Black-Box Adversarial Attacks

Ask about this topic

Momentum

10 papers in the last four weeks, up 100% on the four weeks before. 0.1% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 91

All topics
CardsList

  1. ATLAS-AL: Adaptive Trust-Region for Latent Adversarial Searches via Active Learning

    Oct 5, 2026Marsalis Gibson, Claire Tomlin, Shankar SastryBlack-Box Adversarial AttacksPool-Based Active Learning

    Department of Electrical Engineering and Computer Sciences University of California, Berkeley

  2. Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking

    Oct 1, 2026Kirill Aistov, Khaled Abud, Irina Serzhenko +8WatermarksMulti-Bit Watermarking

    MSU AI Institute, Moscow, Russia · Trusted AI Research Center RAS, Moscow, Russia

  3. Universal Cross-Prompt Adversarial Attacks on Promptable Concept Segmentation

    Sep 30, 2026Ziqi Zhou, Yifan Hu, Yufei Song +5Segment Anything ModelBlack-Box Adversarial Attacks

    College of Computer Science, Chongqing University · School of Cyber Science and Engineering, Huazhong University of Science and Technology · School of Computer Science and Technology, Huazhong University of Science and Technology +2

  4. Can Attack Difficulty Be Characterized Before Optimization? A Study of Pre-optimization Difficulty in Person-Vanishing Attacks

    Sep 28, 2026Jingyao Xu, Dongdong Wang, Siyang LuBlack-Box Adversarial AttacksAdversarial Training

    School of Computer Science and Technology, Beijing Jiaotong University · College of Design, Construction, and Planning, University of Florida

  5. One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs

    Sep 27, 2026Sen Nie, Jie Zhang, Zhongqi Wang +2Black-Box Adversarial AttacksMultimodal Large Language Models

    State Key Laboratory of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences, and the University of Chinese Academy of Sciences.

  6. Finite-Sample Probabilistic Safety Certification for AI-Based Grid-Edge Coordination

    Sep 23, 2026Yihong Zhou, Hanbin Yang, Thomas MorstynProbabilistic SafetyArtificial Intelligence Safety

    Department of Engineering Science, University of Oxford, U.K.

  7. Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision

    Sep 21, 2026Florian Krone, Elena Hoemann, Sven HallerbachBlack-Box Adversarial AttacksImagenet

    Institute for AI Safety and Security German Aerospace Center (DLR) Sankt Augustin, Germany

  8. StyleAT: Defending Face Recognition Against Semantic Attacks

    Sep 20, 2026Ben Shapira, Roi Cohen, Shang-Tse Chen +1Black-Box Adversarial AttacksAdversarial Training

    Tel Aviv University Tel Aviv, Israel · HPI / University of Potsdam Potsdam, Germany · National Taiwan University Taipei, Taiwan

  9. Test-Time Unlearning via Sparse Autoencoder

    Sep 14, 2026Pingzhi Li, Jinhao Duan, Vaishnav Tadiparthi +6ForgettingAttacker Large Language Model

    University of North Carolina at Chapel Hill · 2Honda Research Institute · 3Michigan State University

  10. A Black-Box Adversarial Attack on Human Pose Estimation and Keypoint-Based Action Recognition Models

    Sep 7, 2026Kacper Mroczek, Michal KepskiKeypoint DetectionOpen-Vocabulary Action Recognition

    University of Rzeszów, 35-959 Rzeszów, Poland

  11. Leveraging Imperfect Restoration for Data Availability Attack

    Sep 7, 2026Yi Huang, Jeremy Styborski, Mingzhi Lyu +2Black-Box Adversarial AttacksRestoration

    College of Computing and Data Science, Nanyang Technological University, Singapore · Rapid-Rich Object Search (ROSE) Lab, Interdisciplinary Graduate Programme, Nanyang Technological University, Singapore

  12. Large-scale Testing Global Optimization Methods with Black-box Adversarial Attacks

    Aug 13, 2026Wojciech Zarzecki, Jarosław ArabasBlack-Box OptimizationBlack-Box Adversarial Attacks

    Warsaw University of Technology, Institute of Computer Science

  13. GENADA: efficient generative time series adversarial attack framework

    Aug 12, 2026Michael Baronov, Denis Vorobev, Margarita Rusanova +2Black-Box Adversarial AttacksGradient-Based Attacks

    Moscow Independent Research Institute of Artificial Intelligence · HSE University

  14. Beyond Decision Boundaries: Relational Geometry Attacks on Contrastive Embedding Manifolds

    Aug 10, 2026Fei Zhao, Peiyuan Zhang, Xi Li +2Black-Box Adversarial AttacksContrastive Learning

    The University of Alabama at Birmingham, Birmingham, USA · Texas A&M University, College Station, USA

  15. MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation

    Aug 10, 2026Jie Cao, Qi Li, Zelin Zhang +4WatermarksAi-Generated Image Detection

    Queen’s University, Canada · University of Waterloo, Canada

  16. Targeted Label-Flipping and Oversampling Attacks on Federated Conditional GANs

    Aug 10, 2026Panav Shah, Avishek GhoshFederated LearningBlack-Box Adversarial Attacks

    Indian Institute of Technology, Bombay Mumbai, India

  17. IDATA: Scalable Invertible Diffusion for Unrestricted Adversarial Transfer Attack

    Aug 9, 2026Yi Pan, Jun-Jie Huang, Tianrui Liu +3Black-Box Adversarial AttacksDiffusion Models

    College of Computer Science and Technology

  18. Adversarial Attacks on Deep OCR Systems

    Aug 7, 2026Wenbo Sun, Hongzong LI, Yanyun Wang +5Black-Box Adversarial AttacksRecent Vision-Language Models

    Nanjing University of Aeronautics and Astronautics · Northwestern Polytechnical University · The Chinese University of Hong Kong +4

  19. AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles

    Aug 7, 2026Jinlei Wang, Jiahuan Long, Mingkai Sun +9Black-Box Adversarial AttacksCamouflage

    Sun Yat-sen University · 2Chinese Academy of Military Science · 3Shenzhen University +2

  20. Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers

    Aug 7, 2026Ridma Jayasundara, Shaheer Mohamed, Tharindu Fernando +6Detection TransformerBlack-Box Adversarial Attacks

    Signal Processing, Artificial Intelligence and Vision Technologies Group (SAIVT), Queensland University of Technology · Institute of High-Performance Computing, Agency for Science, Technology and Research, Singapore · School of Computing, National University of Singapore +1

  21. ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection

    Aug 5, 2026Tiannuo Guo, Guhang Qiu, Yuzhen Xie +3Black-Box Adversarial Attacks

    College of Information Science and Technology, Beijing University of Chemical Technology, Beijing 100029, China

  22. Crushing the Evidence: A Dual-Penalty Evasion Framework for Fooling White-Box Explainable AI Auditors

    Aug 1, 2026Niraj Kumar, Harsh KasyapBlack-Box Adversarial AttacksExplainability

    Indian Institute of Technology Gandhinagar · Indian Institute of Technology (BHU) Varanasi

  23. DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models

    Jul 31, 2026Omid Ahmadieh, Nima KarimianFace Recognition ModelBlack-Box Adversarial Attacks

    University of South Florida Bellini College of Artificial Intelligence, Cybersecurity and Computing Tampa, Florida, USA

  24. Physically Real-time Infrared Attack against Optical Flow Estimation Networks

    Jul 29, 2026Shen You, Wei Jiang, Jiarui Liu +4Optical FlowBlack-Box Adversarial Attacks

    City University of Hong Kong Tat Chee Avenue, Kowloon, Hong Kong SAR · University of Electronic Science and Technology Chengdu, Sichuan, China · Shenzhen University Shenzhen,Guangdong,China +1

  25. TIGA: Trajectory-Injected Generative Attack against Black-box AIGC Detectors

    Jul 28, 2026Xia Du, Zhuosen Bao, Zheng Lin +4Ai-Generated Content DetectionBlack-Box Adversarial Attacks

    School of Computer and Information Engineering, Xiamen University of Technology, Xiamen, 361000, China · Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, L-1855 Luxembourg, Luxembourg · School of Computer Science, Engineering Research Center of Machine Learning and Industry Intelligence, Sichuan University, Chengdu, China, 610020, China +2

  26. Evaluation of Adversarial Robustness in Arabic Language Models

    Jul 28, 2026Anwar Alajmi, Ayed Salman, Imtiaz AhmadArabic Natural Language ProcessingArabic

    Department of Computer Engineering, Kuwait University, Kuwait. · Department of Computer Science, College of Business Studies, Public Authority of Applied Education and Training, Kuwait.

  27. I2VShield: An Efficient Proactive Defense Framework against DiT-based Image-to-Video Models

    Jul 28, 2026Yimao Guo, Zuomin Qu, Wei LuDiffusion TransformersBlack-Box Adversarial Attacks

    School of Computer Science and Engineering, Sun Yat-sen University Ministry of Education Key Laboratory of Information Technology Guangdong Province Key Laboratory of Information Security Technology Guangzhou 510006, China · Guangdong Province Key Laboratory of Information Security Technology Guangzhou 510006, China · State Key Laboratory of HVDC, China Southern Power Grid Electric Power Research Institute

  28. Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection

    Jul 25, 2026Qiucheng Yu, Tao Ni, Yihe Zhou +2InfraredBlack-Box Adversarial Attacks

    City University of Hong Kong · King Abdullah University of Science and Technology (KAUST)

  29. ISPCloak: Weaponizing ISP for Optimization-Free Physical Camouflage against Deepfake Detectors

    Jul 24, 2026Jiale Zhao, Jiajun Wan, Lei Tang +3Deepfake DetectionBlack-Box Adversarial Attacks

    Guangdong University of Technology Guangzhou, China · Guizhou Provincial Laboratory of Big Data, State Key Laboratory of Public Big Data, Guizhou University Guiyang, China

  30. A Multi-Model Hybrid Defense Approach Against White-box Adversarial Attacks in Computer Network Traffic

    Jul 19, 2026Khushnaseeb RoshanBlack-Box Adversarial AttacksIntrusion Detection

    Department of Computer Science, Aligarh Muslim University (AMU), Aligarh, INDIA

  31. AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression

    Jul 19, 2026Yuanhao Huang, Yilong Ren, Jinlei Wang +3Pedestrian DetectionBlack-Box Adversarial Attacks

    School of Transportation Science and Engineering, Beihang University, 100191, Beijing, P.R China · Zhongguancun Laboratory, 100191, Beijing, P.R China · School of Systems Science and Engineering, Sun Yat-Sen University, 510006, Guangzhou, P.R China +1

  32. Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents

    Jul 17, 2026Halima Bouzidi, Mboutidem Ekemini Mkpong, Mohammad Abdullah Al FaruqueMultimodal MemoryMultimodal Agents

    University of California, Irvine

  33. BadWAM: When World-Action Models Dream Right but Act Wrong

    Jul 16, 2026Qi Li, Xingyi Yang, Xinchao WangAction GenerationBlack-Box Adversarial Attacks

    National University of Singapore · The Hong Kong Polytechnic University

  34. Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks

    Jul 16, 2026Hamid Dashtbani, Mehdi Dousti Gandomani, AmirMahdi SadeghzadehBlack-Box Adversarial AttacksModel-Agnostic Defense

    Department of Computer Engineering Sharif University of Technology

  35. Adversarial Attacks on Online Handwriting using Salience-based Temporal Editing

    Jul 14, 2026Yataro Tamura, Brian Kenji Iwana, Jiseok LeeHandwritingBlack-Box Adversarial Attacks

    Kyushu University, Fukuoka, Japan

  36. AdvNav: Behavior-Guided Black-Box Adversarial Attacks on Vision-Language Navigation

    Jul 13, 2026Chenyang Li, Kaige Li, Zeyu Jiang +1Vision-Language NavigationBlack-Box Adversarial Attacks

    The Hong Kong University of Science and Technology (Guangzhou) · Sun Yat-sen University

  37. Adversarially Guided Diffusion for LiDAR Range Image Synthesis

    Jul 8, 2026Stavros Bouras, Antonios Makris, Alexandros Gkillas +2Light Detection And Ranging DataBlack-Box Adversarial Attacks

    School of Electrical and Computer Engineering, National Technical University of Athens, Greece · Industrial Systems Institute, Athena Research Center, Patras Science Park, Greece

  38. InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models

    Jul 8, 2026Xin Li, Jiaju Han, Ma Yaqi +5Black-Box Adversarial AttacksInfrared

    China University of Petroleum-Beijing at Karamay, Karamay, Xinjiang, China · Shenzhen Research Institute of Big Data, Shenzhen, China · Guizhou University, Guiyang, China +1

  39. Does Demand Response Increase Vulnerability to Cyber Attacks by Adversarial Data Modifications?

    Jul 7, 2026Clemens Kortmann, Eike CramerDemand ResponseElectricity Price Forecasting

    Process Systems Engineering (AVT.SVT) RWTH Aachen University · Department of Chemical Engineering Sargent Centre for Process Systems Engineering University College London

  40. Statistical Adversaries: Natural Backdoor-like Features in Vision Datasets

    Jul 6, 2026Paul K. Mandal, Pavan Reddy, Tristan MalatynskiBlack-Box Adversarial AttacksVision Datasets

    1Neurint, LLC, Baton Rouge, LA, USA. · 2U.S. Army Cyber Corps, U.S. Army Reserve, USA. · 3Northwestern State University of Louisiana, Natchitoches, LA, USA. +2

  41. Binary Iterative Method for Non-targeted Adversarial Attack

    Jul 5, 2026Naman Goyal, Milan ChaudhariBlack-Box Adversarial AttacksAdversarial Training

    Indian Institute of Technology, Ropar

  42. Ghosts Beneath Textures: Texture-Relation Cues for Cross-Paradigm AI-Generated Image Detection

    Jul 4, 2026Haoyu Wang, Yiming Qin, Zhongjie Ba +4Ai-Generated Image DetectionImage Generation

    State Key Laboratory of Blockchain and Data Security, Zhejiang University · Alibaba Group

  43. Occluding the Solution Space: Planner-Agnostic Adversarial Attacks on Tolerance-Aware Manipulation

    Jul 4, 2026Keke Tang, Tianyu Hao, Weilong Peng +5Motion PlanningObstacle Avoidance

    Guangzhou University, Guangzhou 510006, China · University of Science and Technology of China, Hefei 230026, China · Northwestern Polytechnical University, Xi’an 710072, China

  44. Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints

    Jun 30, 2026Jungkon Kim, Cheolseung Jung, Jong-Min Choi +1Deepfake DetectionBlack-Box Adversarial Attacks

    Samsung Electronics, AI Platform Center

  45. Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectors

    Jun 29, 2026Chengzeng You, Binbin Xu, Soteris Demetriou3D Object DetectionBlack-Box Adversarial Attacks

    Imperial College London, UK · Now at Google.

  46. PLAA: Packet-level Adversarial Attacks in Network Traffic Detection

    Jun 26, 2026Jinhao You, Zan Zhou, Shujie Yang +3Intrusion DetectionDistributed Denial-Of-Service

    Beijing University of Posts and Telecommunications · Zhongguancun Laboratory

  47. PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models

    Jun 23, 2026Simone Gallivanone, Hossein Khodadadi, Mauro Dore +2Black-Box Adversarial AttacksAdversarial Evaluation

    The Italian Institute of Artificial Intelligence (AI4I), Turin, Italy · HikmaAI S.r.l., Pula, Italy

  48. Generalised Eigenvalue Geometry of Semantic Adversarial Attacks

    Jun 17, 2026Martin Anthony, Kaveh Salehzadeh NobariBlack-Box Adversarial AttacksParaphrasing

    Data Science Institute, London School of Economics and Political Science. · Department of Mathematics, London School of Economics and Political Science. · The Inclusion Initiative, London School of Economics and Political Science.

  49. Budget-Aware Adaptive Adversarial Patches for Black-Box Object Detection

    Jun 16, 2026Pedram MohajerAnsari, Amir Salarpour, David Fernandez +1Black-Box Adversarial AttacksObject Detection

    School of Computing, Clemson University, USA

  50. Greedy Coordinate Diffusion: Effective and Semantically Coherent Adversarial Attacks via Diffusion Guidance

    Jun 14, 2026Bohdan Turbal, Blossom Metevier, Max Springer +1Black-Box Adversarial AttacksDiffusion Models

    Princeton University, Princeton, NJ, USA.

  51. Attribute Inference from Interactive Targeted Ads

    Jun 13, 2026Peihao LiAdsMembership Inference Attacks

  52. Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks

    Jun 12, 2026Qinlin He, Zeming Zhuang, Yongji Wu +3Black-Box Adversarial AttacksVision Sensors

    Brian · Clemson University

  53. Quality-Preserving Imperceptible Adversarial Attack on Skeleton-based Human Action Recognition

    Jun 11, 2026Ziyi Chang, Kanglei Zhou, Xiaohui Liang +1Skeleton-Based Action RecognitionBlack-Box Adversarial Attacks

    Department of Computer Science, Durham University, Durham, DH1 4FL, UK · Department of Psychology and Cognitive Science, Tsinghua University, Beijing 100084, China · State Key Laboratory of Virtual Reality Technology and Systems, Beihang University, Beijing 100191, China +1

  54. Toward Trustworthy AI: Multi-Target Adversarial Attacks and Robust Defenses for Continuous Data Summarization

    Jun 10, 2026Yuefang Lian, Longkun Guo, Zhongrui Zhao +5Black-Box Adversarial AttacksTrustworthy Artificial Intelligence

    Nankai University · James Cook University · Western Sydney University +5

  55. Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks

    Jun 10, 2026Omid Ahmadieh, Nima KarimianBlack-Box Adversarial Attacks

    Bellini College of Artificial Intelligence Cybersecurity and Computing University of South Florida Tampa, FL

  56. What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks

    Jun 8, 2026Qin Yang, Lu Malloy, Joshua Lee +4Attacker Large Language ModelContent Moderation

    University of Connecticut · University of Tennessee · University of California, Santa Barbara +1

  57. Securing Self-supervised Data Curation for Foundation Models Robustness

    Jun 8, 2026Sandeep Gupta, Roberto PasseroneSelf-Supervised LearningWireless Foundation Models

    Centre for Secure Information Technologies (CSIT), Queen’s University Belfast, UK. · Department of Information Engineering and Computer Science, University of Trento, Italy.

  58. Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks

    Jun 3, 2026Bin Duan, Zeyu Bai, Guowei YangModel-Agnostic DefenseBlack-Box Adversarial Attacks

    School of Electrical Engineering and Computer Science, The University of Queensland, Australia

  59. Dive into Ambiguity: A*-Inspired Multi-Agents Commonsense Obfuscation Attack on LLM Prompts

    May 31, 2026Boxuan Wang, Zhuoyun Li, Xiaowei Huang +1Black-Box Adversarial AttacksObfuscation

    University of Liverpool Merseyside, United Kingdom

  60. Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks

    May 29, 2026Ei Hmue Khine, Yao Li, Jiebao Sun +3Black-Box Adversarial AttacksDiscriminative Congruence Transform

    School of Mathematics, Harbin Institute of Technology, Harbin 150001, China