Adversarial Transferability

Follow this topic Ask about this topic

Momentum

4 papers in the last four weeks, against 1 the four weeks before. 0.0% of all new papers.

Jul 13Week of Sep 28

Latest papers 31

All topics

Breaking Adversarial Transferability in Fine-Tuned Speech Recognition
Oct 6, 2026Mojtaba Nafez, Aref Mousavi, Mohammad Ebrahim Mahdavi +3Adversarial Transferability Automatic Speech Recognition
Department of Computer Engineering Sharif University of Technology · Department of Computer Engineering University of Isfahan
Boosting Transferable Adversarial Attacks against Deep Reinforcement Learning
Oct 5, 2026Zexin Li, Ruili Yao, Yiming Zeng +1Adversarial Attacks Transfer-Based Adversarial Attacks
Nanyang Technological University · University of California, Riverside · University of Connecticut +1
Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation
Sep 30, 2026Linfeng Jiang, Steven McDonagh, Yuhang Chen +3Adversarial Attacks Adversarial Transferability
University of Maryland, College Park · University of Edinburgh · WMG, University of Warwick +1
Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework
Sep 30, 2026Yaohua Liu, Yifan Guo, Jiaxin GaoAdversarial Attacks Bilevel Optimization
The University of Hong Kong Hong Kong, China · International School of Information Science & Engineering Dalian University of Technology, Dalian, China · The Hong Kong Polytechnic University Hong Kong, China
AERIAL: Adversarial Evaluation of Robustness in Accuracy-Preserving Low-Precision EEG Decoders
Sep 24, 2026Saim Rehman, Muhammad ShafiqueQuantization-Aware Training EEG Decoding
eBRAIN Lab, Division of Engineering, New York University Abu Dhabi (NYUAD), Abu Dhabi, UAE
What Makes Adversarial Examples Transfer Across Deepfake Detectors?
Sep 9, 2026Rafael M. Mamede, Pedro C. Neto, Ana F. SequeiraAdversarial Robustness Deepfake Detection
INESC TEC, Porto, Portugal · Faculty of Engineering, University of Porto (FEUP), Porto, Portugal · Unilabs, Porto, Portugal
Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks
Aug 12, 2026Yaohua Liu, Yifan Guo, Jiaxin GaoBilevel Optimization Transfer-Based Adversarial Attacks
The University of Hong Kong, Hong Kong SAR, China · International School of Information Science & Engineering, Dalian University of Technology, Dalian, China · The Hong Kong Polytechnic University, Hong Kong SAR, China
IDATA: Scalable Invertible Diffusion for Unrestricted Adversarial Transfer Attack
Aug 9, 2026Yi Pan, Jun-Jie Huang, Tianrui Liu +3Adversarial Attacks Transfer-Based Adversarial Attacks
College of Computer Science and Technology
Season: Spectrum-Aware Orthogonal Gradient Refinement for Transfer-Based Adversarial Attacks
Aug 5, 2026Tianyi Wang, Zhenghao Gao, Shengjie XuAdversarial Attacks Transfer-Based Adversarial Attacks
Tongji University Shanghai, China · Huazhong University of Science and Technology · Wuhan LightRead Intelligent Technology Co., Ltd. Wuhan, China
IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks
Jul 29, 2026Mengqi He, Jing ZhangAdversarial Attacks Transfer-Based Adversarial Attacks
School of Computing, College of Systems & Society · The Australian National University, Canberra, ACT, Australia
Adversarial Attacks on Online Handwriting using Salience-based Temporal Editing
Jul 14, 2026Yataro Tamura, Brian Kenji Iwana, Jiseok LeeAdversarial Attacks Online Handwriting Recognition
Kyushu University, Fukuoka, Japan
Transferable Attack against Face Swapping in an Extended Space
Jun 24, 2026Mingzhi Lyu, Yi Huang, Jun Xie +3Adversarial Attacks Adversarial Perturbations
Nanyang Technological University Singapore
AdversaBench: Automated LLM Red-Teaming with Multi-Judge Confirmation and Cross-Model Transferability
Jun 23, 2026Khanak KhandelwalAdversarial Prompt Generation Adversarial Attacks on LLMs
Indian Institute of Technology Jodhpur
The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks
Jun 21, 2026Yuhang Jiang, Xiaojing ChenNeural Network Robustness Adversarial Robustness
University of Trento · Anhui University
Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction
Jun 9, 2026Lijia Yu, Jiuxin Cao, Yuchen Qiang +3Adversarial Attacks on VLMs Transfer-Based Adversarial Attacks
School of Cyber Science and Engineering, Southeast University, China · Purple Mountain Laboratories, Nanjing, China
SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack
May 24, 2026Han Liu, Zhi Xu, Xiaotong Zhang +5Determinantal Point Process Transfer-Based Adversarial Attacks
Dalian University of Technology Dalian, China · Peking University Beijing, China · Macao Polytechnic University Macao, China +1
Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs
May 20, 2026Leitao Yuan, Qinghua Mao, Daizong Liu +5Adversarial Attacks on VLMs Multimodal Large Language Models
Shanghai Artificial Intelligence Laboratory · Zhejiang University · Shanghai Jiao Tong University +3
MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks
May 18, 2026Hyo Seo Kim, Gang Luo, Can Chen +3Evolutionary Optimization Adversarial Attacks
Illinois Institute of Technology · University of North Carolina at Chapel Hill · Singapore Management University
Escaping the Linearity Trap: Manifold Detours for Black-Box Adversarial Attacks on Singing Audio Deepfake Detection
May 18, 2026Yifan Liao, Yule Liu, Zhen Sun +5Audio Deepfake Detection Transfer-Based Adversarial Attacks
Wuhan University · The Hong Kong University of Science and Technology (Guangzhou)
Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework
May 18, 2026Ziyang Liu, Hongyuan Wang, Zijian Wang +4Transfer-Based Adversarial Attacks Black-Box Adversarial Attacks
Research Center for Space Optical Engineering, Harbin Institute of Technology, Harbin 150001, China · Zhengzhou Research Institute, Harbin Institute of Technology, Zhengzhou 450000, China
Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization
May 11, 2026Mengqi He, Xinyu Tian, Xin Shen +6Adversarial Attacks on VLMs Adversarial Attacks
Australian National University, ACT, Australia · The University Of Queensland, Brisbane, Queensland, Australia · GE research, Niskayuna, New York, USA +2
Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment
May 11, 2026Haobo Wang, Xiaorong Ma, Weiqi Luo +2Adversarial Attacks on VLMs Multimodal Large Language Models
Sun Yat-sen University, China · Nanyang Technological University, Singapore · Shenzhen MSU-BIT University, China
Adaptive Equilibrium: Dynamic Weighting Framework for Generalized Interruption of DeepFake Models
May 1, 2026Hongrui Zheng, Liejun Wang, Zhiqing GuoAdversarial Attacks Adaptive Loss Weighting
School of Computer Science and Technology, Xinjiang University, Urumqi, China · Xinjiang Multimodal Intelligent Processing and Information Security Engineering Technology Research Center, Urumqi, China · Silk Road Multilingual Cognitive Computing International Cooperation Joint Laboratory, Xinjiang University, Urumqi, China
Understanding Adversarial Transferability in Vision-Language Models for Autonomous Driving: A Cross-Architecture Analysis
Apr 30, 2026David Fernandez, Pedram MohajerAnsari, Amir Salarpour +1Adversarial Attacks on VLMs Vision-Language Models
School of Computing, Clemson University, USA
Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving
Apr 26, 2026Xinyu Zeng, Xiangkun He, Lei Tao +2Flow Matching End-to-End Autonomous Driving
Shenzhen Institute for Advanced Study, University of Electronic Science and Technology of China, Shenzhen 518110, China · School of Mechanical and Aerospace Engineering, Nanyang Technological University, Singapore 639798 · School of Mechanical and Electrical Engineering, University of Electronic Science and Technology of China, Chengdu 611731, China
Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving
Apr 25, 2026Zihui Zhu, Ziqi Zhou, Yichen Wang +3Adversarial Patch Attacks Autonomous Driving Perception
Huazhong University of Science and Technology
APC: Transferable and Efficient Adversarial Point Counterattack for Robust 3D Point Cloud Recognition
Apr 17, 2026Geunyoung Jung, Soohong Kim, Inseok Kong +1Point Cloud Classification Adversarial Robustness
Department of Artificial Intelligence, University of Seoul, South Korea · Department of Geo Informatics, University of Seoul, South Korea
Beyond Attack Success Rate: A Multi-Metric Evaluation of Adversarial Transferability in Medical Imaging Models
Apr 16, 2026Emily Curl, Kofi Ampomah, Md Erfan +1Adversarial Robustness Medical Image Classification
The authors are with The University of Alabama, Tuscaloosa, USA.
Fast Preemptive Robustification: High-Frequency Response Anti-Aligns Shared Vulnerability
Mar 26, 2026Jiaming Liang, Chi-Man PunNeural Network Robustness Adversarial Robustness
University of Macau, Macau, China
Enhancing Adversarial Transferability through Block Stretch and Shrink
Nov 21, 2025Quan Liu, Feng Ye, Chenhao Lu +4Adversarial Attacks Adversarial Perturbations

Oct 6, 2026, cs.LGJ/K move · Enter open · S save

Breaking Adversarial Transferability in Fine-Tuned Speech Recognition

Mojtaba Nafez, Aref Mousavi, Mohammad Ebrahim Mahdavi, Mobina Poulaei+2

Department of Computer Engineering Sharif University of Technology · Department of Computer Engineering University of Isfahan

Adversarial Transferability Automatic Speech Recognition Adversarial Training Black-Box Adversarial Attacks

Open paper AskPDF arXiv

Many organizations fine-tune publicly available pretrained Automatic Speech Recognition (ASR) models and deploy them in black-box settings, assuming limited access provides protection. We show this assumption is fragile: adversarial perturbations crafted on the public base model transfer effectively to fine-tuned target models, severely degrading performance and posing concerns for safety-critical applications. We propose TransferBreaker, a unified fine-tuning framework that suppresses adversarial transfer by integrating Base Adversarial Fine-Tuning, which restricts adversarial training to base-effective perturbations; Latent Jacobian Regularization, which enforces latent-space invariance by suppressing adversarially sensitive directions; and HybridGrad-AFT, which improves robustness against adaptive attacks by interpolating transferable perturbations from base and target gradients. We theoretically justify all components and evaluate TransferBreaker across three languages and four large ASR models, reducing adversarial WER from 92.6 to 27.8. Our code is publicly available at https://github.com/rohban-lab/TransferBreaker.

Momentum

Related topics

Latest papers 31