activity
20202026
most citedRobustART: Benchmarking Robustness on Architecture Design and Training Techniques

51 citations · 139 across the 35 of their papers we have counts for

collaborators
Showing cs.CVShow all

18 papers · 1 filter

cs.CV2026

SafeGen: Goal-Conditioned Video Diffusion of Safety-Critical Scenarios for VLM-Based Autonomous Driving

Jiangfan Liu, Zexuan Cui, Tianyuan Zhang +7

VLMs are increasingly deployed in AD systems, creating an urgent need for rigorous safety evaluation under rare yet safety-critical scenarios. Among these, interactions with vulner…

cs.CV2026

Technical Report on the CVPR 2026@AdvML Workshop Challenge

Tianyuan Zhang, Zonglei Jing, Jiangfan Liu +47

Vision-language agents (VLAs) are increasingly used to interpret complex driving scenes and support safety-critical reasoning. This report presents the CVPR 2026@AdvML Workshop Cha…

cs.CV2025

Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles

Jiangfan Liu, Yongkang Guo, Fangzhi Zhong +7

The generation of safety-critical scenarios in simulation has become increasingly crucial for safety evaluation in autonomous vehicles prior to road deployment in society. However,…

cs.CV2024

BiDM: Pushing the Limit of Quantization for Diffusion Models

Xingyu Zheng, Xianglong Liu, Yichen Bian +5

Diffusion models (DMs) have been significantly developed and widely used in various applications due to their excellent generative qualities. However, the expensive computation and…

cs.CV2024

DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time

Jin Hu, Xianglong Liu, Jiakai Wang +5

Physical adversarial examples (PAEs) are regarded as whistle-blowers of real-world risks in deep-learning applications, thus worth further investigation. However, current PAE gener…

cs.CV2024

BinaryDM: Accurate Weight Binarization for Efficient Diffusion Models

Xingyu Zheng, Xianglong Liu, Haotong Qin +7

With the advancement of diffusion models (DMs) and the substantially increased computational requirements, quantization emerges as a practical solution to obtain compact and effici…

cs.CV2023

Pre-trained Trojan Attacks for Visual Recognition

Aishan Liu, Xinwei Zhang, Yisong Xiao +6

Pre-trained vision models (PVMs) have become a dominant component due to their exceptional performance when fine-tuned for downstream tasks. However, the presence of backdoors with…

cs.CV2023★ 1 cited

Adversarial Examples in the Physical World: A Survey

Jiakai Wang, Xianglong Liu, Jin Hu +6

Deep neural networks (DNNs) have demonstrated high vulnerability to adversarial examples, raising broad security concerns about their applications. Besides the attacks in the digit…

cs.CV2023

Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks

Simin Li, Shuing Zhang, Gujun Chen +6

Physical world adversarial attack is a highly practical and threatening attack, which fools real world deep learning systems by generating conspicuous and maliciously crafted real…

cs.CV2022★ 1 cited

Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection

Simin Li, Huangxinxin Xu, Jiakai Wang +4

Billions of people are sharing their daily life images on social media every day. However, their biometric information (e.g., fingerprint) could be easily stolen from these images.…

cs.CV2022★ 2 cited

Defensive Patches for Robust Recognition in the Physical World

Jiakai Wang, Zixin Yin, Pengfei Hu +5

To operate in real-world high-stakes environments, deep learning systems have to endure noises that have been continuously thwarting their robustness. Data-end defense, which impro…

cs.CV2021

Harnessing Perceptual Adversarial Patches for Crowd Counting

Shunchang Liu, Jiakai Wang, Aishan Liu +4

Crowd counting, which has been widely adopted for estimating the number of people in safety-critical scenes, is shown to be vulnerable to adversarial examples in the physical world…

cs.CV2021★ 51 cited

RobustART: Benchmarking Robustness on Architecture Design and Training Techniques

Shiyu Tang, Ruihao Gong, Yan Wang +9

Deep neural networks (DNNs) are vulnerable to adversarial noises, which motivates the benchmark of model robustness. Existing benchmarks mainly focus on evaluating defenses, but th…

cs.CV2021★ 6 cited

Diverse Sample Generation: Pushing the Limit of Generative Data-free Quantization

Haotong Qin, Yifu Ding, Xiangguo Zhang +3

Generative data-free quantization emerges as a practical compression approach that quantizes deep neural networks to low bit-width without accessing the real data. This approach ge…

cs.CV2021

Towards Real-world X-ray Security Inspection: A High-Quality Benchmark and Lateral Inhibition Module for Prohibited Items Detection

Renshuai Tao, Yanlu Wei, Xiangjian Jiang +6

Prohibited items detection in X-ray images often plays an important role in protecting public safety, which often deals with color-monotonous and luster-insufficient objects, resul…

cs.CV2021★ 13 cited

Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World

Jiakai Wang, Aishan Liu, Zixin Yin +3

Deep learning models are vulnerable to adversarial examples. As a more threatening type for practical deep learning systems, physical adversarial examples have received extensive r…

cs.CV2021★ 5 cited

A Comprehensive Evaluation Framework for Deep Model Robustness

Jun Guo, Wei Bao, Jiakai Wang +7

Deep neural networks (DNNs) have achieved remarkable performance across a wide range of applications, while they are vulnerable to adversarial examples, which motivates the evaluat…

cs.CV2020★ 12 cited

Bias-based Universal Adversarial Patch Attack for Automatic Check-out

Aishan Liu, Jiakai Wang, Xianglong Liu +3

Adversarial examples are inputs with imperceptible perturbations that easily misleading deep neural networks(DNNs). Recently, adversarial patch, with noise confined to a small and…