title":"Defense of Adversarial Ranking Attack in Text Retrieval: Benchmark and Baseline via Detection","date":"2023-07-31","arxiv_id":"2307.16816","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-neural-network-approximation-of-ideal","title":"On Neural Network approximation of ideal adversarial attack and convergence of adversarial training","date":"2023-07-30","arxiv_id":"2307.16099","repositories_listed":0,"syntology":null},{"url":null,"slug":"imperceptible-physical-attack-against-face","title":"Imperceptible Physical Attack against Face Recognition Systems via LED Illumination Modulation","date":"2023-07-25","arxiv_id":"2307.13294","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-unreasonable-vulnerability-of","title":"On the unreasonable vulnerability of transformers for image restoration -- and an easy fix","date":"2023-07-25","arxiv_id":"2307.13856","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-on-traffic-sign","title":"Adversarial Attacks on Traffic Sign Recognition: A Survey","date":"2023-07-17","arxiv_id":"2307.08278","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-robustness-of-split-learning-against","title":"On the Robustness of Split Learning against Adversarial Attacks","date":"2023-07-16","arxiv_id":"2307.07916","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-the-sensitivity-of-deep-load","title":"On the Sensitivity of Deep Load Disaggregation to Adversarial Attacks","date":"2023-07-14","arxiv_id":"2307.10209","repositories_listed":0,"syntology":null},{"url":null,"slug":"introducing-foundation-models-as-surrogate","title":"MF-CLIP: Leveraging CLIP as Surrogate Models for No-box Adversarial Attacks","date":"2023-07-13","arxiv_id":"2307.06608","repositories_listed":0,"syntology":null},{"url":null,"slug":"multi-objective-evolutionary-search-of","title":"Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations","date":"2023-07-13","arxiv_id":"2307.06548","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-self-attack-defense-and-spatial","title":"Adversarial Self-Attack Defense and Spatial-Temporal Relation Mining for Visible-Infrared Video Person Re-Identification","date":"2023-07-08","arxiv_id":"2307.03903","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-and-defenses-on-3d-point","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","date":"2023-07-01","arxiv_id":"2307.00309","repositories_listed":0,"syntology":null},{"url":null,"slug":"brightness-restricted-adversarial-attack","title":"Brightness-Restricted Adversarial Attack Patch","date":"2023-07-01","arxiv_id":"2307.00421","repositories_listed":0,"syntology":null},{"url":null,"slug":"defense-against-adversarial-cloud-attack-on","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","date":"2023-06-30","arxiv_id":"2306.17431","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-black-box-classifiers-by-bayesian","title":"Post-train Black-box Defense via Bayesian Boundary Correction","date":"2023-06-29","arxiv_id":"2306.16979","repositories_listed":0,"syntology":null}],"record_sha256":"3ec1b84c3fdff544f7eaf731a2f422c981dbadaf213cec0d340dd1efc6e29fbb","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}