Black-Box Adversarial Attacks

Ask about this topic

Momentum

8 papers in the last four weeks, up 60% on the four weeks before. 0.1% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 115

All topics
CardsList

  1. Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models

    Jul 19, 2026Xingkai Peng, Jun Jiang, Jiayang Liu +2Text-to-Video GenerationBlack-Box Adversarial Attacks

    University of Science and Technology of China

  2. Signal-based Model Access Risk Analysis for AI System Operations Security

    Jul 17, 2026Maria Mahbub, Steven Young, Amir Sadovnik +4Adversarial AttacksBlack-Box Adversarial Attacks

    Oak Ridge National Laboratory, Oak Ridge, TN 37830, USA · Oak Ridge Institute for Science and Education, Oak Ridge, TN 37830, USA · DHS Science and Technology Directorate, Washington, DC 20528, USA

  3. Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents

    Jul 17, 2026Halima Bouzidi, Mboutidem Ekemini Mkpong, Mohammad Abdullah Al FaruqueMultimodal MemoryAgent Memory Poisoning

    University of California, Irvine

  4. Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks

    Jul 16, 2026Hamid Dashtbani, Mehdi Dousti Gandomani, AmirMahdi SadeghzadehAdversarial RobustnessBlack-Box Adversarial Attacks

    Department of Computer Engineering Sharif University of Technology

  5. Adversarial Attacks on Online Handwriting using Salience-based Temporal Editing

    Jul 14, 2026Yataro Tamura, Brian Kenji Iwana, Jiseok LeeAdversarial AttacksOnline Handwriting Recognition

    Kyushu University, Fukuoka, Japan

  6. Technical Report on the CVPR 2026@AdvML Workshop Challenge

    Jul 13, 2026Tianyuan Zhang, Zonglei Jing, Jiangfan Liu +47VLMs for Autonomous DrivingAdversarial Attacks on VLA Models

  7. AdvNav: Behavior-Guided Black-Box Adversarial Attacks on Vision-Language Navigation

    Jul 13, 2026Chenyang Li, Kaige Li, Zeyu Jiang +1Visual NavigationVision-Language Navigation

    The Hong Kong University of Science and Technology (Guangzhou) · Sun Yat-sen University

  8. Generative Testing of Automated Speech Recognition Systems

    Jul 10, 2026Yanis Xabier Wilbrand Peña, Oliver Weißl, Andrea StoccoASR EvaluationBlack-Box Adversarial Attacks

    Technical University of Munich Germany · Technical University of Munich & fortiss GmbH Germany

  9. Out of Sight: Compression-Aware Content Protection against Agentic Crawlers

    Jul 9, 2026Xuefei WangLLM Agent SecurityBlack-Box Adversarial Attacks

    Beihang University

  10. InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models

    Jul 8, 2026Xin Li, Jiaju Han, Ma Yaqi +5VLM RobustnessAdversarial Patch Attacks

    China University of Petroleum-Beijing at Karamay, Karamay, Xinjiang, China · Shenzhen Research Institute of Big Data, Shenzhen, China · Guizhou University, Guiyang, China +1

  11. Optimized Instance Alteration for Explaining and Assessing Robustness of Classifiers

    Jul 7, 2026Evgenii Kuriabov, David Miller, Jia LiCounterfactual ExplanationsAdversarial Robustness

    Department of Statistics, The Pennsylvania State University, University Park, PA 16802, USA · Department of Electrical Engineering, The Pennsylvania State University, University Park, PA 16802, USA

  12. Target-Aware Interaction-Guided Reinforcement Learning for Black-Box Node Injection Attacks on Graph Neural Networks

    Jul 5, 2026Yi Lan, Ye YuanGraph Neural NetworksReinforcement Learning

    College of Computer and Information Science, Southwest University, Tiansheng Road, Chongqing, 400715, China

  13. Defending from GeoLocalization through Adversarial Road Trips

    Jul 3, 2026Niccolò Niccoli, Federico Becattini, Lorenzo SeidenariAdversarial AttacksBlack-Box Adversarial Attacks

    University of Florence, Florence, Italy · University of Siena, Siena, Italy

  14. Beyond Gradient-Based Attacks: Adversarial Robustness and Explainability Stability in Cybersecurity Classifiers

    Jul 2, 2026Mona Rajhans, Vishal KhawareyGradient-Boosted Decision TreesSHAP Feature Attribution

    Palo Alto Networks, Santa Clara, CA, USA · Quicken Inc., Menlo Park, CA, USA

  15. Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints

    Jun 30, 2026Jungkon Kim, Cheolseung Jung, Jong-Min Choi +1Adversarial PerturbationsBlack-Box Adversarial Attacks

    Samsung Electronics, AI Platform Center

  16. Proteus: Automated Adversarial Robustness Testing for Audio Deepfake Detectors

    Jun 28, 2026Nicolas M. Müller, Aditya Tirumala Bukkapatnam, Zohaib AhmedAudio Deepfake DetectionAdversarial Attacks

    Resemble AI, Mountain View, CA, USA

  17. Blackknife: Hard-Label Query-Limited Black-Box Attacks on Heterogeneous Graph Neural Networks

    Jun 28, 2026Honglin Gao, Junhao Ren, Lan Zhao +3Heterogeneous GNNsAdversarial Robustness

    Nanyang Technological University, 50 Nanyang Avenue, Singapore, 639798, Singapore · Computer Network Information Center, Chinese Academy of Sciences, Beijing, China

  18. Vulnerability of Natural Language Classifiers to Evolutionary Generated Adversarial Text

    Jun 25, 2026Manjinder Singh, Alexander E. I. Brownlee, Mohamed ElawadyAdversarial AttacksBlack-Box Adversarial Attacks

    Computing Science & Mathematics University of Stirling, Stirling, UK · Computer and Information Sciences University of Strathclyde, Glasgow, UK

  19. DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

    Jun 25, 2026Christian Scano, Diego Soi, Angelo Sotgiu +5Adversarial AttacksAndroid Malware Detection

    University of Cagliari · Sapienza University of Rome · CINI +1

  20. REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs

    Jun 22, 2026Yifei Zhao, Qian Lou, Mengxin ZhengVLM EvaluationVLM Robustness

    University of Central Florida

  21. The Unseen Hand: Manipulating Model Fairness and SHAP with Targeted Identity Re-Association Attacks

    Jun 22, 2026Sannaan Khan, Muhammad U. S. KhanAdversarial AttacksAlgorithmic Fairness

    National University of AbstractSciences and Technology (NUST)

  22. Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift

    Jun 21, 2026Md Anas BiswasIndirect Prompt InjectionModel Calibration

    School of Computing, University of Portsmouth, Portsmouth, United Kingdom

  23. Budget-Aware Adaptive Adversarial Patches for Black-Box Object Detection

    Jun 16, 2026Pedram MohajerAnsari, Amir Salarpour, David Fernandez +1Adversarial Patch AttacksObject Detection

    School of Computing, Clemson University, USA

  24. Structured Adversarial Camouflage via Voronoi Diagrams

    Jun 16, 2026Jens Bayer, Stefan Becker, David Münch +2Adversarial Patch AttacksObject Detection

    Fraunhofer IOSB and Fraunhofer Center for Machine Learning · Karlsruhe Institute of Technology

  25. Automated jailbreak attack targeting multiple defense strategies

    Jun 15, 2026Qi Wang, Chengcheng Wan, Weijia He +4Adversarial Prompt GenerationLLM Jailbreak Attacks

    East China Normal University Shanghai, China · East China Normal University, Shanghai Innovation Institute Shanghai, China · University of Southampton Southampton, England +2

  26. GAS-Leak-LLM: Genetic Algorithm-Based Suffix Optimization for Black-Box LLM Jailbreaking

    Jun 14, 2026Aman Anifer, Vignesh Kumar Kembu, Vishnu M +4Adversarial Prompt GenerationLLM Safety

    Department of Computer Applications, Cochin University of Science and Technology, Kerala, India. · Department of Electrical, Computer and Biomedical Engineering, University of Pavia, A. Ferrata, 5, Pavia, 27100, Italy.

  27. AutoDojo: A Generative Benchmark for Evaluating Prompt Injection Defenses in LLM Agents

    Jun 13, 2026Xinhang Ma, Taoran Li, Chaowei Xiao +3AI Agent Security BenchmarksIndirect Prompt Injection

    Washington University in St. Louis, St. Louis, MO, USA · Texas A&M University, College Station, TX, USA · Johns Hopkins University, Baltimore, MD, USA

  28. Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks

    Jun 10, 2026Omid Ahmadieh, Nima KarimianBlack-Box Adversarial AttacksFace Recognition

    Bellini College of Artificial Intelligence Cybersecurity and Computing University of South Florida Tampa, FL

  29. MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents

    Jun 9, 2026Yv Zhang, Hao Sun, Hao Fang +5Agent Memory PoisoningBlack-Box Adversarial Attacks

    1Harbin Institute of Technology, Shenzhen · 2Peng Cheng Laboratory · 3Tianjin University +2

  30. Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction

    Jun 9, 2026Lijia Yu, Jiuxin Cao, Yuchen Qiang +3Adversarial Attacks on VLMsTransfer-Based Adversarial Attacks

    School of Cyber Science and Engineering, Southeast University, China · Purple Mountain Laboratories, Nanjing, China