Adversarial Learning

Towards Generalization Bounds of GCNs for Adversarially Robust Node Classification ICLR 2025 Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks CVPR 2025 Towards Optimal Branching of Linear and Semidefinite Relaxations for Neural Network Robustness Certification JMLR 2025 Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification ICCV 2025 Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models AAAI 2025 Towards Robust Training via Gradient-Diversified Backpropagation WACV 2025 Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective ICLR 2025 TRACI: A Data-centric Approach for Multi-Domain Generalization on Graphs AAAI 2025 Tracking the Copyright of Large Vision-Language Models through Parameter Learning Adversarial Images ICLR 2025 Training Robust Ensembles Requires Rethinking Lipschitz Continuity ICLR 2025 Transferable Adversarial Face Attack with Text Controlled Attribute AAAI 2025 Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling EMNLP 2025 Transitive self-consistency evaluation of NLI models without gold labels EMNLP 2025 TreeBoN: Enhancing Inference-Time Alignment with Speculative Tree-Search and Best-of-N Sampling EMNLP 2025 TRIDENT: Enhancing Large Language Model Safety with Tri-Dimensional Diversified Red-Teaming Data Synthesis ACL 2025 TRNAS: A Training-Free Robust Neural Architecture Search ICCV 2025 Trust-GRS: A Trustworthy Training Framework for Graph Neural Network Based Recommender Systems Against Shilling Attacks AAAI 2025 TtBA: Two-third Bridge Approach for Decision-Based Adversarial Attack ICML 2025 TurboFuzzLLM: Turbocharging Mutation-based Fuzzing for Effectively Jailbreaking Large Language Models in Practice NAACL 2025 TWIST: Text-encoder Weight-editing for Inserting Secret Trojans in Text-to-Image Models ACL 2025 Two Sides of the Same Coin: Learning the Backdoor to Remove the Backdoor AAAI 2025 Typographic Attacks in a Multi-Image Setting NAACL 2025 UFID: A Unified Framework for Black-box Input-level Backdoor Detection on Diffusion Models AAAI 2025 UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models CVPR 2025 Uncovering the Impact of Chain-of-Thought Reasoning for Direct Preference Optimization: Lessons from Text-to-SQL ACL 2025