Adversarial Learning

NullSwap: Proactive Identity Cloaking Against Deepfake Face Swapping ICCV 2025 NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors AAAI 2025 Object-Level Backdoor Attacks in RGB-T Semantic Segmentation with Cross-Modality Trigger Optimization IJCAI 2025 ODA-GAN: Orthogonal Decoupling Alignment GAN Assisted by Weakly-supervised Learning for Virtual Immunohistochemistry Staining CVPR 2025 ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches ICCV 2025 Omni-Angle Assault: An Invisible and Powerful Physical Adversarial Attack on Face Recognition ICML 2025 One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs ICLR 2025 One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models ICCV 2025 One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models ICCV 2025 One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems EMNLP 2025 One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy ICML 2025 On Guardrail Models’ Robustness to Mutations and Adversarial Attacks EMNLP 2025 Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization IJCNLP 2025 On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning ICLR 2025 On the Adversarial Robustness of Multi-Kernel Clustering ICML 2025 On the Adversarial Vulnerability of Label-Free Test-Time Adaptation ICLR 2025 On the Clean Generalization and Robust Overfitting in Adversarial Training from Two Theoretical Views: Representation Complexity and Training Dynamics ICML 2025 On the Diversity of Adversarial Ensemble Learning ICML 2025 On the Robustness of Distributed Machine Learning Against Transfer Attacks AAAI 2025 On the Robustness Tradeoff in Fine-Tuning ICCV 2025 On the Statistical Properties of Generative Adversarial Models for Low Intrinsic Data Dimension JMLR 2025 On the Zero-shot Adversarial Robustness of Vision-Language Models: A Truly Zero-shot and Training-free Approach CVPR 2025 Open-Unfairness Adversarial Mitigation for Generalized Deepfake Detection ICCV 2025 Overcoming Black-box Attack Inefficiency with Hybrid and Dynamic Select Algorithms EMNLP 2025 PANDAS: Improving Many-shot Jailbreaking via Positive Affirmation, Negative Demonstration, and Adaptive Sampling ICML 2025